Visitar URL original
⬆️ Update docker/build-push-action action to v7 by renovate[bot] · Pull Request #6 · cigaleapp/infrastructure · GitHub
Skip to content

⬆️ Update docker/build-push-action action to v7 - #6

Merged
gwennlbh merged 1 commit into
mainfrom
renovate/docker-build-push-action-7.x
Oct 27, 2026
Merged

gwennlbh merged 1 commit into
mainfrom
renovate/docker-build-push-action-7.x

Conversation

@renovate

@renovate renovate Bot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
docker/build-push-action action major v5 → v7
docker/build-push-action action major v6 → v7

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 09:00 PM and 11:59 PM, only on Sunday (* 21-23 * * 7)
    • Between 12:00 AM and 04:59 PM, only on Monday (* 0-16 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

##### [vv7.4.0](https://github.com/docker/build-push-action/releases/tag/v7.4.0)

- Use the shared error helper for Buildx commands by [@crazy-max](https://github.com/crazy-max) in [#1620](docker/build-push-action#1620)
- Prevent workflow command injection in metadata logs by [@crazy-max](https://github.com/crazy-max) in [#1617](docker/build-push-action#1617)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.100.0 in [#1614](docker/build-push-action#1614) [#1618](docker/build-push-action#1618) [#1621](docker/build-push-action#1621)
- Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1609](docker/build-push-action#1609)
- Bump brace-expansion from 1.1.13 to 1.1.18 in [#1592](docker/build-push-action#1592)
- Bump csv-parse from 7.0.0 to 7.0.2 in [#1613](docker/build-push-action#1613)
- Bump js-yaml from 4.3.0 to 4.3.2 in [#1605](docker/build-push-action#1605) [#1615](docker/build-push-action#1615)
- Bump nanoid from 3.3.16 to 3.3.18 in [#1611](docker/build-push-action#1611)
- Bump postcss from 8.5.10 to 8.5.25 in [#1590](docker/build-push-action#1590)
- Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#1606](docker/build-push-action#1606)
- Bump sigstore from 4.1.0 to 4.1.1 in [#1577](docker/build-push-action#1577)
- Bump undici from 6.27.0 to 6.28.0 in [#1594](docker/build-push-action#1594)

**Full Changelog**: <docker/build-push-action@v7.3.0...v7.4.0>
##### [vv7.3.0](https://github.com/docker/build-push-action/releases/tag/v7.3.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566)
- Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547)
- Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564)
- Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563)

**Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0>
##### [vv7.2.0](https://github.com/docker/build-push-action/releases/tag/v7.2.0)

- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517)
- Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534)
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529)
- Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521)
- Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526)
- Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533)

**Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0>
##### [vv7.1.0](https://github.com/docker/build-push-action/releases/tag/v7.1.0)

- Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505)
- Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500)
- Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489)
- Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491)
- Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490)
- Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497)
- Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510)
- Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496)
- Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486)
- Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509)

**Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0>
##### [vv7.0.0](https://github.com/docker/build-push-action/releases/tag/v7.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470)
- Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473)
- Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479)
- Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463)

**Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0>
##### [vv6.19.2](https://github.com/docker/build-push-action/releases/tag/v6.19.2)

- Preserve port in `GIT_AUTH_TOKEN` host by [@crazy-max](https://github.com/crazy-max) in [#1458](docker/build-push-action#1458)

**Full Changelog**: <docker/build-push-action@v6.19.1...v6.19.2>
##### [vv6.19.1](https://github.com/docker/build-push-action/releases/tag/v6.19.1)

- Derive `GIT_AUTH_TOKEN` host from GitHub server URL by [@crazy-max](https://github.com/crazy-max) in [#1456](docker/build-push-action#1456)

**Full Changelog**: <docker/build-push-action@v6.19.0...v6.19.1>
##### [vv6.19.0](https://github.com/docker/build-push-action/releases/tag/v6.19.0)

- Scope default git auth token to `github.com` by [@crazy-max](https://github.com/crazy-max) in [#1451](docker/build-push-action#1451)
- Bump brace-expansion from 1.1.11 to 1.1.12 in [#1396](docker/build-push-action#1396)
- Bump form-data from 2.5.1 to 2.5.5 in [#1391](docker/build-push-action#1391)
- Bump js-yaml from 3.14.1 to 3.14.2 in [#1429](docker/build-push-action#1429)
- Bump lodash from 4.17.21 to 4.17.23 in [#1446](docker/build-push-action#1446)
- Bump tmp from 0.2.3 to 0.2.4 in [#1398](docker/build-push-action#1398)
- Bump undici from 5.28.4 to 5.29.0 in [#1397](docker/build-push-action#1397)

**Full Changelog**: <docker/build-push-action@v6.18.0...v6.19.0>
##### [vv6.18.0](https://github.com/docker/build-push-action/releases/tag/v6.18.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.61.0 to 0.62.1 in [#1381](docker/build-push-action#1381)

> \[!NOTE]
> [Build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) is now supported with [Docker Build Cloud](https://docs.docker.com/build-cloud/).

**Full Changelog**: <docker/build-push-action@v6.17.0...v6.18.0>
##### [vv6.17.0](https://github.com/docker/build-push-action/releases/tag/v6.17.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.59.0 to 0.61.0 by [@crazy-max](https://github.com/crazy-max) in [#1364](docker/build-push-action#1364)

> \[!NOTE]
> Build record is now exported using the [`buildx history export`](https://docs.docker.com/reference/cli/docker/buildx/history/export/) command instead of the legacy export-build tool.

**Full Changelog**: <docker/build-push-action@v6.16.0...v6.17.0>
##### [vv6.16.0](https://github.com/docker/build-push-action/releases/tag/v6.16.0)

- Handle no default attestations env var by [@crazy-max](https://github.com/crazy-max) in [#1343](docker/build-push-action#1343)
- Only print secret keys in build summary output by [@crazy-max](https://github.com/crazy-max) in [#1353](docker/build-push-action#1353)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.56.0 to 0.59.0 in [#1352](docker/build-push-action#1352)

**Full Changelog**: <docker/build-push-action@v6.15.0...v6.16.0>
##### [vv6.15.0](https://github.com/docker/build-push-action/releases/tag/v6.15.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.55.0 to 0.56.0 in [#1330](docker/build-push-action#1330)

**Full Changelog**: <docker/build-push-action@v6.14.0...v6.15.0>
##### [vv6.14.0](https://github.com/docker/build-push-action/releases/tag/v6.14.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.53.0 to 0.55.0 in [#1324](docker/build-push-action#1324)

**Full Changelog**: <docker/build-push-action@v6.13.0...v6.14.0>
##### [vv6.13.0](https://github.com/docker/build-push-action/releases/tag/v6.13.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.51.0 to 0.53.0 in [#1308](docker/build-push-action#1308)

**Full Changelog**: <docker/build-push-action@v6.12.0...v6.13.0>
##### [vv6.12.0](https://github.com/docker/build-push-action/releases/tag/v6.12.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.49.0 to 0.51.0 in [#1300](docker/build-push-action#1300)

**Full Changelog**: <docker/build-push-action@v6.11.0...v6.12.0>
##### [vv6.11.0](https://github.com/docker/build-push-action/releases/tag/v6.11.0)

- Handlebar `defaultContext` support for `build-contexts` input by [@crazy-max](https://github.com/crazy-max) in [#1283](docker/build-push-action#1283)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.46.0 to 0.49.0 in [#1281](docker/build-push-action#1281)

**Full Changelog**: <docker/build-push-action@v6.10.0...v6.11.0>
##### [vv6.10.0](https://github.com/docker/build-push-action/releases/tag/v6.10.0)

- Add `call` input to set method for evaluating build by [@crazy-max](https://github.com/crazy-max) in [#1265](docker/build-push-action#1265)
- Bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 in [#1238](docker/build-push-action#1238)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.39.0 to 0.46.0 in [#1268](docker/build-push-action#1268)
- Bump cross-spawn from 7.0.3 to 7.0.6 in [#1261](docker/build-push-action#1261)

**Full Changelog**: <docker/build-push-action@v6.9.0...v6.10.0>
##### [vv6.9.0](https://github.com/docker/build-push-action/releases/tag/v6.9.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.38.0 to 0.39.0 in [#1234](docker/build-push-action#1234)
- Bump path-to-regexp from 6.2.2 to 6.3.0 in [#1232](docker/build-push-action#1232)

**Full Changelog**: <docker/build-push-action@v6.8.0...v6.9.0>
##### [vv6.8.0](https://github.com/docker/build-push-action/releases/tag/v6.8.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.37.1 to 0.38.0 in [#1230](docker/build-push-action#1230)

**Full Changelog**: <docker/build-push-action@v6.7.0...v6.8.0>
##### [vv6.7.0](https://github.com/docker/build-push-action/releases/tag/v6.7.0)

- Print info message for build summary support checks by [@crazy-max](https://github.com/crazy-max) in [#1211](docker/build-push-action#1211)

**Full Changelog**: <docker/build-push-action@v6.6.1...v6.7.0>
##### [vv6.6.1](https://github.com/docker/build-push-action/releases/tag/v6.6.1)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.37.0 to 0.37.1 in [#1205](docker/build-push-action#1205)

**Full Changelog**: <docker/build-push-action@v6.6.0...v6.6.1>
##### [vv6.6.0](https://github.com/docker/build-push-action/releases/tag/v6.6.0)

- Generate GitHub annotations for [build checks](https://docs.docker.com/build/checks/) by [@crazy-max](https://github.com/crazy-max) in [#1197](docker/build-push-action#1197)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.35.0 to 0.37.0 in [#1196](docker/build-push-action#1196) [#1198](docker/build-push-action#1198)

**Full Changelog**: <docker/build-push-action@v6.5.0...v6.6.0>
##### [vv6.5.0](https://github.com/docker/build-push-action/releases/tag/v6.5.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.33.0 to 0.35.0 in [#1186](docker/build-push-action#1186) [#1191](docker/build-push-action#1191)

**Full Changelog**: <docker/build-push-action@v6.4.1...v6.5.0>
##### [vv6.4.1](https://github.com/docker/build-push-action/releases/tag/v6.4.1)

- revert "Set `repository` and `ghtoken` attributes for [GitHub Actions cache backend](https://docs.docker.com/build/cache/backends/gha/#avoid-github-actions-cache-api-throttling)" by [@crazy-max](https://github.com/crazy-max) in [#1183](docker/build-push-action#1183)

**Full Changelog**: <docker/build-push-action@v6.4.0...v6.4.1>
##### [vv6.4.0](https://github.com/docker/build-push-action/releases/tag/v6.4.0)

- Set `repository` and `ghtoken` attributes for [GitHub Actions cache backend](https://docs.docker.com/build/cache/backends/gha/#avoid-github-actions-cache-api-throttling) by [@crazy-max](https://github.com/crazy-max) in [#1133](docker/build-push-action#1133)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.31.0 to 0.33.0 in [#1179](docker/build-push-action#1179)

**Full Changelog**: <docker/build-push-action@v6.3.0...v6.4.0>
##### [vv6.3.0](https://github.com/docker/build-push-action/releases/tag/v6.3.0)

- `DOCKER_BUILD_RECORD_UPLOAD` environment variable to enable/disable build record upload by [@crazy-max](https://github.com/crazy-max) in [#1172](docker/build-push-action#1172)
- `DOCKER_BUILD_NO_SUMMARY` has been deprecated. Set `DOCKER_BUILD_SUMMARY` to `false` instead by [@crazy-max](https://github.com/crazy-max) in [#1170](docker/build-push-action#1170) [#1173](docker/build-push-action#1173)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.28.0 to 0.31.0 in [#1171](docker/build-push-action#1171) [#1159](docker/build-push-action#1159) [#1169](docker/build-push-action#1169)

**Full Changelog**: <docker/build-push-action@v6.2.0...v6.3.0>
##### [vv6.2.0](https://github.com/docker/build-push-action/releases/tag/v6.2.0)

- Use default retention days for build export artifact by [@crazy-max](https://github.com/crazy-max) in [#1153](docker/build-push-action#1153)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.27.0 to 0.28.0 in [#1158](docker/build-push-action#1158)

**Full Changelog**: <docker/build-push-action@v6.1.0...v6.2.0>
##### [vv6.1.0](https://github.com/docker/build-push-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.2 to 0.27.0 in [#1149](docker/build-push-action#1149)

**Full Changelog**: <docker/build-push-action@v6.0.2...v6.1.0>
##### [vv6.0.2](https://github.com/docker/build-push-action/releases/tag/v6.0.2)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.1 to 0.26.2 in [#1147](docker/build-push-action#1147)

**Full Changelog**: <docker/build-push-action@v6.0.1...v6.0.2>
##### [vv6.0.1](https://github.com/docker/build-push-action/releases/tag/v6.0.1)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.26.0 to 0.26.1 in [#1142](docker/build-push-action#1142)

**Full Changelog**: <docker/build-push-action@v6.0.0...v6.0.1>
##### [vv6.0.0](https://github.com/docker/build-push-action/releases/tag/v6.0.0)

- Export build record and generate [build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) by [@crazy-max](https://github.com/crazy-max) in [#1120](docker/build-push-action#1120)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.24.0 to 0.26.0 in [#1132](docker/build-push-action#1132) [#1136](docker/build-push-action#1136) [#1138](docker/build-push-action#1138)
- Bump braces from 3.0.2 to 3.0.3 in [#1137](docker/build-push-action#1137)

> \[!NOTE]
> This major release adds support for generating [Build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) and exporting build record for your build. You can disable this feature by setting [ `DOCKER_BUILD_SUMMARY: false` environment variable in your workflow](https://docs.docker.com/build/ci/github-actions/build-summary/#disable-job-summary).

**Full Changelog**: <docker/build-push-action@v5.4.0...v6.0.0>
##### [vv5.4.0](https://github.com/docker/build-push-action/releases/tag/v5.4.0)

- Show builder information before building by [@crazy-max](https://github.com/crazy-max) in [#1128](docker/build-push-action#1128)
- Handle attestations correctly with provenance and sbom inputs by [@crazy-max](https://github.com/crazy-max) in [#1086](docker/build-push-action#1086)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.19.0 to 0.24.0 in [#1088](docker/build-push-action#1088) [#1105](docker/build-push-action#1105) [#1121](docker/build-push-action#1121) [#1127](docker/build-push-action#1127)
- Bump undici from 5.28.3 to 5.28.4 in [#1090](docker/build-push-action#1090)

**Full Changelog**: <docker/build-push-action@v5.3.0...v5.4.0>
##### [vv5.3.0](https://github.com/docker/build-push-action/releases/tag/v5.3.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.18.0 to 0.19.0 in [#1080](docker/build-push-action#1080)

**Full Changelog**: <docker/build-push-action@v5.2.0...v5.3.0>
##### [vv5.2.0](https://github.com/docker/build-push-action/releases/tag/v5.2.0)

- Disable quotes detection for `outputs` input by [@crazy-max](https://github.com/crazy-max) in [#1074](docker/build-push-action#1074)
- Warn about ignored inputs by [@favonia](https://github.com/favonia) in [#1019](docker/build-push-action#1019)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.14.0 to 0.18.0 in [#1070](docker/build-push-action#1070)
- Bump undici from 5.26.3 to 5.28.3 in [#1057](docker/build-push-action#1057)

**Full Changelog**: <docker/build-push-action@v5.1.0...v5.2.0>
##### [vv5.1.0](https://github.com/docker/build-push-action/releases/tag/v5.1.0)

- Add `annotations` input by [@crazy-max](https://github.com/crazy-max) in [#992](docker/build-push-action#992)
- Add `secret-envs` input by [@elias-lundgren](https://github.com/elias-lundgren) in [#980](docker/build-push-action#980)
- Bump [@babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [#991](docker/build-push-action#991)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [#990](docker/build-push-action#990) [#1006](docker/build-push-action#1006)

**Full Changelog**: <docker/build-push-action@v5.0.0...v5.1.0>
@renovate
renovate Bot force-pushed the renovate/docker-build-push-action-7.x branch from f3b80b1 to 3ae21cb Compare October 27, 2026 09:50
@gwennlbh
gwennlbh merged commit d7bff1f into main Oct 27, 2026
1 check passed
@renovate
renovate Bot deleted the renovate/docker-build-push-action-7.x branch October 27, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant