diff --git a/.github/workflows/ci-pipeline.yml b/.github/workflows/ci-pipeline.yml index e04d26f..f988907 100644 --- a/.github/workflows/ci-pipeline.yml +++ b/.github/workflows/ci-pipeline.yml @@ -51,7 +51,7 @@ jobs: # This might be unnecessary as tests are not # multiplatform - name: Setup Docker buildx - uses: docker/setup-buildx-action@v3.10.0 + uses: docker/setup-buildx-action@v3.11.1 - name: Extract Docker cache metadata id: meta-cache @@ -127,10 +127,10 @@ jobs: # Install the cosign tool # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3.8.2 + uses: sigstore/cosign-installer@v3.9.1 - name: Setup Docker buildx - uses: docker/setup-buildx-action@v3.10.0 + uses: docker/setup-buildx-action@v3.11.1 # Login against a Docker registry # https://github.com/docker/login-action @@ -229,10 +229,10 @@ jobs: # Install the cosign tool # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3.8.2 + uses: sigstore/cosign-installer@v3.9.1 - name: Setup Docker buildx - uses: docker/setup-buildx-action@v3.10.0 + uses: docker/setup-buildx-action@v3.11.1 # Login against a Docker registry # https://github.com/docker/login-action diff --git a/Dockerfile b/Dockerfile index 070b053..b2f8665 100644 --- a/Dockerfile +++ b/Dockerfile @@ -34,7 +34,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \ && apt-get install -y --no-install-recommends \ build-essential gcc git -COPY --from=ghcr.io/astral-sh/uv:0.7.12 /uv /uvx /bin/ +COPY --from=ghcr.io/astral-sh/uv:0.7.15 /uv /uvx /bin/ # From here we shouldn't need anymore a root user # Switch to nonroot and config uv