[PR #1315] [MERGED] build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1 #1383

New issue

Closed

opened 2026-03-03 12:34:21 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 12:34:21 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fsouza/fake-gcs-server/pull/1315
Author: @dependabot[bot]
Created: 9/8/2023
Status: ✅ Merged
Merged: 9/9/2023
Merged by: @fsouza

Base: main ← Head: dependabot/github_actions/docker/build-push-action-4.2.1

📝 Commits (1)

f3ddd1d build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1

📊 Changes

2 files changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/docker-push.yml (+1 -1)
📝 .github/workflows/docker-tests.yml (+1 -1)

📄 Description

Bumps docker/build-push-action from 4.1.1 to 4.2.1.

Release notes

Sourced from docker/build-push-action's releases.

v4.2.1

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

warn if docker config can't be parsed by @crazy-max in docker/build-push-action#957

Full Changelog: https://github.com/docker/build-push-action/compare/v4.2.0...v4.2.1

v4.2.0

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

display proxy configuration by @crazy-max in docker/build-push-action#872

chore(deps): Bump @docker/actions-toolkit from 0.6.0 to 0.8.0 in docker/build-push-action#930

chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in docker/build-push-action#925

chore(deps): Bump semver from 6.3.0 to 6.3.1 in docker/build-push-action#902

Full Changelog: https://github.com/docker/build-push-action/compare/v4.1.1...v4.2.0

Commits

0a97817 Merge pull request #957 from crazy-max/warn-docker-config
ec39ef3 chore: update generated content
f46044b warn if docker config can't be parsed
4e4ee68 Merge pull request #951 from crazy-max/ci-concurrency
e86cf55 ci: missing concurrency checks
daa0106 Merge pull request #949 from docker/dependabot/github_actions/actions/checkout-4
ce51e90 chore(deps): Bump actions/checkout from 3 to 4
1fde163 Merge pull request #950 from crazy-max/fix-ci
ae311c5 ci: fix workflow
9311bf5 Merge pull request #932 from crazy-max/form-templates
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fsouza/fake-gcs-server/pull/1315 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 9/8/2023 **Status:** ✅ Merged **Merged:** 9/9/2023 **Merged by:** [@fsouza](https://github.com/fsouza) **Base:** `main` ← **Head:** `dependabot/github_actions/docker/build-push-action-4.2.1` --- ### 📝 Commits (1) - [`f3ddd1d`](https://github.com/fsouza/fake-gcs-server/commit/f3ddd1dc554032c6a798cb0e7617c368f3ec55c6) build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1 ### 📊 Changes **2 files changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/docker-push.yml` (+1 -1) 📝 `.github/workflows/docker-tests.yml` (+1 -1) </details> ### 📄 Description Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4.1.1 to 4.2.1. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>. <blockquote> <h2>v4.2.1</h2> <blockquote> Note Buildx v0.10 enables support for a minimal <a href="https://slsa.dev/provenance/">SLSA Provenance</a> attestation, which requires support for <a href="https://github.com/opencontainers/image-spec">OCI-compliant</a> multi-platform images. This may introduce issues with registry and runtime support (e.g. <a href="https://redirect.github.com/docker/buildx/issues/1533">Google Cloud Run and AWS Lambda</a>). You can optionally disable the default provenance attestation functionality using <code>provenance: false</code>. </blockquote> <ul> <li>warn if docker config can't be parsed by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/957">docker/build-push-action#957</a></li> </ul> Full Changelog: <a href="https://github.com/docker/build-push-action/compare/v4.2.0...v4.2.1">https://github.com/docker/build-push-action/compare/v4.2.0...v4.2.1</a> <h2>v4.2.0</h2> <blockquote> Note Buildx v0.10 enables support for a minimal <a href="https://slsa.dev/provenance/">SLSA Provenance</a> attestation, which requires support for <a href="https://github.com/opencontainers/image-spec">OCI-compliant</a> multi-platform images. This may introduce issues with registry and runtime support (e.g. <a href="https://redirect.github.com/docker/buildx/issues/1533">Google Cloud Run and AWS Lambda</a>). You can optionally disable the default provenance attestation functionality using <code>provenance: false</code>. </blockquote> <ul> <li>display proxy configuration by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/872">docker/build-push-action#872</a></li> <li>chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.6.0 to 0.8.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/930">docker/build-push-action#930</a></li> <li>chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in <a href="https://redirect.github.com/docker/build-push-action/pull/925">docker/build-push-action#925</a></li> <li>chore(deps): Bump semver from 6.3.0 to 6.3.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/902">docker/build-push-action#902</a></li> </ul> Full Changelog: <a href="https://github.com/docker/build-push-action/compare/v4.1.1...v4.2.0">https://github.com/docker/build-push-action/compare/v4.1.1...v4.2.0</a> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/0a97817b6ade9f46837855d676c4cca3a2471fc9"><code>0a97817</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/957">#957</a> from crazy-max/warn-docker-config</li> <li><a href="https://github.com/docker/build-push-action/commit/ec39ef320c442d2af669fd8555e7f3b7ad7026bd"><code>ec39ef3</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/f46044b799d766d2bb3e644bd48da06b6c30a978"><code>f46044b</code></a> warn if docker config can't be parsed</li> <li><a href="https://github.com/docker/build-push-action/commit/4e4ee680f69700760d5620a94c020aef883043aa"><code>4e4ee68</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/951">#951</a> from crazy-max/ci-concurrency</li> <li><a href="https://github.com/docker/build-push-action/commit/e86cf554b69aa5dfd1179937926b6d0cf6550be7"><code>e86cf55</code></a> ci: missing concurrency checks</li> <li><a href="https://github.com/docker/build-push-action/commit/daa0106f78eed71cdc2a900489ce515acedeef64"><code>daa0106</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/949">#949</a> from docker/dependabot/github_actions/actions/checkout-4</li> <li><a href="https://github.com/docker/build-push-action/commit/ce51e905a661fc760fece3d76496f92e48beb8df"><code>ce51e90</code></a> chore(deps): Bump actions/checkout from 3 to 4</li> <li><a href="https://github.com/docker/build-push-action/commit/1fde16337d494a70a6a0d6c3f24486b201a6a873"><code>1fde163</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/950">#950</a> from crazy-max/fix-ci</li> <li><a href="https://github.com/docker/build-push-action/commit/ae311c520f6e620595e7fcb93d4f61d6a5573b5e"><code>ae311c5</code></a> ci: fix workflow</li> <li><a href="https://github.com/docker/build-push-action/commit/9311bf5263ae5b36f3ec67aff768790c6e2344ad"><code>9311bf5</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/932">#932</a> from crazy-max/form-templates</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/v4.1.1...v4.2.1">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=4.1.1&new-version=4.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- 🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.