Merge branch 'main' into develop

Author: jstarpl

.github/workflows/build-docker.yaml

@@ -22,7 +22,7 @@ jobs:
       build-and-push-enable: ${{ steps.check-build-and-push.outputs.enable }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
 
@@ -65,7 +65,7 @@ jobs:
       - check-build-steps
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
 

.github/workflows/build-linux.yaml

@@ -17,12 +17,12 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
 
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
 
@@ -68,7 +68,7 @@ jobs:
 
     steps:
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: Linux
           path: deploy

.github/workflows/build-windows.yaml

@@ -17,12 +17,12 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
 
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
 
@@ -88,7 +88,7 @@ jobs:
 
     steps:
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: Windows
           path: deploy

.github/workflows/lint-and-test.yaml

@@ -17,11 +17,11 @@ jobs:
     timeout-minutes: 10
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
 
@@ -51,11 +51,11 @@ jobs:
     timeout-minutes: 10
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: Use Node.js ${{ matrix.node_version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node_version }}
 

Dockerfile

@@ -28,9 +28,11 @@ RUN rm -r scripts
 # Create deploy-image:
 FROM node:22-alpine
 
-RUN apk add --no-cache fontconfig alsa-lib
+RUN apk add --no-cache fontconfig alsa-lib dumb-init
 
 COPY --from=builder /src /src
 
+# Run as non-root user
+USER 1000
 WORKDIR /src/packages/input-gateway
-ENTRYPOINT ["node", "dist/index.js"]
+ENTRYPOINT ["/usr/bin/dumb-init", "--", "node", "dist/index.js"]