meyayl/docker-languagetool 6.8-1 on GitHub

Dockerfile / Dockerfile.fasttext

Go entrypoint: replaced entrypoint.sh bash script with a statically-linked Go binary; removes bash, shadow, su-exec, and xmlstarlet from the runtime image
go_build stage: added multi-stage build step that compiles the Go entrypoint binary (CGO_ENABLED=0) with GO_VERSION ARG tracked by Renovate
7zip scope: moved from java_base to prepare stage — only needed at build time, not in the base layer
HEALTHCHECK: replaced wget-based shell command with CMD ["/entrypoint", "healthcheck"]
User setup: replaced groupmod/adduser (shadow) with BusyBox addgroup/adduser
Renovate annotations: corrected datasource=github-release → github-releases for Temurin and Maven; added regex versioning for Temurin JDK tags

New binary: replaces entrypoint.sh; handles startup, privilege drop, ngram/fasttext downloads, and healthcheck with no shell dependency
UID/GID derivation: centralised into a single computation at startup (MAP_UID/MAP_GID env vars when root, os.Getuid()/os.Getgid() otherwise)
Embedded download config: URLs and filenames extracted to internal/download/downloads.yaml (embedded via //go:embed); no recompile needed to update URLs
healthcheck subcommand: native HTTP check replacing the wget-based HEALTHCHECK command
Read-only FS detection: replaced /proc/mounts parsing with syscall.Statfs checking ST_RDONLY flag
Ownership fix: uses mapped UID/GID when nss_wrapper is active
Go upgraded to 1.26-alpine3.23
Source tree: moved into entrypoint/ subfolder for cleaner repo layout