Merge branch 'main' into additives

Author: hangy

.env

@@ -28,6 +28,7 @@ WEB_RESOURCES_PATH=./web-default
 PRODUCERS_PLATFORM=0
 PRODUCT_OPENER_DOMAIN=openfoodfacts.localhost
 PRODUCT_OPENER_PORT=80
+PRODUCT_OPENER_HOST_PORT=80
 PRODUCT_OPENER_FLAVOR=openfoodfacts
 PRODUCT_OPENER_FLAVOR_SHORT=off
 

.github/workflows/api-linting.yml

@@ -21,10 +21,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
 

.github/workflows/auto-assign-pr.yml

@@ -17,4 +17,4 @@ jobs:
     name: 'Pull request assignment'
     runs-on: ubuntu-latest
     steps:
-      - uses: toshimaru/auto-author-assign@v3.0.2
+      - uses: toshimaru/auto-author-assign@v3.0.3

.github/workflows/codeql-analysis.yml

@@ -44,23 +44,23 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
         fetch-depth: 2
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.37.3
       # Override language selection by uncommenting this and choosing your languages
       # with:
       #   languages: go, javascript, csharp, python, cpp, java
 
     # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below).
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v4
+      uses: github/codeql-action/autobuild@v4.37.3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -74,4 +74,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.37.3

.github/workflows/container-build.yml

@@ -27,7 +27,7 @@ jobs:
           "backend"
         ]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 1
 
@@ -91,7 +91,7 @@ jobs:
         skip-dirs: opt/product-opener/build-cache/,opt/product-opener/taxonomies
         trivy-config: trivy.yaml
     - name: Upload Trivy results to GitHub Security
-      uses: github/codeql-action/upload-sarif@v4
+      uses: github/codeql-action/upload-sarif@v4.37.3
       if: always()
       with:
         sarif_file: ${{ matrix.image_name }}-trivy.sarif

.github/workflows/container-deploy.yml

@@ -173,6 +173,7 @@ jobs:
           echo "GOOGLE_CLOUD_VISION_API_KEY=${{ secrets.GOOGLE_CLOUD_VISION_API_KEY }}" >> .env
           echo "CROWDIN_PROJECT_IDENTIFIER=${{ env.CROWDIN_PROJECT_IDENTIFIER }}" >> .env
           echo "CROWDIN_PROJECT_KEY=${{ secrets.CROWDIN_PROJECT_KEY }}" >> .env
+          echo "ECOBALYSE_API_TOKEN=${{ secrets.ECOBALYSE_API_TOKEN }}" >> .env
           echo "GEOLITE2_PATH=${{ env.GEOLITE2_PATH }}" >> .env
           echo "GEOLITE2_LICENSE_KEY=${{ secrets.GEOLITE2_LICENSE_KEY }}" >> .env
           echo "GEOLITE2_ACCOUNT_ID=${{ secrets.GEOLITE2_ACCOUNT_ID }}" >> .env

.github/workflows/crowdin-per-language.yml

@@ -20,9 +20,9 @@ jobs:
          lc: [ca, uk, it, es, fr, de, id, en, he, da, ko, nl, pt-BR, zh-TW, nl-BE, pt-PT, zh-HK, zh-CN,  aa , ar , ber , br , co , fa , ga , hy , iu , kk , lb , me , mr , ne , no , ry , sd , sl , sq , st , tg , tr , tzl , val , wa , zea , zu , ach , as , bg , bs , crs , eo , fi , gd , hi , id , ja , km , ku , lo , mg , ms , nr , pa , qu , sa , sg , sma , sr , sv , th , ts , ug , ve , wo , zh ,af , ast , bm , ca , cs , el , fil , gl , hr , ii , jv , kmr , kw , mi , mt , pl , rm , sat , sh , sn , sr_CS , sw , ti , tt , uk , vec , xh , ak , az , bn , ce , cv , et , fo , gu , ht , is , ka , kmr_TR , ky , lt , ml , my , oc , ro , sc , si , so , sr_RS , ta , tl , tw , ur , vi , yi , am , be , bo , chr , cy , eu , ha , hu , kab , kn , la , lv , mn , nb , nn , ru , sco , sk , son , ss , te , tn , ty , uz , vls , yo ]
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
     - name: Matrix
-      uses: crowdin/github-action@v2.16.2
+      uses: crowdin/github-action@v2.17.0
       with:
          upload_translations: false # default is false
          download_translations: true

.github/workflows/crowdin.yml

@@ -11,9 +11,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
     - name: crowdin action
-      uses: crowdin/github-action@v2.16.2
+      uses: crowdin/github-action@v2.17.0
       with:
         upload_translations: false # default is false
         # Use this option to upload translations for a single specified language

.github/workflows/generate-doc.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/label.yml

@@ -22,7 +22,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/labeler@v6
+    - uses: actions/labeler@v7
       #if: github.event.pull_request.head.repo.full_name == github.repository
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"