Merge branch 'weekly' into dependabot/github_actions/weekly/codacy/codacy-analysis-cli-action-4.4.7

Author: gounthar

.github/workflows/anchore.yml

@@ -47,6 +47,6 @@ jobs:
           severity-cutoff: critical
 
       - name: Upload vulnerability report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}

.github/workflows/codacy.yml

@@ -55,6 +55,6 @@ jobs:
 
       # Upload the SARIF file generated in the previous step
       - name: Upload SARIF results file
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: results.sarif

.github/workflows/github-docker-registry-push.yml

@@ -120,7 +120,7 @@ jobs:
       - name: Build and push a simple jenkins controller
         # This step builds and pushes a simple Jenkins controller
         if: (contains(env.files, 'dockerfiles/Dockerfile') || contains(env.files, 'dockerfiles/')) && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles
           platforms: linux/amd64, linux/aarch64
@@ -130,7 +130,7 @@ jobs:
       - name: Build and push the jenkins agent for maven tutorial
         # This step builds and pushes the Jenkins agent for the Maven tutorial
         if: contains(env.files, 'dockerfiles/maven/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/maven
           platforms: linux/amd64, linux/aarch64
@@ -140,7 +140,7 @@ jobs:
       - name: Build and push the jenkins agent for python tutorial
         # This step builds and pushes the Jenkins agent for the Python tutorial
         if: contains(env.files, 'dockerfiles/python/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/python
           platforms: linux/amd64, linux/aarch64
@@ -150,7 +150,7 @@ jobs:
       - name: Build and push the jenkins agent for node tutorial
         # This step builds and pushes the Jenkins agent for the Node.js tutorial
         if: contains(env.files, 'dockerfiles/node/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/node
           platforms: linux/amd64, linux/aarch64
@@ -160,7 +160,7 @@ jobs:
       - name: Build and push the jenkins agent for the sidekick container
         # This step builds and pushes the Jenkins agent for the sidekick container
         if: contains(env.files, 'dockerfiles/sidekick/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/sidekick
           platforms: linux/amd64, linux/aarch64
@@ -170,7 +170,7 @@ jobs:
       - name: Build and push the jenkins agent for the agent-finding container
         # This step builds and pushes the Jenkins agent for the agent-finding container
         if: contains(env.files, 'dockerfiles/agent-discovery/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/agent-discovery/
           platforms: linux/amd64, linux/aarch64
@@ -180,7 +180,7 @@ jobs:
       - name: Build and push the jenkins agent for multi-branch controller
         # This step builds and pushes the Jenkins agent for the multi-branch controller
         if: contains(env.files, 'dockerfiles/multi/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/multi
           platforms: linux/amd64, linux/aarch64
@@ -190,7 +190,7 @@ jobs:
       - name: Build and push the jenkins agent for Android
         # This step builds and pushes the Jenkins agent for Android
         if: contains(env.files, 'dockerfiles/android/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/android
           platforms: linux/amd64
@@ -200,7 +200,7 @@ jobs:
       - name: Build and push the jenkins agent for golang tutorial
         # This step builds and pushes the Jenkins agent for the Golang tutorial
         if: contains(env.files, 'dockerfiles/golang/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/golang
           platforms: linux/amd64, linux/arm64
@@ -210,7 +210,7 @@ jobs:
       - name: Build and push the jenkins agent for cpp tutorial
         # This step builds and pushes the Jenkins agent for the C++ tutorial
         if: contains(env.files, 'dockerfiles/cpp/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/cpp
           platforms: linux/amd64, linux/aarch64
@@ -220,7 +220,7 @@ jobs:
       - name: Build and push the jenkins agent for dotnet tutorial
         # This step builds and pushes the Jenkins agent for the C++ tutorial
         if: contains(env.files, 'dockerfiles/dotnet/Dockerfile') && env.IS_FORK == 'false'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./dockerfiles/dotnet
           platforms: linux/amd64, linux/aarch64

.github/workflows/hadolint.yml

@@ -96,7 +96,7 @@ jobs:
           no-fail: true
 
       - name: Upload analysis results to GitHub
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: hadolint-results.sarif
           wait-for-processing: true

dockerfiles/agent-discovery/Dockerfile

@@ -1,7 +1,7 @@
 # This Dockerfile is used to prepare a Debian-based Docker image with several utilities installed.
 
 # We start from the Debian 'bookworm' image dated 2023-11-20.
-FROM debian:bookworm-20260406-slim as prepare-stage
+FROM debian:bookworm-20260421-slim as prepare-stage
 
 # Copy all shell scripts from the current directory to /usr/local/bin/ in the image.
 COPY *sh /usr/local/bin/