Merge branch 'release'

Author: Amoki

.github/dependabot.yml

@@ -1,9 +1,23 @@
 # Config reference:
-# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference
 
 version: 2
 updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      major-updates:
+        applies-to: version-updates
+        update-types:
+          - major
+      minor-updates:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch

etc/clean-previous-versions.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+ASSETS_PATH="/usr/share/nginx/html/assets-original"
+TIMESTAMP_TOLERANCE=120
+
+# The ASSET_PATH seams to have a modification date that match the last build
+# We extract this information and only keep the file near this date
+
+# -d: get directory information, not on its content
+# -l: long output,
+# --time-style=+@%s@ => time format is a timestamp
+# the '@' are added arround the timestamp to be able to easly parse the output, that not trivial without it
+# | cut -d '@' -f 2 : extract the timestamp with the help of our @
+last_build_timestamp=$(ls -dl --time-style=+@%s@ $ASSETS_PATH | cut -d '@' -f 2)
+
+# Just in case, we adjust the timestamps with an error margin, not sure if necessary
+adjusted_timestamp=$(( last_build_timestamp - TIMESTAMP_TOLERANCE ))
+
+# Find all file in our ASSETS PATH and call stat to retrieve its timestamps (%Y) & filename (%n)
+# Use awk to only keep line with a timestamps inferiour to our reference
+# Cut on our ',' to only keep the filename on each line
+# Use xargs to run rm for each line
+find ${ASSETS_PATH} -type f -exec stat --format="%Y,%n" {} + \
+    | awk -v t="${adjusted_timestamp}" '$1 < t' \
+    | cut -d ',' -f2- \
+    | xargs --no-run-if-empty -L1 rm

etc/withprevious.Dockerfile

@@ -22,6 +22,8 @@ RUN mv /opt/dist/assets /opt/dist/assets-original
 # When creating a new tag, this will fail.
 # Comment this line and the COPY --from=previous_build line
 FROM ${PREVIOUS_IMAGE}:${PREVIOUS_TAG} AS previous_build
+COPY --chmod=0744 etc/clean-previous-versions.sh /
+RUN /clean-previous-versions.sh
 
 FROM nginx:stable
 RUN rm /etc/nginx/conf.d/default.conf