Merge branch 'main' of https://github.com/gounthar/quickstart-tutorials

Author: gounthar

.devcontainer/devcontainer.json

@@ -4,11 +4,11 @@
 
   "features": {
     "ghcr.io/devcontainers/features/docker-in-docker:2": {
-      "version": "2.82.1",
+      "version": "",
       "dockerDashComposeVersion": "v2"
     },
     "ghcr.io/devcontainers/features/github-cli:1": {
-      "version": "2.82.1"
+      "version": "2.83.2"
     }
   },
 

.devcontainer/setup.sh

@@ -10,7 +10,7 @@ echo "================================"
 
 # Install yq (YAML processor) - required for JCasc configuration
 echo "📦 Installing yq YAML processor..."
-YQ_VERSION="${YQ_VERSION:-v4.48.1}"
+YQ_VERSION="${YQ_VERSION:-v4.49.2}"
 YQ_URL="https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64"
 
 # Try wget first, fall back to curl if unavailable

.github/dependabot.yml

@@ -2,8 +2,7 @@
 # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 
 version: 2
-# Note: GitPod support is legacy (free tier sunset). Migrated to GitHub Codespaces.
-# Codespaces uses devcontainer.json which Dependabot cannot monitor (not a Dockerfile).
+# Note: GitHub Codespaces uses devcontainer.json which Dependabot cannot monitor (not a Dockerfile).
 # Codespaces dependencies (yq, devcontainer features) are tracked by UpdateCLI.
 # See updatecli/updatecli.d/codespaces.yaml for automated updates.
 
@@ -68,12 +67,3 @@ updates:
     schedule:
       interval: weekly
     open-pull-requests-limit: 10
-
-  # GitPod (legacy) - disabled, not actively maintained
-  - package-ecosystem: docker
-    directory: "./.gitpod"
-    schedule:
-      interval: weekly
-    open-pull-requests-limit: 0
-    ignore:
-      - dependency-name: "gitpod/workspace-full"

.github/workflows/anchore.yml

@@ -32,13 +32,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Build the Docker image
         run: cd ./dockerfiles/ && docker build . --file Dockerfile --tag localbuild/testimage:latest
 
       - name: Run the Anchore Grype scan action
-        uses: anchore/scan-action@568b89d27fc18c60e56937bff480c91c772cd993
+        uses: anchore/scan-action@40a61b52209e9d50e87917c5b901783d546b12d0
         id: scan
         with:
           path: "."

.github/workflows/github-docker-registry-push.yml

@@ -35,7 +35,7 @@ jobs:
 
       - name: Checkout
         # This step checks out the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/hadolint.yml

@@ -30,7 +30,7 @@ jobs:
       actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Run hadolint scanning on the controller Dockerfile
         uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5

.github/workflows/plugin_update.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Configure git & gh
         run: |

.github/workflows/test-jenkins.yml

@@ -23,7 +23,7 @@ jobs:
       BRANCH_SUFFIX: clean-up
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0  # Fetch all history for all branches and tags.
 
@@ -269,7 +269,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up and start Docker Compose
         run: |

.github/workflows/updatecli.yaml

@@ -19,11 +19,11 @@ jobs:
     steps:
       # This step checks out the repository using the checkout action
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # This step installs Updatecli in the runner using the updatecli-action
       - name: Install Updatecli in the runner
-        uses: updatecli/updatecli-action@v2.94.0
+        uses: updatecli/updatecli-action@v2.97.0
 
       # This step runs Updatecli in Dry Run mode
       # It uses the "diff" command of updatecli with the specified config and values files