upgrade dependencies

provision/provision-base.sh

@@ -104,8 +104,8 @@ sed -i -E 's/^(\s*)((ssl_protocols|ssl_ciphers|ssl_prefer_server_ciphers)\s)/\1#
 cat >/etc/nginx/conf.d/local.conf <<EOF
 # NB this is based on the mozilla intermediate configuration.
 # see https://ssl-config.mozilla.org/#server=nginx&version=1.18.0&config=intermediate&openssl=3.0.2&guideline=5.7
-# see https://packages.ubuntu.com/jammy/nginx
-# see https://packages.ubuntu.com/jammy/openssl
+# see https://packages.ubuntu.com/noble/nginx
+# see https://packages.ubuntu.com/noble/openssl
 ssl_protocols TLSv1.2 TLSv1.3;
 ssl_ecdh_curve X25519:prime256v1:secp384r1;
 ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;

provision/provision-docker.sh

@@ -3,7 +3,7 @@ set -euxo pipefail
 
 # see https://github.com/moby/moby/releases
 # renovate: datasource=github-releases depName=moby/moby
-default_docker_version='28.4.0'
+default_docker_version='29.1.3'
 
 # see https://github.com/moby/moby/releases
 docker_version="${1:-$default_docker_version}"; shift || true

provision/provision-nexus.sh

@@ -225,7 +225,7 @@ http \
     "proprietaryComponents": true
   },
   "apt": {
-    "distribution": "jammy"
+    "distribution": "noble"
   },
   "aptSigning": {
     "keypair": $(cat /vagrant/shared/apt-hosted-private.key | jq --slurp --raw-input .),

provision/use-apt-repository.sh

@@ -35,7 +35,7 @@ nexus_apt_hosted_keyring_path="/etc/apt/keyrings/$nexus_domain-apt-hosted.gpg"
 gpg --dearmor -o "$nexus_apt_hosted_keyring_path" </vagrant/shared/apt-hosted-public.key
 
 # configure the apt-hosted repository.
-echo "deb [arch=amd64 signed-by=$nexus_apt_hosted_keyring_path] https://$nexus_domain/repository/apt-hosted jammy main" >"/etc/apt/sources.list.d/$nexus_domain-apt-hosted.list"
+echo "deb [arch=amd64 signed-by=$nexus_apt_hosted_keyring_path] https://$nexus_domain/repository/apt-hosted noble main" >"/etc/apt/sources.list.d/$nexus_domain-apt-hosted.list"
 apt-get update
 
 # install the hello-world package.

provision/use-docker-repository.sh

@@ -24,7 +24,7 @@ mkdir -p tmp/use-docker-repository && cd tmp/use-docker-repository
 
 # see https://github.com/golang/go/tags
 # renovate: datasource=github-tags depName=golang/go extractVersion=go(?<version>.+)
-go_version='1.25.1'
+go_version='1.25.5'
 
 cat >main.go <<'EOF'
 package main
@@ -95,13 +95,19 @@ docker push $docker_hosted_registry_host/go-hello:1.0.0
 # see https://docs.docker.com/registry/spec/manifest-v2-2/
 wget -qO- --user "$registry_username" --password "$registry_password" \
     "https://$docker_hosted_registry_host/v2/go-hello/tags/list" | jq .
-manifest=$(wget -qO- --user "$registry_username" --password "$registry_password" \
-    '--header=Accept: application/vnd.docker.distribution.manifest.v2+json' \
+oci_image_index=$(wget -qO- --user "$registry_username" --password "$registry_password" \
+    '--header=Accept: application/vnd.oci.image.index.v1+json' \
     "https://$docker_hosted_registry_host/v2/go-hello/manifests/1.0.0")
-config_digest=$(echo "$manifest" | jq -r .config.digest)
-echo "$manifest" | jq .
+echo "$oci_image_index" | jq .
+oci_image_manifest_digest=$(echo "$oci_image_index" | jq -r .manifests[0].digest)
+oci_image_manifest=$(wget -qO- --user "$registry_username" --password "$registry_password" \
+    '--header=Accept: application/vnd.oci.image.manifest.v1+json' \
+    "https://$docker_hosted_registry_host/v2/go-hello/manifests/$oci_image_manifest_digest")
+echo "$oci_image_manifest" | jq .
+oci_image_config_digest=$(echo "$oci_image_manifest" | jq -r .config.digest)
+config_digest=$(echo "$oci_image_manifest" | jq -r .config.digest)
 wget -qO- --user "$registry_username" --password "$registry_password" \
-    "https://$docker_hosted_registry_host/v2/go-hello/blobs/$config_digest" | jq .
+    "https://$docker_hosted_registry_host/v2/go-hello/blobs/$oci_image_config_digest" | jq .
 
 # remove it from local cache.
 docker image remove go-hello:1.0.0

provision/use-maven-repository-from-gradle.sh

@@ -13,7 +13,7 @@ cd tmp/use-maven-repository-from-gradle
 # download and install gradle.
 # see https://gradle.org/releases/
 # renovate: datasource=github-releases depName=gradle/gradle
-gradle_version='9.1.0'
+gradle_version='9.2.1'
 if [ ! -f /opt/gradle/gradle-$gradle_version/bin/gradle ]; then
     apt-get install -y unzip
     wget -qO/tmp/gradle-$gradle_version-bin.zip https://services.gradle.org/distributions/gradle-$gradle_version-bin.zip
@@ -36,8 +36,8 @@ cat >settings.gradle <<'EOF'
 rootProject.name = 'gradle-greeter'
 EOF
 cat >build.gradle <<'EOF'
-// see https://docs.gradle.org/9.1.0/userguide/java_library_plugin.html
-// see https://docs.gradle.org/9.1.0/userguide/maven_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/java_library_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/maven_plugin.html
 
 plugins {
     id 'java-library'
@@ -104,10 +104,10 @@ rootProject.name = 'gradle-greeter-application'
 EOF
 # see https://mvnrepository.com/artifact/com.gradleup.shadow/shadow-gradle-plugin
 # renovate: datasource=maven depName=com.gradleup.shadow:shadow-gradle-plugin
-com_gradleup_shadow_version='9.1.0'
+com_gradleup_shadow_version='9.3.1'
 cat >build.gradle <<EOF
-// see https://docs.gradle.org/9.1.0/userguide/java_plugin.html
-// see https://docs.gradle.org/9.1.0/userguide/application_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/java_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/application_plugin.html
 // see https://gradleup.com/shadow/
 // see https://github.com/GradleUp/shadow
 

provision/use-nuget-repository.sh

@@ -161,7 +161,7 @@ dotnet nuget list source
 dotnet add package example-hello-world
 # see https://www.nuget.org/packages/Serilog.Sinks.Console/
 # renovate: datasource=nuget depName=Serilog.Sinks.Console
-serilog_sinks_console_version='6.0.0'
+serilog_sinks_console_version='6.1.1'
 dotnet add package Serilog.Sinks.Console --version "$serilog_sinks_console_version"
 dotnet build -v=n -c=Release
 dotnet publish -v=n -c=Release --no-build --output dist