minor versions of workflow actions bumped and image build step fixed

- build args added to provide correct metadata for the build

Author: businessbean

.github/workflows/README.md

@@ -78,8 +78,10 @@ The project uses two main workflows that work together to ensure code quality an
   - Checks out code
   - Installs [mdq](https://github.com/yshavit/mdq) tool for changelog parsing
   - Populates environment variables:
+    - `BUILD_DATE` - Current UTC timestamp
     - `GIT_TAG` - Version extracted from CHANGELOG.md
     - `GIT_COMMIT` - Current commit SHA
+    - `GO_VERSION` - Go version from go.mod
   - Validates environment variables:
     - Verifies version format matches `X.Y.Z` pattern
     - Checks that the git tag doesn't already exist
@@ -89,7 +91,7 @@ The project uses two main workflows that work together to ensure code quality an
     - version tag (e.g., `1.2.3`)
     - `release` tag
     - `latest` tag
-  - Builds and pushes `linux/amd64` Docker image with build argument:
+  - Builds and pushes `linux/amd64` Docker image with build arguments:
     - `BUILDER_VERSION` - Go builder image version
     - `GIT_COMMIT` - Current commit SHA
     - `GIT_TAG` - Version from changelog
@@ -191,12 +193,12 @@ The complete release process follows this flow:
 ## Dependencies
 
 - **Actions Used:**
-  - `actions/checkout@v5.0.0` - Code checkout
-  - `actions/setup-go@v6.0.0` - Go environment setup
+  - `actions/checkout@v5.0.1` - Code checkout
+  - `actions/setup-go@v6.2.0` - Go environment setup
   - `golangci/golangci-lint-action@v8.0.0` - Static analysis
-  - `docker/login-action@v3.6.0` - Container registry authentication
-  - `docker/metadata-action@v5.8.0` - Docker metadata generation
-  - `docker/build-push-action@v6.18.0` - Container building and pushing
+  - `docker/login-action@v3.7.0` - Container registry authentication
+  - `docker/metadata-action@v5.10.0` - Docker metadata generation
+  - `docker/build-push-action@v6.19.2` - Container building and pushing
   - `ncipollo/release-action@v1.20.0` - GitHub release creation
 
 - **External Tools:**

.github/workflows/build-image.yaml

@@ -13,7 +13,7 @@ jobs:
       packages: 'write'
     steps:
       - name: 'checkout code'
-        uses: 'actions/checkout@v5.0.0'
+        uses: 'actions/checkout@v5.0.1'
         with:
           fetch-depth: 0
       - name: 'install mdq'
@@ -63,7 +63,7 @@ jobs:
             exit 1
           fi
       - name: 'setup go'
-        uses: 'actions/setup-go@v6.0.0'
+        uses: 'actions/setup-go@v6.2.0'
         with:
           go-version: "${{ env.GO_VERSION }}"
       - name: 'golangci-lint'
@@ -98,21 +98,21 @@ jobs:
           ./check -c in -v | grep -q "${GIT_TAG}"
           ./check -c out -v | grep -q "${GIT_TAG}"
       - name: 'container registry login'
-        uses: 'docker/login-action@v3.6.0'
+        uses: 'docker/login-action@v3.7.0'
         with:
           password: "${{ secrets.GITHUB_TOKEN }}"
           registry: 'ghcr.io'
           username: "${{ github.actor }}"
       - name: 'fetch metadata for the image build'
         id: 'meta'
-        uses: 'docker/metadata-action@v5.8.0'
+        uses: 'docker/metadata-action@v5.10.0'
         with:
           images: "ghcr.io/${{ github.repository }}"
           tags: |
             type=raw,value=${{ env.GIT_TAG }}
             type=raw,value=draft
       - name: 'build and push image'
-        uses: 'docker/build-push-action@v6.18.0'
+        uses: 'docker/build-push-action@v6.19.2'
         with:
           context: '.'
           build-args: |

.github/workflows/publish-release.yaml

@@ -13,7 +13,7 @@ jobs:
       packages: 'write'
     steps:
       - name: 'checkout code'
-        uses: 'actions/checkout@v5.0.0'
+        uses: 'actions/checkout@v5.0.1'
       - name: 'install mdq'
         shell: 'bash'
         run: |
@@ -29,9 +29,11 @@ jobs:
           #!/usr/bin/env bash
           set -euo pipefail
 
+          BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
           GIT_TAG="$(./mdq -o json "#" CHANGELOG.md | jq -r .items[0].section.body[0].section.title)"
           GIT_COMMIT="$(git rev-parse HEAD)"
           GO_VERSION="$(go list -f {{.GoVersion}} -m)"
+          echo "BUILD_DATE=${BUILD_DATE}" >> "$GITHUB_ENV"
           echo "GIT_TAG=${GIT_TAG}" >> "$GITHUB_ENV"
           echo "GIT_COMMIT=${GIT_COMMIT}" >> "$GITHUB_ENV"
           echo "GO_VERSION=${GO_VERSION}" >> "$GITHUB_ENV"
@@ -57,29 +59,33 @@ jobs:
             exit 1
           fi
       - name: 'setup go'
-        uses: 'actions/setup-go@v6.0.0'
+        uses: 'actions/setup-go@v6.2.0'
         with:
           go-version: "${{ env.GO_VERSION }}"
       - name: 'container registry login'
-        uses: 'docker/login-action@v3.6.0'
+        uses: 'docker/login-action@v3.7.0'
         with:
           password: "${{ secrets.GITHUB_TOKEN }}"
           registry: 'ghcr.io'
           username: "${{ github.actor }}"
       - name: 'fetch metadata for the image build'
         id: 'meta'
-        uses: 'docker/metadata-action@v5.8.0'
+        uses: 'docker/metadata-action@v5.10.0'
         with:
           images: "ghcr.io/${{ github.repository }}"
           tags: |
             type=raw,value=${{ env.GIT_TAG }}
             type=raw,value=release
             type=raw,value=latest
       - name: 'build and push image'
-        uses: 'docker/build-push-action@v6.18.0'
+        uses: 'docker/build-push-action@v6.19.2'
         with:
           context: '.'
-          build-args: "BUILDER_VERSION=${{ env.GO_VERSION }}-bookworm"
+          build-args: |
+             BUILDER_VERSION=${{ env.GO_VERSION }}-bookworm
+             GIT_COMMIT=${{ env.GIT_COMMIT }}
+             GIT_TAG=${{ env.GIT_TAG }}
+             BUILD_DATE=${{ env.BUILD_DATE }}
           labels: "${{ steps.meta.outputs.labels }}"
           tags: "${{ steps.meta.outputs.tags }}"
           platforms: 'linux/amd64'