Upgrade udx-worker base image to 0.45.0

[fqjony]

Summary

• Upgrade the PHP worker image base from usabilitydynamics/udx-worker:0.41.0 to 0.45.0.
• Update the worker-php apt package pins to versions available from the current base image apt repos.
• Add a worker-php dependency updater workflow using a no-pin apt probe and PR creation path.
• Add generated dev.kit repo context at .rabbit/context.yaml.
• Absorb the useful open Dependabot updates for the same base image bump and actions/checkout@7.

Scope

• Changed: Dockerfile base image and apt package pins.
• Changed: existing workflow checkout steps from actions/checkout@v6 to @v7.
• Added: .github/workflows/docker-dependency-updater.yml.
• Added: .rabbit/context.yaml from dev.kit repo.
• Not included: npm/package-manager dependency work or broader docs cleanup.

Dependabot review

• Supersedes Bump usabilitydynamics/udx-worker from 0.41.0 to 0.45.0 #70: usabilitydynamics/udx-worker 0.41.0 -> 0.45.0.
• Includes Bump actions/checkout from 6 to 7 in /.github/workflows #69: actions/checkout v6 -> v7 in existing workflows.

Security context

• GitHub Dependabot alerts for udx/worker-php: none open.
• GitHub code scanning has open Trivy findings on the current latest image, including findings attributed to inherited base-image content.
• Docker Scout for current usabilitydynamics/udx-worker-php:latest: 1C / 24H / 28M / 7L, base image usabilitydynamics/udx-worker:0.41.0.
• Docker Scout for target base usabilitydynamics/udx-worker:0.45.0: 0C / 1H / 1M / 1L.

Validation

• dev.kit repo --json
• dev.kit env --json
• git diff --check
• hadolint Dockerfile
• yq e '.' .github/workflows/*.yml .github/workflows/*.yaml
• shellcheck bin/start-nginx.sh bin/start-php-fpm.sh
• docker scout cves usabilitydynamics/udx-worker-php:latest
• docker scout cves usabilitydynamics/udx-worker:0.45.0

[Copilot]

Pull request overview

Upgrades the udx-worker-php Docker image base layer by bumping the pinned usabilitydynamics/udx-worker tag from 0.41.0 to 0.45.0, primarily to reduce inherited CVE exposure from the base image.

Changes:

• Update FROM usabilitydynamics/udx-worker:0.41.0 → FROM usabilitydynamics/udx-worker:0.45.0 in Dockerfile.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.