Sync with origin

.dockerignore

@@ -1,10 +1,8 @@
 .github/*
 exhaust/*
-pics/*
 remote-raw/*
 scripts/*
 .git
 .dockerignore
 README.md
-LICENSE
-Makefile
+LICENSE

.github/workflows/CI.yaml

@@ -1,64 +1,43 @@
 name: CI check on every PR
 on:
   pull_request:
-    branches:
-      - master
     paths-ignore:
       - '**.md'
       - 'Makefile'
       - 'config.json'
 
 jobs:
-  ci:
-    name: CI check on every push and PR
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-
-      - name: Install Go
-        uses: actions/setup-go@v3
-        with:
-          go-version: '1.20'
-
-      - name: Setup necessary packages
-        run: |
-          sudo apt install libvips-dev -y
-
-      - name: run test cases
-        run: make && make test
-
   image-test:
-    name: Check for image build and CVE
+    name: Check for image build, testing and CVE
     runs-on: ubuntu-latest
+    permissions: 
+      pull-requests: write 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: true
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
-      - name: Cache Docker layers
-        uses: actions/cache@v2
+      - name: Make test
+        uses: docker/build-push-action@v6
         with:
-          path: /tmp/.buildx-cache
-          key: ${{ runner.os }}-buildx-${{ github.sha }}
-          restore-keys: |
-            ${{ runner.os }}-buildx-
+          context: .
+          file: ./Dockerfile.CI
+          load: true
+          tags: |
+            ghcr.io/${{ github.event.repository.full_name }}:latest
 
-      - name: Build and load image
-        uses: docker/build-push-action@v3
+      - name: Build image test
+        uses: docker/build-push-action@v6
         with:
           context: .
           load: true
           tags: |
             ghcr.io/${{ github.event.repository.full_name }}:latest
 
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
-
       - name: Install trivy
         run: |
           wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
@@ -77,11 +56,12 @@ jobs:
         run: |
           echo "${{ steps.trivy.outputs.stdout }}"
 
-      - name: Comment PR
+      - name: Comment PR for CVE
         uses: thollander/actions-comment-pull-request@v2
         with:
           message: |
             ```
             ${{ steps.trivy.outputs.stdout }}
             ```
+          comment_tag: cve
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/codecov.yaml

@@ -10,23 +10,16 @@ on:
 
 jobs:
   ci:
-    name: CI check and codecov on every push
+    name: Codecov on every push
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
-          go-version: '1.20'
-
-      - name: Setup necessary packages
-        run: |
-          sudo apt install libvips-dev -y
-
-      - name: run test cases
-        run: make && make test
+          go-version: '1.25'
 
       - name: Codecov
         uses: codecov/codecov-action@v2

.github/workflows/codeql-analysis.yml

@@ -15,7 +15,6 @@ on:
   push:
     branches: [ master ]
   pull_request:
-    # The branches below must be a subset of the branches above
     branches: [ master ]
   schedule:
     - cron: '32 20 * * 2'
@@ -33,38 +32,23 @@ jobs:
       fail-fast: false
       matrix:
         language: [ 'go' ]
-        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
-        # Learn more about CodeQL language support at https://git.io/codeql-language-support
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
+
+    - name: Install Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: '1.25'
 
-    # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
       uses: github/codeql-action/autobuild@v2
 
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2

.github/workflows/integration-test.yaml

@@ -14,10 +14,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+
+      - name: Install docker-compose
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y docker-compose
 
       - name: Build image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64
@@ -32,7 +37,7 @@ jobs:
       - name: Send Requests to Server
         run: |
           cd pics
-          find * -type f -print | xargs -I {} curl -H "User-Agent: Mozilla/5.0 Gecko/20100101 Firefox/98.0" http://localhost:3333/{}
+          find * -type f -print | xargs -I {} curl -o /dev/null -H "Accept: image/webp" --silent http://localhost:3333/{}
 
       - name: Get container RAM stats
         run: |
@@ -43,10 +48,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
-
+        uses: actions/checkout@v4
+
+      - name: Install docker-compose
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y docker-compose
+
       - name: Build image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64
@@ -61,7 +71,7 @@ jobs:
       - name: Send Requests to Server
         run: |
           cd pics
-          find * -type f -print | xargs -I {} curl -H "User-Agent: Mozilla/5.0 Gecko/20100101 Firefox/98.0" http://localhost:3333/{}
+          find * -type f -print | xargs -I {} curl -o /dev/null -H "Accept: image/webp" --silent http://localhost:3333/{}
 
       - name: Get container RAM stats
         run: |

.github/workflows/release_binary.yaml

@@ -10,42 +10,86 @@ on:
       - '*'
 
 jobs:
-  build:
-    name: Create Release
-    runs-on: ubuntu-latest
+  build-amd64:
+    name: Create AMD64 Binary
+    runs-on: ubuntu-22.04 # Using 22.04 of ubuntu to get the lowest version of glibc
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
+
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+      - name: Install dependencies
+        run: |
+          sudo apt update && sudo apt install --no-install-recommends libvips-dev -y
+
+      - name: Make
+        run: |
+          make
+
+      - name: Upload Binary
+        uses: actions/upload-artifact@v4
+        with:
+          name: webp-server-linux-amd64
+          path: builds/webp-server-linux-amd64
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
 
-      - name: Make WebP Server Go (amd64)
-        run: |
-          docker run --rm -w /app -v "$(pwd)":/app webpsh/libvips make
-          sudo chown -R $USER:$USER builds/
-          sha256sum builds/webp-server-linux-amd64 > builds/webp-server-linux-amd64.sha256
+  build-arm64:
+    name: Create ARM64 Binary
+    runs-on: ubuntu-22.04-arm # Using 22.04 of ubuntu to get the lowest version of glibc
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
 
-      - name: Make WebP Server Go (arm64)
-        run: |
-          docker run --rm -w /app -v "$(pwd)":/app --platform linux/arm64 webpsh/libvips make
-          sudo chown -R $USER:$USER builds/
-          sha256sum builds/webp-server-linux-arm64 > builds/webp-server-linux-arm64.sha256
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
 
-      - name: Check for ldd version(AMD64 only)
+      - name: Install dependencies
+        run: |
+          sudo apt update && sudo apt install --no-install-recommends libvips-dev -y
+
+      - name: Make
+        run: |
+          make
+
+      - name: Upload Binary
+        uses: actions/upload-artifact@v4
+        with:
+          name: webp-server-linux-arm64
+          path: builds/webp-server-linux-arm64
+
+  release-binary:
+    name: Release Binary
+    runs-on: ubuntu-latest
+    needs: [build-amd64, build-arm64]
+    steps:
+      - name: Download Binaries
+        uses: actions/download-artifact@v4
+        with:
+          name: webp-server-linux-amd64
+
+      - name: Download Binaries
+        uses: actions/download-artifact@v4
+        with:
+          name: webp-server-linux-arm64
+
+      - name: Get SHA256
         run: |
-          ldd builds/webp-server-linux-amd64
+          sha256sum webp-server-linux-amd64 > webp-server-linux-amd64.sha256
+          sha256sum webp-server-linux-arm64 >webp-server-linux-arm64.sha256
 
       - uses: "marvinpinto/action-automatic-releases@latest"
         with:
           repo_token: "${{ secrets.GITHUB_TOKEN }}"
           prerelease: true
           title: "WebP Server Go"
           files: |
-            builds/webp-server-linux-amd64
-            builds/webp-server-linux-amd64.sha256
-            builds/webp-server-linux-arm64
-            builds/webp-server-linux-arm64.sha256
+            webp-server-linux-amd64
+            webp-server-linux-amd64.sha256
+            webp-server-linux-arm64
+            webp-server-linux-arm64.sha256