vNext

.devcontainer/Dockerfile

@@ -1,8 +1,5 @@
 # syntax=docker/dockerfile:1
-ARG alpine_version=3.20
-ARG golang_version=1.23
-
-FROM golang:${golang_version}-alpine${alpine_version}
+FROM golang:1.24-alpine3.22
 RUN apk add --no-cache \
                 git \
                 make \

.devcontainer/devcontainer.json

@@ -19,7 +19,7 @@
     "GIT_EDITOR": "nano"
   },
   "mounts": [
-    "type=bind,source=/home/${localEnv:USER}/.ssh,target=/root/.ssh,readonly"
+    "type=bind,source=${localEnv:HOME}/.ssh,target=/home/vscode/.ssh,readonly"
   ]
 	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
 	// "remoteUser": "root"

.github/dependabot.yml

@@ -16,3 +16,13 @@ updates:
     time: "10:00"
   open-pull-requests-limit: 10
   target-branch: development
+- package-ecosystem: "docker"
+  directories:
+    - "/"
+    - "/.devcontainer/"
+  schedule:
+    interval: "weekly"
+    day: sunday
+    time: "10:00"
+  open-pull-requests-limit: 10
+  target-branch: development

.github/workflows/codeql.yml

@@ -55,11 +55,11 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6.0.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4.31.8
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -87,14 +87,14 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4.31.8
       with:
         category: "/language:${{matrix.language}}"
       id: codeql_analysis
 
     - name: Upload CodeQL results as an artifact
       if: success() || failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6.0.0
       with:
         name: codeql-results
         path: ${{ steps.codeql_analysis.outputs.sarif-output }}

.github/workflows/delete_PR_images.yml

@@ -1,4 +1,4 @@
-name: Remove obsolet PR images from registry
+name: Remove obsolete PR images from registry
 
 on:
   pull_request:

.github/workflows/delete_untagged_images.yml

@@ -12,15 +12,8 @@ jobs:
   Delete_untagged_images:
     runs-on: ubuntu-latest
     steps:
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3.3.0
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.PAT_TOKEN }}
-
       - name: Delete all images from repository without tags
-        uses: Chizkiyahu/delete-untagged-ghcr-action@v4.0.1
+        uses: Chizkiyahu/delete-untagged-ghcr-action@v6.1.0
         with:
           token: ${{ secrets.PAT_TOKEN }}
           repository_owner: ${{ github.repository_owner }}

.github/workflows/ghcr.yml

@@ -14,7 +14,7 @@ env:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on:  ${{ matrix.runner }}
     permissions:
       contents: read
       packages: write
@@ -23,18 +23,23 @@ jobs:
       matrix:
         include:
           - platform: linux/amd64
+            runner: ubuntu-latest
           - platform: linux/arm64
+            runner: ubuntu-24.04-arm
           - platform: linux/arm/v6
+            runner: ubuntu-24.04-arm
           - platform: linux/arm/v7
-          - platform: linux/386
+            runner: ubuntu-24.04-arm
+          - platform: linux/386,
+            runner: ubuntu-latest
     steps:
       - name: Prepare name for digest up/download
         run: |
           platform=${{ matrix.platform }}
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
 
       - name: Checkout Code
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
@@ -55,10 +60,10 @@ jobs:
           echo "GIT_DATE=${GIT_DATE}" >> $GITHUB_ENV
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.2.0
+        uses: docker/setup-qemu-action@v3.7.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.6.1
+        uses: docker/setup-buildx-action@v3.11.1
         with:
           buildkitd-flags: --debug
 
@@ -69,14 +74,14 @@ jobs:
           images: |
             ${{ env.REGISTRY_IMAGE }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6.7.0
+        uses: docker/build-push-action@v6.18.0
         id: build
         with:
           context: .
@@ -97,7 +102,7 @@ jobs:
           digest="${{ steps.build.outputs.digest }}"
           touch "/tmp/digests/${digest#sha256:}"
       - name: Upload digest
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v6.0.0
         with:
           name: digests-${{ env.PLATFORM_PAIR }}
           path: /tmp/digests/*
@@ -116,14 +121,14 @@ jobs:
       packages: write
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v7.0.0
         with:
           path: /tmp/digests
           pattern: digests-*
           merge-multiple: true
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.6.1
+        uses: docker/setup-buildx-action@v3.11.1
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v5
@@ -139,7 +144,7 @@ jobs:
             type=ref,event=pr
             type=ref,event=branch
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}

.github/workflows/sync-back-to-dev.yml

@@ -18,7 +18,7 @@ jobs:
     name: Syncing branches
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v6.0.1
       - name: Opening pull request
         run: gh pr create -B development -H main --title 'Sync main back into development' --body 'Created by Github action' --label 'internal'
         env:

Dockerfile

@@ -1,8 +1,6 @@
 # syntax=docker/dockerfile:1
-ARG alpine_version=3.20
-ARG golang_version=1.23
 
-FROM golang:${golang_version}-alpine${alpine_version} AS builder
+FROM golang:1.24-alpine3.22 AS builder
 ARG GIT_COMMIT
 ARG GIT_BRANCH
 ARG GIT_VERSION

go.mod

@@ -1,43 +1,45 @@
 module docker-event-monitor
 
-go 1.23
-toolchain go1.23.0
+go 1.24.0
+
+toolchain go1.24.1
 
 require (
-	github.com/docker/docker v27.2.1+incompatible
-	github.com/rs/zerolog v1.33.0
-	golang.org/x/text v0.18.0
+	github.com/docker/docker v28.5.2+incompatible
+	github.com/rs/zerolog v1.34.0
+	golang.org/x/text v0.32.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
-	github.com/Microsoft/go-winio v0.6.1 // indirect
+	github.com/Microsoft/go-winio v0.6.2 // indirect
+	github.com/containerd/errdefs v1.0.0 // indirect
+	github.com/containerd/errdefs/pkg v0.3.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
-	github.com/distribution/reference v0.5.0 // indirect
+	github.com/distribution/reference v0.6.0 // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
-	github.com/go-logr/logr v1.4.1 // indirect
+	github.com/go-logr/logr v1.4.2 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
-	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/moby/docker-image-spec v1.3.1 // indirect
+	github.com/moby/sys/atomicwriter v0.1.0 // indirect
 	github.com/moby/term v0.5.0 // indirect
 	github.com/morikuni/aec v1.0.0 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.0.2 // indirect
+	github.com/opencontainers/image-spec v1.1.0 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0 // indirect
-	go.opentelemetry.io/otel v1.22.0 // indirect
+	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
+	go.opentelemetry.io/otel v1.34.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.22.0 // indirect
-	go.opentelemetry.io/otel/metric v1.22.0 // indirect
+	go.opentelemetry.io/otel/metric v1.34.0 // indirect
 	go.opentelemetry.io/otel/sdk v1.22.0 // indirect
-	go.opentelemetry.io/otel/trace v1.22.0 // indirect
-	golang.org/x/mod v0.17.0 // indirect
-	golang.org/x/sync v0.8.0 // indirect
-	golang.org/x/sys v0.20.0 // indirect
+	go.opentelemetry.io/otel/trace v1.34.0 // indirect
+	golang.org/x/net v0.35.0 // indirect
+	golang.org/x/sys v0.30.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
-	golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
 	gotest.tools/v3 v3.5.1 // indirect
 )