chore(deps): update docker docker tag to v28.4.0

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Update	Change
docker	minor	28.3.3-dind -> 28.4.0-dind

---

Configuration

📅 Schedule: Branch creation - "before 9am on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/actions-runner/runners Kustomization: flux-system/actions-runners HelmRelease: actions-runners/actions-runner-set

+++ kubernetes/apps/actions-runner/runners Kustomization: flux-system/actions-runners HelmRelease: actions-runners/actions-runner-set

@@ -62,13 +62,13 @@

           - dockerd
           - --host=unix:///run/docker/docker.sock
           - --group=$(DOCKER_GROUP_GID)
           env:
           - name: DOCKER_GROUP_GID
             value: '123'
-          image: docker:28.3.3-dind@sha256:a56b3bdde89315ed2cc0e4906e582b5033d93bf20d9cb9510c2cdd4e7f7690b1
+          image: docker:28.4.0-dind@sha256:831644212c5bdd0b3362b5855c87b980ea39a83c9e9adcef2ce03eced99a737a
           name: dind
           securityContext:
             privileged: true
           volumeMounts:
           - mountPath: /home/runner/_work
             name: work

[github-actions]

--- HelmRelease: actions-runners/actions-runner-set AutoscalingRunnerSet: actions-runners/mich

+++ HelmRelease: actions-runners/actions-runner-set AutoscalingRunnerSet: actions-runners/mich

@@ -10,13 +10,13 @@

     app.kubernetes.io/instance: mich
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: gha-rs
     actions.github.com/scale-set-name: mich
     actions.github.com/scale-set-namespace: actions-runners
   annotations:
-    actions.github.com/values-hash: c9b3d3c3d0c797a07df27fc43638d706c4c7eb593a7819a62696fdd44b89689
+    actions.github.com/values-hash: c52b20b5e6fad4e84b453da71ea8b744953f615e78056d0e144b88b26ad90c3
     actions.github.com/cleanup-manager-role-binding: mich-gha-rs-manager
     actions.github.com/cleanup-manager-role-name: mich-gha-rs-manager
     actions.github.com/cleanup-no-permission-service-account-name: mich-gha-rs-no-permission
 spec:
   githubConfigUrl: https://github.com/immich-app
   githubConfigSecret: actions-controller-github-auth
@@ -63,13 +63,13 @@

         - dockerd
         - --host=unix:///run/docker/docker.sock
         - --group=$(DOCKER_GROUP_GID)
         env:
         - name: DOCKER_GROUP_GID
           value: '123'
-        image: docker:28.3.3-dind@sha256:a56b3bdde89315ed2cc0e4906e582b5033d93bf20d9cb9510c2cdd4e7f7690b1
+        image: docker:28.4.0-dind@sha256:831644212c5bdd0b3362b5855c87b980ea39a83c9e9adcef2ce03eced99a737a
         name: dind
         securityContext:
           privileged: true
         volumeMounts:
         - mountPath: /home/runner/_work
           name: work