Upgrade Webtop dependencies (tracking issue)

[stephdl]

Why

This issue tracks the upgrade of various dependencies of Webtop in NethServer/ns8-webtop.
Upgrading ensures the project remains secure, maintainable, and compatible with newer features. All proposed updates are already merged and can be referenced for details and further follow-up.

Purpose

Keep Webtop up-to-date, resolve security vulnerabilities, enable new features and maintain compatibility with upstream projects and dependencies.

Proposed solution

The following upgrades have been applied or are proposed:

UI dependencies

• Node.js upgrade: chore(deps): update node.js to v24
• axios security + feature upgrade: fix(deps): update dependency axios to ^0.30.0 [security]

Github Action upgrade

• chore(deps): update actions/checkout action to v6

Build dependency

• php-extension-installer docker tag to v2.9.18

Dependencies of Webtop itself

• postgres docker image: chore(deps): update postgres docker tag to v17.7
• tomcat docker image: chore(deps): update tomcat docker tag to v9.0.112

Each referenced PR contains details, release notes, and vulnerability explanations where applicable.

Alternative solutions

• Hold back upgrades if breaking changes are identified during downstream integration.
• Evaluate only security fixes and defer non-essential upgrades if stability becomes critical.

Additional context

• Upgrade PRs have passed CI and are merged.
• Follow up on Webtop integration tests for unexpected regressions.
• See referenced PRs for changelogs and upstream details.

See also

• All referenced upgrade PRs in NethServer/ns8-webtop.

[stephdl]

QA

target is ghcr.io/nethserver/webtop:1.5.5-testing.5

the robot tests succeed so the direct install does not need to be tested, focu on upgrade from 1.5.4

I have to mention

• this is a webtop 5.30.0 upgrade
• dark theme is available
• all features of webtop must be tested