dependabot[bot] opened a new pull request, #752: URL: https://github.com/apache/doris-opentelemetry-demo/pull/752
Bumps the actions-production-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `7` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3` | `4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.15.0` | `7.4.0` | | [fossas/fossa-action](https://github.com/fossas/fossa-action) | `1.5.0` | `2.0.0` | | [gradle/actions](https://github.com/gradle/actions) | `4.3.0` | `6.4.1` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `3` | `4` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `9` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.5.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `3.28.12` | `4.39.2` | | [actions/stale](https://github.com/actions/stale) | `9` | `11` | Updates `actions/checkout` from 4 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases";>actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458";>actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460";>actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461";>actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459";>actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463";>actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462";>actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464";>actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467";>actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0";>https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li><strong>[BREAKING]</strong> backport <code>allow-unsafe-pr-checkout</code> to v6 by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2500";>actions/checkout#2500</a></li> <li>backport fixes to releases-v6 by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2527";>actions/checkout#2527</a></li> </ul> <p><a href="https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/";>https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/</a> for more details about this breaking change</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v6.1.0";>https://github.com/actions/checkout/compare/v6.0.3...v6.1.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357";>actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446";>actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth";><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3";>https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang";><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355";>actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2";>https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314";>actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328";>actions/checkout#2328</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1";><code>3d3c42e</code></a> prep v7.0.1 release (<a href="https://redirect.github.com/actions/checkout/issues/2531";>#2531</a>)</li> <li><a href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07";><code>2880268</code></a> escape values passed to --unset (<a href="https://redirect.github.com/actions/checkout/issues/2530";>#2530</a>)</li> <li><a href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1";><code>12cd223</code></a> trim only ascii whitespace for branch (<a href="https://redirect.github.com/actions/checkout/issues/2521";>#2521</a>)</li> <li><a href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541";><code>62661c4</code></a> skip running unsafe pr check if input is default (<a href="https://redirect.github.com/actions/checkout/issues/2518";>#2518</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f";><code>e8d4307</code></a> Bump the minor-actions-dependencies group with 2 updates (<a href="https://redirect.github.com/actions/checkout/issues/2499";>#2499</a>)</li> <li><a href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87";><code>631c942</code></a> eslint 9 (<a href="https://redirect.github.com/actions/checkout/issues/2474";>#2474</a>)</li> <li><a href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e";><code>4f1f4ae</code></a> Bump actions/upload-artifact from 4 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2476";>#2476</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92";><code>ba09753</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2488";>#2488</a>)</li> <li><a href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22";><code>b9e0990</code></a> Bump docker/login-action from 3.3.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2479";>#2479</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2";><code>e8cb398</code></a> Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2478";>#2478</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v4...v7";>compare view</a></li> </ul> </details> <br /> Updates `actions/setup-python` from 5 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases";>actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108";><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1330";>actions/setup-python#1330</a></li> <li>Pin SHA commits and update docs with latest versions by <a href="https://github.com/HarithaVattikuti";><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1338";>actions/setup-python#1338</a></li> <li>Remove the pip-install input by <a href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1336";>actions/setup-python#1336</a></li> </ul> <h3>Bug Fix</h3> <ul> <li>Fix to Classify stderr warning messages as warnings instead of errors in annotations by <a href="https://github.com/lmvysakh";><code>@lmvysakh</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1335";>actions/setup-python#1335</a></li> <li>Validate and retry manifest fetch to prevent silent failures by <a href="https://github.com/priyagupta108";><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1332";>actions/setup-python#1332</a></li> </ul> <h3>Dependency Upgrade</h3> <ul> <li>Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1328";>actions/setup-python#1328</a></li> <li>Remove EOL Python versions and Bumps numpy text fixture by <a href="https://github.com/priya-kinthali";><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1333";>actions/setup-python#1333</a></li> <li>Upgrade <code>@actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai";><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1337";>actions/setup-python#1337</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lmvysakh";><code>@lmvysakh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1335";>actions/setup-python#1335</a></li> <li><a href="https://github.com/philip-gai";><code>@philip-gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1337";>actions/setup-python#1337</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v6...v7.0.0";>https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p> <h2>v6.3.0</h2> <h2>What's Changed</h2> <h3>Enhancement</h3> <ul> <li>Add RHEL support and include Linux distro in cache keys by <a href="https://github.com/priyagupta108";><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1323";>actions/setup-python#1323</a></li> <li>Fix pip cache error handling on Windows by <a href="https://github.com/priyagupta108";><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1040";>actions/setup-python#1040</a></li> </ul> <h3>Dependency update</h3> <ul> <li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1281";>actions/setup-python#1281</a></li> <li>Upgrade actions dependencies by <a href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1303";>actions/setup-python#1303</a></li> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin";><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1324";>actions/setup-python#1324</a></li> <li>Upgrade dependency versions and test workflow configuration by <a href="https://github.com/HarithaVattikuti";><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1322";>actions/setup-python#1322</a></li> </ul> <h3>Documentation</h3> <ul> <li>Update advanced-usage.md by <a href="https://github.com/Dunky-Z";><code>@Dunky-Z</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/811";>actions/setup-python#811</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1303";>actions/setup-python#1303</a></li> <li><a href="https://github.com/jasongin";><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1324";>actions/setup-python#1324</a></li> <li><a href="https://github.com/Dunky-Z";><code>@Dunky-Z</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/811";>actions/setup-python#811</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0";>https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0</a></p> <h2>v6.2.0</h2> <h2>What's Changed</h2> <h3>Dependency Upgrades</h3> <ul> <li>Upgrade dependencies to Node 24 compatible versions by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1259";>actions/setup-python#1259</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/6d4fd22b20465ccc0f7354476588e8df7c9ca0e0";><code>6d4fd22</code></a> Cache upgrade to 6.3.0 (<a href="https://redirect.github.com/actions/setup-python/issues/1370";>#1370</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/ec52d0af729a7c50ced4261d17a07916f43f5b8e";><code>ec52d0a</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.62.0 to 8.71.1 (<a href="https://redirect.github.com/actions/setup-python/issues/1369";>#1369</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/ff73b2463e2f3baa703f830da214b8dfeeaeccf8";><code>ff73b24</code></a> Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (<a href="https://redirect.github.com/actions/setup-python/issues/1363";>#1363</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/0e40890053525508c059c61932a6b8614f9e95db";><code>0e40890</code></a> Bump brace-expansion from 5.0.9 to 5.0.12 (<a href="https://redirect.github.com/actions/setup-python/issues/1365";>#1365</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/3892123fbe74688ccc83ec7c465dc688359e5199";><code>3892123</code></a> Bump ts-jest from 29.4.11 to 29.4.14 (<a href="https://redirect.github.com/actions/setup-python/issues/1361";>#1361</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/660965736c4aecc62797ea07d351a3c259f14660";><code>6609657</code></a> Bump undici from 6.28.0 to 6.29.0 (<a href="https://redirect.github.com/actions/setup-python/issues/1364";>#1364</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/e1be392b26fb1917a7b2c455817e4b4dad6544ce";><code>e1be392</code></a> Bump <code>@types/semver</code> from 7.7.1 to 7.8.0 (<a href="https://redirect.github.com/actions/setup-python/issues/1359";>#1359</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/06da6279cdbca41027908073e81a4544dc79c06b";><code>06da627</code></a> Bump <code>@vercel/ncc</code> from 0.44.0 to 0.45.0 (<a href="https://redirect.github.com/actions/setup-python/issues/1357";>#1357</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/af9bcc7548695e66d75709de6f29e337624b8de8";><code>af9bcc7</code></a> Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (<a href="https://redirect.github.com/actions/setup-python/issues/1342";>#1342</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/7aeabeba5501120d873c50398519dbfd0657031c";><code>7aeabeb</code></a> Bump <code>@typescript-eslint/parser</code> from 8.62.0 to 8.70.0 (<a href="https://redirect.github.com/actions/setup-python/issues/1343";>#1343</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-python/compare/v5...v7";>compare view</a></li> </ul> </details> <br /> Updates `docker/setup-qemu-action` from 3 to 4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-qemu-action/releases";>docker/setup-qemu-action's releases</a>.</em></p> <blockquote> <h2>v4.0.0</h2> <ul> <li>Node 24 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.327.1";>Actions Runner v2.327.1</a> or later) by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/245";>docker/setup-qemu-action#245</a></li> <li>Switch to ESM and update config/test wiring by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/241";>docker/setup-qemu-action#241</a></li> <li>Bump <code>@actions/core</code> from 1.11.1 to 3.0.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/244";>docker/setup-qemu-action#244</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.67.0 to 0.77.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/243";>docker/setup-qemu-action#243</a></li> <li>Bump <code>@isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/240";>docker/setup-qemu-action#240</a></li> <li>Bump js-yaml from 3.14.1 to 3.14.2 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/231";>docker/setup-qemu-action#231</a></li> <li>Bump lodash from 4.17.21 to 4.17.23 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/238";>docker/setup-qemu-action#238</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.7.0...v4.0.0";>https://github.com/docker/setup-qemu-action/compare/v3.7.0...v4.0.0</a></p> <h2>v3.7.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.56.0 to 0.67.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/217";>docker/setup-qemu-action#217</a> <a href="https://redirect.github.com/docker/setup-qemu-action/pull/230";>docker/setup-qemu-action#230</a></li> <li>Bump brace-expansion from 1.1.11 to 1.1.12 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/220";>docker/setup-qemu-action#220</a></li> <li>Bump form-data from 2.5.1 to 2.5.5 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/218";>docker/setup-qemu-action#218</a></li> <li>Bump tmp from 0.2.3 to 0.2.4 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/221";>docker/setup-qemu-action#221</a></li> <li>Bump undici from 5.28.4 to 5.29.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/219";>docker/setup-qemu-action#219</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.6.0...v3.7.0";>https://github.com/docker/setup-qemu-action/compare/v3.6.0...v3.7.0</a></p> <h2>v3.6.0</h2> <ul> <li>Display binfmt version by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/202";>docker/setup-qemu-action#202</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.5.0...v3.6.0";>https://github.com/docker/setup-qemu-action/compare/v3.5.0...v3.6.0</a></p> <h2>v3.5.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.54.0 to 0.56.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/205";>docker/setup-qemu-action#205</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.4.0...v3.5.0";>https://github.com/docker/setup-qemu-action/compare/v3.4.0...v3.5.0</a></p> <h2>v3.4.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.49.0 to 0.54.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/193";>docker/setup-qemu-action#193</a> <a href="https://redirect.github.com/docker/setup-qemu-action/pull/197";>docker/setup-qemu-action#197</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.3.0...v3.4.0";>https://github.com/docker/setup-qemu-action/compare/v3.3.0...v3.4.0</a></p> <h2>v3.3.0</h2> <ul> <li>Add <code>cache-image</code> input to enable/disable caching of binfmt image by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/130";>docker/setup-qemu-action#130</a></li> <li>Bump <code>@actions/core</code> from 1.10.1 to 1.11.1 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/172";>docker/setup-qemu-action#172</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.35.0 to 0.49.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/187";>docker/setup-qemu-action#187</a></li> <li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/182";>docker/setup-qemu-action#182</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/162";>docker/setup-qemu-action#162</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.2.0...v3.3.0";>https://github.com/docker/setup-qemu-action/compare/v3.2.0...v3.3.0</a></p> <h2>v3.2.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.31.0 to 0.35.0 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/154";>docker/setup-qemu-action#154</a> <a href="https://redirect.github.com/docker/setup-qemu-action/pull/155";>docker/setup-qemu-action#155</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v3.1.0...v3.2.0";>https://github.com/docker/setup-qemu-action/compare/v3.1.0...v3.2.0</a></p> <h2>v3.1.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-qemu-action/commit/99012661954931238ded8c8b007157a8430204e1";><code>9901266</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/342";>#342</a> from docker/dependabot/npm_and_yarn/js-yaml-4.3.2</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/9364d8b005eaf92e44e311ad68698e0e4d1fc775";><code>9364d8b</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/340";>#340</a> from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/95c3240fd1cc4bb767d163c4336f203f1f98c8c1";><code>95c3240</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/337";>#337</a> from docker/dependabot/npm_and_yarn/postcss-selector-...</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/c24671a9f635f27130098a37aaa28a0fe899c1f8";><code>c24671a</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/338";>#338</a> from docker/dependabot/github_actions/codeql-actions-...</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/fa83965153d27e053b76aa86ad2b4753aad68c34";><code>fa83965</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/345";>#345</a> from crazy-max/shared-error-helpers</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/f396a658a52c1a0725759b74ea48a6fb8e0e575e";><code>f396a65</code></a> build(deps): bump the codeql-actions group across 1 directory with 2 updates</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/a63df2fb68af6df486c0bcef37b58fa32674f8da";><code>a63df2f</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/3e4165fc6d948cdd283528a2da5d91dca944f777";><code>3e4165f</code></a> use the shared error helper for Docker commands</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/18c52d952150b11a3c9f65b4b5b751ba623d1fd5";><code>18c52d9</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/344";>#344</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/896cbedb64417124655bfd0b9a72fac2f0140044";><code>896cbed</code></a> [dependabot skip] chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-qemu-action/compare/v3...v4";>compare view</a></li> </ul> </details> <br /> Updates `docker/setup-buildx-action` from 3 to 4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases";>docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v4.0.0</h2> <ul> <li>Node 24 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.327.1";>Actions Runner v2.327.1</a> or later) by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/483";>docker/setup-buildx-action#483</a></li> <li>Remove deprecated inputs/outputs by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/464";>docker/setup-buildx-action#464</a></li> <li>Switch to ESM and update config/test wiring by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/481";>docker/setup-buildx-action#481</a></li> <li>Bump <code>@actions/core</code> from 1.11.1 to 3.0.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/475";>docker/setup-buildx-action#475</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.63.0 to 0.79.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/482";>docker/setup-buildx-action#482</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/485";>docker/setup-buildx-action#485</a></li> <li>Bump js-yaml from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/452";>docker/setup-buildx-action#452</a></li> <li>Bump lodash from 4.17.21 to 4.17.23 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/472";>docker/setup-buildx-action#472</a></li> <li>Bump minimatch from 3.1.2 to 3.1.5 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/480";>docker/setup-buildx-action#480</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.12.0...v4.0.0";>https://github.com/docker/setup-buildx-action/compare/v3.12.0...v4.0.0</a></p> <h2>v3.12.0</h2> <ul> <li>Deprecate <code>install</code> input by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/455";>docker/setup-buildx-action#455</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.62.1 to 0.63.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/434";>docker/setup-buildx-action#434</a></li> <li>Bump brace-expansion from 1.1.11 to 1.1.12 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/436";>docker/setup-buildx-action#436</a></li> <li>Bump form-data from 2.5.1 to 2.5.5 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/432";>docker/setup-buildx-action#432</a></li> <li>Bump undici from 5.28.4 to 5.29.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/435";>docker/setup-buildx-action#435</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.11.1...v3.12.0";>https://github.com/docker/setup-buildx-action/compare/v3.11.1...v3.12.0</a></p> <h2>v3.11.1</h2> <ul> <li>Fix <code>keep-state</code> not being respected by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/429";>docker/setup-buildx-action#429</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.11.0...v3.11.1";>https://github.com/docker/setup-buildx-action/compare/v3.11.0...v3.11.1</a></p> <h2>v3.11.0</h2> <ul> <li>Keep BuildKit state support by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/427";>docker/setup-buildx-action#427</a></li> <li>Remove aliases created when installing by default by <a href="https://github.com/hashhar";><code>@hashhar</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/139";>docker/setup-buildx-action#139</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.56.0 to 0.62.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/422";>docker/setup-buildx-action#422</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/425";>docker/setup-buildx-action#425</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.10.0...v3.11.0";>https://github.com/docker/setup-buildx-action/compare/v3.10.0...v3.11.0</a></p> <h2>v3.10.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.54.0 to 0.56.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/408";>docker/setup-buildx-action#408</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.9.0...v3.10.0";>https://github.com/docker/setup-buildx-action/compare/v3.9.0...v3.10.0</a></p> <h2>v3.9.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.48.0 to 0.54.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/402";>docker/setup-buildx-action#402</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/404";>docker/setup-buildx-action#404</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.8.0...v3.9.0";>https://github.com/docker/setup-buildx-action/compare/v3.8.0...v3.9.0</a></p> <h2>v3.8.0</h2> <ul> <li>Make cloud prefix optional to download buildx if driver is cloud by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/390";>docker/setup-buildx-action#390</a></li> <li>Bump <code>@actions/core</code> from 1.10.1 to 1.11.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/370";>docker/setup-buildx-action#370</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.39.0 to 0.48.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/389";>docker/setup-buildx-action#389</a></li> <li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/382";>docker/setup-buildx-action#382</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.7.1...v3.8.0";>https://github.com/docker/setup-buildx-action/compare/v3.7.1...v3.8.0</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-buildx-action/commit/f87e5991a6d7451dcb8d9637bfbc97413f497069";><code>f87e599</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/624";>#624</a> from crazy-max/skip-pull-with-endpoint</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/e7002743e035c0054da46ca559364576b2fce022";><code>e700274</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/3061c919c67ba542099ba309c9181d1900cecc07";><code>3061c91</code></a> skip BuildKit image pre-pulls for explicit endpoints</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/594f3bf4285d9ea8dc53c9a0c9c4092420091003";><code>594f3bf</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/609";>#609</a> from crazy-max/pull-buildkit-image-before-create</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/bd6e702fc33b636671900d5b5edfab64698c9c25";><code>bd6e702</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/6268c9da9abbd1309c8a16a75f92a878715c3032";><code>6268c9d</code></a> pull BuildKit image before builder creation</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/e8235251b82e23c90e6fad50016f0a78b7f28f11";><code>e823525</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/621";>#621</a> from docker/dependabot/github_actions/codeql-actions-...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/533ed8ed095b0b133ef16fb495aad119524e220d";><code>533ed8e</code></a> build(deps): bump the codeql-actions group with 2 updates</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/bedaf135699075c88620cd30772b9b6eadc9ba99";><code>bedaf13</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/620";>#620</a> from crazy-max/shared-error-helpers</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/d5079fba84d5edd23d25ba7f3045122175ca6ee2";><code>d5079fb</code></a> chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-buildx-action/compare/v3...v4";>compare view</a></li> </ul> </details> <br /> Updates `docker/build-push-action` from 6.15.0 to 7.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases";>docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v7.4.0</h2> <ul> <li>Use the shared error helper for Buildx commands by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1620";>docker/build-push-action#1620</a></li> <li>Prevent workflow command injection in metadata logs by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1617";>docker/build-push-action#1617</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.92.0 to 0.100.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1614";>docker/build-push-action#1614</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1618";>docker/build-push-action#1618</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1621";>docker/build-push-action#1621</a></li> <li>Bump <code>@humanfs/node</code> from 0.16.7 to 0.16.8 in <a href="https://redirect.github.com/docker/build-push-action/pull/1609";>docker/build-push-action#1609</a></li> <li>Bump brace-expansion from 1.1.13 to 1.1.18 in <a href="https://redirect.github.com/docker/build-push-action/pull/1592";>docker/build-push-action#1592</a></li> <li>Bump csv-parse from 7.0.0 to 7.0.2 in <a href="https://redirect.github.com/docker/build-push-action/pull/1613";>docker/build-push-action#1613</a></li> <li>Bump js-yaml from 4.3.0 to 4.3.2 in <a href="https://redirect.github.com/docker/build-push-action/pull/1605";>docker/build-push-action#1605</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1615";>docker/build-push-action#1615</a></li> <li>Bump nanoid from 3.3.16 to 3.3.18 in <a href="https://redirect.github.com/docker/build-push-action/pull/1611";>docker/build-push-action#1611</a></li> <li>Bump postcss from 8.5.10 to 8.5.25 in <a href="https://redirect.github.com/docker/build-push-action/pull/1590";>docker/build-push-action#1590</a></li> <li>Bump postcss-selector-parser from 7.1.1 to 7.1.5 in <a href="https://redirect.github.com/docker/build-push-action/pull/1606";>docker/build-push-action#1606</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1577";>docker/build-push-action#1577</a></li> <li>Bump undici from 6.27.0 to 6.28.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1594";>docker/build-push-action#1594</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0";>https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0</a></p> <h2>v7.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1567";>docker/build-push-action#1567</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1545";>docker/build-push-action#1545</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1572";>docker/build-push-action#1572</a></li> <li>Bump <code>@sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1568";>docker/build-push-action#1568</a></li> <li>Bump js-yaml from 4.1.1 to 4.3.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1566";>docker/build-push-action#1566</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/build-push-action/pull/1547";>docker/build-push-action#1547</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1564";>docker/build-push-action#1564</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/build-push-action/pull/1563";>docker/build-push-action#1563</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0";>https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0</a></p> <h2>v7.2.0</h2> <ul> <li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1525";>docker/build-push-action#1525</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.87.0 to 0.90.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1517";>docker/build-push-action#1517</a></li> <li>Bump brace-expansion from 2.0.2 to 5.0.6 in <a href="https://redirect.github.com/docker/build-push-action/pull/1534";>docker/build-push-action#1534</a></li> <li>Bump fast-xml-builder from 1.1.4 to 1.2.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1529";>docker/build-push-action#1529</a></li> <li>Bump fast-xml-parser from 5.5.7 to 5.8.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1521";>docker/build-push-action#1521</a></li> <li>Bump postcss from 8.5.6 to 8.5.10 in <a href="https://redirect.github.com/docker/build-push-action/pull/1526";>docker/build-push-action#1526</a></li> <li>Bump tar from 6.2.1 to 7.5.15 in <a href="https://redirect.github.com/docker/build-push-action/pull/1533";>docker/build-push-action#1533</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.1.0...v7.2.0";>https://github.com/docker/build-push-action/compare/v7.1.0...v7.2.0</a></p> <h2>v7.1.0</h2> <ul> <li>Git context <a href="https://docs.docker.com/build/concepts/context/#url-queries";>query format</a> support by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1505";>docker/build-push-action#1505</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.79.0 to 0.87.0 by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1505";>docker/build-push-action#1505</a></li> <li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a href="https://redirect.github.com/docker/build-push-action/pull/1500";>docker/build-push-action#1500</a></li> <li>Bump fast-xml-parser from 5.4.2 to 5.5.7 in <a href="https://redirect.github.com/docker/build-push-action/pull/1489";>docker/build-push-action#1489</a></li> <li>Bump flatted from 3.3.3 to 3.4.2 in <a href="https://redirect.github.com/docker/build-push-action/pull/1491";>docker/build-push-action#1491</a></li> <li>Bump glob from 10.3.12 to 10.5.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1490";>docker/build-push-action#1490</a></li> <li>Bump handlebars from 4.7.8 to 4.7.9 in <a href="https://redirect.github.com/docker/build-push-action/pull/1497";>docker/build-push-action#1497</a></li> <li>Bump lodash from 4.17.23 to 4.18.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1510";>docker/build-push-action#1510</a></li> <li>Bump picomatch from 4.0.3 to 4.0.4 in <a href="https://redirect.github.com/docker/build-push-action/pull/1496";>docker/build-push-action#1496</a></li> <li>Bump undici from 6.23.0 to 6.24.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1486";>docker/build-push-action#1486</a></li> <li>Bump vite from 7.3.1 to 7.3.2 in <a href="https://redirect.github.com/docker/build-push-action/pull/1509";>docker/build-push-action#1509</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/c3c9e263c25d99ce0380d002d59b67737d91b0dc";><code>c3c9e26</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1621";>#1621</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/459b6741834dcd35f946352017e7675bd2089d42";><code>459b674</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/4dedcb23c91d79c1629bf53ec2c3bcfffef5b34e";><code>4dedcb2</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.99.0 to 0.100.0</li> <li><a href="https://github.com/docker/build-push-action/commit/379bf63a979bd70751945601fa04c50674509952";><code>379bf63</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1620";>#1620</a> from crazy-max/buildx-error-message</li> <li><a href="https://github.com/docker/build-push-action/commit/9877975c9e0b0b661592ff61049069507f9bc2f6";><code>9877975</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/7ed0556ffafb8eb312463411ef0a84a1dfe24d94";><code>7ed0556</code></a> use the shared Buildx error summary helper</li> <li><a href="https://github.com/docker/build-push-action/commit/91670ba5a4df99a24efff8637a78c83fd1b0f6b1";><code>91670ba</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1618";>#1618</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/80dbc8614a5c0ce4356740f69179cf829ecdc79a";><code>80dbc86</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/50cac3a3b6f55e6015d6483d1dd72a3ecb90d20d";><code>50cac3a</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.98.0 to 0.99.0</li> <li><a href="https://github.com/docker/build-push-action/commit/03b4d6cac0163b44733e1fa60adfd6da560ee4d1";><code>03b4d6c</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1617";>#1617</a> from crazy-max/fix-metadata-workflow-commands</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/v6.15.0...v7.4.0";>compare view</a></li> </ul> </details> <br /> Updates `fossas/fossa-action` from 1.5.0 to 2.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fossas/fossa-action/releases";>fossas/fossa-action's releases</a>.</em></p> <blockquote> <h2>v2.0.0</h2> <h2>Breaking change: Node 24 runtime</h2> <p>This action now runs on the <strong>Node 24</strong> GitHub Actions runtime (previously Node 20), via <a href="https://redirect.github.com/fossas/fossa-action/issues/277";>#277</a>.</p> <ul> <li><strong>GitHub-hosted runners:</strong> no action needed.</li> <li><strong>Self-hosted runners:</strong> you must be on a runner version that bundles the Node 24 runtime. Update your runner if you pin <code>fossas/fossa-action@v2</code>.</li> </ul> <p>The <code>@v1</code> line is unchanged and stays on Node 20, so existing <code>@v1</code> users are not affected until they opt into <code>@v2</code>. <strong><a href="https://redirect.github.com/fossas/fossa-action/issues/277";>#277</a> is the only change that touches the action's runtime code (<code>dist/</code>)</strong> — everything else below is CI or dev-tooling only.</p> <h2>Everything in v1.9.0 → v2.0.0</h2> <p><strong>Action runtime</strong></p> <ul> <li>Upgrade to Node.js 24 and Yarn 4 (Corepack, <code>packageManager: [email protected]</code>, <code>engines.node >= 24.0.0</code>) — <a href="https://redirect.github.com/fossas/fossa-action/issues/277";>#277</a></li> </ul> <p><strong>CI / repo tooling</strong> (no effect on consumers)</p> <ul> <li>Fix the repo's <code>fossa test --diff</code> CI step to work with push events (first push to a new branch falls back to diffing the default branch) — <a href="https://redirect.github.com/fossas/fossa-action/issues/278";>#278</a></li> <li>Make dependabot ignore major-version bumps of <code>@types/node</code> — <a href="https://redirect.github.com/fossas/fossa-action/issues/291";>#291</a></li> </ul> <p><strong>Dev-dependency bumps</strong> (no effect on consumers)</p> <ul> <li>eslint 9.39.4 → 10.2.0 → 10.2.1 — <a href="https://redirect.github.com/fossas/fossa-action/issues/288";>#288</a>, <a href="https://redirect.github.com/fossas/fossa-action/issues/297";>#297</a></li> <li><code>@typescript-eslint/eslint-plugin</code> 8.58.0 → 8.58.2 — <a href="https://redirect.github.com/fossas/fossa-action/issues/290";>#290</a>, <a href="https://redirect.github.com/fossas/fossa-action/issues/295";>#295</a></li> <li><code>@types/node</code> 24.12.0 → 24.12.2 — <a href="https://redirect.github.com/fossas/fossa-action/issues/293";>#293</a></li> <li>globals 17.4.0 → 17.5.0 — <a href="https://redirect.github.com/fossas/fossa-action/issues/294";>#294</a></li> <li><code>@eslint/compat</code> 2.0.3 → 2.0.4 — <a href="https://redirect.github.com/fossas/fossa-action/issues/287";>#287</a></li> </ul> <p><strong>Full changelog:</strong> <a href="https://github.com/fossas/fossa-action/compare/v1.9.0...v2.0.0";>https://github.com/fossas/fossa-action/compare/v1.9.0...v2.0.0</a></p> <h2>v1.9.0</h2> <h2>What's Changed</h2> <ul> <li>Bump actions/checkout from 5 to 6 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/fossas/fossa-action/pull/245";>fossas/fossa-action#245</a></li> <li>Bump <code>@actions/tool-cache</code> from 3.0.1 to 4.0.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/fossas/fossa-action/pull/267";>fossas/fossa-action#267</a></li> <li>Bump undici from 6.23.0 to 6.24.1 by <a href="https://github.com/spatten";><code>@spatten</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/275";>fossas/fossa-action#275</a></li> <li>Add CI workflow to auto-rebuild dist by <a href="https://github.com/spatten";><code>@spatten</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/276";>fossas/fossa-action#276</a></li> <li>Bump actions/upload-artifact from 4 to 7 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/fossas/fossa-action/pull/272";>fossas/fossa-action#272</a></li> <li>Add CodeRabbit configuration by <a href="https://github.com/chad-fossa";><code>@chad-fossa</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/271";>fossas/fossa-action#271</a></li> <li>Bump <code>@types/node</code> from 25.2.0 to 25.2.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/fossas/fossa-action/pull/269";>fossas/fossa-action#269</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/chad-fossa";><code>@chad-fossa</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/271";>fossas/fossa-action#271</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fossas/fossa-action/compare/v1.8.0...v1.9.0";>https://github.com/fossas/fossa-action/compare/v1.8.0...v1.9.0</a></p> <h2>v1.8.0</h2> <p>No release notes provided.</p> <h2>v1.7.0</h2> <h2>What's Changed</h2> <ul> <li>Adds an optional working directory option to change where FOSSA analyzes.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fossas/fossa-action/commit/29693cc50323968e039056be419b32989fc5880c";><code>29693cc</code></a> Bump eslint from 10.2.0 to 10.2.1 (<a href="https://redirect.github.com/fossas/fossa-action/issues/297";>#297</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/4edee7200124554c5a36ed2cc009f120ab8880c1";><code>4edee72</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.58.1 to 8.58.2 (<a href="https://redirect.github.com/fossas/fossa-action/issues/295";>#295</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/5ebf75c3bfee573a3a03322df3d4e107253a7a1d";><code>5ebf75c</code></a> Bump globals from 17.4.0 to 17.5.0 (<a href="https://redirect.github.com/fossas/fossa-action/issues/294";>#294</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/c765e946260ced0b9191d1e4e75ed21a863038f1";><code>c765e94</code></a> Bump <code>@types/node</code> from 24.12.0 to 24.12.2 (<a href="https://redirect.github.com/fossas/fossa-action/issues/293";>#293</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/e23f415066a7dc339b434e96fdf7d3bc6cffd50a";><code>e23f415</code></a> Make dependabot ignore major version upgrades to <code>@types/node</code> (<a href="https://redirect.github.com/fossas/fossa-action/issues/291";>#291</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/b36611c58c0499920db6229b1ba91e69ad961c9b";><code>b36611c</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.58.0 to 8.58.1 (<a href="https://redirect.github.com/fossas/fossa-action/issues/290";>#290</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/255120c19d9a8da9c9dce88e29dbd99e5dd08bad";><code>255120c</code></a> Bump <code>@eslint/compat</code> from 2.0.3 to 2.0.4 (<a href="https://redirect.github.com/fossas/fossa-action/issues/287";>#287</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/b5287b2c927d4ef9aec55284a0dfbfcad8269383";><code>b5287b2</code></a> Bump eslint from 9.39.4 to 10.2.0 (<a href="https://redirect.github.com/fossas/fossa-action/issues/288";>#288</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/fd9df067696f64a32aa527903ca709cd147cbb0d";><code>fd9df06</code></a> Fix FOSSA test --diff step to work with push events (<a href="https://redirect.github.com/fossas/fossa-action/issues/278";>#278</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/fca84c84570b3a3e9194f540c7e2c415dbc57323";><code>fca84c8</code></a> Upgrade to Node.js 24 and Yarn 4 (<a href="https://redirect.github.com/fossas/fossa-action/issues/277";>#277</a>)</li> <li>Additional commits viewable in <a href="https://github.com/fossas/fossa-action/compare/93a52ecf7c3ac7eb40f5de77fd69b1a19524de94...29693cc50323968e039056be419b32989fc5880c";>compare view</a></li> </ul> </details> <br /> Updates `gradle/actions` from 4.3.0 to 6.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gradle/actions/releases";>gradle/actions's releases</a>.</em></p> <blockquote> <h2>v6.4.1</h2> <h2>Security fix</h2> <p>This release fixes a security vulnerability in the <code>dependency-submission</code> action: <a href="https://github.com/gradle/actions/security/advisories/GHSA-chpw-2mqm-95cc";>GHSA-chpw-2mqm-95cc</a>. All users should upgrade.</p> <h2>What's Changed</h2> <ul> <li>Combined dependency updates by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/1105";>gradle/actions#1105</a></li> <li>Update to latest Dependency Graph plugin by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/1106";>gradle/actions#1106</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gradle/actions/compare/v6.4.0...v6.4.1";>https://github.com/gradle/actions/compare/v6.4.0...v6.4.1</a></p> <h2>v6.4.0</h2> <h2>Highlights</h2> <h3>Gradle version support status in the Job Summary</h3> <p>The actions now report the support status of every Gradle version used in a workflow, as job annotations and in the Job Summary (<a href="https://redirect.github.com/gradle/actions/issues/1057";>#1057</a>). Thanks to <a href="https://github.com/ov7a";><code>@ov7a</code></a> for the contribution.</p> <table> <thead> <tr> <th>version kind</th> <th>job annotation</th> <th>version table</th> <th>below the table</th> </tr> </thead> <tbody> <tr> <td><strong>End-of-life</strong> — two or more major versions behind the latest release</td> <td>warning</td> <td>:warning:</td> <td>expandable section naming the affected release lines, pointing at the <a href="https://gradle.org/security-subscription/";>Gradle Security Subscription</a></td> </tr> <tr> <td><strong>Out of date</strong> — one major behind, or more than two minors behind on the current major</td> <td>notice</td> <td>:information_source:</td> <td>one-line legend pointing at the <a href="https://docs.gradle.org/current/userguide/feature_lifecycle.html#eol_support";>Gradle release lifecycle</a> docs</td> </tr> <tr> <td><strong>Current</strong></td> <td>none</td> <td>—</td> <td>—</td> </tr> </tbody> </table> <p>Deliberately <em>not</em> reported: patch releases (being on <code>9.7.0</code> when <code>9.7.1</code> exists is not flagged) and pre-releases (release candidates, milestones and snapshots never produce annotations). The latest Gradle release is determined from the wrapper checksum data already bundled with the action, so no network access is required.</p> <p>Note that these annotations are emitted independently of the <code>add-job-summary</code> setting: setting <code>add-job-summary: 'never'</code> suppresses the Job Summary itself, but the warning and notice annotations remain.</p> <h3>Gradle itself is now reported in the dependency graph</h3> <p>The <code>dependency-submission</code> action now applies <strong>v1.5.0</strong> of the <a href="https://github.com/gradle/github-dependency-graph-gradle-plugin";>GitHub Dependency Graph Gradle Plugin</a> (up from v1.4.2) (<a href="https://redirect.github.com/gradle/actions/issues/1069";>#1069</a>).</p> <p>The headline change is that the Gradle Build Tool running the build is now reported as an <code>org.gradle:gradle-core</code> dependency, so that <strong>GitHub can surface known vulnerabilities in the version of Gradle used to run your build</strong>. These are the coordinates that GitHub advisories for the Gradle Build Tool are published against.</p> <p>Details worth knowing:</p> <ul> <li>The entry is always reported as a <strong>direct</strong> dependency with <strong>development</strong> scope.</li> <li>It is <strong>not</strong> affected by the project, configuration or scope filters, so it appears even in graphs that filter aggressively.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gradle/actions/commit/8da46b539cd8fe6ab27ca75128919a18d757604c";><code>8da46b5</code></a> [bot] Update dist directory</li> <li><a href="https://github.com/gradle/actions/commit/dcf6f72a926dbf0c6a1c8dbe7c40d77467057b62";><code>dcf6f72</code></a> Merge commit from fork</li> <li><a href="https://github.com/gradle/actions/commit/bf74269609b0ae7ef19ad3f099fa762688ee2251";><code>bf74269</code></a> Update to latest Dependency Graph plugin (<a href="https://redirect.github.com/gradle/actions/issues/1106";>#1106</a>)</li> <li><a href="https://github.com/gradle/actions/commit/65a6ba9f1dd38c5d1933dd21809fc5c53ecfdc85";><code>65a6ba9</code></a> [bot] Update dist directory</li> <li><a href="https://github.com/gradle/actions/commit/35eba4f16aea864b5e2c2ca7ac957196ccbcb200";><code>35eba4f</code></a> Combined dependency updates (<a href="https://redirect.github.com/gradle/actions/issues/1105";>#1105</a>)</li> <li><a href="https://github.com/gradle/actions/commit/1cff18a4cfab5cd8d4c49a8ccf11c1ad18bb30b9";><code>1cff18a</code></a> Update known wrapper checksums (<a href="https://redirect.github.com/gradle/actions/issues/1075";>#1075</a>)</li> <li><a href="https://github.com/gradle/actions/commit/399f0d30eada823574cf687cf8871154d0fc66e5";><code>399f0d3</code></a> Update known wrapper checksums</li> <li><a href="https://github.com/gradle/actions/commit/ecf8cf2dcee84990dee44a7479c2b268de61e38d";><code>ecf8cf2</code></a> Bump references to Develocity Gradle plugin from 4.5.1 to 4.6.0 (<a href="https://redirect.github.com/gradle/actions/issues/1080";>#1080</a>)</li> <li><a href="https://github.com/gradle/actions/commit/d740e82d5904edb078e85bcd4d9dac332c558508";><code>d740e82</code></a> Bump references to Develocity Gradle plugin from 4.5.1 to 4.6.0</li> <li><a href="https://github.com/gradle/actions/commit/f9f39a915cd0648dca917c72880100a59df96944";><code>f9f39a9</code></a> Bump references to Develocity Gradle plugin from 4.5.0 to 4.5.1 (<a href="https://redirect.github.com/gradle/actions/issues/1072";>#1072</a>)</li> <li>Additional commits viewable in <a href="https://github.com/gradle/actions/compare/v4.3.0...v6.4.1";>compare view</a></li> </ul> </details> <br /> Updates `dorny/paths-filter` from 3 to 4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dorny/paths-filter/releases";>dorny/paths-filter's releases</a>.</em></p> <blockquote> <h2>v4.0.0</h2> <h2>What's Changed</h2> <ul> <li>feat: update action runtime to node24 by <a href="https://github.com/saschabratton";><code>@saschabratton</code></a> in <a href="https://redirect.github.com/dorny/paths-filter/pull/294";>dorny/paths-filter#294</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/saschabratton";><code>@saschabratton</code></a> made their first contribution in <a href="https://redirect.github.com/dorny/paths-filter/pull/294";>dorny/paths-filter#294</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dorny/paths-filter/compare/v3.0.3...v4.0.0";>https://github.com/dorny/paths-filter/compare/v3.0.3...v4.0.0</a></p> <h2>v3.0.4</h2> <h1>What's Changed</h1> <ul> <li>Backporting fix for: <a href="https://github.com/advisories/GHSA-7hc6-8hq5-9q2m";>Escape multi-line filenames in list-files shell and csv output</a></li> </ul> <h2>v3.0.3</h2> <h2>What's Changed</h2> <ul> <li>Add missing predicate-quantifier by <a href="https://github.com/wardpeet";><code>@wardpeet</code></a> in <a href="https://redirect.github.com/dorny/paths-filter/pull/279";>dorny/paths-filter#279</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/wardpeet";><code>@wardpeet</code></a> made their first contribution in <a href="https://redirect.github.com/dorny/paths-filter/pull/279";>dorny/paths-filter#279</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dorny/paths-filter/compare/v3...v3.0.3";>https://github.com/dorny/paths-filter/compare/v3...v3.0.3</a></p> <h2>v3.0.2</h2> <h2>What's Changed</h2> <ul> <li>feat: add config parameter for predicate quantifier by <a href="https://github.com/petermetz";><code>@petermetz</code></a> in <a href="https://redirect.github.com/dorny/paths-filter/pull/224";>dorny/paths-filter#224</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/petermetz";><code>@petermetz</code></a> made their first contribution in <a href="https://redirect.github.com/dorny/paths-filter/pull/224";>dorny/paths-filter#224</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dorny/paths-filter/compare/v3...v3.0.2";>https://github.com/dorny/paths-filter/compare/v3...v3.0.2</a></p> <h2>v3.0.1</h2> <h2>What's Changed</h2> <ul> <li>Compare base and ref when token is empty by <a href="https://github.com/frouioui";><code>@frouioui</code></a> in <a href="https://redirect.github.com/dorny/paths-filter/pull/133";>dorny/paths-filter#133</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/frouioui";><code>@frouioui</code></a> made their first contribution in <a href="https://redirect.github.com/dorny/paths-filter/pull/133";>dorny/paths-filter#133</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dorny/paths-filter/compare/v3...v3.0.1";>https://github.com/dorny/paths-filter/compare/v3...v3.0.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md";>dorny/paths-filter's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v4.0.3</h2> <ul> <li><a href="https://redirect.github.com/dorny/paths-filter/pull/326";>Document safe handling of file list outputs in workflows</a></li> <li><a href="https://github.com/ad... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
