build(deps): use elixir 1.18.4, node 22 & debian trixie (#4889)

* elixir 1.18.4, node 22 & debian trixie

* docs: update development requirements accordingly

* docs: update changelog

* build(nix): update Elixir version to 1.18

---------

Co-authored-by: Jakob Lichterfeld <jakob-lichterfeld@gmx.de>

.github/actions/setup-elixir-and-cache-deps/action.yml

@@ -4,7 +4,7 @@ inputs:
   elixir-version:
     description: "Elixir version"
     required: false
-    default: "1.17.3"
+    default: "1.18.4"
   otp-version:
     description: "OTP version"
     required: false

CHANGELOG.md

@@ -7,6 +7,7 @@
 ### Improvements and bug fixes
 
 - sec: set tokens to private schema (#4968 -@brianmay)
+- build(deps): use elixir 1.18.4, node 22 & debian trixie (#4889 - @swiffer)
 
 #### Build, CI, internal
 

Dockerfile

@@ -1,4 +1,4 @@
-FROM elixir:1.17.3-otp-26 AS builder
+FROM elixir:1.18.4-otp-26 AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -7,7 +7,7 @@ RUN apt-get update \
     && mkdir -p /etc/apt/keyrings \
     && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
      | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
-    && NODE_MAJOR=20 \
+    && NODE_MAJOR=22 \
     && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" \
      | tee /etc/apt/sources.list.d/nodesource.list \
     && apt-get update \
@@ -47,7 +47,7 @@ RUN SKIP_LOCALE_DOWNLOAD=true mix release --path /opt/built
 
 ########################################################################
 
-FROM debian:bookworm-slim AS app
+FROM debian:trixie-slim AS app
 
 ENV LANG=C.UTF-8 \
     SRTM_CACHE=/opt/app/.srtm_cache \
@@ -56,18 +56,18 @@ ENV LANG=C.UTF-8 \
 WORKDIR $HOME
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-        libodbc1  \
-        libsctp1  \
-        libssl3  \
+        libodbc2 \
+        libsctp1 \
+        libssl3t64 \
         libstdc++6 \
         netcat-openbsd \
-        tini  \
-        tzdata && \
-    apt-get clean && \
-    rm -rf /var/lib/apt/lists/* && \
-    addgroup --gid 10001 --system nonroot && \
-    adduser  --uid 10000 --system --ingroup nonroot --home /home/nonroot nonroot && \
-    chown -R nonroot:nonroot .
+        tini \
+        tzdata \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd --gid 10001 --system nonroot \
+    && useradd  --uid 10000 --system --gid nonroot --home-dir /home/nonroot --shell /sbin/nologin nonroot \
+    && chown -R nonroot:nonroot .
 
 USER nonroot:nonroot
 COPY --chown=nonroot:nonroot --chmod=555 entrypoint.sh /

nix/flake-modules/package.nix

@@ -7,7 +7,7 @@
     , ...
     }:
     let
-      elixir = pkgs.beam.packages.erlang_26.elixir_1_17;
+      elixir = pkgs.beam.packages.erlang_26.elixir_1_18;
       beamPackages = pkgs.beam.packagesWith pkgs.beam.interpreters.erlang_26;
 
       src = ../..;

website/docs/development.md

@@ -6,7 +6,7 @@ sidebar_label: Development and Contributing
 
 ## Requirements
 
-- **Elixir** >= 1.17.3-otp-26
+- **Elixir** >= 1.18.4-otp-26
 - **Postgres** >= 17.3
 - An **MQTT broker** e.g. mosquitto (_optional_)
 - **NodeJS** >= 20.15.0