Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the gha-deps group with 7 updates:
3.6.04.1.01.152.01.154.02.10.03.0.04.1.15.0.02.2.03.0.02.2.03.0.04.2.05.0.0Updates
actions/checkoutfrom 3.6.0 to 4.1.0Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
Commits
8ade135Prepare 4.1.0 release (#1496)c533a0aAdd support for partial checkout filters (#1396)72f2cecUpdate README.md for V4 (#1452)3df4ab1Release 4.0.0 (#1447)8b5e8b7Support fetching without the --progress option (#1067)97a652bUpdate default runtime to node20 (#1436)Updates
ruby/setup-rubyfrom 1.152.0 to 1.154.0Commits
52b8784Add truffleruby-23.1.0,truffleruby+graalvm-23.1.09aede54Exclude known failing combination24a61dbyarn upgrade5311f05Add jruby-9.3.11.0cb3f1e4Add ruby-3.3.0-preview24f1c6a7Update actions/checkout to v4b252db7Update ruby version inREADME.mdUpdates
docker/setup-buildx-actionfrom 2.10.0 to 3.0.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
f95db51Merge pull request #267 from docker/dependabot/npm_and_yarn/actions/core-1.10.1998a87cchore: update generated content28bae59build(deps): bump@actions/corefrom 1.10.0 to 1.10.1c215341Merge pull request #264 from crazy-max/update-node2002e9319chore: node 20 as default runtime5c9160echore: update generated content1283140chore: fix author in package.jsonc6afe06vendor: bump@docker/actions-toolkitfrom 0.10.0 to 0.12.0f35e0d5chore: update dev dependenciesbaeb468dev: remove unneeded binariesUpdates
docker/build-push-actionfrom 4.1.1 to 5.0.0Release notes
Sourced from docker/build-push-action's releases.
Commits
0565240Merge pull request #959 from docker/dependabot/npm_and_yarn/actions/core-1.10.13ab07f8chore: update generated contentb9e7e4dchore(deps): Bump@actions/corefrom 1.10.0 to 1.10.104d1a3bMerge pull request #954 from crazy-max/update-node201a4d1a1chore: node 20 as default runtime675965cchore: update generated content58ee34cchore: fix author in package.jsonc97c406fix ProxyConfig type when checking length47d5369vendor: bump@docker/actions-toolkitfrom 0.8.0 to 0.12.08895c74chore: update dev dependenciesUpdates
docker/setup-qemu-actionfrom 2.2.0 to 3.0.0Release notes
Sourced from docker/setup-qemu-action's releases.
Commits
6882732Merge pull request #103 from docker/dependabot/npm_and_yarn/actions/core-1.10.1183f4afchore: update generated contentf174935build(deps): bump@actions/corefrom 1.10.0 to 1.10.12e423ebMerge pull request #89 from docker/dependabot/npm_and_yarn/semver-6.3.1ecc406aBump semver from 6.3.0 to 6.3.112dec5eMerge pull request #102 from crazy-max/update-node20c29b312chore: node 20 as default runtime34ae628chore: update generated content1f3d2e1chore: fix author in package.json277dbe8vendor: bump@docker/actions-toolkitfrom 0.3.0 to 0.12.0Updates
docker/login-actionfrom 2.2.0 to 3.0.0Release notes
Sourced from docker/login-action's releases.
Commits
343f7c4Merge pull request #599 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...aad0f97chore: update generated content2e0cd39build(deps): bump the aws-sdk-dependencies group with 2 updates203bc9cMerge pull request #588 from docker/dependabot/npm_and_yarn/proxy-agent-depen...2199648chore: update generated contentb489376build(deps): bump the proxy-agent-dependencies group with 1 update7c309e7Merge pull request #598 from docker/dependabot/npm_and_yarn/actions/core-1.10.10ccf222chore: update generated content56d703eMerge pull request #597 from docker/dependabot/github_actions/aws-actions/con...24d3b35build(deps): bump@actions/corefrom 1.10.0 to 1.10.1Updates
crazy-max/ghaction-github-labelerfrom 4.2.0 to 5.0.0Release notes
Sourced from crazy-max/ghaction-github-labeler's releases.
Commits
de749cfMerge pull request #198 from crazy-max/dependabot/github_actions/actions/chec...7381649Merge pull request #199 from crazy-max/update-node20e4b824fchore: node 20 as default runtimef20248fchore: update generated content2fae9f6chore: update dev dependencies7ce1845chore: update to node 209230c22chore: update yarn to 3.6.3f6c8f77codecov: update config3bd04aeBump actions/checkout from 3 to 4Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show