Merge remote-tracking branch 'template/dev' into dev

Author: Paillat-dev

.github/workflows/docker.yaml

@@ -15,21 +15,21 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.10.0
+        uses: docker/setup-buildx-action@v3.11.1
 
       - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v3.4.0
+        uses: docker/login-action@v3.5.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@v5.7.0
+        uses: docker/metadata-action@v5.8.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -39,7 +39,7 @@ jobs:
             type=sha
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@v6.18.0
         with:
           context: .
           push: true

.github/workflows/pr_autofixes.yaml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0  # We need the full history for comparing branches
           ref: ${{ github.head_ref }}  # Check out the PR branch
@@ -45,7 +45,7 @@ jobs:
 
       - name: Setup Copywrite
         if: steps.check-target.outputs.should_run == 'true'
-        uses: hashicorp/setup-copywrite@5e3e8a26d7b9f8a508848ad0a069dfd2f7aa5339
+        uses: hashicorp/setup-copywrite@32f9f1c86f661b8a51100768976a06f1b281a035
 
       - name: Install dependencies
         if: steps.check-target.outputs.should_run == 'true'

.github/workflows/quality.yaml

@@ -25,7 +25,7 @@ jobs:
     name: ${{ matrix.name }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Setup PDM
         uses: pdm-project/setup-pdm@v4
@@ -43,8 +43,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Setup Copywrite
-        uses: hashicorp/setup-copywrite@5e3e8a26d7b9f8a508848ad0a069dfd2f7aa5339
+        uses: hashicorp/setup-copywrite@32f9f1c86f661b8a51100768976a06f1b281a035
       - name: Check Header Compliance
         run: copywrite headers --plan --config .copywrite.hcl

.github/workflows/update_dependencies.yaml

@@ -21,7 +21,7 @@ repos:
         exclude: \.(po|pot|yml|yaml)$
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # Ruff version.
-    rev: v0.11.0
+    rev: v0.12.1
     hooks:
       # Run the linter.
       - id: ruff

.pre-commit-config.yaml

@@ -26,10 +26,12 @@ WORKDIR /app
 RUN adduser -u 6392 --disabled-password --gecos "" appuser && chown -R appuser /app
 
 COPY --from=python-base --chown=appuser /app/requirements.txt ./
-COPY src/ ./src
-COPY LICENSE ./
 
-RUN pip install -r requirements.txt --require-hashes
+RUN pip install -r requirements.txt
+
+COPY --chown=appuser src/ ./src
+COPY --chown=appuser LICENSE ./
+
 USER appuser
 
 CMD ["python", "src"]