Bump external action references#222
Merged
Merged
Conversation
cloudofficer-admin
previously approved these changes
May 25, 2026
setup-buildx-action@v4 removed the `install` input (docker/setup-buildx-action#464). With the v3→v4 bump in this PR, `install: true` would emit an "Unexpected input(s) 'install'" warning and be ignored. The build runs through docker/build-push-action (not raw `docker build`), so the buildx-as-default-builder behavior is not relied on here. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
cloudofficer-admin
approved these changes
May 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated external action bumps
Bumps external GitHub Action references to their latest upstream major/release.
Generated by
bump-actions/bump-actions.sh(issue #212). Review the linkedrelease notes for breaking changes before merging.
Upstream release notes
actions/attest-build-provenance v4
Release notes not available; see https://github.com/actions/attest-build-provenance/releases
aquasecurity/trivy-action v0.36.0
What's Changed
New Contributors
Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0
aws-actions/configure-aws-credentials v6
Release notes not available; see https://github.com/aws-actions/configure-aws-credentials/releases
docker/build-push-action v7
Release notes not available; see https://github.com/docker/build-push-action/releases
docker/login-action v4
Release notes not available; see https://github.com/docker/login-action/releases
docker/metadata-action v6
Release notes not available; see https://github.com/docker/metadata-action/releases
docker/setup-buildx-action v4
Release notes not available; see https://github.com/docker/setup-buildx-action/releases
webfactory/ssh-agent v0.10.0
This release upgrades from node 20 to node 24, preparing for Node 20's upcoming EOL and getting rid of the related warning message in GitHub.
What's Changed
New Contributors
Full Changelog: webfactory/ssh-agent@v0.9.1...v0.10.0