chore(deps): update sonarsource/sonarqube-scan-action action to v5

.gitea/workflows/release.yml

@@ -7,26 +7,26 @@ on:
     - cron: "@weekly"
 
 jobs:
-  # sonar:
+  sonar:
-  #   runs-on: ubuntu-latest
+    runs-on: ubuntu-latest
-  #   steps:
+    steps:
-  #     - name: Check out repository code
+      - name: Check out repository code
-  #       uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v4.2.2
-  #       with:
+        with:
-  #         fetch-depth: 0
+          fetch-depth: 0
 
-  #     - uses: hadolint/hadolint-action@v3.1.0
+      - uses: hadolint/hadolint-action@v3.1.0
-  #       with:
+        with:
-  #         dockerfile: Dockerfile
+          dockerfile: Dockerfile
-  #         output-file: hadolint.out
+          output-file: hadolint.out
-  #         format: sonarqube
+          format: sonarqube
-  #         no-fail: true
+          no-fail: true
 
-  #     - name: SonarQube Scan
+      - name: SonarQube Scan
-  #       uses: SonarSource/sonarqube-scan-action@v5.2.0
+        uses: SonarSource/sonarqube-scan-action@v5.0.0
-  #       env:
+        env:
-  #         SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
-  #         SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
+          SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
 
   release:
     runs-on: ubuntu-latest
@@ -42,7 +42,7 @@ jobs:
           echo "{\"insecure-registries\": [\"${{ vars.PACKAGES_REGISTRY_URL }}\"]}" > /etc/docker/daemon.json
 
       - name: Check out repository code
-        uses: actions/checkout@v4.3.0
+        uses: actions/checkout@v4.2.2
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3

Dockerfile

@@ -4,11 +4,8 @@ LABEL maintainer="Luke Tainton <luke@tainton.uk>"
 
 ENV PIPX_BIN_DIR=/usr/local/bin
 
-RUN curl -sL https://deb.nodesource.com/setup_24.x -o /tmp/nodesource_setup.sh && \
+RUN apt-get update && \
-    chmod +x /tmp/nodesource_setup.sh && /tmp/nodesource_setup.sh && \
+    apt-get install -y pipx && \
-    add-apt-repository ppa:longsleep/golang-backports && \
-    apt-get update && \
-    apt-get install -y golang-go pipx nodejs npm && \
     apt-get clean && \
     pipx install poetry && \
     pipx install uv

renovate.json

@@ -7,8 +7,8 @@
   ],
   "platformCommit": "enabled",
   "dependencyDashboardAutoclose": true,
-  "assignAutomerge": false,
+  "assignAutomerge": true,
-  "assigneesFromCodeOwners": false,
+  "assigneesFromCodeOwners": true,
   "rebaseWhen": "behind-base-branch",
   "rollbackPrs": true,
   "labels": [