Merge branch 'main' of github.com:jeboehm/docker-mailserver

Author: jeboehm

.github/workflows/build.yml

@@ -372,7 +372,7 @@ jobs:
           severity: "CRITICAL,HIGH"
       - name: Upload Trivy scan results to GitHub Security tab
         if: always()
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4
+        uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4
         with:
           sarif_file: "trivy-results.sarif"
           category: "${{ matrix.image }}"

.github/workflows/docs.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
-      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.14"
           cache: "pip"

.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
           skip-commit: true
           skip-tag: true
           output-file: "false"
-      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         if: ${{ steps.changelog.outputs.skipped == 'false' }}
         with:
           python-version: "3.14"

target/unbound/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpinelinux/unbound:latest@sha256:d53aa36d1c8b7a2540f6e71f9510e1224512b90068c2a68b5acddeabc7f87073
+FROM alpinelinux/unbound:latest@sha256:123e5a86c9166c4f5a641544ea02fe735fbdc8231d17d4afc3ee197e6fd5f961
 
 LABEL maintainer="https://github.com/jeboehm/docker-mailserver"
 LABEL vendor="https://github.com/jeboehm/docker-mailserver"

target/web/Dockerfile

@@ -40,7 +40,7 @@ RUN printf '#!/bin/sh\nexec frankenphp php-cli "$@"\n' > /usr/bin/php && \
 FROM base AS composer
 
 ENV COMPOSER_ALLOW_SUPERUSER=1
-COPY --from=composer/composer:2.9.3@sha256:3ba64722c36260502df9e776ae6450e43f20d448ea7a6df0a9776bb236a31494 /usr/bin/composer /usr/bin/composer
+COPY --from=composer/composer:2.9.4@sha256:ba379c4c4f0eeb7d14722d4054e7ca187bc19c35dd873c3111da7e98e63502c3 /usr/bin/composer /usr/bin/composer
 
 FROM composer AS roundcube-builder
 
@@ -79,7 +79,7 @@ RUN --mount=type=cache,target=/root/.composer \
 
 FROM composer AS admin-builder
 
-ARG ADMIN_VER=5.17.1 # renovate: depName=jeboehm/mailserver-admin
+ARG ADMIN_VER=5.17.3 # renovate: depName=jeboehm/mailserver-admin
 WORKDIR /opt/admin
 RUN curl -sSLf \
         -o /tmp/admin.tar.gz \