Update docker/metadata-action digest to b53be03

.gitea/workflows/publish.yaml

@@ -46,7 +46,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@906ecf0fc0a80f9110f79d9e6c04b1080f4a2621
+        uses: docker/metadata-action@b53be03109c4ef6f6cc7aa545b84b17a7fe51c1e
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -55,7 +55,7 @@ jobs:
             type=raw,value=latest,enable=${{ github.ref == format('refs/heads/{0}', 'main') }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@11be14d908760a0756f045980728ec5fb7880f74
+        uses: docker/build-push-action@5e99dacf67635c4f273e532b9266ddb609b3025a
         with:
           context: .
           push: true

Dockerfile

@@ -11,7 +11,7 @@ RUN go build \
   . 
 RUN echo "nobody:x:65534:65534:Nobody:/:" > /etc_passwd
 
-FROM alpine:3.21 as compressor
+FROM alpine:3.20 as compressor
 RUN apk add --no-cache upx binutils
 COPY --from=builder --chown=65534:0 /bin/app /app
 RUN strip /app && upx -q -9 /app