chore(deps): update dockerfile-non-major to v1.77.0 (#1087)

* chore(deps): update dockerfile-non-major to v1.77.0

* fix: eliminate TempDir cleanup race in database tests

runQuickCheck ran as an untracked goroutine, leaving WAL/SHM file
handles open when t.TempDir() cleanup fired, causing intermittent
"directory not empty" failures.

Introduce launchQuickCheck (defaults to the goroutine) so tests can
override it to run synchronously via TestMain, ensuring the integrity
check connection is closed before temp dirs are removed.

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jeremy <jhatfield82@gmail.com>
Co-authored-by: GitHub Actions <actions@github.com>

Author: 3 people

Dockerfile

@@ -480,7 +480,7 @@ RUN go get github.com/expr-lang/expr@v${EXPR_LANG_VERSION} && \
     # renovate: datasource=go depName=github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
     go get github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.13 && \
     # renovate: datasource=go depName=github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
-    go get github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.76.0 && \
+    go get github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.77.0 && \
     go get github.com/aws/aws-sdk-go-v2/service/kinesis@v1.43.7 && \
     go get github.com/aws/aws-sdk-go-v2/service/s3@v1.102.1 && \
     # CVE-2026-32952: go-ntlmssp DoS via malicious NTLM challenge response

backend/internal/database/database.go

@@ -14,6 +14,10 @@ import (
 	gormlogger "gorm.io/gorm/logger"
 )
 
+// launchQuickCheck is called by Connect to run the integrity check goroutine.
+// Tests override this with a synchronous version to avoid cleanup races.
+var launchQuickCheck = func(dbPath string) { go runQuickCheck(dbPath) }
+
 // Connect opens a SQLite database connection with optimized settings.
 // Uses WAL mode for better concurrent read/write performance.
 func Connect(dbPath string) (*gorm.DB, error) {
@@ -69,7 +73,7 @@ func Connect(dbPath string) (*gorm.DB, error) {
 	// Run quick integrity check on startup in the background (warn-only), on
 	// its own connection. The main pool is capped at one connection, so
 	// sharing it here would still serialize migrations behind the check.
-	go runQuickCheck(dbPath)
+	launchQuickCheck(dbPath)
 
 	return db, nil
 }

backend/internal/database/database_test.go

@@ -9,6 +9,14 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
+func TestMain(m *testing.M) {
+	// Run quick_check synchronously in tests so it completes before t.TempDir
+	// cleanup runs. The goroutine version creates a race: the background
+	// connection may still hold WAL/SHM files open when the temp dir is removed.
+	launchQuickCheck = runQuickCheck
+	os.Exit(m.Run())
+}
+
 func TestConnect(t *testing.T) {
 	t.Parallel()
 	// Test with memory DB