Replace imagemagick with vips, reenable sbom/provenance

Dockerfile

@@ -17,13 +17,13 @@ RUN \
   apk add --no-cache \
     ffmpeg \
     file \
-    imagemagick \
     libpq \
     libidn \
     nodejs \
     ruby \
     ruby-bundler \
     ruby-rdoc \
+    vips \
     yaml && \
   apk add --no-cache --virtual=build-dependencies \
     build-base \
@@ -36,6 +36,7 @@ RUN \
     npm \
     openssl-dev \
     ruby-dev \
+    vips-dev \
     yaml-dev && \
   echo "**** install mastodon ****" && \
   mkdir -p /app/www && \

Dockerfile.aarch64

@@ -18,13 +18,13 @@ RUN \
     ffmpeg \
     file \
     gcompat \
-    imagemagick \
     libpq \
     libidn \
     nodejs \
     ruby \
     ruby-bundler \
     ruby-rdoc \
+    vips \
     yaml && \
   apk add --no-cache --virtual=build-dependencies \
     build-base \
@@ -38,6 +38,7 @@ RUN \
     openssl-dev \
     python3-dev \
     ruby-dev \
+    vips-dev \
     yaml-dev && \
   echo "**** install mastodon ****" && \
   mkdir -p /app/www && \

Jenkinsfile

@@ -597,7 +597,7 @@ pipeline {
           --label \"org.opencontainers.image.title=Mastodon\" \
           --label \"org.opencontainers.image.description=[Mastodon](https://github.com/mastodon/mastodon/) is a free, open-source social network server based on ActivityPub where users can follow friends and discover new ones..  \" \
           --no-cache --pull -t ${IMAGE}:${META_TAG} --platform=linux/amd64 \
-          --provenance=false --sbom=false --builder=default --load \
+          --provenance=true --sbom=true --builder=default --load \
           --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${VERSION_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
         sh '''#! /bin/bash
               set -e
@@ -663,7 +663,7 @@ pipeline {
               --label \"org.opencontainers.image.title=Mastodon\" \
               --label \"org.opencontainers.image.description=[Mastodon](https://github.com/mastodon/mastodon/) is a free, open-source social network server based on ActivityPub where users can follow friends and discover new ones..  \" \
               --no-cache --pull -t ${IMAGE}:amd64-${META_TAG} --platform=linux/amd64 \
-              --provenance=false --sbom=false --builder=default --load \
+              --provenance=true --sbom=true --builder=default --load \
               --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${VERSION_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
             sh '''#! /bin/bash
                   set -e
@@ -722,7 +722,7 @@ pipeline {
               --label \"org.opencontainers.image.title=Mastodon\" \
               --label \"org.opencontainers.image.description=[Mastodon](https://github.com/mastodon/mastodon/) is a free, open-source social network server based on ActivityPub where users can follow friends and discover new ones..  \" \
               --no-cache --pull -f Dockerfile.aarch64 -t ${IMAGE}:arm64v8-${META_TAG} --platform=linux/arm64 \
-              --provenance=false --sbom=false --builder=default --load \
+              --provenance=true --sbom=true --builder=default --load \
               --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${VERSION_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
             sh '''#! /bin/bash
                   set -e

README.md

@@ -432,6 +432,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **06.06.25:** - Replace deprecated imagemagick with vips.
 * **16.01.25:** - Rebase to Alpine 3.21.
 * **03.12.24:** - Switch from commit builds to releases to match upstream changes.
 * **27.05.24:** - Existing users should update their nginx confs to avoid http2 deprecation warnings.

jenkins-vars.yml

@@ -6,8 +6,6 @@ external_type: github_stable
 release_type: prerelease
 release_tag: glitch
 ls_branch: glitch
-image_provenance: false
-image_sbom: false
 image_builder: default
 repo_vars:
   - EXT_GIT_BRANCH = 'main'

readme-vars.yml

@@ -168,6 +168,7 @@ init_diagram: |
   "mastodon:glitch" <- Base Images
 # changelog
 changelogs:
+  - {date: "06.06.25:", desc: "Replace deprecated imagemagick with vips."}
   - {date: "16.01.25:", desc: "Rebase to Alpine 3.21."}
   - {date: "03.12.24:", desc: "Switch from commit builds to releases to match upstream changes."}
   - {date: "27.05.24:", desc: "Existing users should update their nginx confs to avoid http2 deprecation warnings."}