chore(deps): update docker/setup-buildx-action action to v4 by renovate[bot] · Pull Request #229 · chgl/.github

renovate · 2026-03-23T01:46:05Z

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-buildx-action	action	major	`v3.12.0` → `v4.0.0`

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #483
Remove deprecated inputs/outputs by @crazy-max in #464
Switch to ESM and update config/test wiring by @crazy-max in #481
Bump @actions/core from 1.11.1 to 3.0.0 in #475
Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in #482 #485
Bump js-yaml from 4.1.0 to 4.1.1 in #452
Bump lodash from 4.17.21 to 4.17.23 in #472
Bump minimatch from 3.1.2 to 3.1.5 in #480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-03-23T01:50:20Z

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	4	0	0	0.1s
✅ COPYPASTE	jscpd	yes	no	no	1.38s
✅ DOCKERFILE	hadolint	1	0	0	0.06s
✅ JSON	jsonlint	3	0	0	0.09s
✅ JSON	prettier	3	0	0	0.41s
✅ JSON	v8r	3	0	0	2.98s
✅ MARKDOWN	markdownlint	1	0	0	0.47s
✅ MARKDOWN	markdown-table-formatter	1	0	0	0.29s
✅ PYTHON	bandit	1	0	0	2.41s
✅ PYTHON	black	1	0	0	0.82s
✅ PYTHON	flake8	1	0	0	0.52s
✅ PYTHON	isort	1	0	0	0.24s
✅ PYTHON	mypy	1	0	0	3.67s
✅ PYTHON	pylint	1	0	0	3.28s
✅ PYTHON	pyright	1	0	0	2.17s
✅ PYTHON	ruff	1	0	0	0.04s
✅ REPOSITORY	checkov	yes	no	no	25.0s
✅ REPOSITORY	dustilock	yes	no	no	0.02s
✅ REPOSITORY	gitleaks	yes	no	no	0.29s
✅ REPOSITORY	git_diff	yes	no	no	0.01s
✅ REPOSITORY	grype	yes	no	no	41.59s
✅ REPOSITORY	kics	yes	no	no	4.68s
✅ REPOSITORY	kingfisher	yes	no	no	5.15s
✅ REPOSITORY	secretlint	yes	no	no	1.43s
✅ REPOSITORY	syft	yes	no	no	2.15s
✅ REPOSITORY	trivy	yes	no	no	11.49s
✅ REPOSITORY	trivy-sbom	yes	no	no	0.15s
✅ REPOSITORY	trufflehog	yes	no	no	3.77s
✅ YAML	prettier	6	0	0	0.7s
✅ YAML	v8r	6	0	0	6.98s
✅ YAML	yamllint	6	0	0	0.63s

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

github-actions · 2026-03-23T21:48:54Z

Trivy image scan report

`ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-229 (debian 13.3)`

8 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 5 LOW: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`dpkg`	CVE-2026-2219	UNKNOWN	1.22.21	1.22.22
`libc-bin`	CVE-2026-0861	HIGH	2.41-12+deb13u1	2.41-12+deb13u2
`libc-bin`	CVE-2025-15281	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc-bin`	CVE-2026-0915	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2026-0861	HIGH	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2025-15281	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2026-0915	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libsqlite3-0`	CVE-2025-7709	MEDIUM	3.46.1-7	3.46.1-7+deb13u1

No Misconfigurations found

`Python`

1 known vulnerabilities found (HIGH: 0 MEDIUM: 0 LOW: 1 CRITICAL: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`pip`	CVE-2026-1703	LOW	25.3	26.0

No Misconfigurations found

github-actions · 2026-03-23T21:49:05Z

Trivy image scan report

`ghcr.io/chgl/github-reusable-workflow:pr-229 (debian 13.3)`

8 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 5 LOW: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`dpkg`	CVE-2026-2219	UNKNOWN	1.22.21	1.22.22
`libc-bin`	CVE-2026-0861	HIGH	2.41-12+deb13u1	2.41-12+deb13u2
`libc-bin`	CVE-2025-15281	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc-bin`	CVE-2026-0915	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2026-0861	HIGH	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2025-15281	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2026-0915	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libsqlite3-0`	CVE-2025-7709	MEDIUM	3.46.1-7	3.46.1-7+deb13u1

No Misconfigurations found

`Python`

1 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 0 LOW: 1)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`pip`	CVE-2026-1703	LOW	25.3	26.0

No Misconfigurations found

github-actions · 2026-03-23T21:49:19Z

Trivy image scan report

`ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.3)`

8 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 5 LOW: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`dpkg`	CVE-2026-2219	UNKNOWN	1.22.21	1.22.22
`libc-bin`	CVE-2026-0861	HIGH	2.41-12+deb13u1	2.41-12+deb13u2
`libc-bin`	CVE-2025-15281	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc-bin`	CVE-2026-0915	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2026-0861	HIGH	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2025-15281	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libc6`	CVE-2026-0915	MEDIUM	2.41-12+deb13u1	2.41-12+deb13u2
`libsqlite3-0`	CVE-2025-7709	MEDIUM	3.46.1-7	3.46.1-7+deb13u1

No Misconfigurations found

`Python`

1 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 0 LOW: 1)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`pip`	CVE-2026-1703	LOW	25.3	26.0

No Misconfigurations found

github-actions · 2026-03-23T21:58:42Z

🎉 This PR is included in version 1.11.19 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

chore(deps): update docker/setup-buildx-action action to v4

dd1e048

renovate bot force-pushed the renovate/docker-setup-buildx-action-4.x branch from 68f889b to dd1e048 Compare March 23, 2026 21:48

chgl merged commit 388eeca into master Mar 23, 2026
41 checks passed

renovate bot deleted the renovate/docker-setup-buildx-action-4.x branch March 23, 2026 21:55

github-actions bot added the released label Mar 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update docker/setup-buildx-action action to v4#229

chore(deps): update docker/setup-buildx-action action to v4#229
chgl merged 1 commit intomasterfrom
renovate/docker-setup-buildx-action-4.x

renovate bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Mar 23, 2026

Release Notes

v4.0.0

Configuration

Uh oh!

github-actions bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅MegaLinter analysis: Success

Uh oh!

github-actions bot commented Mar 23, 2026

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-229 (debian 13.3)

8 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 5 LOW: 0)

No Misconfigurations found

Python

1 known vulnerabilities found (HIGH: 0 MEDIUM: 0 LOW: 1 CRITICAL: 0)

No Misconfigurations found

Uh oh!

github-actions bot commented Mar 23, 2026

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow:pr-229 (debian 13.3)

8 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 5 LOW: 0)

No Misconfigurations found

Python

1 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 0 LOW: 1)

No Misconfigurations found

Uh oh!

github-actions bot commented Mar 23, 2026

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.3)

8 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 5 LOW: 0)

No Misconfigurations found

Python

1 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 0 LOW: 1)

No Misconfigurations found

Uh oh!

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v4.0.0`

github-actions bot commented Mar 23, 2026 •

edited

Loading

`ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-229 (debian 13.3)`

`Python`

`ghcr.io/chgl/github-reusable-workflow:pr-229 (debian 13.3)`

`Python`

`ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.3)`

`Python`