v2026.4.6-beta

Author: mceachen

.github/workflows/docker-build.yml

@@ -19,15 +19,15 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       # https://docs.docker.com/build/ci/github-actions/manage-tags-labels/
       # https://github.com/docker/metadata-action#tags-input
       # https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
           images: |
             photostructure/server
@@ -59,31 +59,31 @@ jobs:
             type=semver,pattern=v{{major}}.{{minor}},enable=${{ !contains(github.ref_name, 'alpha') && !contains(github.ref_name, 'beta') }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
         with:
           platforms: arm64
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
       - name: Log in to Docker Hub
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: docker.io
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_PASS }}
 
       - name: Log in to GitHub Container Registry
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           context: .
           platforms: linux/amd64,linux/arm64

.github/workflows/npm-publish.yml

@@ -13,23 +13,17 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       # setup-node with registry-url is required for OIDC trusted publishing
       - name: Setup Node.js
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version: 22
-          cache: "npm"
+          node-version: 24
           registry-url: "https://registry.npmjs.org"
 
-      - name: Update npm for provenance support
-        run: |
-          npm install -g npm@latest
-          npm --version
-
       - name: Install dependencies
-        run: npm ci
+        run: npm install
 
       - name: Publish to npm with OIDC provenance
         run: |

Dockerfile

@@ -48,6 +48,7 @@ RUN apt-get update \
   passwd \
   perl \
   procps \
+  ripgrep \
   tini \
   tzdata \
   wget \

VERSION.json

@@ -1,12 +1,12 @@
 {
-  "version": "2026.4.4-beta",
+  "version": "2026.4.6-beta",
   "versionMajor": 2026,
   "versionMinor": 4,
-  "versionPatch": 4,
+  "versionPatch": 6,
   "versionPrerelease": [
     "beta"
   ],
-  "release": "2026.4.4-beta+20260403122906",
-  "gitSha": "13add5ecc2149f11d74436bb19adc5b940664c14",
-  "gitDate": "2026-04-03T19:29:06.000Z"
+  "release": "2026.4.6-beta+20260409205036",
+  "gitSha": "d2e9ed8079c5d16948fc4c0a0d46d377211efd82",
+  "gitDate": "2026-04-10T03:50:36.000Z"
 }