[skip-release] Update bump-dependencies

Author: renovate[bot]

.github/workflows/deploy.yml

@@ -12,7 +12,7 @@ on:
           - prod
 jobs:
   run:
-    uses: lehigh-university-libraries/gha/.github/workflows/linderman-deploy.yaml@0ad0a7d96a7b3a5c05ad811832108d67e3dea92c # main
+    uses: lehigh-university-libraries/gha/.github/workflows/linderman-deploy.yaml@e26d86abfbe300be4d93570b666651c11471995b # main
     with:
       url: https://apps-${{ inputs.environment }}.lib.lehigh.edu/_rollout
     permissions:

.github/workflows/github-release.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   release:
     if: github.event.pull_request.merged == true && !contains(github.event.pull_request.title, 'skip-release')
-    uses: lehigh-university-libraries/gha/.github/workflows/bump-release.yaml@0ad0a7d96a7b3a5c05ad811832108d67e3dea92c # main
+    uses: lehigh-university-libraries/gha/.github/workflows/bump-release.yaml@e26d86abfbe300be4d93570b666651c11471995b # main
     permissions:
       contents: write
     secrets: inherit

.github/workflows/lint-test-build-deploy.yml

@@ -19,9 +19,9 @@ jobs:
   lint-test:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+      - uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
         with:
           verbose: true
 
@@ -30,15 +30,15 @@ jobs:
 
   build-push:
     needs: [lint-test]
-    uses: lehigh-university-libraries/gha/.github/workflows/build-push-ghcr.yaml@0ad0a7d96a7b3a5c05ad811832108d67e3dea92c # main
+    uses: lehigh-university-libraries/gha/.github/workflows/build-push-ghcr.yaml@e26d86abfbe300be4d93570b666651c11471995b # main
     permissions:
       contents: read
       packages: write
     secrets: inherit
 
   deploy:
     needs: [build-push]
-    uses: lehigh-university-libraries/gha/.github/workflows/linderman-deploy.yaml@0ad0a7d96a7b3a5c05ad811832108d67e3dea92c # main
+    uses: lehigh-university-libraries/gha/.github/workflows/linderman-deploy.yaml@e26d86abfbe300be4d93570b666651c11471995b # main
     with:
       url: https://apps-test.lib.lehigh.edu/_rollout
     secrets: inherit

Dockerfile

@@ -1,5 +1,5 @@
-# syntax=docker/dockerfile:1.23.0@sha256:2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769
-FROM tomcat:11.0@sha256:931b145a361d3aa3033e97dd035dace2fe5bc551abfc5aaa0b341a2ac00e8b2f AS build
+# syntax=docker/dockerfile:1.26.0@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32
+FROM tomcat:11.0@sha256:3747125ecc78357b5eb6e2e59352713c14a428514753fdf67db7af97999a18c4 AS build
 
 WORKDIR /build
 
@@ -13,14 +13,14 @@ COPY pom.xml .
 COPY src ./src
 RUN mvn clean package -DskipTests
 
-FROM tomcat:11.0@sha256:931b145a361d3aa3033e97dd035dace2fe5bc551abfc5aaa0b341a2ac00e8b2f
+FROM tomcat:11.0@sha256:3747125ecc78357b5eb6e2e59352713c14a428514753fdf67db7af97999a18c4
 
 RUN rm -rf /usr/local/tomcat/webapps/*
 COPY --from=build /build/target/folio-shelving-order.war /usr/local/tomcat/webapps/
 
 ARG \
     # renovate: datasource=repology depName=ubuntu_24_04/curl
-    CURL_VERSION=8.5.0-2ubuntu10.8 \
+    CURL_VERSION=8.5.0-2ubuntu10.11 \
     # renovate: datasource=repology depName=ubuntu_24_04/less
     LESS_VERSION=590-2ubuntu2.1
 

pom.xml

@@ -85,7 +85,7 @@
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.5.5</version>
+          <version>3.5.6</version>
         </plugin>
         <plugin>
           <artifactId>maven-war-plugin</artifactId>