Update actions/checkout action to v7

.forgejo/workflows/build_keycloak.yml

@@ -21,7 +21,7 @@ jobs:
         run: apk add --no-cache nodejs
 
       - name: Checkout Source Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Build Container
         env:

.forgejo/workflows/build_nextcloud.yml

@@ -14,15 +14,34 @@ jobs:
       image: ghcr.io/osscontainertools/kaniko:alpine
     strategy:
       matrix:
+        # renovate: datasource=docker depName=docker.io/library/nextcloud
         nextcloud-version: [ 33, 34 ]
     steps:
       - name: Install required system packages
-        run: apk add --no-cache nodejs
+        run: apk add --no-cache nodejs git
 
-      - name: Checkout Source Code
+      - name: Checkout source code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
-      - name: Build Container
+      - name: Checkout nextcloud/docker
+        run: git clone --depth 1 https://github.com/nextcloud/docker.git nextcloud-docker
+
+      - name: Build base Nextcloud image
+        env:
+          KANIKO_NO_PUSH: ${{ forgejo.ref_name != 'main' }}
+          KANIKO_GIT_HAMBURG_CCC_DE_USER: forgejo-actions
+          KANIKO_GIT_HAMBURG_CCC_DE_PASSWORD: ${{ secrets.PACKAGES_TOKEN }}
+        run: /kaniko/executor
+          --dockerfile="${{ forgejo.workspace }}/nextcloud-docker/${{ matrix.nextcloud-version }}/apache/Dockerfile" 
+          --context="dir://${{ forgejo.workspace }}/nextcloud-docker/${{ matrix.nextcloud-version }}/apache"
+          --build-arg=TAG=${{ matrix.nextcloud-version }}
+          --destination=git.hamburg.ccc.de/ccchh/oci-images/nextcloud-base:${{ matrix.nextcloud-version }}
+          --no-push-cache
+          --credential-helpers=env
+          --annotation=org.opencontainers.image.ref.name=nextcloud-base
+          --annotation=org.opencontainers.image.source=${{ forgejo.server_url }}/${{ forgejo.repository }}
+
+      - name: Build extended image
         env:
           KANIKO_NO_PUSH: ${{ forgejo.ref_name != 'main' }}
           KANIKO_GIT_HAMBURG_CCC_DE_USER: forgejo-actions

keycloak/Containerfile

@@ -1,6 +1,6 @@
 ARG TAG=latest
 
-FROM debian:12-slim as attribute-endpoints-provider-builder
+FROM debian:13-slim as attribute-endpoints-provider-builder
 
 RUN apt-get update \
     && apt-get install --no-install-recommends --no-install-suggests -y maven git \

nextcloud/Containerfile

@@ -1,5 +1,5 @@
-ARG TAG=latest
+ARG TAG
-FROM docker.io/library/nextcloud:${TAG}
+FROM git.hamburg.ccc.de/ccchh/oci-images/nextcloud-base:${TAG}
 
 RUN apt-get update \
     && apt-get install -y supervisor \