Merge remote-tracking branch 'upstream/master'

Author: runderwo

.devcontainer/devcontainer.json

@@ -13,7 +13,7 @@
 		// docker-in-docker allows you to run Docker commands inside the dev container. Thus, it supports to build docker build in the environment.
 		"ghcr.io/devcontainers/features/docker-in-docker:2": {
 			"version": "latest",
-			"moby": true,
+			"moby": false,
 			"dockerDashComposeVersion": "v1"
 		}
 	},

.github/scripts/commit_prefix_check.py

@@ -16,6 +16,7 @@
 import re
 import sys
 from git import Repo
+from git.exc import GitCommandError
 
 repo = Repo(".")
 
@@ -215,7 +216,15 @@ def validate_commit(commit):
         return False, "Missing Signed-off-by line"
 
     # Determine expected prefixes + build option flag
-    files = commit.stats.files.keys()
+    try:
+        files = commit.stats.files.keys()
+    except GitCommandError as e:
+        return False, (
+            f"Could not inspect files changed by commit {commit.hexsha[:10]}: {e}\n"
+            "The repository checkout is likely missing commit parent history. "
+            "Use a full-depth checkout for commit-prefix validation."
+        )
+
     expected, build_optional = infer_prefix_from_paths(files)
 
     # When no prefix can be inferred (docs/tools), allow anything

.github/workflows/build-branch-containers.yaml

@@ -104,18 +104,18 @@ jobs:
           token: ${{ secrets.token }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
           password: ${{ secrets.token }}
 
       - name: Build and push by digest the standard ${{ matrix.target }} image
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           # Use path context rather than Git context as we want local files
           file: ./dockerfiles/Dockerfile
@@ -180,10 +180,10 @@ jobs:
           merge-multiple: true
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
@@ -232,10 +232,10 @@ jobs:
           merge-multiple: true
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
@@ -265,7 +265,7 @@ jobs:
       packages: read
     steps:
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ inputs.username }}
@@ -297,14 +297,14 @@ jobs:
       packages: read
     steps:
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ inputs.username }}
           password: ${{ secrets.token }}
 
       - name: Trivy - multi-arch
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
         with:
           image-ref: "${{ inputs.registry }}/${{ inputs.image }}:${{ inputs.version }}"
           format: "table"
@@ -404,10 +404,10 @@ jobs:
           ref: ${{ inputs.ref }}
 
       # - name: Set up Docker Buildx
-      #   uses: docker/setup-buildx-action@v3
+      #   uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ inputs.username }}
@@ -440,7 +440,7 @@ jobs:
         shell: bash
 
         # We cannot use this action as it requires privileged mode
-        # uses: docker/build-push-action@v6
+        # uses: docker/build-push-action@v7
         # with:
         #   file: ./dockerfiles/Dockerfile.windows
         #   context: .

.github/workflows/build-legacy-branch.yaml

@@ -120,12 +120,12 @@ jobs:
           ref: ${{ inputs.ref }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       # Raspbian requires ARMv6 emulation
       - name: Set up QEMU
         if: contains(matrix.distro, 'raspbian')
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
         with:
           image: tonistiigi/binfmt:qemu-v7.0.0-28 # See: https://github.com/docker/setup-qemu-action/issues/198#issuecomment-2653791775
 
@@ -237,7 +237,7 @@ jobs:
 
       - name: Import GPG key for signing
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           gpg_private_key: ${{ secrets.gpg_private_key }}
           passphrase: ${{ secrets.gpg_private_key_passphrase }}

.github/workflows/call-build-images.yaml

@@ -44,10 +44,10 @@ jobs:
           ref: ${{ inputs.ref }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ inputs.username }}
@@ -62,7 +62,7 @@ jobs:
             raw,${{ inputs.image-tag }}
 
       - name: Build the AMD64 image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./dockerfiles/Dockerfile
           context: .
@@ -83,7 +83,7 @@ jobs:
             raw,${{ inputs.image-tag }}-debug
 
       - name: Build the AMD64 debug image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./dockerfiles/Dockerfile
           context: .
@@ -110,7 +110,7 @@ jobs:
           ref: ${{ inputs.ref }}
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.registry }}
           username: ${{ inputs.username }}