ci(deps): bump docker/build-push-action from 6 to 7
Type: Pull Request
State: Open
![dependabot[bot]](https://github.com/dependabot.png){kind=small}
dependabot[bot]Association: Unknown
Comments: 3
(3 months ago)
(24 days ago)
Bumps docker/build-push-action from 6 to 7.
Release notes
Sourced from docker/build-push-action's releases.
v7.0.0
- Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by
@crazy-maxin docker/build-push-action#1470- Remove deprecated
DOCKER_BUILD_NO_SUMMARYandDOCKER_BUILD_EXPORT_RETENTION_DAYSenvs by@crazy-maxin docker/build-push-action#1473- Remove legacy export-build tool support for build summary by
@crazy-maxin docker/build-push-action#1474- Switch to ESM and update config/test wiring by
@crazy-maxin docker/build-push-action#1466- Bump
@actions/corefrom 1.11.1 to 3.0.0 in docker/build-push-action#1454- Bump
@docker/actions-toolkitfrom 0.62.1 to 0.79.0 in docker/build-push-action#1453 docker/build-push-action#1472 docker/build-push-action#1479- Bump minimatch from 3.1.2 to 3.1.5 in docker/build-push-action#1463
Full Changelog: https://github.com/docker/build-push-action/compare/v6.19.2...v7.0.0
v6.19.2
- Preserve port in
GIT_AUTH_TOKENhost by@crazy-maxin docker/build-push-action#1458Full Changelog: https://github.com/docker/build-push-action/compare/v6.19.1...v6.19.2
v6.19.1
- Derive
GIT_AUTH_TOKENhost from GitHub server URL by@crazy-maxin docker/build-push-action#1456Full Changelog: https://github.com/docker/build-push-action/compare/v6.19.0...v6.19.1
v6.19.0
- Scope default git auth token to
github.comby@crazy-maxin docker/build-push-action#1451- Bump brace-expansion from 1.1.11 to 1.1.12 in docker/build-push-action#1396
- Bump form-data from 2.5.1 to 2.5.5 in docker/build-push-action#1391
- Bump js-yaml from 3.14.1 to 3.14.2 in docker/build-push-action#1429
- Bump lodash from 4.17.21 to 4.17.23 in docker/build-push-action#1446
- Bump tmp from 0.2.3 to 0.2.4 in docker/build-push-action#1398
- Bump undici from 5.28.4 to 5.29.0 in docker/build-push-action#1397
Full Changelog: https://github.com/docker/build-push-action/compare/v6.18.0...v6.19.0
v6.18.0
- Bump
@docker/actions-toolkitfrom 0.61.0 to 0.62.1 in docker/build-push-action#1381[!NOTE] Build summary is now supported with Docker Build Cloud.
Full Changelog: https://github.com/docker/build-push-action/compare/v6.17.0...v6.18.0
v6.17.0
- Bump
@docker/actions-toolkitfrom 0.59.0 to 0.61.0 by@crazy-maxin docker/build-push-action#1364[!NOTE] Build record is now exported using the
buildx history exportcommand instead of the legacy export-build tool.Full Changelog: https://github.com/docker/build-push-action/compare/v6.16.0...v6.17.0
v6.16.0
- Handle no default attestations env var by
@crazy-maxin docker/build-push-action#1343
... (truncated)
Commits
d08e5c3Merge pull request #1479 from docker/dependabot/npm_and_yarn/docker/actions-t...cbd2dffchore: update generated contentf76f51fchore(deps): Bump@docker/actions-toolkitfrom 0.78.0 to 0.79.07d03e66Merge pull request #1473 from crazy-max/rm-deprecated-envs98f853dchore: update generated contentcadccf6remove deprecated envs03fe877Merge pull request #1478 from docker/dependabot/github_actions/docker/setup-b...827e366chore(deps): Bump docker/setup-buildx-action from 3 to 4e25db87Merge pull request #1474 from crazy-max/rm-export-build-tool1ac2573Merge pull request #1470 from crazy-max/node24- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Greptile Summary
This PR bumps docker/build-push-action from v6 to v7 in the release workflow, as generated by Dependabot.
- The single-line change updates the action version used to build and push the backend Docker image to GHCR.
- v7 switches the action runtime to Node 24 and removes deprecated environment variables (
DOCKER_BUILD_NO_SUMMARY,DOCKER_BUILD_EXPORT_RETENTION_DAYS), but the workflow does not reference either of those envs, so there is no functional impact from their removal.
Confidence Score: 5/5
Safe to merge — the change is a single-line action version bump with no workflow logic altered.
The only change is bumping docker/build-push-action from v6 to v7. The workflow does not use any of the deprecated environment variables removed in v7, the Node 24 runtime requirement is met by GitHub-hosted ubuntu-latest runners, and no inputs or outputs of the action were changed.
No files require special attention.
Important Files Changed
| Filename | Overview |
|---|---|
| .github/workflows/release.yml | Bumps docker/build-push-action from v6 to v7; no other workflow logic changed. The deprecated envs removed in v7 are not used here, and the workflow does not pin a SHA so it will track the floating v7 tag. |
Reviews (2): Last reviewed commit: "Merge branch 'main' into dependabot/gith..." | Re-trigger Greptile
Package Dependencies
Technical Details
| ID: | 15849588 |
| UUID: | 4158280833 |
| Node ID: | PR_kwDOQu9fPM7OPebh |
| Host: | GitHub |
| Repository: | cgraph-dev/CGraph |