From d2131fd8ca6990ea1796a54c06aab3937b1305fb Mon Sep 17 00:00:00 2001
From: dparuship <90801929+dparuship@users.noreply.github.com>
Date: Wed, 5 Aug 2026 15:20:33 -0500
Subject: [PATCH] fix(docker): move action base image from debian 10 to debian
 12

Debian 10 "buster" is end-of-life and its suites have been removed from
deb.debian.org, so `apt-get update` now returns 404 for the buster,
buster/updates and buster-updates Release files and the layer exits 100.
The action image therefore fails to build, which fails every consuming
workflow at the "Build uship/action-deploy-to-wpengine@main" step, before
Checkout ever runs. Eight *-wordpress-theme repos reference this action at
@main across their dev, sandbox and prod deploys, so all WP Engine
deployments are currently blocked.

Bumps the base to debian:12-slim (bookworm), which is in normal support.
Bullseye was not chosen because its LTS window closes this month and it
would reintroduce the same failure shortly.

The bump moves openssh-client from 7.9 to 9.2, which is the one behavioural
risk worth noting: OpenSSH 8.8+ disables SHA-1 ssh-rsa signatures by
default, and entrypoint.sh does `ssh-keyscan -t rsa` against
git.wpengine.com with RSA deploy keys. Verified that git.wpengine.com
(OpenSSH 8.9) advertises rsa-sha2-256 and rsa-sha2-512 in both its host key
algorithms and server-sig-algs, so the existing RSA keys continue to work
via SHA-2 signatures. Confirmed against the built image: host key
verification with StrictHostKeyChecking=yes succeeds and the connection
reaches publickey auth.

git (2.39.5), bash (5.2) and openssh-client are all still present from
`apt-get install -y git`, so no package list change is needed.
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 9918c8f..dec8d93 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:10-slim
+FROM debian:12-slim
 
 LABEL "com.github.actions.name"="Deploy WordPress"
 LABEL "com.github.actions.description"="An action to deploy a WordPress project to a WP Engine site via git."