Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the github_actions group with 4 updates: docker/login-action, docker/metadata-action, docker/build-push-action and actions/setup-python.
Updates
docker/login-actionfrom 1.10.0 to 3.0.0Release notes
Sourced from docker/login-action's releases.
... (truncated)
Commits
343f7c4Merge pull request #599 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...aad0f97chore: update generated content2e0cd39build(deps): bump the aws-sdk-dependencies group with 2 updates203bc9cMerge pull request #588 from docker/dependabot/npm_and_yarn/proxy-agent-depen...2199648chore: update generated contentb489376build(deps): bump the proxy-agent-dependencies group with 1 update7c309e7Merge pull request #598 from docker/dependabot/npm_and_yarn/actions/core-1.10.10ccf222chore: update generated content56d703eMerge pull request #597 from docker/dependabot/github_actions/aws-actions/con...24d3b35build(deps): bump@actions/corefrom 1.10.0 to 1.10.1Updates
docker/metadata-actionfrom 3.3.0 to 5.5.0Release notes
Sourced from docker/metadata-action's releases.
... (truncated)
Upgrade guide
Sourced from docker/metadata-action's upgrade guide.
... (truncated)
Commits
dbef880Merge pull request #374 from docker/dependabot/npm_and_yarn/moment-timezone-0...b73e7a7chore: update generated contentb9fba69chore(deps): Bump moment-timezone from 0.5.43 to 0.5.44ac82374Merge pull request #373 from docker/dependabot/npm_and_yarn/moment-2.30.1c92519achore: update generated content3b4179dchore(deps): Bump moment from 2.29.4 to 2.30.10784993Merge pull request #371 from docker/dependabot/npm_and_yarn/docker/actions-to...52c3e9echore: update generated content82a5e67chore(deps): Bump@docker/actions-toolkitfrom 0.16.0 to 0.16.141e1fe3Merge pull request #370 from crazy-max/bake-cwdUpdates
docker/build-push-actionfrom 2.5.0 to 5.1.0Release notes
Sourced from docker/build-push-action's releases.
... (truncated)
Commits
4a13e50Merge pull request #1006 from docker/dependabot/npm_and_yarn/docker/actions-t...7416668chore: update generated contentb4f76a5chore(deps): Bump@docker/actions-toolkitfrom 0.13.0 to 0.14.0b7feb76Merge pull request #1005 from crazy-max/ci-inspectfae8018ci: inspect sbom and provenanceb625868Merge pull request #1004 from crazy-max/ci-update-buildx5193ef1ci: update buildx to latestd3afd77Merge pull request #991 from docker/dependabot/npm_and_yarn/babel/traverse-7....7a786bbMerge pull request #992 from crazy-max/annotationsc66ae3achore: update generated contentUpdates
actions/setup-pythonfrom 4 to 5Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
0a5c615Update action to node20 (#772)0ae5836Add example of GraalPy to docs (#773)b64ffcaupdate actions/checkout to v4 (#761)8d28961Examples now use checkout@v4 (#738)7bc6abbadvanced-usage.md: Encourage the use actions/checkout@v4 (#729)e8111ceBump@babel/traversefrom 7.9.0 to 7.23.2 (#743)a00ea43add fix for graalpy ci (#741)8635b1cChange deprecation comment to past tense (#723)f6cc428Use non-deprecated versions in examples (#724)5f2af21Add GraalPy support (#694)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show