Update nginx Docker tag to v1.23.2

.woodpecker/.master.yml

@@ -47,6 +47,7 @@ pipeline:
           ocram85/blog:latest
       - |
         trivy image \
+          --exit-code 1 \
           --severity HIGH,CRITICAL \
           --no-progress \
           ocram85/blog:latest

.woodpecker/.next.yml

@@ -3,11 +3,15 @@ depends_on:
 
 pipeline:
   buildNext:
-    image: woodpeckerci/plugin-docker-buildx
+    image: plugins/docker
     settings:
+      #dry_run: true
       repo: ocram85/blog
       dockerfile: Dockerfile
       tags: next
+      build_args:
+        - NODE_BASE=lts-buster-slim
+        - NGINX_BASE=1.23.1-alpine
       username:
         from_secret: hub_user
       password:
@@ -16,12 +20,16 @@ pipeline:
       event: pull_request
 
   buildNextGitea:
-    image: woodpeckerci/plugin-docker-buildx
+    image: plugins/docker
     settings:
+      #dry_run: true
       registry: gitea.ocram85.com
       repo: gitea.ocram85.com/ocram85/blog
       dockerfile: Dockerfile
       tags: next
+      build_args:
+        - NODE_BASE=lts-buster-slim
+        - NGINX_BASE=1.23.1-alpine
       username:
         from_secret: gitea_user
       password:
@@ -39,6 +47,7 @@ pipeline:
           ocram85/blog:next
       - |
         trivy image \
+          --exit-code 1 \
           --severity HIGH,CRITICAL \
           --no-progress \
           ocram85/blog:next

.woodpecker/.renovate.yml

@@ -1,12 +1,12 @@
 pipeline:
   DockerBaseImage:
-    image: renovate/renovate:34.40-slim
+    image: renovate/renovate:34.22-slim
     commands:
       - "renovate"
     secrets:
       - RENOVATE_TOKEN
     environment:
-      LOG_LEVEL: debug
+      #LOG_LEVEL: debug
       RENOVATE_PLATFORM: "gitea"
       RENOVATE_ENDPOINT: "https://gitea.ocram85.com"
       RENOVATE_REPOSITORIES: "${CI_REPO}"

Dockerfile

@@ -1,4 +1,8 @@
-FROM node:lts-buster-slim as builder
+# Build ARGS for base image versions
+ARG NODE_BASE=lts-buster-slim
+ARG NGINX_BASE=1.23.2-alpine
+
+FROM node:${NODE_BASE} as builder
 COPY . /src
 #RUN ls -la
 WORKDIR /src
@@ -6,7 +10,7 @@ WORKDIR /src
 RUN npm install \
   && npm run build
 
-FROM nginx:1.23.2-alpine as prod
+FROM nginx:${NGINX_BASE} as prod
 LABEL maintainer="marco.blessing@googlemail.com"
 HEALTHCHECK  --interval=15s --timeout=5s \
   CMD wget --no-verbose --tries=1 --spider http://localhost:80/ || exit 1

renovate.json

@@ -1,9 +1,4 @@
 {
-  "onboardingConfig": {
-    "extends": [
-      "config:base"
-    ]
-  },
   "dependencyDashboard": true,
   "docker": {
     "enabled": true