-
Notifications
You must be signed in to change notification settings - Fork 572
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add secret-envs input #980
Conversation
@crazy-max bumped the toolkit to the rc ;) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It seems you forgot to run docker buildx bake pre-checkin
.
Also can you add a test in
describe('getArgs', () => { |
I was also wondering if we should check for secret id collision but can be a follow-up.
I added some tests that passed here: https://github.com/docker/build-push-action/pull/980/files#diff-35112c3ed4be2816f18f19320c9c2e1fd2d10fede1dbd6ee023d75fe963ea722R622-R664 not sure if they are enough though. Also baked it as you said :) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing input in action.yml
.
Also squash your commits similar to https://github.com/docker/build-push-action/pull/957/commits. Thanks.
Not sure what you mean with the missing input as it is added here: Lines 83 to 85 in 4a0c05c
I will squash the commits :) |
Sorry I'm blind 😅
🙏 |
There we go, hope it's good! |
Sorry for the misunderstanding but I was expected two commits:
I have renamed your PR title so we are aligned. |
Signed-off-by: Elias Lundgren <145569914+elias-lundgren@users.noreply.github.com>
Signed-off-by: Elias Lundgren <145569914+elias-lundgren@users.noreply.github.com>
No worries! Hopefully it's right this time. The actions-toolkit is still on the rc.1, just wanted that known :) |
Yes that's fine! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks!
Thank you! |
[![Mend Renovate logo banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v5.0.0` -> `v5.1.0` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v5.1.0`](https://github.com/docker/build-push-action/releases/tag/v5.1.0) [Compare Source](https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0) - Add `annotations` input by [@​crazy-max](https://github.com/crazy-max) in [https://github.com/docker/build-push-action/pull/992](https://github.com/docker/build-push-action/pull/992) - Add `secret-envs` input by [@​elias-lundgren](https://github.com/elias-lundgren) in [https://github.com/docker/build-push-action/pull/980](https://github.com/docker/build-push-action/pull/980) - Bump [@​babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 by [@​dependabot](https://github.com/dependabot) in [https://github.com/docker/build-push-action/pull/991](https://github.com/docker/build-push-action/pull/991) - Bump [@​docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [https://github.com/docker/build-push-action/pull/990](https://github.com/docker/build-push-action/pull/990) [https://github.com/docker/build-push-action/pull/1006](https://github.com/docker/build-push-action/pull/1006) **Full Changelog**: docker/build-push-action@v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/matter-labs/zksync-withdrawal-finalizer). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[![Mend Renovate logo banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v5.0.0` -> `v5.1.0` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v5.1.0`](https://github.com/docker/build-push-action/releases/tag/v5.1.0) [Compare Source](https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0) - Add `annotations` input by [@​crazy-max](https://github.com/crazy-max) in [https://github.com/docker/build-push-action/pull/992](https://github.com/docker/build-push-action/pull/992) - Add `secret-envs` input by [@​elias-lundgren](https://github.com/elias-lundgren) in [https://github.com/docker/build-push-action/pull/980](https://github.com/docker/build-push-action/pull/980) - Bump [@​babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 by [@​dependabot](https://github.com/dependabot) in [https://github.com/docker/build-push-action/pull/991](https://github.com/docker/build-push-action/pull/991) - Bump [@​docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [https://github.com/docker/build-push-action/pull/990](https://github.com/docker/build-push-action/pull/990) [https://github.com/docker/build-push-action/pull/1006](https://github.com/docker/build-push-action/pull/1006) **Full Changelog**: docker/build-push-action@v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Mogyuchi/gh-test). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v5.0.0` -> `v5.1.0` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v5.1.0`](https://github.com/docker/build-push-action/releases/tag/v5.1.0) [Compare Source](https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0) - Add `annotations` input by [@​crazy-max](https://github.com/crazy-max) in [https://github.com/docker/build-push-action/pull/992](https://github.com/docker/build-push-action/pull/992) - Add `secret-envs` input by [@​elias-lundgren](https://github.com/elias-lundgren) in [https://github.com/docker/build-push-action/pull/980](https://github.com/docker/build-push-action/pull/980) - Bump [@​babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [https://github.com/docker/build-push-action/pull/991](https://github.com/docker/build-push-action/pull/991) - Bump [@​docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [https://github.com/docker/build-push-action/pull/990](https://github.com/docker/build-push-action/pull/990) [https://github.com/docker/build-push-action/pull/1006](https://github.com/docker/build-push-action/pull/1006) **Full Changelog**: docker/build-push-action@v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Rapporteket/docker). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
how exactly does this differ from |
@bendavies the
|
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | minor | `v4.0.0` -> `v4.1.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v5.0.0` -> `v5.1.0` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.1`](https://github.com/actions/checkout/releases/tag/v4.1.1) [Compare Source](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1) ##### What's Changed - Update CODEOWNERS to Launch team by [@​joshmgross](https://github.com/joshmgross) in [https://github.com/actions/checkout/pull/1510](https://github.com/actions/checkout/pull/1510) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [https://github.com/actions/checkout/pull/1511](https://github.com/actions/checkout/pull/1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [https://github.com/actions/checkout/pull/1514](https://github.com/actions/checkout/pull/1514) ##### New Contributors - [@​joshmgross](https://github.com/joshmgross) made their first contribution in [https://github.com/actions/checkout/pull/1510](https://github.com/actions/checkout/pull/1510) - [@​peterbe](https://github.com/peterbe) made their first contribution in [https://github.com/actions/checkout/pull/1511](https://github.com/actions/checkout/pull/1511) **Full Changelog**: actions/checkout@v4.1.0...v4.1.1 ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0) - [Add support for partial checkout filters](https://github.com/actions/checkout/pull/1396) </details> <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v5.1.0`](https://github.com/docker/build-push-action/releases/tag/v5.1.0) [Compare Source](https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0) - Add `annotations` input by [@​crazy-max](https://github.com/crazy-max) in [https://github.com/docker/build-push-action/pull/992](https://github.com/docker/build-push-action/pull/992) - Add `secret-envs` input by [@​elias-lundgren](https://github.com/elias-lundgren) in [https://github.com/docker/build-push-action/pull/980](https://github.com/docker/build-push-action/pull/980) - Bump [@​babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [https://github.com/docker/build-push-action/pull/991](https://github.com/docker/build-push-action/pull/991) - Bump [@​docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.13.0-rc.1 to 0.14.0 in [https://github.com/docker/build-push-action/pull/990](https://github.com/docker/build-push-action/pull/990) [https://github.com/docker/build-push-action/pull/1006](https://github.com/docker/build-push-action/pull/1006) **Full Changelog**: docker/build-push-action@v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/naa0yama/OpenWrt-FortiGate-50E-custom-image). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push- action) from 5 to 6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push- action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <ul> <li>Export build record and generate <a href="https://docs.docker.com/build/ci/github-actions/build- summary/">build summary</a> by <a href="https://github.com/crazy- max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1120">docker/build-push-action#1120</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.24.0 to 0.26.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1132">docker/build-push-action#1132</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1136">docker/build-push-action#1136</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1138">docker/build-push-action#1138</a></li> <li>Bump braces from 3.0.2 to 3.0.3 in <a href="https://redirect.github.com/docker/build-push- action/pull/1137">docker/build-push-action#1137</a></li> </ul> <blockquote> <p>[!NOTE] This major release adds support for generating <a href="https://docs.docker.com/build/ci/github-actions/build- summary/">Build summary</a> and exporting build record for your build. You can disable this feature by setting <a href="https://docs.docker.com/build/ci/github-actions/build- summary/#disable-job-summary"> <code>DOCKER_BUILD_NO_SUMMARY: true</code> environment variable in your workflow</a>.</p> </blockquote> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.4.0...v6.0.0">https://github.com/docker/build-push- action/compare/v5.4.0...v6.0.0</a></p> <h2>v5.4.0</h2> <ul> <li>Show builder information before building by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1128">docker/build-push-action#1128</a></li> <li>Handle attestations correctly with provenance and sbom inputs by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1086">docker/build-push-action#1086</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.19.0 to 0.24.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1088">docker/build-push-action#1088</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1105">docker/build-push-action#1105</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1121">docker/build-push-action#1121</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1127">docker/build-push-action#1127</a></li> <li>Bump undici from 5.28.3 to 5.28.4 in <a href="https://redirect.github.com/docker/build-push- action/pull/1090">docker/build-push-action#1090</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.3.0...v5.4.0">https://github.com/docker/build-push- action/compare/v5.3.0...v5.4.0</a></p> <h2>v5.3.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.18.0 to 0.19.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1080">docker/build-push-action#1080</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.2.0...v5.3.0">https://github.com/docker/build-push- action/compare/v5.2.0...v5.3.0</a></p> <h2>v5.2.0</h2> <ul> <li>Disable quotes detection for <code>outputs</code> input by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1074">docker/build-push-action#1074</a></li> <li>Warn about ignored inputs by <a href="https://github.com/favonia"><code>@favonia</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1019">docker/build-push-action#1019</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.14.0 to 0.18.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1070">docker/build-push-action#1070</a></li> <li>Bump undici from 5.26.3 to 5.28.3 in <a href="https://redirect.github.com/docker/build-push- action/pull/1057">docker/build-push-action#1057</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.1.0...v5.2.0">https://github.com/docker/build-push- action/compare/v5.1.0...v5.2.0</a></p> <h2>v5.1.0</h2> <ul> <li>Add <code>annotations</code> input by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/992">docker/build-push-action#992</a></li> <li>Add <code>secret-envs</code> input by <a href="https://github.com/elias-lundgren"><code>@elias- lundgren</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/980">docker/build-push-action#980</a></li> <li>Bump <code>@babel/traverse</code> from 7.17.3 to 7.23.2 in <a href="https://redirect.github.com/docker/build-push- action/pull/991">docker/build-push-action#991</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.13.0-rc.1 to 0.14.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/990">docker/build-push-action#990</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1006">docker/build-push-action#1006</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.0.0...v5.1.0">https://github.com/docker/build-push- action/compare/v5.0.0...v5.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="docker/build-push-action@31159d49 c0d4756269a0940a750801a1ea5d7003"><code>31159d4</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1149">sagemath#1149</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="docker/build-push-action@07e1c3e1 48c1973f78a15cef24eae4371e57280d"><code>07e1c3e</code></a> chore: update generated content</li> <li><a href="docker/build-push-action@f7febd62 1d13a78cf2751da16b38233f0e819581"><code>f7febd6</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.2 to 0.27.0</li> <li><a href="docker/build-push-action@f6010ea7 0151369b06f0194be1051fbbdff851b2"><code>f6010ea</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1147">sagemath#1147</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="docker/build-push-action@c0a6b968 0fb13e0dc73747f7da2bb27d9f5a3beb"><code>c0a6b96</code></a> chore: update generated content</li> <li><a href="docker/build-push-action@0dfe9c3d 416a6cc790f37ce7704bbab23e3442db"><code>0dfe9c3</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.1 to 0.26.2</li> <li><a href="docker/build-push-action@94f8f8c2 eec4bc3f1d78c1755580779804cb87b2"><code>94f8f8c</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1142">sagemath#1142</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="docker/build-push-action@22f4433c 588020040c09698d8998964f307cd95b"><code>22f4433</code></a> chore: update generated content</li> <li><a href="docker/build-push-action@6721c560 15505c8bc8e7087fae9263d32715d7a3"><code>6721c56</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.0 to 0.26.1</li> <li><a href="docker/build-push-action@4367da97 8b557b70738a51fed31c93e6a240dfb3"><code>4367da9</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1140">sagemath#1140</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push- action/compare/v5...v6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot- badges.githubapp.com/badges/compatibility_score?dependency- name=docker/build-push-action&package-manager=github_actions&previous- version=5&new-version=6)](https://docs.github.com/en/github/managing- security-vulnerabilities/about-dependabot-security-updates#about- compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. URL: sagemath#38267 Reported by: dependabot[bot] Reviewer(s): Kwankyu Lee
Bumps [docker/build-push-action](https://github.com/docker/build-push- action) from 5 to 6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push- action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <ul> <li>Export build record and generate <a href="https://docs.docker.com/build/ci/github-actions/build- summary/">build summary</a> by <a href="https://github.com/crazy- max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1120">docker/build-push-action#1120</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.24.0 to 0.26.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1132">docker/build-push-action#1132</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1136">docker/build-push-action#1136</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1138">docker/build-push-action#1138</a></li> <li>Bump braces from 3.0.2 to 3.0.3 in <a href="https://redirect.github.com/docker/build-push- action/pull/1137">docker/build-push-action#1137</a></li> </ul> <blockquote> <p>[!NOTE] This major release adds support for generating <a href="https://docs.docker.com/build/ci/github-actions/build- summary/">Build summary</a> and exporting build record for your build. You can disable this feature by setting <a href="https://docs.docker.com/build/ci/github-actions/build- summary/#disable-job-summary"> <code>DOCKER_BUILD_NO_SUMMARY: true</code> environment variable in your workflow</a>.</p> </blockquote> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.4.0...v6.0.0">https://github.com/docker/build-push- action/compare/v5.4.0...v6.0.0</a></p> <h2>v5.4.0</h2> <ul> <li>Show builder information before building by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1128">docker/build-push-action#1128</a></li> <li>Handle attestations correctly with provenance and sbom inputs by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1086">docker/build-push-action#1086</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.19.0 to 0.24.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1088">docker/build-push-action#1088</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1105">docker/build-push-action#1105</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1121">docker/build-push-action#1121</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1127">docker/build-push-action#1127</a></li> <li>Bump undici from 5.28.3 to 5.28.4 in <a href="https://redirect.github.com/docker/build-push- action/pull/1090">docker/build-push-action#1090</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.3.0...v5.4.0">https://github.com/docker/build-push- action/compare/v5.3.0...v5.4.0</a></p> <h2>v5.3.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.18.0 to 0.19.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1080">docker/build-push-action#1080</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.2.0...v5.3.0">https://github.com/docker/build-push- action/compare/v5.2.0...v5.3.0</a></p> <h2>v5.2.0</h2> <ul> <li>Disable quotes detection for <code>outputs</code> input by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1074">docker/build-push-action#1074</a></li> <li>Warn about ignored inputs by <a href="https://github.com/favonia"><code>@favonia</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/1019">docker/build-push-action#1019</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.14.0 to 0.18.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/1070">docker/build-push-action#1070</a></li> <li>Bump undici from 5.26.3 to 5.28.3 in <a href="https://redirect.github.com/docker/build-push- action/pull/1057">docker/build-push-action#1057</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.1.0...v5.2.0">https://github.com/docker/build-push- action/compare/v5.1.0...v5.2.0</a></p> <h2>v5.1.0</h2> <ul> <li>Add <code>annotations</code> input by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/992">docker/build-push-action#992</a></li> <li>Add <code>secret-envs</code> input by <a href="https://github.com/elias-lundgren"><code>@elias- lundgren</code></a> in <a href="https://redirect.github.com/docker/build-push- action/pull/980">docker/build-push-action#980</a></li> <li>Bump <code>@babel/traverse</code> from 7.17.3 to 7.23.2 in <a href="https://redirect.github.com/docker/build-push- action/pull/991">docker/build-push-action#991</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.13.0-rc.1 to 0.14.0 in <a href="https://redirect.github.com/docker/build-push- action/pull/990">docker/build-push-action#990</a> <a href="https://redirect.github.com/docker/build-push- action/pull/1006">docker/build-push-action#1006</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push- action/compare/v5.0.0...v5.1.0">https://github.com/docker/build-push- action/compare/v5.0.0...v5.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="docker/build-push-action@31159d49 c0d4756269a0940a750801a1ea5d7003"><code>31159d4</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1149">sagemath#1149</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="docker/build-push-action@07e1c3e1 48c1973f78a15cef24eae4371e57280d"><code>07e1c3e</code></a> chore: update generated content</li> <li><a href="docker/build-push-action@f7febd62 1d13a78cf2751da16b38233f0e819581"><code>f7febd6</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.2 to 0.27.0</li> <li><a href="docker/build-push-action@f6010ea7 0151369b06f0194be1051fbbdff851b2"><code>f6010ea</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1147">sagemath#1147</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="docker/build-push-action@c0a6b968 0fb13e0dc73747f7da2bb27d9f5a3beb"><code>c0a6b96</code></a> chore: update generated content</li> <li><a href="docker/build-push-action@0dfe9c3d 416a6cc790f37ce7704bbab23e3442db"><code>0dfe9c3</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.1 to 0.26.2</li> <li><a href="docker/build-push-action@94f8f8c2 eec4bc3f1d78c1755580779804cb87b2"><code>94f8f8c</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1142">sagemath#1142</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="docker/build-push-action@22f4433c 588020040c09698d8998964f307cd95b"><code>22f4433</code></a> chore: update generated content</li> <li><a href="docker/build-push-action@6721c560 15505c8bc8e7087fae9263d32715d7a3"><code>6721c56</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.0 to 0.26.1</li> <li><a href="docker/build-push-action@4367da97 8b557b70738a51fed31c93e6a240dfb3"><code>4367da9</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push- action/issues/1140">sagemath#1140</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push- action/compare/v5...v6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot- badges.githubapp.com/badges/compatibility_score?dependency- name=docker/build-push-action&package-manager=github_actions&previous- version=5&new-version=6)](https://docs.github.com/en/github/managing- security-vulnerabilities/about-dependabot-security-updates#about- compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. URL: sagemath#38267 Reported by: dependabot[bot] Reviewer(s): Kwankyu Lee
chore(deps): Bump docker/build-push-action from 5 to 6 Bumps docker/build-push-action from 5 to 6. Release notes Sourced from docker/build-push-action's releases. v6.0.0 Export build record and generate build summary by @crazy-max in docker/build-push-action#1120 Bump @docker/actions-toolkit from 0.24.0 to 0.26.0 in docker/build-push-action#1132 docker/build-push-action#1136 docker/build-push-action#1138 Bump braces from 3.0.2 to 3.0.3 in docker/build-push-action#1137 [!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_NO_SUMMARY: true environment variable in your workflow. Full Changelog: docker/build-push-action@v5.4.0...v6.0.0 v5.4.0 Show builder information before building by @crazy-max in docker/build-push-action#1128 Handle attestations correctly with provenance and sbom inputs by @crazy-max in docker/build-push-action#1086 Bump @docker/actions-toolkit from 0.19.0 to 0.24.0 in docker/build-push-action#1088 docker/build-push-action#1105 docker/build-push-action#1121 docker/build-push-action#1127 Bump undici from 5.28.3 to 5.28.4 in docker/build-push-action#1090 Full Changelog: docker/build-push-action@v5.3.0...v5.4.0 v5.3.0 Bump @docker/actions-toolkit from 0.18.0 to 0.19.0 in docker/build-push-action#1080 Full Changelog: docker/build-push-action@v5.2.0...v5.3.0 v5.2.0 Disable quotes detection for outputs input by @crazy-max in docker/build-push-action#1074 Warn about ignored inputs by @favonia in docker/build-push-action#1019 Bump @docker/actions-toolkit from 0.14.0 to 0.18.0 in docker/build-push-action#1070 Bump undici from 5.26.3 to 5.28.3 in docker/build-push-action#1057 Full Changelog: docker/build-push-action@v5.1.0...v5.2.0 v5.1.0 Add annotations input by @crazy-max in docker/build-push-action#992 Add secret-envs input by @elias-lundgren in docker/build-push-action#980 Bump @babel/traverse from 7.17.3 to 7.23.2 in docker/build-push-action#991 Bump @docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in docker/build-push-action#990 docker/build-push-action#1006 Full Changelog: docker/build-push-action@v5.0.0...v5.1.0 Commits 4f58ea7 Merge pull request #1234 from docker/dependabot/npm_and_yarn/docker/actions-t... 49b5ea6 chore: update generated content 13c9fdd chore(deps): Bump @docker/actions-toolkit from 0.38.0 to 0.39.0 e44afff Merge pull request #1232 from docker/dependabot/npm_and_yarn/path-to-regexp-6... 67ebad3 chore(deps): Bump path-to-regexp from 6.2.2 to 6.3.0 32945a3 Merge pull request #1230 from docker/dependabot/npm_and_yarn/docker/actions-t... e0fe9cf chore: update generated content 8f1ff6b chore(deps): Bump @docker/actions-toolkit from 0.37.1 to 0.38.0 5cd11c3 Merge pull request #1211 from crazy-max/summary-info-message 0aba704 chore: update generated content Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Reviewed-by: Vladimir Vshivkov
Makes use of implementation in docker/actions-toolkit@a1ffbe9 and the fix in docker/actions-toolkit#176.
A new version of the npm package (@docker/actions-toolkit) with the fix implemented in the pull request has to be released before this can be merged as I understand it.
That version should be bumped in package-lock.json/package.json as well but I don't know if dependabot or me should do it.