Update dependency go to v1.25.1

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [certbot](https://github.com/certbot/certbot) | major | `==3.3.0` -> `==4.0.0` |
| [certbot-dns-cloudflare](https://github.com/certbot/certbot) | major | `==3.3.0` -> `==4.0.0` |

---

### Release Notes

<details>
<summary>certbot/certbot (certbot)</summary>

### [`v4.0.0`](https://github.com/certbot/certbot/releases/tag/v4.0.0): Certbot 4.0.0

[Compare Source](https://github.com/certbot/certbot/compare/v3.3.0...v4.0.0)

##### Added

-   The --preferred-profile and --required-profile flags allow requesting a profile.
    https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/

##### Changed

-   Certificates now renew with 1/3rd of lifetime left (or 1/2 of lifetime left,
    if the lifetime is shorter than 10 days). This is a change from a hardcoded
    renewal at 30 days before expiration. The config field renew_before_expiry
    still overrides this default.

-   removed `acme.crypto_util._pyopenssl_cert_or_req_all_names`

-   removed `acme.crypto_util._pyopenssl_cert_or_req_san`

-   removed `acme.crypto_util.dump_pyopenssl_chain`

-   removed `acme.crypto_util.gen_ss_cert`

-   removed `certbot.crypto_util.dump_pyopenssl_chain`

-   removed `certbot.crypto_util.pyopenssl_load_certificate`

##### Fixed

-   Moved `RewriteEngine on` directive added during apache http01 authentication
    to the end of the virtual host, so that it overwrites any `RewriteEngine off`
    directives that already exist and allows redirection to the challenge URL.

More details about these changes can be found on our GitHub repo.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTIuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI1Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: #52
Co-authored-by: Renovate Bot <renovate@mrmeeb.stream>
Co-committed-by: Renovate Bot <renovate@mrmeeb.stream>

.gitea/workflows/build-main.yaml

@@ -12,9 +12,12 @@ jobs:
   "Validate Image":
     runs-on: [ubuntu-docker-latest, linux/amd64]
     steps:
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: Build locally
         uses: docker/build-push-action@v5
         with:
+          context: .
           load: true
           tags: ${{ env.TEST_TAG }}
           provenance: false

.gitea/workflows/build-tagged-release.yaml

@@ -55,7 +55,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v4
         with: 
-          go-version: 1.22.2
+          go-version: 1.25.1
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v5
         with:

Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.21.1 AS base
+FROM alpine:3.22.1 AS base
 ARG TARGETARCH
 
 FROM base AS base-amd64
@@ -9,7 +9,7 @@ ENV S6_OVERLAY_ARCH=aarch64
 
 FROM base-${TARGETARCH}${TARGETVARIANT}
 
-ARG S6_OVERLAY_VERSION="3.2.0.2"
+ARG S6_OVERLAY_VERSION="3.2.1.0"
 
 # Core variables
 ENV PUID=1000

requirements.txt

@@ -1,5 +1,5 @@
 # For pinning Python packages to then be parsed by Renovate
 
-certbot ==3.1.0
-certbot-dns-cloudflare ==3.1.0
-apprise ==1.9.1
+certbot ==4.2.0
+certbot-dns-cloudflare ==4.2.0
+apprise ==1.9.4