Update github-actions - #2

Open

renovate-rancher[bot] wants to merge 1 commit into

mainfrom

renovate/github-actions

renovate-rancher Bot commented Jul 27, 2026 •

edited

Loading

Contributor

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	minor	`v6.0.2` → `v6.1.0`
docker/build-push-action	action	minor	`v7.1.0` → `v7.3.0`
docker/login-action	action	minor	`v4.1.0` → `v4.4.0`	`v4.5.2` (+2)
docker/setup-buildx-action	action	minor	`v4.0.0` → `v4.2.0`
docker/setup-qemu-action	action	minor	`v4.0.0` → `v4.2.0`

Release Notes

actions/checkout (actions/checkout)

`v6.1.0`

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

`v6.0.3`

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

docker/build-push-action (docker/build-push-action)

`v7.3.0`

Preserve names in esbuild bundle by @crazy-max in #1567
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1545 #1572
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1568
Bump js-yaml from 4.1.1 to 4.3.0 in #1566
Bump tmp from 0.2.5 to 0.2.7 in #1547
Bump undici from 6.24.1 to 6.27.0 in #1564
Bump vite from 7.3.2 to 7.3.6 in #1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

`v7.2.0`

Bump @actions/core from 3.0.0 to 3.0.1 in #1525
Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in #1517
Bump brace-expansion from 2.0.2 to 5.0.6 in #1534
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #1529
Bump fast-xml-parser from 5.5.7 to 5.8.0 in #1521
Bump postcss from 8.5.6 to 8.5.10 in #1526
Bump tar from 6.2.1 to 7.5.15 in #1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

`v4.4.0`

Skip empty registry-auth secret mask by @crazy-max in #1035
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 #1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

`v4.3.0`

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.2.0`

Preserve names in esbuild bundle by @crazy-max in #572
Bump @actions/core from 3.0.0 to 3.0.1 in #551
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #557 #580
Bump @sigstore/core from 3.1.0 to 3.2.1 in #573
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #576
Bump js-yaml from 4.1.1 to 5.2.0 in #562
Bump sigstore from 4.1.0 to 4.1.1 in #577
Bump tmp from 0.2.5 to 0.2.7 in #556
Bump undici from 6.25.0 to 6.27.0 in #570
Bump vite from 7.3.2 to 7.3.6 in #569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

`v4.1.0`

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #489
Bump brace-expansion from 1.1.12 to 5.0.6 in #547 #508
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #540
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #496
Bump flatted from 3.3.3 to 3.4.2 in #499
Bump glob from 10.3.12 to 13.0.6 in #495
Bump handlebars from 4.7.8 to 4.7.9 in #504
Bump lodash from 4.17.23 to 4.18.1 in #523
Bump picomatch from 4.0.3 to 4.0.4 in #503
Bump postcss from 8.5.6 to 8.5.10 in #537
Bump tar from 6.2.1 to 7.5.15 in #545
Bump undici from 6.23.0 to 6.25.0 in #492
Bump vite from 7.3.1 to 7.3.2 in #520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.2.0`

Preserve names in esbuild bundle by @crazy-max in #311
Bump @actions/core from 3.0.0 to 3.0.1 in #295
Bump @docker/actions-toolkit from 0.91.0 to 0.92.0 in #315
Bump @sigstore/core from 3.1.0 to 3.2.1 in #312
Bump js-yaml from 4.1.1 to 4.2.0 in #310
Bump tmp from 0.2.6 to 0.2.7 in #304
Bump undici from 6.26.0 to 6.27.0 in #308
Bump vite from 7.3.2 to 7.3.6 in #307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

`v4.1.0`

Add reset input to uninstall current emulators by @crazy-max in #21
Bump @docker/actions-toolkit from 0.77.0 to 0.91.0 in #250 #247
Bump brace-expansion from 1.1.12 to 1.1.15 in #265
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #286
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #255
Bump flatted from 3.3.3 to 3.4.2 in #257
Bump glob from 10.3.15 to 10.5.0 in #254
Bump handlebars from 4.7.8 to 4.7.9 in #262
Bump lodash from 4.17.23 to 4.18.1 in #273
Bump postcss from 8.5.6 to 8.5.10 in #285
Bump tar from 6.2.1 to 7.5.15 in #287
Bump tmp from 0.2.5 to 0.2.6 in #291
Bump undici from 6.23.0 to 6.26.0 in #251
Bump vite from 7.3.1 to 7.3.2 in #271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

renovate-rancher Bot added the dependencies label


          Update github-actions

01a0ba5

renovate-rancher Bot force-pushed the renovate/github-actions branch from 9596704 to 01a0ba5 Compare

July 28, 2026 05:33

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels