ci(bump): separate versions check from regular build

Author: thomasleplus

.github/workflows/apk-check-versions.yml

@@ -0,0 +1,22 @@
+name: APK Check Versions
+
+on:
+  schedule:
+    - cron: "0 0 * * 0"
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check the versions
+        shell: bash
+        run: |
+          docker run --pull always -t --user root "leplusorg/${GITHUB_REPOSITORY#*/docker-}:main" sh -c '
+            apk update
+            if apk -u list | tee -a /dev/stderr | grep -q -e . ; then
+              exit 1
+            fi
+          '

pdf/Dockerfile

@@ -26,9 +26,6 @@ RUN apk -U upgrade \
     py3-pip=25.1.1-r0 \
     python3=3.12.11-r0 \
     qpdf=12.2.0-r0 \
-    && if apk -u list | tee -a /dev/stderr | grep -q -e . ; then \
-      exit 1 ; \
-    fi \
     && apk cache clean \
     && rm -rf /var/cache/apk/*