From f29a351f686650d765a8beb9776afa319a43abe4 Mon Sep 17 00:00:00 2001 From: Will Mooreston Date: Tue, 8 Sep 2026 11:54:52 -0700 Subject: [PATCH 1/3] Bump actions/checkout to v7 and hadolint-action to v3.5.0 --- .github/workflows/branch_release.yml | 2 +- .github/workflows/dockle_xeol.yml | 2 +- .github/workflows/hadolint.yml | 4 ++-- .github/workflows/merge_release.yml | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/branch_release.yml b/.github/workflows/branch_release.yml index b864e71..7e0333a 100644 --- a/.github/workflows/branch_release.yml +++ b/.github/workflows/branch_release.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Create branches and PRs uses: LabKey/gitHubActions/branch-release@develop diff --git a/.github/workflows/dockle_xeol.yml b/.github/workflows/dockle_xeol.yml index 7fedba0..5967eb0 100644 --- a/.github/workflows/dockle_xeol.yml +++ b/.github/workflows/dockle_xeol.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Build an image from Dockerfile run: | cp labkeyServer-HelloWorld.jar labkeyServer.jar diff --git a/.github/workflows/hadolint.yml b/.github/workflows/hadolint.yml index f676640..538808d 100644 --- a/.github/workflows/hadolint.yml +++ b/.github/workflows/hadolint.yml @@ -17,8 +17,8 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Run hadolint - uses: hadolint/hadolint-action@v3.1.0 + uses: hadolint/hadolint-action@v3.5.0 with: dockerfile: Dockerfile diff --git a/.github/workflows/merge_release.yml b/.github/workflows/merge_release.yml index 440c9a3..9742abb 100644 --- a/.github/workflows/merge_release.yml +++ b/.github/workflows/merge_release.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Merge PR uses: LabKey/gitHubActions/merge-release@develop From e3a7fd875074719a69ac951dde7409f8586c2654 Mon Sep 17 00:00:00 2001 From: Will Mooreston Date: Tue, 8 Sep 2026 11:58:14 -0700 Subject: [PATCH 2/3] Ignore new hadolint rules tripped by the v3.5.0 binary bump DL3064 flags placeholder ENV secrets never baked into the image, DL3025 flags HEALTHCHECK's intentional shell-form var substitution, and DL3066 is an info-level UID style note out of scope here. --- .github/workflows/hadolint.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/hadolint.yml b/.github/workflows/hadolint.yml index 538808d..9afb781 100644 --- a/.github/workflows/hadolint.yml +++ b/.github/workflows/hadolint.yml @@ -22,3 +22,4 @@ jobs: uses: hadolint/hadolint-action@v3.5.0 with: dockerfile: Dockerfile + ignore: 'DL3064,DL3025,DL3066' From 1c0335398dc130fbfe5994a869d88cd4e9ac2e71 Mon Sep 17 00:00:00 2001 From: Will Mooreston Date: Tue, 8 Sep 2026 12:51:56 -0700 Subject: [PATCH 3/3] Pin xeol CLI to v0.10.8 to avoid its 5-day stale-DB check xeol-action@v1.1.1 pins xeol CLI v0.9.13, whose default max-allowed DB age is 5 days; v0.10.8 raised that default to 90 days, matching the EOL feed's actual publish cadence. --- .github/workflows/dockle_xeol.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/dockle_xeol.yml b/.github/workflows/dockle_xeol.yml index 5967eb0..e496744 100644 --- a/.github/workflows/dockle_xeol.yml +++ b/.github/workflows/dockle_xeol.yml @@ -36,8 +36,10 @@ jobs: uses: noqcks/xeol-action@v1.1.1 with: image: "labkey/community:helloworld" + xeol-version: "v0.10.8" - name: Run xeol on dir uses: noqcks/xeol-action@v1.1.1 with: path: "." + xeol-version: "v0.10.8" \ No newline at end of file