Skip to content

Commit

Permalink
bump(deps): update docker/build-push-action action to v4 (#2125)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v3.3.1` -> `v4.1.1` |

---

### Release Notes

<details>
<summary>docker/build-push-action (docker/build-push-action)</summary>

###
[`v4.1.1`](https://togithub.com/docker/build-push-action/releases/tag/v4.1.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.1.0...v4.1.1)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Bump
[@&#8203;docker/actions-toolkit](https://togithub.com/docker/actions-toolkit)
from 0.3.0 to 0.5.0 by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#880

**Full Changelog**:
docker/build-push-action@v4.1.0...v4.1.1

###
[`v4.1.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.1.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.0.0...v4.1.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Switch to actions-toolkit implementation by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#811
[docker/build-push-action#838
[docker/build-push-action#855
[docker/build-push-action#860
[docker/build-push-action#875
- e2e: quay.io by [@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#799
[docker/build-push-action#805
- e2e: local harbor and nexus by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#800
- e2e: add artifactory container registry to test against by
[@&#8203;jedevc](https://togithub.com/jedevc) in
[docker/build-push-action#804
- e2e: add distribution tests by
[@&#8203;jedevc](https://togithub.com/jedevc) in
[docker/build-push-action#814
[docker/build-push-action#815

**Full Changelog**:
docker/build-push-action@v4.0.0...v4.1.0

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Enable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/BirthdayResearch/jellyfishsdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjM1LjE0NC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] committed Jul 3, 2023
1 parent a154b73 commit 9edce1d
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
Expand Up @@ -95,7 +95,7 @@ jobs:
uses: docker/setup-buildx-action@4b4e9c3e2d4531116a6f8ba8e71fc6e2cb6e6c8c # v2.5.0

- name: Build platforms
uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1
with:
push: false
build-args: APP=${{ matrix.app }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-apps.yml
Expand Up @@ -49,7 +49,7 @@ jobs:
result-encoding: string

- name: Build & Publish
uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1
with:
push: true
build-args: APP=${{ matrix.app }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-ecr.yml
Expand Up @@ -43,7 +43,7 @@ jobs:
result-encoding: string

- name: Build & Publish
uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1
with:
push: true
build-args: APP=${{ matrix.app }}
Expand Down

0 comments on commit 9edce1d

Please sign in to comment.