FREYA-1890: Bump libpng

[i-oden]

📋 Summary

This PR attempts to fix https://github.com/ScilifelabDataCentre/data.scilifelab.se/security/code-scanning/212

🛠️ Changes Made

• Bump codeql action to fix warning regarding v3
• Update and upgrade packages in container

🔍 Notes for Reviewers

• An alternative would be to explicitly add a minimum libpng version after wget
• The alpine image we have should already have the fixed version of libpng available, we just need to redeploy and upgrade it
• This might also fix e.g. https://github.com/ScilifelabDataCentre/data.scilifelab.se/security/code-scanning/206 but if not I'll make a new PR to fix that too

✅ Checklist

• PR title follows the pattern: FREYA-XXXX: Clear and short description
• Jira / Github issue is linked
• Assignee is selected
• Code and content adhere to conventions
• Automated checks pass
• Reviewer is selected when the PR is marked as ready for review

🔗 Jira Issue

Closes: FREYA-1890

[Ziip-dev]

What is the version of libpng reported in the new image build?

[i-oden]

I'm not sure I follow this question, do you mean what version libpng is when I've started the service locally?

[i-oden]

Or do you mean what the documentation says about the alpine image libpng?

[Ziip-dev]

I'm not sure I follow this question, do you mean what version libpng is when I've started the service locally?

Yes, this :) just to ensure that we are indeed on the patched 1.6.53 version

[i-oden]

/ $ apk info libpng
libpng-1.6.53-r0 description:
Portable Network Graphics library

libpng-1.6.53-r0 webpage:
http://www.libpng.org

libpng-1.6.53-r0 installed size:
181 KiB

[i-oden]

@Ziip-dev just pinging on this one :)