Merge pull request #1502 from cybozu/pomerium-0.28.0

Update Pomerium to 0.28.0

pomerium/Dockerfile

@@ -1,20 +1,25 @@
-FROM ghcr.io/cybozu/golang:1.23-jammy as build
-ARG POMERIUM_VERSION=0.27.0
+FROM ghcr.io/cybozu/golang:1.23-jammy AS build
+ARG POMERIUM_VERSION=0.28.0
 
 WORKDIR /work/pomerium
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN curl -sSLf https://github.com/pomerium/pomerium/archive/v${POMERIUM_VERSION}.tar.gz | \
     tar zxf - --strip-components 1 -C /work/pomerium
 
-RUN curl -sSLf https://deb.nodesource.com/setup_20.x | bash - \
+ARG NODE_VERSION=22.x
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends gnupg zip \
+    && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /usr/share/keyrings/nodesource.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/nodesource.gpg] https://deb.nodesource.com/node_${NODE_VERSION} nodistro main" \
+        | tee /etc/apt/sources.list.d/nodesource.list > /dev/null \
+    && apt-get update \
     && apt-get install -y --no-install-recommends nodejs \
     && rm -rf /var/lib/apt/lists/* \
     && npm install --global yarn
 RUN make yarn
 RUN make build-ui
 
-RUN apt-get update \
-    && apt-get -y --no-install-recommends install zip
 RUN go mod download
 RUN make build-go NAME=pomerium
 RUN touch /config.yaml

pomerium/TAG

@@ -1 +1 @@
-0.27.0.1
+0.28.0.1