[PR #1204] [MERGED] build(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 #1286

New issue

Closed

opened 2026-03-03 12:33:54 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 12:33:54 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fsouza/fake-gcs-server/pull/1204
Author: @dependabot[bot]
Created: 6/9/2023
Status: ✅ Merged
Merged: 6/10/2023
Merged by: @fsouza

Base: main ← Head: dependabot/github_actions/docker/build-push-action-4.1.0

📝 Commits (1)

b6778a3 build(deps): bump docker/build-push-action from 4.0.0 to 4.1.0

📊 Changes

2 files changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/docker-push.yml (+1 -1)
📝 .github/workflows/docker-tests.yml (+1 -1)

📄 Description

Bumps docker/build-push-action from 4.0.0 to 4.1.0.

Release notes

Sourced from docker/build-push-action's releases.

v4.1.0

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Switch to actions-toolkit implementation by @crazy-max in docker/build-push-action#811 docker/build-push-action#838 docker/build-push-action#855 docker/build-push-action#860 docker/build-push-action#875

e2e: quay.io by @crazy-max in docker/build-push-action#799 docker/build-push-action#805

e2e: local harbor and nexus by @crazy-max in docker/build-push-action#800

e2e: add artifactory container registry to test against by @jedevc in docker/build-push-action#804

e2e: add distribution tests by @jedevc in docker/build-push-action#814 docker/build-push-action#815

Full Changelog: https://github.com/docker/build-push-action/compare/v4.0.0...v4.1.0

Commits

44ea916 Merge pull request #875 from docker/dependabot/npm_and_yarn/docker/actions-to...
0167eef update generated content
91bf8bf chore(deps): Bump @docker/actions-toolkit from 0.2.0 to 0.3.0
a799b4d Merge pull request #860 from docker/dependabot/npm_and_yarn/docker/actions-to...
87480bd update generated content
f9efed5 Merge pull request #871 from dvdksn/fix/secret-example-link
3580b78 fix: broken link to secret example docs
91df6b8 Merge pull request #859 from docker/dependabot/github_actions/docker/bake-act...
ea92b18 chore(deps): Bump @docker/actions-toolkit from 0.1.0 to 0.2.0
6f91eb3 chore(deps): Bump docker/bake-action from 2 to 3
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fsouza/fake-gcs-server/pull/1204 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/9/2023 **Status:** ✅ Merged **Merged:** 6/10/2023 **Merged by:** [@fsouza](https://github.com/fsouza) **Base:** `main` ← **Head:** `dependabot/github_actions/docker/build-push-action-4.1.0` --- ### 📝 Commits (1) - [`b6778a3`](https://github.com/fsouza/fake-gcs-server/commit/b6778a3baa8d85444d2a82d79aa3700743acb3dc) build(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 ### 📊 Changes **2 files changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/docker-push.yml` (+1 -1) 📝 `.github/workflows/docker-tests.yml` (+1 -1) </details> ### 📄 Description Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4.0.0 to 4.1.0. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>. <blockquote> <h2>v4.1.0</h2> <blockquote> Note Buildx v0.10 enables support for a minimal <a href="https://slsa.dev/provenance/">SLSA Provenance</a> attestation, which requires support for <a href="https://github.com/opencontainers/image-spec">OCI-compliant</a> multi-platform images. This may introduce issues with registry and runtime support (e.g. <a href="https://redirect.github.com/docker/buildx/issues/1533">Google Cloud Run and AWS Lambda</a>). You can optionally disable the default provenance attestation functionality using <code>provenance: false</code>. </blockquote> <ul> <li>Switch to actions-toolkit implementation by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/811">docker/build-push-action#811</a> <a href="https://redirect.github.com/docker/build-push-action/pull/838">docker/build-push-action#838</a> <a href="https://redirect.github.com/docker/build-push-action/pull/855">docker/build-push-action#855</a> <a href="https://redirect.github.com/docker/build-push-action/pull/860">docker/build-push-action#860</a> <a href="https://redirect.github.com/docker/build-push-action/pull/875">docker/build-push-action#875</a></li> <li>e2e: quay.io by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/799">docker/build-push-action#799</a> <a href="https://redirect.github.com/docker/build-push-action/pull/805">docker/build-push-action#805</a></li> <li>e2e: local harbor and nexus by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/800">docker/build-push-action#800</a></li> <li>e2e: add artifactory container registry to test against by <a href="https://github.com/jedevc"><code>@jedevc</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/804">docker/build-push-action#804</a></li> <li>e2e: add distribution tests by <a href="https://github.com/jedevc"><code>@jedevc</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/814">docker/build-push-action#814</a> <a href="https://redirect.github.com/docker/build-push-action/pull/815">docker/build-push-action#815</a></li> </ul> Full Changelog: <a href="https://github.com/docker/build-push-action/compare/v4.0.0...v4.1.0">https://github.com/docker/build-push-action/compare/v4.0.0...v4.1.0</a> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/44ea916f6c540f9302d50c2b1e5a8dc071f15cdf"><code>44ea916</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/875">#875</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/build-push-action/commit/0167eef179833f48bfa0001f330d5f2d578ca25c"><code>0167eef</code></a> update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/91bf8bfc4d4cac86eb889d345ad6aaf731ac9aff"><code>91bf8bf</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.2.0 to 0.3.0</li> <li><a href="https://github.com/docker/build-push-action/commit/a799b4decf46d51b39dd396f4df5a4343afd30c4"><code>a799b4d</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/860">#860</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/build-push-action/commit/87480bdf698dadcc82974864fc727c54d9aa3311"><code>87480bd</code></a> update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/f9efed53cc1b0364ba947400ac02042bbbaac7fc"><code>f9efed5</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/871">#871</a> from dvdksn/fix/secret-example-link</li> <li><a href="https://github.com/docker/build-push-action/commit/3580b78e04abcedb47a5f22d37372e27f44aea10"><code>3580b78</code></a> fix: broken link to secret example docs</li> <li><a href="https://github.com/docker/build-push-action/commit/91df6b874e498451163feb47610c87c4a218c1ee"><code>91df6b8</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/859">#859</a> from docker/dependabot/github_actions/docker/bake-act...</li> <li><a href="https://github.com/docker/build-push-action/commit/ea92b18afbe5bd9e5e2d5a967eca8e52c0aa9493"><code>ea92b18</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.1.0 to 0.2.0</li> <li><a href="https://github.com/docker/build-push-action/commit/6f91eb31f77739227d3f4853c0ca3263870a31d7"><code>6f91eb3</code></a> chore(deps): Bump docker/bake-action from 2 to 3</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/v4.0.0...v4.1.0">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=4.0.0&new-version=4.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- 🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.