Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update docker/build-push-action action to v4.2.1 #330

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 30, 2023

This PR contains the following updates:

Package Type Update Change
docker/build-push-action action minor v4.1.1 -> v4.2.1

Release Notes

docker/build-push-action (docker/build-push-action)

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource  | package                  | from   | to     |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | docker/build-push-action | v4.1.1 | v4.2.1 |
@renovate renovate bot added dependencies Pull requests that update a dependency file security labels Oct 30, 2023
@renovate
Copy link
Contributor Author

renovate bot commented Oct 30, 2023

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.


  • Branch has one or more failed status checks

@renovate renovate bot assigned timoa Oct 30, 2023
@renovate renovate bot changed the title chore(deps): update docker/build-push-action action to v4.2.1 chore(deps): update docker/build-push-action action to v4.2.1 - autoclosed Feb 19, 2024
@renovate renovate bot closed this Feb 19, 2024
@renovate renovate bot deleted the fix/deps/docker-build-push-action-4.x branch February 19, 2024 19:56
@renovate renovate bot restored the fix/deps/docker-build-push-action-4.x branch February 25, 2024 10:46
@renovate renovate bot changed the title chore(deps): update docker/build-push-action action to v4.2.1 - autoclosed chore(deps): update docker/build-push-action action to v4.2.1 Feb 25, 2024
@renovate renovate bot reopened this Feb 25, 2024
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Scan Summary

Tool Critical High Medium Low Status
Dependency Scan (universal) 0 1 1 0
Shell Script Analysis 0 0 0 0
Security Audit for Infrastructure 0 1 0 0

Recommendation

Looks good ✔️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant