Fix releasing

This PR contains the following updates:

| Package | Change | Age | Confidence |
|---|---|---|---|
| [urllib3](https://github.com/urllib3/urllib3) ([changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)) | `==2.4.0` -> `==2.5.0` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/urllib3/2.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/urllib3/2.4.0/2.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>urllib3/urllib3 (urllib3)</summary>

### [`v2.5.0`](https://github.com/urllib3/urllib3/blob/HEAD/CHANGES.rst#250-2025-06-18)

[Compare Source](https://github.com/urllib3/urllib3/compare/2.4.0...2.5.0)

\==================

## Features

- Added support for the `compression.zstd` module that is new in Python 3.14.
  See `PEP 784 <https://peps.python.org/pep-0784/>`\_ for more information. (`#&#8203;3610 <https://github.com/urllib3/urllib3/issues/3610>`\_\_)
- Added support for version 0.5 of `hatch-vcs` (`#&#8203;3612 <https://github.com/urllib3/urllib3/issues/3612>`\_\_)

## Bugfixes

- Fixed a security issue where restricting the maximum number of followed
  redirects at the `urllib3.PoolManager` level via the `retries` parameter
  did not work.
- Made the Node.js runtime respect redirect parameters such as `retries`
  and `redirects`.
- Raised exception for `HTTPResponse.shutdown` on a connection already released to the pool. (`#&#8203;3581 <https://github.com/urllib3/urllib3/issues/3581>`\_\_)
- Fixed incorrect `CONNECT` statement when using an IPv6 proxy with `connection_from_host`. Previously would not be wrapped in `[]`. (`#&#8203;3615 <https://github.com/urllib3/urllib3/issues/3615>`\_\_)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC41IiwidXBkYXRlZEluVmVyIjoiNDEuMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/luke/epage/pulls/133
Co-authored-by: Renovate [BOT] <renovate-bot@git.tainton.uk>
Co-committed-by: Renovate [BOT] <renovate-bot@git.tainton.uk>

.ARCHIVE/requirements.txt

@@ -1,13 +1,13 @@
-certifi==2025.4.26
+certifi==2025.6.15
 charset-normalizer==3.4.2
 click==8.2.1
-Flask==3.1.0
+Flask==3.1.1
 Flask-WTF==1.2.2
 idna==3.10
 itsdangerous==2.2.0
 Jinja2==3.1.6
 MarkupSafe==3.0.2
-requests==2.32.3
-urllib3==2.4.0
+requests==2.32.4
+urllib3==2.5.0
 Werkzeug==3.1.3
 WTForms==3.2.1

.gitea/workflows/build_docker.yml

@@ -1,18 +1,18 @@
-name: Build Docker
-on:
-  release:
-    types:
-      - published
+# name: Build Docker
+# on:
+#   release:
+#     types:
+#       - published
 
-jobs:
-  create_docker:
-    name: Create Docker Image
-    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/build-push-docker.yml@main
-    with:
-      release: ${{ gitea.event.release.name }}
-      registry: ${{ vars.PACKAGES_REGISTRY_URL }}
-      actions_username: ${{ vars.ACTIONS_USERNAME }}
-      ghcr_username: ${{ vars.GHCR_USERNAME }}
-    secrets:
-      ACTIONS_TOKEN: ${{ secrets.ACTIONS_TOKEN }}
-      GHCR_TOKEN: ${{ secrets.GHCR_TOKEN }}
+# jobs:
+#   create_docker:
+#     name: Create Docker Image
+#     uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/build-push-docker.yml@main
+#     with:
+#       release: ${{ gitea.event.release.name }}
+#       registry: ${{ vars.PACKAGES_REGISTRY_URL }}
+#       actions_username: ${{ vars.ACTIONS_USERNAME }}
+#       ghcr_username: ${{ vars.GHCR_USERNAME }}
+#     secrets:
+#       ACTIONS_TOKEN: ${{ secrets.ACTIONS_TOKEN }}
+#       GHCR_TOKEN: ${{ secrets.GHCR_TOKEN }}

.gitea/workflows/release.yml

@@ -2,29 +2,101 @@ name: Release
 on:
   workflow_dispatch:
   schedule:
-    - cron: "0 9 * * 0"
+    - cron: '0 9 * * 0'
 
 jobs:
-  test:
-    name: Test
-    uses: https://git.tainton.uk/repos/roboluke/.gitea/workflows/ci.yml@main
-    with:
-      python-version: 3.13
-    secrets:
-      SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
-      SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
-      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+  # test:
+  #   name: Test
+  #   uses: https://git.tainton.uk/${{ gitea.repository }}/.gitea/workflows/ci.yml@main
+
+  tag:
+    name: Tag release
+    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/release-with-tag.yaml@main
 
   create_release:
     name: Create Release
-    needs: test
-    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/create-release.yml@main
+    needs: tag
+    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/create-release-preexisting-tag.yaml@main
+    with:
+      tag: ${{ needs.tag.outputs.tag_name }}
+      body: ${{ needs.tag.outputs.changelog }}
     secrets:
       ACTIONS_TOKEN: ${{ secrets.ACTIONS_TOKEN }}
 
-  print_release:
-    name: Print Release
+  create_docker:
+    name: Publish Docker Images
     runs-on: ubuntu-latest
-    needs: create_release
+    needs: [tag, create_release]
     steps:
-      - run: echo "Created release ${{ needs.create_release.outputs.release_name }}."
+      - name: Update Docker configuration
+        continue-on-error: true
+        run: |
+          mkdir -p /etc/default
+          mkdir -p /etc/docker
+          touch -a /etc/default/docker
+          touch -a /etc/docker/daemon.json
+          echo "DOCKER_OPTS=\"--insecure-registry ${{ vars.PACKAGES_REGISTRY_URL }}\"" >> /etc/default/docker
+          echo "{\"insecure-registries\": [\"${{ vars.PACKAGES_REGISTRY_URL }}\"]}" > /etc/docker/daemon.json
+
+      - name: Get repo name
+        id: split
+        run: echo "repo=${REPO##*/}" >> "$GITEA_OUTPUT"
+        env:
+          REPO: ${{ gitea.repository }}
+
+      - name: Check out repository
+        uses: actions/checkout@v4.2.2
+        with:
+          fetch-depth: 0
+          ref: ${{ needs.tag.outputs.tag_name }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Gitea Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ vars.PACKAGES_REGISTRY_URL }}
+          username: ${{ vars.ACTIONS_USERNAME }}
+          password: ${{ secrets.ACTIONS_TOKEN }}
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ vars.GHCR_USERNAME }}
+          password: ${{ secrets.GHCR_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          tags: type=semver,pattern=v{{version}},value=${{ needs.tag.outputs.tag_name }}
+          images: |
+            ghcr.io/${{ vars.GHCR_USERNAME }}/${{ steps.split.outputs.repo }}
+            ${{ vars.PACKAGES_REGISTRY_URL }}/${{ gitea.repository }}
+
+      - name: Print metadata
+        run: |
+          printf "Annotations:\n${{ steps.meta.outputs.annotations }}"
+          echo ""
+          printf "Labels:\n${{ steps.meta.outputs.labels }}"
+          echo ""
+          printf "Tags:\n${{ steps.meta.outputs.tags }}"
+
+      - name: Build images
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          load: true
+          annotations: ${{ steps.meta.outputs.annotations }}
+          labels: ${{ steps.meta.outputs.labels }}
+          tags: ${{ steps.meta.outputs.tags }}
+
+      - name: Push images
+        run: |
+          strtags="${{ steps.meta.outputs.tags }}"
+          readarray -t lines <<<"$strtags"
+          for element in "${lines[@]}"; do docker push "$element"; done
+          unset strtags lines