chore: upgrade service images to latest version (#2183)

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

docker-compose.yml

@@ -1,35 +1,43 @@
 name: scancodeio
+
+x-description: "Full ScanCode.io stack: all services, local image build"
+
 services:
   db:
-    image: docker.io/library/postgres:17.9
+    image: docker.io/library/postgres:17.10
     env_file:
       - docker.env
     volumes:
       - db_data:/var/lib/postgresql/data/
     shm_size: "1gb"
     restart: always
     healthcheck:
-      test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
+      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
       interval: 10s
       timeout: 5s
       retries: 5
 
   redis:
-    image: docker.io/library/redis:8.6-alpine
+    image: docker.io/library/redis:8.8.0-alpine
     # Enable redis data persistence using the "Append Only File" with the
     # default policy of fsync every second. See https://redis.io/topics/persistence
-    command: redis-server --appendonly yes
+    command: redis-server --appendonly yes --loglevel warning
     volumes:
       - redis_data:/data
     restart: always
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
 
   web:
     build: .
     command: sh -c "
         ./manage.py migrate &&
         ./manage.py collectstatic --no-input --verbosity 0 --clear &&
         gunicorn scancodeio.wsgi:application --bind :8000 --timeout 600 \
-          --workers 8 --worker-tmp-dir /dev/shm ${GUNICORN_RELOAD_FLAG:-}"
+          --workers ${GUNICORN_WORKERS:-8} --worker-tmp-dir /dev/shm"
     env_file:
       - docker.env
     expose:
@@ -39,11 +47,12 @@ services:
       - /etc/scancodeio/:/etc/scancodeio/
       - workspace:/var/scancodeio/workspace/
       - static:/var/scancodeio/static/
+    restart: always
     depends_on:
       db:
         condition: service_healthy
       redis:
-        condition: service_started
+        condition: service_healthy
 
   worker:
     build: .
@@ -58,13 +67,17 @@ services:
       - .env:/opt/scancodeio/.env
       - /etc/scancodeio/:/etc/scancodeio/
       - workspace:/var/scancodeio/workspace/
+    restart: always
     depends_on:
-      - redis
-      - db
-      - web
+      db:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+      web:
+        condition: service_started
 
   nginx:
-    image: docker.io/library/nginx:1.29-alpine
+    image: docker.io/library/nginx:1.31.2-alpine
     ports:
       - "${NGINX_PUBLISHED_HTTP_PORT:-80}:80"
       - "${NGINX_PUBLISHED_HTTPS_PORT:-443}:443"
@@ -73,11 +86,12 @@ services:
       - static:/var/scancodeio/static/
       - webroot:/var/www/html/
     depends_on:
-      - web
+      web:
+        condition: service_started
     restart: always
 
   clamav:
-    image: docker.io/clamav/clamav:1.5_base
+    image: docker.io/clamav/clamav:1.5.2_base
     volumes:
       - clamav_data:/var/lib/clamav
       - workspace:/var/scancodeio/workspace/