Skip to content

Bump hashicorp/actions-docker-build from 2.2.0 to 2.3.0 - #417

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/hashicorp/actions-docker-build-2.3.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/hashicorp/actions-docker-build-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps hashicorp/actions-docker-build from 2.2.0 to 2.3.0.

Release notes

Sourced from hashicorp/actions-docker-build's releases.

v2.2.1

"## Changes in v2.2.1

  • Updated internal workflows to avoid Node.js deprecation warnings
  • Already using actions/download-artifact@v8.0.1 (Node.js 24 support)

Migration

No action required."

Changelog

Sourced from hashicorp/actions-docker-build's changelog.

Changelog - Docker Build Action

v2.3.0

  • Added: New repo_name input parameter to allow configuring the repository name used for tarball artifact naming. This enables building artifacts with consistent naming when releasing from different repositories (e.g., enterprise vs OSS repos).

v1.3.1

  • Resolve issue where the internal auto tag was invalid with enterprise versions.

v1.3.0

No entries.

v1.2.2

  • Better handling of enterprise versions and complex version strings, e.g. 1.2.3+ent-fips.XYZ now interpreted correctly.

v1.2.1

  • Fix for REPO_NAME not being set when calling the workflow from a schedule.`

v1.2.0

  • Fixing issue with docker buildx targeting arm cpus from amd64 host
  • Add capability to run docker images smoke test in CI

v1.1.0

  • Fixed: When setting workdir: that directory is used for downloading the binary artifact. This fixes the issue where it was possible to download the artifact to a place outside of the docker build context (i.e. where it was not accessible).

  • Changed: No longer performs checkout, expects caller to have already checked out. This fixes an issue where mutations to the repository are needed prior to building. Note that this mutation is probably an anti-pattern, but it's not this action's responsibility to force users' hands one way or the other over this.

  • Changed: Added some simple tests, see .github/workflows/test.yml.

v1.0.1

  • Changed: The automatic tags now include the version, matching the tarball name.

v1.0.0

... (truncated)

Commits
  • 595f293 Merge pull request #127 from hashicorp/release-v2.3.0
  • 07dec20 Release v2.3.0
  • 4e0c63a Merge pull request #114 from hashicorp/ryan/VAULT-34830-allow-repo-configuration
  • e12557a Merge pull request #125 from hashicorp/rsc/update-github-actions
  • bb354b4 Update Github actions to avoid the node.js 20 deprecation warning
  • 1f2ec17 Merge pull request #124 from hashicorp/rsc/bump-github-actions
  • 9804bdb Update internal github action workflows to avoid the Node 20 deprecation
  • e028f0f [COMPLIANCE] Update Copyright and License Headers (#119)
  • 0ecbfab Bump actions/setup-go from 5.5.0 to 6.0.0 (#109)
  • 37aad27 Bump actions/checkout from 4.2.2 to 5.0.0 (#108)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hashicorp/actions-docker-build](https://github.com/hashicorp/actions-docker-build) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/hashicorp/actions-docker-build/releases)
- [Changelog](https://github.com/hashicorp/actions-docker-build/blob/main/CHANGELOG.md)
- [Commits](hashicorp/actions-docker-build@2002543...595f293)

---
updated-dependencies:
- dependency-name: hashicorp/actions-docker-build
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 28, 2026 06:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants