Skip to content

chore(deps): Bump @docker/actions-toolkit from 0.49.0 to 0.51.0 - #1300

Merged
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.51.0
Jan 15, 2025
Merged

crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.51.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 15, 2025

Copy link
Copy Markdown
Contributor

Bumps @docker/actions-toolkit from 0.49.0 to 0.51.0.

Release notes

Sourced from @​docker/actions-toolkit's releases.

v0.51.0

Full Changelog: docker/actions-toolkit@v0.50.0...v0.51.0

v0.50.0

Full Changelog: docker/actions-toolkit@v0.49.0...v0.50.0

Commits
  • f795e92 Merge pull request #554 from crazy-max/context-remove-provenanceBuilderID
  • e46ec80 Merge pull request #551 from crazy-max/git-pr-head-ref-optin
  • f2e802c context: remove provenanceBuilderID func
  • e02b7d7 context: opt-in pull request head ref
  • 9881e80 Merge pull request #553 from docker/bot/docker-releases-json
  • a824931 github: update .github/docker-releases.json
  • cc12dc0 Merge pull request #552 from crazy-max/addlicense-install
  • 13bd9c8 dockerfile: update addlicense to v1.1.1
  • 231937b dockerfile: use go install for addlicense
  • 54bdcf6 Merge pull request #549 from docker/dependabot/npm_and_yarn/actions/artifact-...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.49.0 to 0.51.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](docker/actions-toolkit@v0.49.0...v0.51.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
@crazy-max
crazy-max merged commit 67a2d40 into master Jan 15, 2025
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/docker/actions-toolkit-0.51.0 branch January 15, 2025 12:50
renovate Bot added a commit to cigaleapp/infrastructure that referenced this pull request Oct 27, 2026
##### [vv7.4.0](https://github.com/docker/build-push-action/releases/tag/v7.4.0)

- Use the shared error helper for Buildx commands by [@crazy-max](https://github.com/crazy-max) in [#1620](docker/build-push-action#1620)
- Prevent workflow command injection in metadata logs by [@crazy-max](https://github.com/crazy-max) in [#1617](docker/build-push-action#1617)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.100.0 in [#1614](docker/build-push-action#1614) [#1618](docker/build-push-action#1618) [#1621](docker/build-push-action#1621)
- Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1609](docker/build-push-action#1609)
- Bump brace-expansion from 1.1.13 to 1.1.18 in [#1592](docker/build-push-action#1592)
- Bump csv-parse from 7.0.0 to 7.0.2 in [#1613](docker/build-push-action#1613)
- Bump js-yaml from 4.3.0 to 4.3.2 in [#1605](docker/build-push-action#1605) [#1615](docker/build-push-action#1615)
- Bump nanoid from 3.3.16 to 3.3.18 in [#1611](docker/build-push-action#1611)
- Bump postcss from 8.5.10 to 8.5.25 in [#1590](docker/build-push-action#1590)
- Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#1606](docker/build-push-action#1606)
- Bump sigstore from 4.1.0 to 4.1.1 in [#1577](docker/build-push-action#1577)
- Bump undici from 6.27.0 to 6.28.0 in [#1594](docker/build-push-action#1594)

**Full Changelog**: <docker/build-push-action@v7.3.0...v7.4.0>
##### [vv7.3.0](https://github.com/docker/build-push-action/releases/tag/v7.3.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566)
- Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547)
- Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564)
- Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563)

**Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0>
##### [vv7.2.0](https://github.com/docker/build-push-action/releases/tag/v7.2.0)

- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517)
- Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534)
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529)
- Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521)
- Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526)
- Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533)

**Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0>
##### [vv7.1.0](https://github.com/docker/build-push-action/releases/tag/v7.1.0)

- Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505)
- Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500)
- Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489)
- Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491)
- Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490)
- Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497)
- Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510)
- Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496)
- Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486)
- Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509)

**Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0>
##### [vv7.0.0](https://github.com/docker/build-push-action/releases/tag/v7.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470)
- Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473)
- Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479)
- Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463)

**Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0>
##### [vv6.19.2](https://github.com/docker/build-push-action/releases/tag/v6.19.2)

- Preserve port in `GIT_AUTH_TOKEN` host by [@crazy-max](https://github.com/crazy-max) in [#1458](docker/build-push-action#1458)

**Full Changelog**: <docker/build-push-action@v6.19.1...v6.19.2>
##### [vv6.19.1](https://github.com/docker/build-push-action/releases/tag/v6.19.1)

- Derive `GIT_AUTH_TOKEN` host from GitHub server URL by [@crazy-max](https://github.com/crazy-max) in [#1456](docker/build-push-action#1456)

**Full Changelog**: <docker/build-push-action@v6.19.0...v6.19.1>
##### [vv6.19.0](https://github.com/docker/build-push-action/releases/tag/v6.19.0)

- Scope default git auth token to `github.com` by [@crazy-max](https://github.com/crazy-max) in [#1451](docker/build-push-action#1451)
- Bump brace-expansion from 1.1.11 to 1.1.12 in [#1396](docker/build-push-action#1396)
- Bump form-data from 2.5.1 to 2.5.5 in [#1391](docker/build-push-action#1391)
- Bump js-yaml from 3.14.1 to 3.14.2 in [#1429](docker/build-push-action#1429)
- Bump lodash from 4.17.21 to 4.17.23 in [#1446](docker/build-push-action#1446)
- Bump tmp from 0.2.3 to 0.2.4 in [#1398](docker/build-push-action#1398)
- Bump undici from 5.28.4 to 5.29.0 in [#1397](docker/build-push-action#1397)

**Full Changelog**: <docker/build-push-action@v6.18.0...v6.19.0>
##### [vv6.18.0](https://github.com/docker/build-push-action/releases/tag/v6.18.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.61.0 to 0.62.1 in [#1381](docker/build-push-action#1381)

> \[!NOTE]
> [Build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) is now supported with [Docker Build Cloud](https://docs.docker.com/build-cloud/).

**Full Changelog**: <docker/build-push-action@v6.17.0...v6.18.0>
##### [vv6.17.0](https://github.com/docker/build-push-action/releases/tag/v6.17.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.59.0 to 0.61.0 by [@crazy-max](https://github.com/crazy-max) in [#1364](docker/build-push-action#1364)

> \[!NOTE]
> Build record is now exported using the [`buildx history export`](https://docs.docker.com/reference/cli/docker/buildx/history/export/) command instead of the legacy export-build tool.

**Full Changelog**: <docker/build-push-action@v6.16.0...v6.17.0>
##### [vv6.16.0](https://github.com/docker/build-push-action/releases/tag/v6.16.0)

- Handle no default attestations env var by [@crazy-max](https://github.com/crazy-max) in [#1343](docker/build-push-action#1343)
- Only print secret keys in build summary output by [@crazy-max](https://github.com/crazy-max) in [#1353](docker/build-push-action#1353)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.56.0 to 0.59.0 in [#1352](docker/build-push-action#1352)

**Full Changelog**: <docker/build-push-action@v6.15.0...v6.16.0>
##### [vv6.15.0](https://github.com/docker/build-push-action/releases/tag/v6.15.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.55.0 to 0.56.0 in [#1330](docker/build-push-action#1330)

**Full Changelog**: <docker/build-push-action@v6.14.0...v6.15.0>
##### [vv6.14.0](https://github.com/docker/build-push-action/releases/tag/v6.14.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.53.0 to 0.55.0 in [#1324](docker/build-push-action#1324)

**Full Changelog**: <docker/build-push-action@v6.13.0...v6.14.0>
##### [vv6.13.0](https://github.com/docker/build-push-action/releases/tag/v6.13.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.51.0 to 0.53.0 in [#1308](docker/build-push-action#1308)

**Full Changelog**: <docker/build-push-action@v6.12.0...v6.13.0>
##### [vv6.12.0](https://github.com/docker/build-push-action/releases/tag/v6.12.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.49.0 to 0.51.0 in [#1300](docker/build-push-action#1300)

**Full Changelog**: <docker/build-push-action@v6.11.0...v6.12.0>
##### [vv6.11.0](https://github.com/docker/build-push-action/releases/tag/v6.11.0)

- Handlebar `defaultContext` support for `build-contexts` input by [@crazy-max](https://github.com/crazy-max) in [#1283](docker/build-push-action#1283)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.46.0 to 0.49.0 in [#1281](docker/build-push-action#1281)

**Full Changelog**: <docker/build-push-action@v6.10.0...v6.11.0>
##### [vv6.10.0](https://github.com/docker/build-push-action/releases/tag/v6.10.0)

- Add `call` input to set method for evaluating build by [@crazy-max](https://github.com/crazy-max) in [#1265](docker/build-push-action#1265)
- Bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 in [#1238](docker/build-push-action#1238)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.39.0 to 0.46.0 in [#1268](docker/build-push-action#1268)
- Bump cross-spawn from 7.0.3 to 7.0.6 in [#1261](docker/build-push-action#1261)

**Full Changelog**: <docker/build-push-action@v6.9.0...v6.10.0>
##### [vv6.9.0](https://github.com/docker/build-push-action/releases/tag/v6.9.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.38.0 to 0.39.0 in [#1234](docker/build-push-action#1234)
- Bump path-to-regexp from 6.2.2 to 6.3.0 in [#1232](docker/build-push-action#1232)

**Full Changelog**: <docker/build-push-action@v6.8.0...v6.9.0>
##### [vv6.8.0](https://github.com/docker/build-push-action/releases/tag/v6.8.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.37.1 to 0.38.0 in [#1230](docker/build-push-action#1230)

**Full Changelog**: <docker/build-push-action@v6.7.0...v6.8.0>
##### [vv6.7.0](https://github.com/docker/build-push-action/releases/tag/v6.7.0)

- Print info message for build summary support checks by [@crazy-max](https://github.com/crazy-max) in [#1211](docker/build-push-action#1211)

**Full Changelog**: <docker/build-push-action@v6.6.1...v6.7.0>
##### [vv6.6.1](https://github.com/docker/build-push-action/releases/tag/v6.6.1)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.37.0 to 0.37.1 in [#1205](docker/build-push-action#1205)

**Full Changelog**: <docker/build-push-action@v6.6.0...v6.6.1>
##### [vv6.6.0](https://github.com/docker/build-push-action/releases/tag/v6.6.0)

- Generate GitHub annotations for [build checks](https://docs.docker.com/build/checks/) by [@crazy-max](https://github.com/crazy-max) in [#1197](docker/build-push-action#1197)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.35.0 to 0.37.0 in [#1196](docker/build-push-action#1196) [#1198](docker/build-push-action#1198)

**Full Changelog**: <docker/build-push-action@v6.5.0...v6.6.0>
##### [vv6.5.0](https://github.com/docker/build-push-action/releases/tag/v6.5.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.33.0 to 0.35.0 in [#1186](docker/build-push-action#1186) [#1191](docker/build-push-action#1191)

**Full Changelog**: <docker/build-push-action@v6.4.1...v6.5.0>
##### [vv6.4.1](https://github.com/docker/build-push-action/releases/tag/v6.4.1)

- revert "Set `repository` and `ghtoken` attributes for [GitHub Actions cache backend](https://docs.docker.com/build/cache/backends/gha/#avoid-github-actions-cache-api-throttling)" by [@crazy-max](https://github.com/crazy-max) in [#1183](docker/build-push-action#1183)

**Full Changelog**: <docker/build-push-action@v6.4.0...v6.4.1>
##### [vv6.4.0](https://github.com/docker/build-push-action/releases/tag/v6.4.0)

- Set `repository` and `ghtoken` attributes for [GitHub Actions cache backend](https://docs.docker.com/build/cache/backends/gha/#avoid-github-actions-cache-api-throttling) by [@crazy-max](https://github.com/crazy-max) in [#1133](docker/build-push-action#1133)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.31.0 to 0.33.0 in [#1179](docker/build-push-action#1179)

**Full Changelog**: <docker/build-push-action@v6.3.0...v6.4.0>
##### [vv6.3.0](https://github.com/docker/build-push-action/releases/tag/v6.3.0)

- `DOCKER_BUILD_RECORD_UPLOAD` environment variable to enable/disable build record upload by [@crazy-max](https://github.com/crazy-max) in [#1172](docker/build-push-action#1172)
- `DOCKER_BUILD_NO_SUMMARY` has been deprecated. Set `DOCKER_BUILD_SUMMARY` to `false` instead by [@crazy-max](https://github.com/crazy-max) in [#1170](docker/build-push-action#1170) [#1173](docker/build-push-action#1173)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.28.0 to 0.31.0 in [#1171](docker/build-push-action#1171) [#1159](docker/build-push-action#1159) [#1169](docker/build-push-action#1169)

**Full Changelog**: <docker/build-push-action@v6.2.0...v6.3.0>
##### [vv6.2.0](https://github.com/docker/build-push-action/releases/tag/v6.2.0)

- Use default retention days for build export artifact by [@crazy-max](https://github.com/crazy-max) in [#1153](docker/build-push-action#1153)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.27.0 to 0.28.0 in [#1158](docker/build-push-action#1158)

**Full Changelog**: <docker/build-push-action@v6.1.0...v6.2.0>
##### [vv6.1.0](https://github.com/docker/build-push-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.2 to 0.27.0 in [#1149](docker/build-push-action#1149)

**Full Changelog**: <docker/build-push-action@v6.0.2...v6.1.0>
##### [vv6.0.2](https://github.com/docker/build-push-action/releases/tag/v6.0.2)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.1 to 0.26.2 in [#1147](docker/build-push-action#1147)

**Full Changelog**: <docker/build-push-action@v6.0.1...v6.0.2>
##### [vv6.0.1](https://github.com/docker/build-push-action/releases/tag/v6.0.1)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.0 to 0.26.1 in [#1142](docker/build-push-action#1142)

**Full Changelog**: <docker/build-push-action@v6.0.0...v6.0.1>
##### [vv6.0.0](https://github.com/docker/build-push-action/releases/tag/v6.0.0)

- Export build record and generate [build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) by [@crazy-max](https://github.com/crazy-max) in [#1120](docker/build-push-action#1120)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.24.0 to 0.26.0 in [#1132](docker/build-push-action#1132) [#1136](docker/build-push-action#1136) [#1138](docker/build-push-action#1138)
- Bump braces from 3.0.2 to 3.0.3 in [#1137](docker/build-push-action#1137)

> \[!NOTE]
> This major release adds support for generating [Build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) and exporting build record for your build. You can disable this feature by setting [ `DOCKER_BUILD_SUMMARY: false` environment variable in your workflow](https://docs.docker.com/build/ci/github-actions/build-summary/#disable-job-summary).

**Full Changelog**: <docker/build-push-action@v5.4.0...v6.0.0>
##### [vv5.4.0](https://github.com/docker/build-push-action/releases/tag/v5.4.0)

- Show builder information before building by [@crazy-max](https://github.com/crazy-max) in [#1128](docker/build-push-action#1128)
- Handle attestations correctly with provenance and sbom inputs by [@crazy-max](https://github.com/crazy-max) in [#1086](docker/build-push-action#1086)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.19.0 to 0.24.0 in [#1088](docker/build-push-action#1088) [#1105](docker/build-push-action#1105) [#1121](docker/build-push-action#1121) [#1127](docker/build-push-action#1127)
- Bump undici from 5.28.3 to 5.28.4 in [#1090](docker/build-push-action#1090)

**Full Changelog**: <docker/build-push-action@v5.3.0...v5.4.0>
##### [vv5.3.0](https://github.com/docker/build-push-action/releases/tag/v5.3.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.18.0 to 0.19.0 in [#1080](docker/build-push-action#1080)

**Full Changelog**: <docker/build-push-action@v5.2.0...v5.3.0>
##### [vv5.2.0](https://github.com/docker/build-push-action/releases/tag/v5.2.0)

- Disable quotes detection for `outputs` input by [@crazy-max](https://github.com/crazy-max) in [#1074](docker/build-push-action#1074)
- Warn about ignored inputs by [@favonia](https://github.com/favonia) in [#1019](docker/build-push-action#1019)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.14.0 to 0.18.0 in [#1070](docker/build-push-action#1070)
- Bump undici from 5.26.3 to 5.28.3 in [#1057](docker/build-push-action#1057)

**Full Changelog**: <docker/build-push-action@v5.1.0...v5.2.0>
##### [vv5.1.0](https://github.com/docker/build-push-action/releases/tag/v5.1.0)

- Add `annotations` input by [@crazy-max](https://github.com/crazy-max) in [#992](docker/build-push-action#992)
- Add `secret-envs` input by [@elias-lundgren](https://github.com/elias-lundgren) in [#980](docker/build-push-action#980)
- Bump [@babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [#991](docker/build-push-action#991)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [#990](docker/build-push-action#990) [#1006](docker/build-push-action#1006)

**Full Changelog**: <docker/build-push-action@v5.0.0...v5.1.0>
gwennlbh pushed a commit to cigaleapp/infrastructure that referenced this pull request Oct 27, 2026
##### [vv7.4.0](https://github.com/docker/build-push-action/releases/tag/v7.4.0)

- Use the shared error helper for Buildx commands by [@crazy-max](https://github.com/crazy-max) in [#1620](docker/build-push-action#1620)
- Prevent workflow command injection in metadata logs by [@crazy-max](https://github.com/crazy-max) in [#1617](docker/build-push-action#1617)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.100.0 in [#1614](docker/build-push-action#1614) [#1618](docker/build-push-action#1618) [#1621](docker/build-push-action#1621)
- Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1609](docker/build-push-action#1609)
- Bump brace-expansion from 1.1.13 to 1.1.18 in [#1592](docker/build-push-action#1592)
- Bump csv-parse from 7.0.0 to 7.0.2 in [#1613](docker/build-push-action#1613)
- Bump js-yaml from 4.3.0 to 4.3.2 in [#1605](docker/build-push-action#1605) [#1615](docker/build-push-action#1615)
- Bump nanoid from 3.3.16 to 3.3.18 in [#1611](docker/build-push-action#1611)
- Bump postcss from 8.5.10 to 8.5.25 in [#1590](docker/build-push-action#1590)
- Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#1606](docker/build-push-action#1606)
- Bump sigstore from 4.1.0 to 4.1.1 in [#1577](docker/build-push-action#1577)
- Bump undici from 6.27.0 to 6.28.0 in [#1594](docker/build-push-action#1594)

**Full Changelog**: <docker/build-push-action@v7.3.0...v7.4.0>
##### [vv7.3.0](https://github.com/docker/build-push-action/releases/tag/v7.3.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566)
- Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547)
- Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564)
- Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563)

**Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0>
##### [vv7.2.0](https://github.com/docker/build-push-action/releases/tag/v7.2.0)

- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517)
- Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534)
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529)
- Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521)
- Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526)
- Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533)

**Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0>
##### [vv7.1.0](https://github.com/docker/build-push-action/releases/tag/v7.1.0)

- Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505)
- Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500)
- Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489)
- Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491)
- Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490)
- Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497)
- Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510)
- Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496)
- Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486)
- Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509)

**Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0>
##### [vv7.0.0](https://github.com/docker/build-push-action/releases/tag/v7.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470)
- Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473)
- Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479)
- Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463)

**Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0>
##### [vv6.19.2](https://github.com/docker/build-push-action/releases/tag/v6.19.2)

- Preserve port in `GIT_AUTH_TOKEN` host by [@crazy-max](https://github.com/crazy-max) in [#1458](docker/build-push-action#1458)

**Full Changelog**: <docker/build-push-action@v6.19.1...v6.19.2>
##### [vv6.19.1](https://github.com/docker/build-push-action/releases/tag/v6.19.1)

- Derive `GIT_AUTH_TOKEN` host from GitHub server URL by [@crazy-max](https://github.com/crazy-max) in [#1456](docker/build-push-action#1456)

**Full Changelog**: <docker/build-push-action@v6.19.0...v6.19.1>
##### [vv6.19.0](https://github.com/docker/build-push-action/releases/tag/v6.19.0)

- Scope default git auth token to `github.com` by [@crazy-max](https://github.com/crazy-max) in [#1451](docker/build-push-action#1451)
- Bump brace-expansion from 1.1.11 to 1.1.12 in [#1396](docker/build-push-action#1396)
- Bump form-data from 2.5.1 to 2.5.5 in [#1391](docker/build-push-action#1391)
- Bump js-yaml from 3.14.1 to 3.14.2 in [#1429](docker/build-push-action#1429)
- Bump lodash from 4.17.21 to 4.17.23 in [#1446](docker/build-push-action#1446)
- Bump tmp from 0.2.3 to 0.2.4 in [#1398](docker/build-push-action#1398)
- Bump undici from 5.28.4 to 5.29.0 in [#1397](docker/build-push-action#1397)

**Full Changelog**: <docker/build-push-action@v6.18.0...v6.19.0>
##### [vv6.18.0](https://github.com/docker/build-push-action/releases/tag/v6.18.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.61.0 to 0.62.1 in [#1381](docker/build-push-action#1381)

> \[!NOTE]
> [Build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) is now supported with [Docker Build Cloud](https://docs.docker.com/build-cloud/).

**Full Changelog**: <docker/build-push-action@v6.17.0...v6.18.0>
##### [vv6.17.0](https://github.com/docker/build-push-action/releases/tag/v6.17.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.59.0 to 0.61.0 by [@crazy-max](https://github.com/crazy-max) in [#1364](docker/build-push-action#1364)

> \[!NOTE]
> Build record is now exported using the [`buildx history export`](https://docs.docker.com/reference/cli/docker/buildx/history/export/) command instead of the legacy export-build tool.

**Full Changelog**: <docker/build-push-action@v6.16.0...v6.17.0>
##### [vv6.16.0](https://github.com/docker/build-push-action/releases/tag/v6.16.0)

- Handle no default attestations env var by [@crazy-max](https://github.com/crazy-max) in [#1343](docker/build-push-action#1343)
- Only print secret keys in build summary output by [@crazy-max](https://github.com/crazy-max) in [#1353](docker/build-push-action#1353)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.56.0 to 0.59.0 in [#1352](docker/build-push-action#1352)

**Full Changelog**: <docker/build-push-action@v6.15.0...v6.16.0>
##### [vv6.15.0](https://github.com/docker/build-push-action/releases/tag/v6.15.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.55.0 to 0.56.0 in [#1330](docker/build-push-action#1330)

**Full Changelog**: <docker/build-push-action@v6.14.0...v6.15.0>
##### [vv6.14.0](https://github.com/docker/build-push-action/releases/tag/v6.14.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.53.0 to 0.55.0 in [#1324](docker/build-push-action#1324)

**Full Changelog**: <docker/build-push-action@v6.13.0...v6.14.0>
##### [vv6.13.0](https://github.com/docker/build-push-action/releases/tag/v6.13.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.51.0 to 0.53.0 in [#1308](docker/build-push-action#1308)

**Full Changelog**: <docker/build-push-action@v6.12.0...v6.13.0>
##### [vv6.12.0](https://github.com/docker/build-push-action/releases/tag/v6.12.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.49.0 to 0.51.0 in [#1300](docker/build-push-action#1300)

**Full Changelog**: <docker/build-push-action@v6.11.0...v6.12.0>
##### [vv6.11.0](https://github.com/docker/build-push-action/releases/tag/v6.11.0)

- Handlebar `defaultContext` support for `build-contexts` input by [@crazy-max](https://github.com/crazy-max) in [#1283](docker/build-push-action#1283)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.46.0 to 0.49.0 in [#1281](docker/build-push-action#1281)

**Full Changelog**: <docker/build-push-action@v6.10.0...v6.11.0>
##### [vv6.10.0](https://github.com/docker/build-push-action/releases/tag/v6.10.0)

- Add `call` input to set method for evaluating build by [@crazy-max](https://github.com/crazy-max) in [#1265](docker/build-push-action#1265)
- Bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 in [#1238](docker/build-push-action#1238)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.39.0 to 0.46.0 in [#1268](docker/build-push-action#1268)
- Bump cross-spawn from 7.0.3 to 7.0.6 in [#1261](docker/build-push-action#1261)

**Full Changelog**: <docker/build-push-action@v6.9.0...v6.10.0>
##### [vv6.9.0](https://github.com/docker/build-push-action/releases/tag/v6.9.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.38.0 to 0.39.0 in [#1234](docker/build-push-action#1234)
- Bump path-to-regexp from 6.2.2 to 6.3.0 in [#1232](docker/build-push-action#1232)

**Full Changelog**: <docker/build-push-action@v6.8.0...v6.9.0>
##### [vv6.8.0](https://github.com/docker/build-push-action/releases/tag/v6.8.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.37.1 to 0.38.0 in [#1230](docker/build-push-action#1230)

**Full Changelog**: <docker/build-push-action@v6.7.0...v6.8.0>
##### [vv6.7.0](https://github.com/docker/build-push-action/releases/tag/v6.7.0)

- Print info message for build summary support checks by [@crazy-max](https://github.com/crazy-max) in [#1211](docker/build-push-action#1211)

**Full Changelog**: <docker/build-push-action@v6.6.1...v6.7.0>
##### [vv6.6.1](https://github.com/docker/build-push-action/releases/tag/v6.6.1)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.37.0 to 0.37.1 in [#1205](docker/build-push-action#1205)

**Full Changelog**: <docker/build-push-action@v6.6.0...v6.6.1>
##### [vv6.6.0](https://github.com/docker/build-push-action/releases/tag/v6.6.0)

- Generate GitHub annotations for [build checks](https://docs.docker.com/build/checks/) by [@crazy-max](https://github.com/crazy-max) in [#1197](docker/build-push-action#1197)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.35.0 to 0.37.0 in [#1196](docker/build-push-action#1196) [#1198](docker/build-push-action#1198)

**Full Changelog**: <docker/build-push-action@v6.5.0...v6.6.0>
##### [vv6.5.0](https://github.com/docker/build-push-action/releases/tag/v6.5.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.33.0 to 0.35.0 in [#1186](docker/build-push-action#1186) [#1191](docker/build-push-action#1191)

**Full Changelog**: <docker/build-push-action@v6.4.1...v6.5.0>
##### [vv6.4.1](https://github.com/docker/build-push-action/releases/tag/v6.4.1)

- revert "Set `repository` and `ghtoken` attributes for [GitHub Actions cache backend](https://docs.docker.com/build/cache/backends/gha/#avoid-github-actions-cache-api-throttling)" by [@crazy-max](https://github.com/crazy-max) in [#1183](docker/build-push-action#1183)

**Full Changelog**: <docker/build-push-action@v6.4.0...v6.4.1>
##### [vv6.4.0](https://github.com/docker/build-push-action/releases/tag/v6.4.0)

- Set `repository` and `ghtoken` attributes for [GitHub Actions cache backend](https://docs.docker.com/build/cache/backends/gha/#avoid-github-actions-cache-api-throttling) by [@crazy-max](https://github.com/crazy-max) in [#1133](docker/build-push-action#1133)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.31.0 to 0.33.0 in [#1179](docker/build-push-action#1179)

**Full Changelog**: <docker/build-push-action@v6.3.0...v6.4.0>
##### [vv6.3.0](https://github.com/docker/build-push-action/releases/tag/v6.3.0)

- `DOCKER_BUILD_RECORD_UPLOAD` environment variable to enable/disable build record upload by [@crazy-max](https://github.com/crazy-max) in [#1172](docker/build-push-action#1172)
- `DOCKER_BUILD_NO_SUMMARY` has been deprecated. Set `DOCKER_BUILD_SUMMARY` to `false` instead by [@crazy-max](https://github.com/crazy-max) in [#1170](docker/build-push-action#1170) [#1173](docker/build-push-action#1173)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.28.0 to 0.31.0 in [#1171](docker/build-push-action#1171) [#1159](docker/build-push-action#1159) [#1169](docker/build-push-action#1169)

**Full Changelog**: <docker/build-push-action@v6.2.0...v6.3.0>
##### [vv6.2.0](https://github.com/docker/build-push-action/releases/tag/v6.2.0)

- Use default retention days for build export artifact by [@crazy-max](https://github.com/crazy-max) in [#1153](docker/build-push-action#1153)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.27.0 to 0.28.0 in [#1158](docker/build-push-action#1158)

**Full Changelog**: <docker/build-push-action@v6.1.0...v6.2.0>
##### [vv6.1.0](https://github.com/docker/build-push-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.2 to 0.27.0 in [#1149](docker/build-push-action#1149)

**Full Changelog**: <docker/build-push-action@v6.0.2...v6.1.0>
##### [vv6.0.2](https://github.com/docker/build-push-action/releases/tag/v6.0.2)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.1 to 0.26.2 in [#1147](docker/build-push-action#1147)

**Full Changelog**: <docker/build-push-action@v6.0.1...v6.0.2>
##### [vv6.0.1](https://github.com/docker/build-push-action/releases/tag/v6.0.1)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.0 to 0.26.1 in [#1142](docker/build-push-action#1142)

**Full Changelog**: <docker/build-push-action@v6.0.0...v6.0.1>
##### [vv6.0.0](https://github.com/docker/build-push-action/releases/tag/v6.0.0)

- Export build record and generate [build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) by [@crazy-max](https://github.com/crazy-max) in [#1120](docker/build-push-action#1120)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.24.0 to 0.26.0 in [#1132](docker/build-push-action#1132) [#1136](docker/build-push-action#1136) [#1138](docker/build-push-action#1138)
- Bump braces from 3.0.2 to 3.0.3 in [#1137](docker/build-push-action#1137)

> \[!NOTE]
> This major release adds support for generating [Build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) and exporting build record for your build. You can disable this feature by setting [ `DOCKER_BUILD_SUMMARY: false` environment variable in your workflow](https://docs.docker.com/build/ci/github-actions/build-summary/#disable-job-summary).

**Full Changelog**: <docker/build-push-action@v5.4.0...v6.0.0>
##### [vv5.4.0](https://github.com/docker/build-push-action/releases/tag/v5.4.0)

- Show builder information before building by [@crazy-max](https://github.com/crazy-max) in [#1128](docker/build-push-action#1128)
- Handle attestations correctly with provenance and sbom inputs by [@crazy-max](https://github.com/crazy-max) in [#1086](docker/build-push-action#1086)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.19.0 to 0.24.0 in [#1088](docker/build-push-action#1088) [#1105](docker/build-push-action#1105) [#1121](docker/build-push-action#1121) [#1127](docker/build-push-action#1127)
- Bump undici from 5.28.3 to 5.28.4 in [#1090](docker/build-push-action#1090)

**Full Changelog**: <docker/build-push-action@v5.3.0...v5.4.0>
##### [vv5.3.0](https://github.com/docker/build-push-action/releases/tag/v5.3.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.18.0 to 0.19.0 in [#1080](docker/build-push-action#1080)

**Full Changelog**: <docker/build-push-action@v5.2.0...v5.3.0>
##### [vv5.2.0](https://github.com/docker/build-push-action/releases/tag/v5.2.0)

- Disable quotes detection for `outputs` input by [@crazy-max](https://github.com/crazy-max) in [#1074](docker/build-push-action#1074)
- Warn about ignored inputs by [@favonia](https://github.com/favonia) in [#1019](docker/build-push-action#1019)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.14.0 to 0.18.0 in [#1070](docker/build-push-action#1070)
- Bump undici from 5.26.3 to 5.28.3 in [#1057](docker/build-push-action#1057)

**Full Changelog**: <docker/build-push-action@v5.1.0...v5.2.0>
##### [vv5.1.0](https://github.com/docker/build-push-action/releases/tag/v5.1.0)

- Add `annotations` input by [@crazy-max](https://github.com/crazy-max) in [#992](docker/build-push-action#992)
- Add `secret-envs` input by [@elias-lundgren](https://github.com/elias-lundgren) in [#980](docker/build-push-action#980)
- Bump [@babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [#991](docker/build-push-action#991)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [#990](docker/build-push-action#990) [#1006](docker/build-push-action#1006)

**Full Changelog**: <docker/build-push-action@v5.0.0...v5.1.0>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant