chore(argo): auto-build latest latest

.forgejo/workflows/argco_cd.yaml

@@ -1,9 +1,14 @@
 ---
 name: Image builds
 on:
+  schedule:
+    - cron: "21 2 * * *"
   push:
     branches:
       - main
+    paths:
+      - ".forgejo/workflows/argo_cd.yaml"
+      - "argocd/**"
 
 jobs:
   build-argo-cd-image:
@@ -21,11 +26,17 @@ jobs:
           username: prskr
           password: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
 
+      - name: Check latest ArgoCD tag
+        run: |
+          echo "ARGOCD_VERSION=$(gh release list -R argoproj/argo-cd --exclude-pre-releases --exclude-drafts --json 'tagName' --jq '.[].tagName' --limit 1)" >> "$GITHUB_ENV"
+        env:
+          GH_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}
+
       - name: Build and push
         uses: docker/build-push-action@v5
         with:
           context: "./argocd"
           push: true
-          tags: code.icb4dc0.de/infrastructure/images/argocd:v2.10.8
+          tags: code.icb4dc0.de/infrastructure/images/argocd:${{ env.ARGOCD_VERSION }}
           build-args: |
-            BASE_IMAGE=quay.io/argoproj/argocd:v2.10.8
+            BASE_IMAGE=quay.io/argoproj/argocd:${{ env.ARGOCD_VERSION }}

argocd/Dockerfile

@@ -1,13 +1,15 @@
-ARG BASE_IMAGE=quay.io/argoproj/argocd:v2.10.7
+ARG BASE_IMAGE=quay.io/argoproj/argocd:v2.11.0
 
 FROM ${BASE_IMAGE}
 
 USER root
 
-ADD https://code.icb4dc0.de/api/packages/prskr/debian/repository.key /etc/apt/trusted.gpg.d/forgejo-prskr.asc
+ADD --chmod=644 https://code.icb4dc0.de/api/packages/prskr/debian/repository.key /etc/apt/trusted.gpg.d/forgejo-prskr.asc
 COPY gitconfig /etc/gitconfig
 
-RUN chmod 644 /etc/apt/trusted.gpg.d/forgejo-prskr.asc && \
+RUN --mount=type=cache,target=/var/lib/apt \
+    --mount=type=cache,target=/var/lib/cache \
+    --mount=type=cache,target=/var/cache/apt \
     echo "deb https://code.icb4dc0.de/api/packages/prskr/debian bookworm main" > /etc/apt/sources.list.d/forgejo.list && \
     apt-get update && \
     apt-get install -y \