Skip to content

Commit bce5e65

Browse files
chore(ci): Bump docker/build-push-action from 4.1.0 to 4.1.1 (#17687)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4.1.0 to 4.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <blockquote> <p><strong>Note</strong></p> <p>Buildx v0.10 enables support for a minimal <a href="https://slsa.dev/provenance/">SLSA Provenance</a> attestation, which requires support for <a href="https://github.com/opencontainers/image-spec">OCI-compliant</a> multi-platform images. This may introduce issues with registry and runtime support (e.g. <a href="https://redirect.github.com/docker/buildx/issues/1533">Google Cloud Run and AWS Lambda</a>). You can optionally disable the default provenance attestation functionality using <code>provenance: false</code>.</p> </blockquote> <ul> <li>Bump <code>@​docker/actions-toolkit</code> from 0.3.0 to 0.5.0 by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/880">docker/build-push-action#880</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v4.1.0...v4.1.1">https://github.com/docker/build-push-action/compare/v4.1.0...v4.1.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/2eb1c1961a95fc15694676618e422e8ba1d63825"><code>2eb1c19</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/880">#880</a> from crazy-max/fix-inputlist</li> <li><a href="https://github.com/docker/build-push-action/commit/27376fe2fcc0da80d871a59efbf2454a9239121e"><code>27376fe</code></a> update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/c9330004c22cd512c18fa9663d4b6d3709892c3a"><code>c933000</code></a> test: build-arg with hash</li> <li><a href="https://github.com/docker/build-push-action/commit/dac08d41adbeac0e0e02b4bf31591be75f3784db"><code>dac08d4</code></a> chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.3.0 to 0.5.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v4.1.0...v4.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 71273df commit bce5e65

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

.github/workflows/environment.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ jobs:
6363
org.opencontainers.image.title=Vector development environment
6464
org.opencontainers.image.url=https://github.com/vectordotdev/vector
6565
- name: Build and push
66-
uses: docker/[email protected].0
66+
uses: docker/[email protected].1
6767
with:
6868
context: .
6969
file: ./scripts/environment/Dockerfile

.github/workflows/regression.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -298,7 +298,7 @@ jobs:
298298
uses: docker/[email protected]
299299

300300
- name: Build 'vector' target image
301-
uses: docker/[email protected].0
301+
uses: docker/[email protected].1
302302
with:
303303
context: baseline-vector/
304304
cache-from: type=gha
@@ -335,7 +335,7 @@ jobs:
335335
uses: docker/[email protected]
336336

337337
- name: Build 'vector' target image
338-
uses: docker/[email protected].0
338+
uses: docker/[email protected].1
339339
with:
340340
context: comparison-vector/
341341
cache-from: type=gha

0 commit comments

Comments
 (0)