Update docker/build-push-action action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	major	v1.1.2 -> v5.0.0

---

Release Notes

docker/build-push-action (docker/build-push-action)

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in https://github.com/docker/build-push-action/pull/954
• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/docker/build-push-action/pull/959

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in https://github.com/docker/build-push-action/pull/880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/build-push-action/pull/811 https://github.com/docker/build-push-action/pull/838 https://github.com/docker/build-push-action/pull/855 https://github.com/docker/build-push-action/pull/860 https://github.com/docker/build-push-action/pull/875
• e2e: quay.io by @​crazy-max in https://github.com/docker/build-push-action/pull/799 https://github.com/docker/build-push-action/pull/805
• e2e: local harbor and nexus by @​crazy-max in https://github.com/docker/build-push-action/pull/800
• e2e: add artifactory container registry to test against by @​jedevc in https://github.com/docker/build-push-action/pull/804
• e2e: add distribution tests by @​jedevc in https://github.com/docker/build-push-action/pull/814 https://github.com/docker/build-push-action/pull/815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Enable provenance by default if not set by @​crazy-max in https://github.com/docker/build-push-action/pull/784

Full Changelog: docker/build-push-action@v3.3.1...v4.0.0

v3.3.1

Compare Source

• Disable provenance by default if not set by @​crazy-max (#​781)

Full Changelog: docker/build-push-action@v3.3.0...v3.3.1

v3.3.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Add attests, provenance and sbom inputs by @​crazy-max (#​746 #​759)
• Log GitHub Actions runtime token access controls by @​crazy-max (#​707)
• Examples moved to docs website by @​crazy-max (#​718)
• Bump minimatch from 3.0.4 to 3.1.2 (#​732)
• Bump csv-parse from 5.3.0 to 5.3.3 (#​729)
• Bump json5 from 2.2.0 to 2.2.3 (#​749)

Full Changelog: docker/build-push-action@v3.2.0...v3.3.0

v3.2.0

Compare Source

• Remove workaround for setOutput by @​crazy-max (#​704)
• Docs: fix Git context link and add more details about subdir support by @​crazy-max (#​685)
• Docs: named context by @​baibaratsky and @​crazy-max (#​665)
• Bump @​actions/core from 1.9.0 to 1.10.0 (#​667 #​695)
• Bump @​actions/github from 5.0.3 to 5.1.1 (#​696)

Full Changelog: docker/build-push-action@v3.1.1...v3.2.0

v3.1.1

Compare Source

• Fix GitHub token not passed with Git context if subdir defined by @​crazy-max (#​663)
• Replace deprecated fs.rmdir with fs.rm by @​bendrucker (#​657)

Full Changelog: docker/build-push-action@v3.1.0...v3.1.1

v3.1.0

Compare Source

• no-cache-filters input by @​crazy-max (#​653)
• Bump @​actions/github from 5.0.1 to 5.0.3 (#​619)
• Bump @​actions/core from 1.6.0 to 1.9.0 (#​620 #​637)
• Bump csv-parse from 5.0.4 to 5.3.0 (#​623 #​650)

Full Changelog: docker/build-push-action@v3.0.0...v3.1.0

v3.0.0

Compare Source

• Node 16 as default runtime by @​crazy-max (#​564)
  • This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.
• Standalone mode support by @​crazy-max (#​601 #​609)
• chore: update dev dependencies and workflow by @​crazy-max (#​571)
• Bump @​actions/exec from 1.1.0 to 1.1.1 (#​573)
• Bump @​actions/github from 5.0.0 to 5.0.1 (#​582)
• Bump minimist from 1.2.5 to 1.2.6 (#​584)
• Bump semver from 7.3.5 to 7.3.7 (#​595)
• Bump csv-parse from 4.16.3 to 5.0.4 (#​533)

Full Changelog: docker/build-push-action@v2.10.0...v3.0.0

v2.10.0

Compare Source

• Add imageid output and use metadata to set digest output (#​569)
• Add build-contexts input (#​563)
• Enhance outputs display (#​559)

v2.9.0

Compare Source

• add-hosts input (#​553 #​555)
• Fix git context subdir example and improve README (#​552)
• Add e2e tests for ACR (#​548)
• Add description on github-token option to README (#​544)
• Bump node-fetch from 2.6.1 to 2.6.7 (#​549)

v2.8.0

Compare Source

• Allow specifying subdirectory with default git context (#​531)
• Add cgroup-parent, shm-size, ulimit inputs (#​501)
• Don't set outputs if empty or nil (#​470)
• docs: example to sanitize tags with metadata-action (#​476)
• docs: wrong syntax to sanitize repo slug (#​475)
• docs: test before pushing your image (#​455)
• readme: remove v1 section (#​500)
• ci: virtual env file system info (#​510)
• dev: update workflow (#​499)
• Bump @​actions/core from 1.5.0 to 1.6.0 (#​160)
• Bump ansi-regex from 5.0.0 to 5.0.1 (#​469)
• Bump tmpl from 1.0.4 to 1.0.5 (#​465)
• Bump csv-parse from 4.16.0 to 4.16.3 (#​451 #​459)

v2.7.0

Compare Source

• Add metadata output (#​412)
• Bump @​actions/core from 1.4.0 to 1.5.0 (#​439)
• Add note to sanitize tags (#​426)
• Cache backend API docs (#​406)
• Git context now supports subdir (#​407)
• Bump codecov/codecov-action from 1 to 2 (#​415)

v2.6.1

Compare Source

• Small typo and ensure trimmed output (#​400)

v2.6.0

Compare Source

• Handle git sha version of buildx (#​399)
• Update dev deps (#​393)
• Use built-in getExecOutput (#​392)
• Use core.getBooleanInput (#​391)
• Bump csv-parse from 4.15.4 to 4.16.0 (#​385)
• Bump @​actions/exec from 1.0.4 to 1.1.0 (#​382)
• Bump @​actions/core from 1.3.0 to 1.4.0 (#​383)
• Bump ws from 7.3.1 to 7.4.6 (#​375)

v2.5.0

Compare Source

• Fix ref spec for default Git context (#​347)
• Preserve quotes inside unquoted field (#​369)
• Doc: Copy between registries (#​362)
• Doc: Share built image between jobs (#​368)
• Bump @​actions/github from 4.0.0 to 5.0.0 (#​364)
• Bump hosted-git-info from 2.8.8 to 2.8.9 (#​356)
• Bump lodash from 4.17.20 to 4.17.21 (#​355)
• Update examples with docker/metadata-action (#​354)
• Remove os limitation (#​349)
• Fix ref spec for default Git context (#​347)
• Bump csv-parse from 4.15.3 to 4.15.4 (#​345)
• Bump @​actions/core from 1.2.6 to 1.3.0 (#​344 #​370)

v2.4.0

Compare Source

• Add network input for backward compatibility (#​338)
• Fix doc links (#​331)
• Bump y18n from 4.0.0 to 4.0.1 (#​325)
• Handle GitHub server URL for default context (#​328)
• Bump semver from 7.3.4 to 7.3.5 (#​318)
• Bump csv-parse from 4.15.1 to 4.15.3 (#​303)

v2.3.0

Compare Source

• Enhance documentation (#​299)
• Add secret-files input to be able to use secret file mount (#​296)
• Fix workflow for auto-push impl (#​273)
• Bump csv-parse from 4.14.2 to 4.15.1 (#​287)

v2.2.2

Compare Source

• Use default behavior for file flag (#​244)
• Add e2e tests for GAR (#​261)
• Add e2e tests for GCR (#​260)
• Add e2e tests for ECR (#​256)
• Bump csv-parse from 4.14.1 to 4.14.2 (#​255)

v2.2.1

Compare Source

• Trim input list items (#​249)
• Bump semver from 7.3.2 to 7.3.4 (#​243)

v2.2.0

Compare Source

• Handle multi-line secret value (#​233)
• Add e2e tests (#​235)
• Bump csv-parse from 4.12.0 to 4.14.1 (#​218 #​231)

v2.1.0

Compare Source

• Add ssh input (#​123)
• Handle tags and labels example with Docker meta action (#​206)

v2.0.1

Compare Source

• Cache issue is now fixed (#​204)
• Update troubleshooting notes (#​203 #​100)
• Fix parsing of secrets containing '=' character (#​201)
• Container based developer flow (#​202)

v2.0.0

Compare Source

v2 of this action includes significant changes and now uses Docker Buildx. It extends the docker build command named buildx with the full support of the features provided by Moby BuildKit builder toolkit. This includes multi-arch build, build-secrets, remote cache, etc. and different builder deployment/namespacing options.

It works with 3 new actions (login, setup-buildx and setup-qemu) that we have created. It's also rewritten as a typescript-action to be as closed as possible of the GitHub Runner during its execution (#​71 #​92).

Upgrade notes and many usage examples have been added to handle most use cases.

• Input path is now called context for consistency with other Docker build tools
• path defaults to current git repository so checkout action is not required in a workflow
• Rename dockerfile input to file for consistency with other Docker build tools
• Rename always_pull input to pull for consistency with other Docker build tools
• Add builder input to be able to choose a builder instance through our setup-buildx action
• Add platforms input to support multi-platform builds
• Add allow input
• Add load input
• Add outputs input
• Add cache-from input (cache_froms removed)
• Add cache-to input
• Add secrets input
• Review tags input
• Remove repository input. See Simple workflow for migration
• Remove username, password and registry inputs. Login support moved to docker/login-action repo
• Remove tag_with_sha, tag_with_ref, add_git_labels inputs. See Tags with ref and Git labels for migration
• Handle Git context
• Add digest output

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.