From e36cb4e4bc904199c60ad4603e538a4c0a942b7c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 21:45:17 +0000 Subject: [PATCH] build(deps): bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action). Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...594f3bf4285d9ea8dc53c9a0c9c4092420091003) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/measure-classic-check.yml | 4 ++-- .github/workflows/publish-linux.yml | 14 ++++++------- .github/workflows/publish-windows.yml | 8 ++++---- .github/workflows/validate.yml | 22 ++++++++++----------- 4 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/measure-classic-check.yml b/.github/workflows/measure-classic-check.yml index 97894e9..5a5e9f5 100644 --- a/.github/workflows/measure-classic-check.yml +++ b/.github/workflows/measure-classic-check.yml @@ -93,7 +93,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Validate Classic Check inventory run: | @@ -105,7 +105,7 @@ jobs: - name: Build task-focused Classic Check image id: classic-image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: windows/Dockerfile diff --git a/.github/workflows/publish-linux.yml b/.github/workflows/publish-linux.yml index 2dcfd09..5ebe326 100644 --- a/.github/workflows/publish-linux.yml +++ b/.github/workflows/publish-linux.yml @@ -86,7 +86,7 @@ jobs: } >> "${GITHUB_OUTPUT}" - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Log in to GitHub Container Registry uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 @@ -97,7 +97,7 @@ jobs: # Prove both Linux-owned image contracts before moving any release tag. - name: Build and smoke Classic validation target - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: linux/Dockerfile @@ -130,7 +130,7 @@ jobs: - name: Validate portable baseline if: ${{ !inputs.candidate_only }} - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: portable/Dockerfile @@ -142,7 +142,7 @@ jobs: - name: Load portable release candidate if: ${{ !inputs.candidate_only }} - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: portable/Dockerfile @@ -165,7 +165,7 @@ jobs: - name: Build and publish Linux image if: ${{ !inputs.candidate_only }} - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: linux/Dockerfile @@ -184,7 +184,7 @@ jobs: type=gha,mode=max,scope=linux-build-image,ignore-error=true - name: Build and publish Classic image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: linux/Dockerfile @@ -208,7 +208,7 @@ jobs: - name: Publish immutable portable candidate if: ${{ !inputs.candidate_only }} id: portable-publish - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: portable/Dockerfile diff --git a/.github/workflows/publish-windows.yml b/.github/workflows/publish-windows.yml index 0c331fc..5535aaf 100644 --- a/.github/workflows/publish-windows.yml +++ b/.github/workflows/publish-windows.yml @@ -74,7 +74,7 @@ jobs: build/classic windows/classic-check-toolchain.json - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Log in to GitHub Container Registry uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 @@ -85,7 +85,7 @@ jobs: - name: Build and publish immutable Windows candidate id: general-image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: windows/Dockerfile @@ -106,7 +106,7 @@ jobs: - name: Build and publish immutable Classic Check candidate id: check-image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: windows/Dockerfile @@ -209,7 +209,7 @@ jobs: timeout-minutes: 10 steps: - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Log in to GitHub Container Registry uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index c9eba89..57389c9 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -144,10 +144,10 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Build Linux image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: linux/Dockerfile @@ -252,7 +252,7 @@ jobs: build/classic windows/classic-check-toolchain.json - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Validate Classic Check inventory run: | @@ -263,7 +263,7 @@ jobs: windows/classic-check-toolchain.json - name: Build general Windows image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: windows/Dockerfile @@ -275,7 +275,7 @@ jobs: - name: Build task-focused Classic Check image id: classic-image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: windows/Dockerfile @@ -378,10 +378,10 @@ jobs: run: echo "commit=$(jq -r '.consumer_validation.commit' classic-toolchain.json)" >> "${GITHUB_OUTPUT}" - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Build and smoke Classic validation target - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: linux/Dockerfile @@ -392,7 +392,7 @@ jobs: cache-to: type=gha,mode=max,scope=classic-build-image,ignore-error=true - name: Load slim Classic image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: linux/Dockerfile @@ -451,13 +451,13 @@ jobs: persist-credentials: false - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4 - name: Check portable Dockerfile run: docker build --check --file portable/Dockerfile . - name: Build and smoke baseline as non-root - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: portable/Dockerfile @@ -468,7 +468,7 @@ jobs: cache-to: type=gha,mode=max,scope=classic-portable-build-image,ignore-error=true - name: Load portable image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7 with: context: . file: portable/Dockerfile