feat(photo-api-base-slim): add DLIB_VERSION argument to allow pinning dlib version

See merge request !162

feat: add NodeJS to terminus image

Closes #104

See merge request !163

fix: pass env var PUSH_TEST_IMAGES to child pipeline

Closes #101

See merge request !158

feat: add check for published docker images

Closes #102

See merge request !156

feat: add 1Password CLI to the logan build image

See merge request !155

Some products will start to use the 1Password terraform provider to automate
the loading of external secrets into the product specific GCP secret manager.
In turn, the 1Password terraform provider currently calls the 1Password CLI.

feat: bump release-it version

See merge request !152

Bump the release-it version to support GitLab release assets for GitLab
after 17.2.

feat: add a Java Runtime Environment to pre-commit image

See merge request !151

We are looking to add Java pre-commit hooks to some repos[1] and,
unsurprisingly, the Java-ecosystem linters are written in Java. The
pre-commit image currently has no JRE installed in it but alpine package
one and so adding one is easy enough.

While we're here, bump the Python image version used for pre-commit v4
and provide a default for the `PYTHON_VERSION` build arg to squash a
Docker build warning. Keep pre-commit v3 as is because that image should
only be being used by older, possibly sparsely maintained, CI jobs and
we don't want to switch the Python version out from under them.

[1] https://gitlab.developers.cam.ac.uk/uis/devops/hr/hr-general/-/issues/29

feat: add gcloud + awscli image

See merge request !150

chore: comments in vulnerability-allowlist.yml and info in README.md

See merge request !148

feat: new image for terminus based on logan-terraform

See merge request !145

fix(pre-commit): don't try tagging *both* 3 and 4 as "latest"

See merge request !147

When pre-commit 4 was added, the "latest" tag wasn't removed from
pre-commit-3.3 meaning that which ended up as "latest" depended on which
would be the most recent image built by CI.

feat: add pre-commit version 4 and bump 3.3 version

See merge request !146

fix: add apt dependencies to allow psycopg build

Closes #98

See merge request !144

The psycopg2-binary packages are not available from PyPI with 3.13
wheels and the docs[1] recommend that one install the package from
source when possible. The psycopg2-binary package will fall back to
source builds, we just need to ensure that the required apt dependencies
are installed.

[1] https://www.psycopg.org/docs/install.html#psycopg-vs-psycopg-binary

The CLI interface to apt is not stable and so we need to use apt-get
instead.

chore(deps): update dependency uis/devops/continuous-delivery/ci-templates to v3.8.2

See merge request !136

feat: 🎸 Add ansible 10 for testing

See merge request !129

chore: Configure Renovate

See merge request !135

chore: add CVE-2023-45853 to the vulnerability-allowlist for ucam-mellon-proxy Debian 11 image

See merge request !134

feat: add CVE-2023-6879 to vulnerability allow list

Closes #80

See merge request !133

feat: add CVE-2023-6879 to vulnerability allow list as the python-slim images we use don't have the fix for this and we do not do any video re-encoding

feat: add terminus docker image for webcms CI jobs

See merge request !132