Updates github-config

.github/dependabot.yml

@@ -16,8 +16,3 @@ updates:
       update-types:
       - "minor"
       - "patch"
-      exclude-patterns:
-      - "github.com/anchore/stereoscope"
-      - "github.com/testcontainers/testcontainers-go"
-      - "github.com/docker/docker"
-      - "github.com/containerd/containerd"

.github/workflows/approve-bot-pr.yml

@@ -10,7 +10,7 @@ jobs:
   download:
     name: Download PR Artifact
     if: ${{ github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success' }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       pr-author: ${{ steps.pr-data.outputs.author }}
       pr-number: ${{ steps.pr-data.outputs.number }}
@@ -32,7 +32,7 @@ jobs:
     name: Approve Bot PRs
     needs: download
     if: ${{ needs.download.outputs.pr-author == 'paketo-bot' || needs.download.outputs.pr-author == 'dependabot[bot]' }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: Check Commit Verification
       id: unverified-commits
@@ -52,7 +52,7 @@ jobs:
 
     - name: Checkout
       if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'
-      uses: actions/checkout@v3
+      uses: actions/checkout@v6
 
     - name: Approve
       if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'

.github/workflows/codeql-analysis.yml

@@ -1,17 +1,15 @@
 name: "CodeQL"
 
 on:
-  push:
-    branches: [ main ]
   pull_request:
     branches: [ main ]
   schedule:
-  - cron: '34 5 * * *' # daily at 5:34am UTC
+  - cron: '34 5 * * *'  # daily at 5:34am UTC
 
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     strategy:
       fail-fast: false
@@ -21,15 +19,15 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v6
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v4
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v4

.github/workflows/compile-dependency.yml

@@ -0,0 +1,106 @@
+name: 'Compile Dependency on Target - Reusable Workflow'
+
+description: |
+  Compiles Dependency on given target, os, and arch
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        description: 'dependency version'
+        required: true
+        type: string
+      target:
+        description: 'dependency OS target variant'
+        required: true
+        type: string
+      os:
+        description: 'platform OS (e.g., linux)'
+        required: true
+        type: string
+      arch:
+        description: 'platform architecture (e.g., amd64)'
+        required: true
+        type: string
+      shouldCompile:
+        description: 'whether to compile the dependency'
+        required: true
+        type: boolean
+      shouldTest:
+        description: 'whether to test the dependency after compilation'
+        required: true
+        type: boolean
+      uploadArtifactName:
+        description: 'name of the artifact to upload'
+        required: true
+        type: string
+
+jobs:
+  compile:
+    # Speed up compilation by using runners that match os and arch when they are set, otherwise fall back to emulation.
+    runs-on: ${{ (inputs.os == 'linux' && inputs.arch == 'arm64') && 'ubuntu-24.04-arm' || 'ubuntu-24.04' }}
+
+    steps:
+    - name: Check out code
+      uses: actions/checkout@v6
+
+    - name: Enable experimental features for Docker daemon and CLI
+      run: |
+        echo '{"experimental": true}' | sudo tee /etc/docker/daemon.json
+        sudo systemctl restart docker
+        mkdir -p ~/.docker
+        echo '{"experimental": "enabled"}' | sudo tee ~/.docker/config.json
+
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Setup before compilation
+      id: compile-setup
+      run: |
+        echo "outputdir=$(mktemp -d)" >> "$GITHUB_OUTPUT"
+
+    - name: docker build
+      id: docker-build
+      env:
+        SKIP_LOGIN: true
+      if: ${{ inputs.shouldCompile == true || inputs.shouldCompile == 'true' }}
+      uses: actions-hub/docker/cli@master
+      with:
+        args: "build ${{ (inputs.os != '' && inputs.arch != '') && format('--platform {0}/{1}', inputs.os, inputs.arch) || '' }} -t compilation -f dependency/actions/compile/${{ inputs.target }}.Dockerfile dependency/actions/compile"
+
+    - name: docker run
+      id: docker-run
+      uses: actions-hub/docker/cli@master
+      env:
+        SKIP_LOGIN: true
+      if: ${{ inputs.shouldCompile == true || inputs.shouldCompile == 'true' }}
+      with:
+        args: "run ${{ (inputs.os != '' && inputs.arch != '') && format('--platform {0}/{1}', inputs.os, inputs.arch) || '' }} -v ${{ steps.compile-setup.outputs.outputdir }}:/home compilation --outputDir /home --target ${{ inputs.target }} --version ${{ inputs.version }} ${{ inputs.os != '' && format('--os {0}', inputs.os) || '' }} ${{ inputs.arch != '' && format('--arch {0}', inputs.arch) || '' }}"
+
+    - name: Print contents of output dir
+      shell: bash
+      run: ls -lah ${{ steps.compile-setup.outputs.outputdir }}
+
+    - name: Test Dependency
+      working-directory: dependency
+      if: ${{ (inputs.shouldCompile == true || inputs.shouldCompile == 'true') && (inputs.shouldTest == true || inputs.shouldTest == 'true') }}
+      run: |
+        #!/usr/bin/env bash
+        set -euo pipefail
+        shopt -s inherit_errexit
+
+        make test \
+          version="${{ inputs.version }}" \
+          tarballPath="${{ steps.compile-setup.outputs.outputdir }}/*.tgz" \
+          os="${{ inputs.os }}" \
+          arch="${{ inputs.arch }}"
+
+    - name: Upload compiled artifact
+      uses: actions/upload-artifact@v6
+      if: ${{ inputs.shouldCompile == true || inputs.shouldCompile == 'true' }}
+      with:
+        name: '${{ inputs.uploadArtifactName }}'
+        path: '${{ steps.compile-setup.outputs.outputdir }}/*'