ci(deps): bump docker/build-push-action from 5 to 7

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v5...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/docker-build.yml

@@ -0,0 +1,67 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+    branches: [ "master", "main" ]
+    paths:
+      - 'src/**'
+      - 'swingmusic-webclient/**'
+      - 'pyproject.toml'
+      - 'requirements.txt'
+      - 'Dockerfile'
+  workflow_dispatch:
+  release:
+    types: [published]
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/readiness-gate.yml

@@ -15,7 +15,7 @@ jobs:
     name: Backend Lint & Type Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -43,7 +43,7 @@ jobs:
     name: Backend Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -66,7 +66,7 @@ jobs:
         run: python -m pytest tests/ -v --tb=short --cov=src/swingmusic --cov-report=xml --cov-report=term-missing
 
       - name: Upload coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           files: ./coverage.xml
           fail_ci_if_error: false
@@ -75,7 +75,7 @@ jobs:
     name: Backend Startup Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -104,7 +104,7 @@ jobs:
         working-directory: swingmusic_mobile
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -131,12 +131,12 @@ jobs:
         working-directory: swingmusic-webclient
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           cache: 'npm'
@@ -162,12 +162,12 @@ jobs:
         working-directory: swingmusic-desktop
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           cache: 'npm'
@@ -186,7 +186,7 @@ jobs:
     if: always()
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 

.github/workflows/security.yml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -69,7 +69,7 @@ jobs:
     name: Python Dependency Audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -90,12 +90,12 @@ jobs:
       run:
         working-directory: swingmusic-webclient
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
 
@@ -113,12 +113,12 @@ jobs:
       run:
         working-directory: swingmusic-desktop
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
 
@@ -136,7 +136,7 @@ jobs:
     name: Secret Scanning
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/unified-release.yml

@@ -34,7 +34,7 @@ jobs:
       release_notes: ${{ steps.version.outputs.release_notes }}
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 0
     
@@ -167,7 +167,7 @@ jobs:
             rust_target: 'x86_64-unknown-linux-gnu'
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Initialize submodules
       run: git submodule update --init --recursive
     
@@ -177,7 +177,7 @@ jobs:
         sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
     
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: '18'
         cache: 'npm'
@@ -211,7 +211,7 @@ jobs:
         npm run tauri build -- --target ${{ matrix.rust_target }}
     
     - name: Upload Linux artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: desktop-${{ matrix.platform }}
         path: |
@@ -234,7 +234,7 @@ jobs:
             rust_target: 'x86_64-pc-windows-gnu'
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Initialize submodules
       run: git submodule update --init --recursive
     
@@ -244,7 +244,7 @@ jobs:
         sudo apt-get install -y mingw-w64 g++-multilib nsis libgtk-3-dev libwebkit2gtk-4.1-dev librsvg2-dev patchelf
     
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: '18'
         cache: 'npm'
@@ -278,7 +278,7 @@ jobs:
         npm run tauri build -- --target ${{ matrix.rust_target }}
     
     - name: Upload Windows artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: desktop-${{ matrix.platform }}
         path: |
@@ -303,12 +303,12 @@ jobs:
             rust_target: 'aarch64-apple-darwin'
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Initialize submodules
       run: git submodule update --init --recursive
     
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: '18'
         cache: 'npm'
@@ -342,7 +342,7 @@ jobs:
         npm run tauri build -- --target ${{ matrix.rust_target }}
     
     - name: Upload macOS artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: desktop-${{ matrix.platform }}
         path: |
@@ -358,7 +358,7 @@ jobs:
     if: contains(github.event.inputs.components, 'mobile') || github.event_name == 'push'
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Initialize submodules
       run: git submodule update --init --recursive
     
@@ -381,7 +381,7 @@ jobs:
         flutter build apk --release --no-pub
     
     - name: Upload Mobile artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: mobile-release
         path: swingmusic_mobile/build/app/outputs/flutter-apk/app-release.apk
@@ -395,7 +395,7 @@ jobs:
     if: contains(github.event.inputs.components, 'backend') || github.event_name == 'push'
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Initialize submodules
       run: git submodule update --init --recursive
     
@@ -410,7 +410,7 @@ jobs:
         sudo apt-get install -y libev-dev
     
     - name: Cache Python dependencies
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ~/.cache/pip
         key: pip-${{ hashFiles('**/requirements.txt') }}
@@ -427,7 +427,7 @@ jobs:
         python -m build
     
     - name: Upload Backend artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: backend-package
         path: dist/
@@ -441,7 +441,7 @@ jobs:
     if: success()
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     
     - name: Download all artifacts
       uses: actions/download-artifact@v4

Dockerfile

@@ -36,12 +36,9 @@ RUN apt-get update \
 COPY pyproject.toml requirements.txt version.txt ./
 COPY src/ ./src/
 
-# Install the package and its dependencies
+# Install the package and its dependencies (includes aiohttp, aiofiles, redis)
 RUN pip install --no-cache-dir .
 
-# Install Redis library for DragonflyDB support
-RUN pip install --no-cache-dir redis
-
 # Ship a deterministic web client with the backend image so startup does not
 # depend on downloading release assets at runtime.
 COPY --from=webclient-builder /webclient/dist /app/client

pyproject.toml

@@ -34,8 +34,8 @@ dependencies = [
     "ffmpeg-python>=0.2.0",
     "schedule>=1.2.2",
     "pillow>=11.1.0",
-    "flask-openapi3==3.0.2",
+    "flask-openapi3==4.3.1",
-    "rapidfuzz==3.11.0",
+    "rapidfuzz==3.14.5",
     "pendulum>=3.0.0",
     "pystray>=0.19.5",
     "waitress>=3.0.2; sys_platform == 'win32'",

requirements.txt

@@ -21,8 +21,8 @@ sortedcontainers>=2.4.0
 xxhash>=3.4.1
 ffmpeg-python>=0.2.0
 schedule>=1.2.2
-flask-openapi3==3.0.2
+flask-openapi3==4.3.1
-rapidfuzz==3.11.0
+rapidfuzz==3.14.5
 pendulum>=3.0.0
 pystray>=0.19.5
 waitress==3.0.2; sys_platform == 'win32'