chore(deps): bump mediawiki from 1.43.0 to 1.43.1 (#66)

Bumps mediawiki from 1.43.0 to 1.43.1.

---
updated-dependencies:
- dependency-name: mediawiki
  dependency-version: 1.43.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/FUNDING.yml

@@ -1 +1 @@
-ko_fi: garethflowers
+custom: "https://paypal.me/garethflowers"

.github/dependabot.yml

@@ -2,5 +2,16 @@ version: 2
 updates:
   - package-ecosystem: "github-actions"
     directory: "/"
+    reviewers:
+      - "garethflowers"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "docker"
+    commit-message:
+      include: "scope"
+      prefix: "chore"
+    directory: "/"
+    reviewers:
+      - "garethflowers"
     schedule:
       interval: "daily"

.github/workflows/dependabot-auto.yml

@@ -0,0 +1,26 @@
+name: Dependabot PR Approve and Merge
+on: pull_request_target
+permissions:
+  contents: write
+  pull-requests: write
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - name: Dependabot Metadata
+        id: dependabot-metadata
+        uses: dependabot/fetch-metadata@v2.2.0
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: Approve a PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Enable auto-merge for Dependabot PRs
+        if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' }}
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/publish.yml

@@ -1,18 +1,23 @@
-name: Publish
+name: Build and Publish Images
 on:
+  pull_request:
+    branches:
+      - main
   push:
-    branches: main
+    branches:
+      - main
     tags:
       - "*.*.*"
 jobs:
-  main:
+  publish:
+    name: Publish
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Prepare
         id: prep
-        uses: crazy-max/ghaction-docker-meta@v2
+        uses: docker/metadata-action@v5.7.0
         with:
           images: |
             ${{ github.repository_owner }}/mediawiki-ldap
@@ -23,31 +28,33 @@ jobs:
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v3
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Login to GHCR
-        uses: docker/login-action@v1
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Build and Push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           context: .
-          platforms: linux/amd64,linux/arm/v7,linux/ppc64le # linux/386,linux/arm/v6,linux/arm64,linux/s390x
-          push: true
+          platforms: linux/amd64,linux/arm/v7,linux/ppc64le
+          push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.prep.outputs.tags }}
           labels: ${{ steps.prep.outputs.labels }}
       - name: Update Description
         continue-on-error: true
-        uses: peter-evans/dockerhub-description@v2
+        uses: peter-evans/dockerhub-description@v4
         with:
           short-description: ${{ github.event.repository.description }}
           username: ${{ secrets.DOCKERHUB_USERNAME }}

.gitignore

@@ -0,0 +1 @@
+.DS_Store

Dockerfile

@@ -1,8 +1,8 @@
-FROM mediawiki:1.35.2
+FROM mediawiki:1.43.1
 
 RUN apt-get update \
 	&& apt-get install --yes --no-install-recommends libldap2-dev libpq-dev \
 	&& docker-php-ext-install ldap pgsql pdo pdo_pgsql \
 	&& rm -rf /var/lib/apt/lists \
-	&& curl https://extdist.wmflabs.org/dist/extensions/LDAPProvider-REL1_35-ca854c1.tar.gz --output /tmp/ldapprovider.tar.gz \
+	&& curl https://extdist.wmflabs.org/dist/extensions/LDAPGroups-REL1_41-754de82.tar.gz --output /tmp/ldapprovider.tar.gz \
 	&& tar --extract --file=/tmp/ldapprovider.tar.gz --directory=/var/www/html/extensions

README.md

@@ -7,6 +7,9 @@ A MediaWiki installation with LDAP extensions.
 ### Start a MediaWiki Server instance
 
 To start a container use the following:
+
+#### ...via `docker run`
+
 ```sh
 docker run \
 	--name my-mediawiki-ldap \
@@ -15,6 +18,16 @@ docker run \
 	garethflowers/mediawiki-ldap
 ```
 
+#### ...via `docker compose`
+
+```yml
+services:
+  my-mediawiki-ldap:
+    image: garethflowers/mediawiki-ldap
+    ports:
+      - 80:80/tcp
+```
+
 ## License
 
 *	MediaWiki is released under the [GNU GPLv2 License](https://phabricator.wikimedia.org/source/mediawiki/browse/master/COPYING).

_config.yml

@@ -0,0 +1,10 @@
+docker_repository: garethflowers/mediawiki-ldap
+author: garethflowers
+plugins:
+  - jekyll-remote-theme
+  - jekyll-sitemap
+remote_theme: garethflowers/garethflowers.github.io
+tagline: Gareth Flowers
+twitter:
+  username: garethflowers
+  card: summary

docker-compose.yml

@@ -0,0 +1,5 @@
+services:
+  mediawiki-ldap:
+    build: .
+    command: php -v
+    image: garethflowers/mediawiki-ldap