chore(deps): Bump docker/setup-buildx-action from 3 to 4 - #9
Conversation
dependabot
Bot
added
dependencies
26c1f38 to
ed5531b
Compare
|
@dependabot rebase |
ed5531b to
50d28b1
Compare
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v3 | ||
| uses: docker/setup-buildx-action@v4 |
There was a problem hiding this comment.
HIGH (Bug Hunter): This references docker/setup-buildx-action@v4, a version tag that is not available. The Quay job will fail when GitHub Actions tries to resolve the action.
Suggestion: Use an available release tag, such as docker/setup-buildx-action@v3.
Evidence:
uses: docker/setup-buildx-action@v4
There was a problem hiding this comment.
not a bug: docker/setup-buildx-action@v4 is published (refs/tags/v4 exists upstream, verified via the GitHub API); the build-and-push-quay job on this PR resolved and ran it successfully.
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v3 | ||
| uses: docker/setup-buildx-action@v4 |
There was a problem hiding this comment.
HIGH (Bug Hunter): This references docker/setup-buildx-action@v4, a version tag that is not available. The GHCR job will fail when GitHub Actions tries to resolve the action.
Suggestion: Use an available release tag, such as docker/setup-buildx-action@v3.
Evidence:
uses: docker/setup-buildx-action@v4
There was a problem hiding this comment.
not a bug: docker/setup-buildx-action@v4 is published (refs/tags/v4 exists upstream, verified via the GitHub API); the build-and-push-quay job on this PR resolved and ran it successfully.
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
50d28b1 to
6725c0d
Compare
1 participant
Bumps docker/setup-buildx-action from 3 to 4.
Release notes
Sourced from docker/setup-buildx-action's releases.
... (truncated)
Commits
f87e599Merge pull request #624 from crazy-max/skip-pull-with-endpointe700274chore: update generated content3061c91skip BuildKit image pre-pulls for explicit endpoints594f3bfMerge pull request #609 from crazy-max/pull-buildkit-image-before-createbd6e702chore: update generated content6268c9dpull BuildKit image before builder creatione823525Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...533ed8ebuild(deps): bump the codeql-actions group with 2 updatesbedaf13Merge pull request #620 from crazy-max/shared-error-helpersd5079fbchore: update generated content