ci: update openldap image with maintained one

[BridgeAR]

Alternative to #6569
Closes: #6569

[github-actions]

Overall package size

Self size: 4.39 MB
Deduped: 5.21 MB
No deduping: 5.21 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 2.0.0 | 68.46 kB | 797.03 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.51%. Comparing base (2681a5e) to head (92f190a).
⚠️ Report is 5 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #7181   +/-   ##
=======================================
  Coverage   84.51%   84.51%           
=======================================
  Files         525      525           
  Lines       22492    22492           
=======================================
  Hits        19008    19008           
  Misses       3484     3484           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-01-06 19:17:06

Comparing candidate commit 92f190a in PR branch BridgeAR/2026-01-07-replace-openldap-image with baseline commit 2681a5e in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 288 metrics, 32 unstable metrics.

[simon-id]

nit: doesn't that mean the opensuse image is running on root ? is that gonna be a sec problem ? prob not?

[BridgeAR]

It is the default port for openldap and the other port is not supported by the container by default. It should not be a security concern either.

[simon-id]

should we pin it to a specific hash if that's even possible ? the internal sec team always come asking us to use pinned deps right

[BridgeAR]

I agree with that and think we should handle it for all of our containers in a separate step

[simon-id]

two comments, but i'll let you decide if it's worth spending time on them. So preemptive approval