Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

revert disable provenance by default if not set #784

Merged
merged 2 commits into from Jan 30, 2023

Conversation

crazy-max
Copy link
Member

follow-up #781 (comment)

This partially reverts 337a09d but keeps the newly added tests.

This partially reverts 337a09d but
keeps the newly added tests.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
@crazy-max crazy-max merged commit 3b5e802 into docker:master Jan 30, 2023
@crazy-max crazy-max deleted the enable-provenance branch January 30, 2023 18:25
coolguy1771 pushed a commit to coolguy1771/home-ops that referenced this pull request Feb 2, 2023
#2406)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v3.3.1` -> `v4.0.0` |

---

### Release Notes

<details>
<summary>docker/build-push-action</summary>

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Revert disable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMDkuMSIsInVwZGF0ZWRJblZlciI6IjM0LjEwOS4xIn0=-->

Co-authored-by: lumiere-bot <98047013+lumiere-bot[bot]@users.noreply.github.com>
pascalberger pushed a commit to swissgrc/.github that referenced this pull request Feb 3, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v3.3.1` -> `v4.0.0` |

---

### Release Notes

<details>
<summary>docker/build-push-action</summary>

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Revert disable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/swissgrc/.github).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMTkuNSIsInVwZGF0ZWRJblZlciI6IjM0LjExOS41In0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
fuxingloh pushed a commit to BirthdayResearch/jellyfishsdk that referenced this pull request Jul 3, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v3.3.1` -> `v4.1.1` |

---

### Release Notes

<details>
<summary>docker/build-push-action (docker/build-push-action)</summary>

###
[`v4.1.1`](https://togithub.com/docker/build-push-action/releases/tag/v4.1.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.1.0...v4.1.1)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Bump
[@&#8203;docker/actions-toolkit](https://togithub.com/docker/actions-toolkit)
from 0.3.0 to 0.5.0 by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#880

**Full Changelog**:
docker/build-push-action@v4.1.0...v4.1.1

###
[`v4.1.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.1.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.0.0...v4.1.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Switch to actions-toolkit implementation by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#811
[docker/build-push-action#838
[docker/build-push-action#855
[docker/build-push-action#860
[docker/build-push-action#875
- e2e: quay.io by [@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#799
[docker/build-push-action#805
- e2e: local harbor and nexus by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#800
- e2e: add artifactory container registry to test against by
[@&#8203;jedevc](https://togithub.com/jedevc) in
[docker/build-push-action#804
- e2e: add distribution tests by
[@&#8203;jedevc](https://togithub.com/jedevc) in
[docker/build-push-action#814
[docker/build-push-action#815

**Full Changelog**:
docker/build-push-action@v4.0.0...v4.1.0

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Enable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/BirthdayResearch/jellyfishsdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjM1LjE0NC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mergify bot added a commit to ilkka/nisse that referenced this pull request Sep 21, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v1.1.2` -> `v5.0.0` |

---

### Release Notes

<details>
<summary>docker/build-push-action (docker/build-push-action)</summary>

###
[`v5.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v5.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.2.1...v5.0.0)

- Node 20 as default runtime (requires [Actions Runner
v2.308.0](https://togithub.com/actions/runner/releases/tag/v2.308.0) or
later) by [@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#954
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.10.0 to 1.10.1 in
[docker/build-push-action#959

**Full Changelog**:
docker/build-push-action@v4.2.1...v5.0.0

###
[`v4.2.1`](https://togithub.com/docker/build-push-action/releases/tag/v4.2.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.2.0...v4.2.1)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- warn if docker config can't be parsed by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#957

**Full Changelog**:
docker/build-push-action@v4.2.0...v4.2.1

###
[`v4.2.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.2.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.1.1...v4.2.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- display proxy configuration by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#872
- chore(deps): Bump
[@&#8203;docker/actions-toolkit](https://togithub.com/docker/actions-toolkit)
from 0.6.0 to 0.8.0 in
[docker/build-push-action#930
- chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in
[docker/build-push-action#925
- chore(deps): Bump semver from 6.3.0 to 6.3.1 in
[docker/build-push-action#902

**Full Changelog**:
docker/build-push-action@v4.1.1...v4.2.0

###
[`v4.1.1`](https://togithub.com/docker/build-push-action/releases/tag/v4.1.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.1.0...v4.1.1)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Bump
[@&#8203;docker/actions-toolkit](https://togithub.com/docker/actions-toolkit)
from 0.3.0 to 0.5.0 by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#880

**Full Changelog**:
docker/build-push-action@v4.1.0...v4.1.1

###
[`v4.1.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.1.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v4.0.0...v4.1.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Switch to actions-toolkit implementation by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#811
[docker/build-push-action#838
[docker/build-push-action#855
[docker/build-push-action#860
[docker/build-push-action#875
- e2e: quay.io by [@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#799
[docker/build-push-action#805
- e2e: local harbor and nexus by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#800
- e2e: add artifactory container registry to test against by
[@&#8203;jedevc](https://togithub.com/jedevc) in
[docker/build-push-action#804
- e2e: add distribution tests by
[@&#8203;jedevc](https://togithub.com/jedevc) in
[docker/build-push-action#814
[docker/build-push-action#815

**Full Changelog**:
docker/build-push-action@v4.0.0...v4.1.0

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Enable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

###
[`v3.3.1`](https://togithub.com/docker/build-push-action/releases/tag/v3.3.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.0...v3.3.1)

- Disable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;781](https://togithub.com/docker/build-push-action/issues/781))

**Full Changelog**:
docker/build-push-action@v3.3.0...v3.3.1

###
[`v3.3.0`](https://togithub.com/docker/build-push-action/releases/tag/v3.3.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.2.0...v3.3.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Add `attests`, `provenance` and `sbom` inputs by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;746](https://togithub.com/docker/build-push-action/issues/746)
[#&#8203;759](https://togithub.com/docker/build-push-action/issues/759))
- Log GitHub Actions runtime token access controls by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;707](https://togithub.com/docker/build-push-action/issues/707))
- Examples moved to [docs
website](https://docs.docker.com/build/ci/github-actions/examples/) by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;718](https://togithub.com/docker/build-push-action/issues/718))
- Bump minimatch from 3.0.4 to 3.1.2
([#&#8203;732](https://togithub.com/docker/build-push-action/issues/732))
- Bump csv-parse from 5.3.0 to 5.3.3
([#&#8203;729](https://togithub.com/docker/build-push-action/issues/729))
- Bump json5 from 2.2.0 to 2.2.3
([#&#8203;749](https://togithub.com/docker/build-push-action/issues/749))

**Full Changelog**:
docker/build-push-action@v3.2.0...v3.3.0

###
[`v3.2.0`](https://togithub.com/docker/build-push-action/releases/tag/v3.2.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.1.1...v3.2.0)

- Remove workaround for `setOutput` by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;704](https://togithub.com/docker/build-push-action/issues/704))
- Docs: fix Git context link and add more details about subdir support
by [@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;685](https://togithub.com/docker/build-push-action/issues/685))
- Docs: named context by
[@&#8203;baibaratsky](https://togithub.com/baibaratsky) and
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;665](https://togithub.com/docker/build-push-action/issues/665))
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.9.0 to 1.10.0
([#&#8203;667](https://togithub.com/docker/build-push-action/issues/667)
[#&#8203;695](https://togithub.com/docker/build-push-action/issues/695))
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.0.3 to 5.1.1
([#&#8203;696](https://togithub.com/docker/build-push-action/issues/696))

**Full Changelog**:
docker/build-push-action@v3.1.1...v3.2.0

###
[`v3.1.1`](https://togithub.com/docker/build-push-action/releases/tag/v3.1.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.1.0...v3.1.1)

- Fix GitHub token not passed with Git context if subdir defined by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;663](https://togithub.com/docker/build-push-action/issues/663))
- Replace deprecated `fs.rmdir` with `fs.rm` by
[@&#8203;bendrucker](https://togithub.com/bendrucker)
([#&#8203;657](https://togithub.com/docker/build-push-action/issues/657))

**Full Changelog**:
docker/build-push-action@v3.1.0...v3.1.1

###
[`v3.1.0`](https://togithub.com/docker/build-push-action/releases/tag/v3.1.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.0.0...v3.1.0)

- `no-cache-filters` input by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;653](https://togithub.com/docker/build-push-action/issues/653))
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.0.1 to 5.0.3
([#&#8203;619](https://togithub.com/docker/build-push-action/issues/619))
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.6.0 to 1.9.0
([#&#8203;620](https://togithub.com/docker/build-push-action/issues/620)
[#&#8203;637](https://togithub.com/docker/build-push-action/issues/637))
- Bump csv-parse from 5.0.4 to 5.3.0
([#&#8203;623](https://togithub.com/docker/build-push-action/issues/623)
[#&#8203;650](https://togithub.com/docker/build-push-action/issues/650))

**Full Changelog**:
docker/build-push-action@v3.0.0...v3.1.0

###
[`v3.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v3.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.10.0...v3.0.0)

- Node 16 as default runtime by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;564](https://togithub.com/docker/build-push-action/issues/564))
- This requires a minimum [Actions
Runner](https://togithub.com/actions/runner/releases/tag/v2.285.0)
version of v2.285.0, which is by default available in GHES 3.4 or later.
- Standalone mode support by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;601](https://togithub.com/docker/build-push-action/issues/601)
[#&#8203;609](https://togithub.com/docker/build-push-action/issues/609))
- chore: update dev dependencies and workflow by
[@&#8203;crazy-max](https://togithub.com/crazy-max)
([#&#8203;571](https://togithub.com/docker/build-push-action/issues/571))
- Bump [@&#8203;actions/exec](https://togithub.com/actions/exec) from
1.1.0 to 1.1.1
([#&#8203;573](https://togithub.com/docker/build-push-action/issues/573))
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.0.0 to 5.0.1
([#&#8203;582](https://togithub.com/docker/build-push-action/issues/582))
- Bump minimist from 1.2.5 to 1.2.6
([#&#8203;584](https://togithub.com/docker/build-push-action/issues/584))
- Bump semver from 7.3.5 to 7.3.7
([#&#8203;595](https://togithub.com/docker/build-push-action/issues/595))
- Bump csv-parse from 4.16.3 to 5.0.4
([#&#8203;533](https://togithub.com/docker/build-push-action/issues/533))

**Full Changelog**:
docker/build-push-action@v2.10.0...v3.0.0

###
[`v2.10.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.10.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.9.0...v2.10.0)

- Add `imageid` output and use metadata to set `digest` output
([#&#8203;569](https://togithub.com/docker/build-push-action/issues/569))
- Add `build-contexts` input
([#&#8203;563](https://togithub.com/docker/build-push-action/issues/563))
- Enhance outputs display
([#&#8203;559](https://togithub.com/docker/build-push-action/issues/559))

###
[`v2.9.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.9.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.8.0...v2.9.0)

- `add-hosts` input
([#&#8203;553](https://togithub.com/docker/build-push-action/issues/553)
[#&#8203;555](https://togithub.com/docker/build-push-action/issues/555))
- Fix git context subdir example and improve README
([#&#8203;552](https://togithub.com/docker/build-push-action/issues/552))
- Add e2e tests for ACR
([#&#8203;548](https://togithub.com/docker/build-push-action/issues/548))
- Add description on `github-token` option to README
([#&#8203;544](https://togithub.com/docker/build-push-action/issues/544))
- Bump node-fetch from 2.6.1 to 2.6.7
([#&#8203;549](https://togithub.com/docker/build-push-action/issues/549))

###
[`v2.8.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.8.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.7.0...v2.8.0)

- Allow specifying subdirectory with default git context
([#&#8203;531](https://togithub.com/docker/build-push-action/issues/531))
- Add `cgroup-parent`, `shm-size`, `ulimit` inputs
([#&#8203;501](https://togithub.com/docker/build-push-action/issues/501))
- Don't set outputs if empty or nil
([#&#8203;470](https://togithub.com/docker/build-push-action/issues/470))
- docs: example to sanitize tags with metadata-action
([#&#8203;476](https://togithub.com/docker/build-push-action/issues/476))
- docs: wrong syntax to sanitize repo slug
([#&#8203;475](https://togithub.com/docker/build-push-action/issues/475))
- docs: test before pushing your image
([#&#8203;455](https://togithub.com/docker/build-push-action/issues/455))
- readme: remove v1 section
([#&#8203;500](https://togithub.com/docker/build-push-action/issues/500))
- ci: virtual env file system info
([#&#8203;510](https://togithub.com/docker/build-push-action/issues/510))
- dev: update workflow
([#&#8203;499](https://togithub.com/docker/build-push-action/issues/499))
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.5.0 to 1.6.0
([#&#8203;160](https://togithub.com/docker/build-push-action/issues/160))
- Bump ansi-regex from 5.0.0 to 5.0.1
([#&#8203;469](https://togithub.com/docker/build-push-action/issues/469))
- Bump tmpl from 1.0.4 to 1.0.5
([#&#8203;465](https://togithub.com/docker/build-push-action/issues/465))
- Bump csv-parse from 4.16.0 to 4.16.3
([#&#8203;451](https://togithub.com/docker/build-push-action/issues/451)
[#&#8203;459](https://togithub.com/docker/build-push-action/issues/459))

###
[`v2.7.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.7.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.6.1...v2.7.0)

- Add `metadata` output
([#&#8203;412](https://togithub.com/docker/build-push-action/issues/412))
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.4.0 to 1.5.0
([#&#8203;439](https://togithub.com/docker/build-push-action/issues/439))
- Add note to sanitize tags
([#&#8203;426](https://togithub.com/docker/build-push-action/issues/426))
- Cache backend API docs
([#&#8203;406](https://togithub.com/docker/build-push-action/issues/406))
- Git context now supports subdir
([#&#8203;407](https://togithub.com/docker/build-push-action/issues/407))
- Bump codecov/codecov-action from 1 to 2
([#&#8203;415](https://togithub.com/docker/build-push-action/issues/415))

###
[`v2.6.1`](https://togithub.com/docker/build-push-action/releases/tag/v2.6.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.6.0...v2.6.1)

- Small typo and ensure trimmed output
([#&#8203;400](https://togithub.com/docker/build-push-action/issues/400))

###
[`v2.6.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.6.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.5.0...v2.6.0)

- Handle git sha version of buildx
([#&#8203;399](https://togithub.com/docker/build-push-action/issues/399))
- Update dev deps
([#&#8203;393](https://togithub.com/docker/build-push-action/issues/393))
- Use built-in `getExecOutput`
([#&#8203;392](https://togithub.com/docker/build-push-action/issues/392))
- Use `core.getBooleanInput`
([#&#8203;391](https://togithub.com/docker/build-push-action/issues/391))
- Bump csv-parse from 4.15.4 to 4.16.0
([#&#8203;385](https://togithub.com/docker/build-push-action/issues/385))
- Bump [@&#8203;actions/exec](https://togithub.com/actions/exec) from
1.0.4 to 1.1.0
([#&#8203;382](https://togithub.com/docker/build-push-action/issues/382))
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.3.0 to 1.4.0
([#&#8203;383](https://togithub.com/docker/build-push-action/issues/383))
- Bump ws from 7.3.1 to 7.4.6
([#&#8203;375](https://togithub.com/docker/build-push-action/issues/375))

###
[`v2.5.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.5.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.4.0...v2.5.0)

- Fix ref spec for default Git context
([#&#8203;347](https://togithub.com/docker/build-push-action/issues/347))
- Preserve quotes inside unquoted field
([#&#8203;369](https://togithub.com/docker/build-push-action/issues/369))
- Doc: Copy between registries
([#&#8203;362](https://togithub.com/docker/build-push-action/issues/362))
- Doc: Share built image between jobs
([#&#8203;368](https://togithub.com/docker/build-push-action/issues/368))
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 4.0.0 to 5.0.0
([#&#8203;364](https://togithub.com/docker/build-push-action/issues/364))
- Bump hosted-git-info from 2.8.8 to 2.8.9
([#&#8203;356](https://togithub.com/docker/build-push-action/issues/356))
- Bump lodash from 4.17.20 to 4.17.21
([#&#8203;355](https://togithub.com/docker/build-push-action/issues/355))
- Update examples with
[`docker/metadata-action`](https://togithub.com/docker/metadata-action)
([#&#8203;354](https://togithub.com/docker/build-push-action/issues/354))
- Remove os limitation
([#&#8203;349](https://togithub.com/docker/build-push-action/issues/349))
- Fix ref spec for default Git context
([#&#8203;347](https://togithub.com/docker/build-push-action/issues/347))
- Bump csv-parse from 4.15.3 to 4.15.4
([#&#8203;345](https://togithub.com/docker/build-push-action/issues/345))
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.2.6 to 1.3.0
([#&#8203;344](https://togithub.com/docker/build-push-action/issues/344)
[#&#8203;370](https://togithub.com/docker/build-push-action/issues/370))

###
[`v2.4.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.4.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.3.0...v2.4.0)

- Add `network` input for backward compatibility
([#&#8203;338](https://togithub.com/docker/build-push-action/issues/338))
- Fix doc links
([#&#8203;331](https://togithub.com/docker/build-push-action/issues/331))
- Bump y18n from 4.0.0 to 4.0.1
([#&#8203;325](https://togithub.com/docker/build-push-action/issues/325))
- Handle GitHub server URL for default context
([#&#8203;328](https://togithub.com/docker/build-push-action/issues/328))
- Bump semver from 7.3.4 to 7.3.5
([#&#8203;318](https://togithub.com/docker/build-push-action/issues/318))
- Bump csv-parse from 4.15.1 to 4.15.3
([#&#8203;303](https://togithub.com/docker/build-push-action/issues/303))

###
[`v2.3.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.3.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.2.2...v2.3.0)

- Enhance documentation
([#&#8203;299](https://togithub.com/docker/build-push-action/issues/299))
- Add `secret-files` input to be able to use secret file mount
([#&#8203;296](https://togithub.com/docker/build-push-action/issues/296))
- Fix workflow for auto-push impl
([#&#8203;273](https://togithub.com/docker/build-push-action/issues/273))
- Bump csv-parse from 4.14.2 to 4.15.1
([#&#8203;287](https://togithub.com/docker/build-push-action/issues/287))

###
[`v2.2.2`](https://togithub.com/docker/build-push-action/releases/tag/v2.2.2)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.2.1...v2.2.2)

- Use default behavior for `file` flag
([#&#8203;244](https://togithub.com/docker/build-push-action/issues/244))
- Add e2e tests for GAR
([#&#8203;261](https://togithub.com/docker/build-push-action/issues/261))
- Add e2e tests for GCR
([#&#8203;260](https://togithub.com/docker/build-push-action/issues/260))
- Add e2e tests for ECR
([#&#8203;256](https://togithub.com/docker/build-push-action/issues/256))
- Bump csv-parse from 4.14.1 to 4.14.2
([#&#8203;255](https://togithub.com/docker/build-push-action/issues/255))

###
[`v2.2.1`](https://togithub.com/docker/build-push-action/releases/tag/v2.2.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.2.0...v2.2.1)

- Trim input list items
([#&#8203;249](https://togithub.com/docker/build-push-action/issues/249))
- Bump semver from 7.3.2 to 7.3.4
([#&#8203;243](https://togithub.com/docker/build-push-action/issues/243))

###
[`v2.2.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.2.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.1.0...v2.2.0)

- Handle multi-line secret value
([#&#8203;233](https://togithub.com/docker/build-push-action/issues/233))
- Add e2e tests
([#&#8203;235](https://togithub.com/docker/build-push-action/issues/235))
- Bump csv-parse from 4.12.0 to 4.14.1
([#&#8203;218](https://togithub.com/docker/build-push-action/issues/218)
[#&#8203;231](https://togithub.com/docker/build-push-action/issues/231))

###
[`v2.1.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.1.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.0.1...v2.1.0)

- Add `ssh` input
([#&#8203;123](https://togithub.com/docker/build-push-action/issues/123))
- [Handle tags and
labels](https://togithub.com/docker/build-push-action/#handle-tags-and-labels)
example with [Docker meta
action](https://togithub.com/crazy-max/ghaction-docker-meta#readme)
([#&#8203;206](https://togithub.com/docker/build-push-action/issues/206))

###
[`v2.0.1`](https://togithub.com/docker/build-push-action/releases/tag/v2.0.1)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v2.0.0...v2.0.1)

- Cache issue is now fixed
([#&#8203;204](https://togithub.com/docker/build-push-action/issues/204))
- Update troubleshooting notes
([#&#8203;203](https://togithub.com/docker/build-push-action/issues/203)
[#&#8203;100](https://togithub.com/docker/build-push-action/issues/100))
- Fix parsing of secrets containing '=' character
([#&#8203;201](https://togithub.com/docker/build-push-action/issues/201))
- Container based developer flow
([#&#8203;202](https://togithub.com/docker/build-push-action/issues/202))

###
[`v2.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v2.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v1.1.2...v2.0.0)

`v2` of this action includes significant changes and now uses Docker
[Buildx](https://togithub.com/docker/buildx). It extends the `docker
build` command named [buildx](https://togithub.com/docker/buildx) with
the full support of the features provided by [Moby
BuildKit](https://togithub.com/moby/buildkit) builder toolkit. This
includes multi-arch build, build-secrets, remote cache, etc. and
different builder deployment/namespacing options.

It works with 3 new actions
([login](https://togithub.com/docker/login-action),
[setup-buildx](https://togithub.com/docker/setup-buildx-action) and
[setup-qemu](https://togithub.com/docker/setup-qemu-action)) that we
have created. It's also rewritten as a
[typescript-action](https://togithub.com/actions/typescript-action/) to
be as closed as possible of the [GitHub
Runner](https://togithub.com/actions/virtual-environments) during its
execution
([#&#8203;71](https://togithub.com/docker/build-push-action/issues/71)
[#&#8203;92](https://togithub.com/docker/build-push-action/issues/92)).

[Upgrade
notes](https://togithub.com/docker/build-push-action/blob/master/UPGRADE.md)
and many [usage
examples](https://togithub.com/docker/build-push-action#usage) have been
added to handle most use cases.

- Input `path` is now called `context` for consistency with other Docker
build tools
- `path` defaults to current git repository so checkout action is not
required in a workflow
- Rename `dockerfile` input to `file` for consistency with other Docker
build tools
- Rename `always_pull` input to `pull` for consistency with other Docker
build tools
- Add `builder` input to be able to choose a builder instance through
our [setup-buildx
action](https://togithub.com/docker/setup-buildx-action)
- Add
[`platforms`](https://togithub.com/docker/buildx#---platformvaluevalue)
input to support multi-platform builds
- Add [`allow`](https://togithub.com/docker/buildx#--allowentitlement)
input
-   Add [`load`](https://togithub.com/docker/buildx#--load) input
- Add
[`outputs`](https://togithub.com/docker/buildx#-o---outputpath-typetypekeyvalue)
input
- Add
[`cache-from`](https://togithub.com/docker/buildx#--cache-fromnametypetypekeyvalue)
input (`cache_froms` removed)
- Add
[`cache-to`](https://togithub.com/docker/buildx#--cache-tonametypetypekeyvalue)
input
-   Add `secrets` input
-   Review `tags` input
- Remove `repository` input. See [Simple
workflow](https://togithub.com/docker/build-push-action/blob/master/UPGRADE.md#simple-workflow)
for migration
- Remove `username`, `password` and `registry` inputs. Login support
moved to [docker/login-action](https://togithub.com/docker/login-action)
repo
- Remove `tag_with_sha`, `tag_with_ref`, `add_git_labels` inputs. See
[Tags with ref and Git
labels](https://togithub.com/docker/build-push-action/blob/master/UPGRADE.md#tags-with-ref-and-git-labels)
for migration
-   Handle Git context
-   Add `digest` output

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [x] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log [here](https://developer.mend.io/github/ilkka/nisse).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi45Ny4xIiwidXBkYXRlZEluVmVyIjoiMzYuOTcuMSIsInRhcmdldEJyYW5jaCI6InRydW5rIn0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants