build(deps): bump docker/metadata-action from 3 to 4

[dependabot[bot]]

Bumps docker/metadata-action from 3 to 4.

Release notes

Sourced from docker/metadata-action's releases.

v4.0.0

• Node 16 as default runtime by @​crazy-max (#176)
  • This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.
• Do not sanitize before pattern matching by @​crazy-max (#201)
  • Breaking change with type=match pattern matching

Full Changelog: https://github.com/docker/metadata-action/compare/v3.8.0...v4.0.0

v3.8.0

• Add attribute to enable/disable images by @​crazy-max (#193)
• Add is_default_branch global expression by @​crazy-max (#192 #197 #198)
• Update fixtures (dev) by @​crazy-max (#190)
• Bump semver from 7.3.5 to 7.3.7 (#185)
• Bump moment from 2.29.2 to 2.29.3 (#187)
• Bump csv-parse from 4.16.3 to 5.0.4 (#195)

Full Changelog: https://github.com/docker/metadata-action/compare/v3.7.0...v3.8.0

v3.7.0

• Handle comments for multi-line inputs (#172)
• Missing json output in action.yml (#167)
• Update dev dependencies and workflow (#175)
• Bump minimist from 1.2.5 to 1.2.6 (#182)
• Bump moment from 2.29.1 to 2.29.2 (#180)
• Bump @​actions/github from 5.0.0 to 5.0.1 (#179)
• Bump node-fetch from 2.6.1 to 2.6.7 (#173)

v3.6.2

• Handle raw statement for pre-release (#155 #156)

v3.6.1

• Preserve quotes inside unquoted field (#153)

v3.6.0

• base_ref global expression (#142)
• Trim tags and flavor inputs (#143)
• Bump @​actions/core from 1.5.0 to 1.6.0 (#135)
• Bump ansi-regex from 5.0.0 to 5.0.1 (#134)
• Bump tmpl from 1.0.4 to 1.0.5 (#132)
• Bump csv-parse from 4.16.0 to 4.16.3 (#131)

v3.5.0

• Add global expression date (#121)
• Bump @​actions/core from 1.4.0 to 1.5.0 (#122)

v3.4.1

• Only return edge if branch matches (#115)

v3.4.0

• PEP 440 support (#108)

... (truncated)

Upgrade guide

Sourced from docker/metadata-action's upgrade guide.

Upgrade notes

v2 to v3

• Repository has been moved to docker org. Replace crazy-max/ghaction-docker-meta@v2 with docker/metadata-action@v4
• The default bake target has been changed: ghaction-docker-meta > docker-metadata-action

v1 to v2

• inputs
  • tag-sha
  • tag-edge / tag-edge-branch
  • tag-semver
  • tag-match / tag-match-group
  • tag-latest
  • tag-schedule
  • tag-custom / tag-custom-only
  • label-custom
• Basic workflow
• Semver workflow

inputs

New	Unchanged	Removed
tags	images	tag-sha
flavor	sep-tags	tag-edge
labels	sep-labels	tag-edge-branch
		tag-semver
		tag-match
		tag-match-group
		tag-latest
		tag-schedule
		tag-custom
		tag-custom-only
		label-custom

tag-sha

tags: |
  type=sha

tag-edge / tag-edge-branch

tags: |
  # default branch
  type=edge
</tr></table> 

... (truncated)

Commits

• 69f6fc9 Merge pull request #203 from crazy-max/san-fix
• 2f5b5ae Sanitize tag earlier
• f206c36 Merge pull request #202 from crazy-max/v4-prep
• a20adfa readme: set metadata-action to v4
• 26b9439 Merge pull request #201 from crazy-max/fix-sanitization
• 467883f Merge pull request #176 from crazy-max/node-16
• 5edf56f Node 16 as default runtime
• 678218f Note about image name and tag sanitization
• e44c1fb Do not sanitize before pattern matching
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov[bot]]

Codecov Report

Merging #16 (ab85184) into master (fa1c31b) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #16   +/-   ##
=======================================
  Coverage   65.55%   65.55%           
=======================================
  Files          27       27           
  Lines        1405     1405           
=======================================
  Hits          921      921           
  Misses        413      413           
  Partials       71       71           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update fa1c31b...ab85184. Read the comment docs.

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[dmke]

@dependabot reopen

[dependabot[bot]]

Looks like docker/metadata-action is up-to-date now, so this is no longer needed.