Fix GitHub Actions permissions and update dependencies

[DrMattChristian]

This pull request updates the CI/CD pipeline and Docker configuration to improve build flexibility, security, and documentation accuracy. The main changes include enhancements to the GitHub Actions workflows for building and testing, updates to Docker and Node.js versions, and documentation corrections.

CI/CD Workflow Improvements

• Enhanced Docker build workflow: The .github/workflows/build.yml file now supports manual workflow dispatches with custom tags and platform selection, dynamic platform detection, and improved multi-platform build support with conditional QEMU setup. It also refines Docker registry login logic and adds detailed image annotations. [1] [2]
• Updated action versions and permissions: Both the build and test workflows (build.yml and test.yml) update action references to use specific commit SHAs for improved security and reproducibility, and explicitly set contents: read permissions. [1] [2] [3]

Dockerfile and Dependency Updates

• Node.js and Dockerfile improvements: The Dockerfile now uses Node.js 24 (up from 18) and Alpine 3.22 for the frontend build, and adds an Open Containers image description label for better metadata. [1] [2]

Documentation and Configuration Updates

• MySQL version pinning: Updates the MySQL image version to 8.4.10 in docker-compose.yml, README.md, and docs/INSTALL.md for consistency and to avoid ambiguity. [1] [2] [3]

[Copilot]

Pull request overview

This PR updates the project’s CI/CD workflows and container/runtime configuration to improve security (explicit permissions + pinned action SHAs), add flexibility for manual/multi-platform Docker builds, and align documentation/runtime versions (Node, MySQL).

Changes:

• Adds workflow_dispatch support and more dynamic multi-platform build behavior in the Docker build workflow, and pins GitHub Actions dependencies by SHA.
• Updates the Docker build to use newer Node/Alpine images and adds OCI image description metadata.
• Pins MySQL image version in docker-compose.yml and docs for consistency.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.github/workflows/build.yml	Adds manual dispatch + dynamic platforms/QEMU logic; pins actions; refines login/push/caching and adds metadata/annotations.
.github/workflows/test.yml	Adds explicit contents: read permissions; pins action SHAs for reproducibility.
Dockerfile	Updates Node/Alpine versions for the frontend stage; adds OCI description label.
docker-compose.yml	Pins MySQL image to 8.4.10.
README.md	Updates example compose snippet to use mysql:8.4.10.
docs/INSTALL.md	Updates installation compose snippet to use mysql:8.4.10.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.