chore(deps): update docker/metadata-action action to v6 - #95
chore(deps): update docker/metadata-action action to v6#95renovate[bot] wants to merge 1 commit into
Conversation
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes RequiredNone - the action interface is backward compatible. Used in release.yml for extracting Docker image metadata (tags, labels). Security ImpactNo security fixes mentioned. This is primarily a maintenance update. RecommendationSafe to merge — The action interface is backward compatible. GitHub-hosted runners support Node 24. Used for generating Docker image tags and labels in the release workflow. |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes Required
Security Impact
RecommendationSafe to merge — Routine major version update for Docker build infrastructure. Input parsing improvements are beneficial. Node 24 runtime requirement aligns with other Docker action updates. |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes Required
Security Impact
RecommendationSafe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Review list inputs for |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes Required
Security Impact
RecommendationSafe to merge — This Docker metadata action update requires Actions Runner v2.327.1+, which GitHub-hosted runners support. Our workflow uses standard tag patterns without list inputs containing |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes RequiredNone - update action version in .github/workflows/release.yml line 39 Security ImpactNo security fixes. This is a build metadata action, not security-sensitive for TinyRSVP. RecommendationSafe to merge — Docker metadata action update with no code changes required, GitHub-hosted runners meet Node 24 requirement. |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes Required
Security Impact
RecommendationSafe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Used for generating Docker image tags and labels in the release workflow. |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking ChangesNone affecting our usage. The action is used for extracting Docker image metadata in release workflow with standard inputs. Code Changes RequiredNone. The workflow at Security Impact
RecommendationSafe to merge — This is a straightforward GitHub Actions version update with no breaking changes for our workflow usage. GitHub-hosted runners already meet the Actions Runner v2.327.1+ requirement. |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes Required
Security Impact
RecommendationSafe to merge — Action interface unchanged, used only in CI/CD for Docker metadata generation |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes RequiredNone. The workflow at Security Impact
RecommendationSafe to merge — This is a Docker metadata action update with no breaking changes for our workflow usage. GitHub-hosted runners already meet the Actions Runner v2.327.1+ requirement. |
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes RequiredNone. The action is used in - name: Extract metadata
id: meta
uses: docker/metadata-action@v5
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
tags: |
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=semver,pattern={{major}}
type=raw,value=latestUpdate to Security ImpactNeutral to positive. Dependency updates include @actions/github (6.0.1 → 9.0.0) which may include security fixes. No direct security vulnerabilities addressed. RecommendationSafe to merge — This is a GitHub Actions major version update with Node 24 requirement. GitHub-hosted runners support Node 24. The update includes quality improvements and better |
Renovate PR AnalysisUpdate Summary
Release ChangesMajor version v6.0.0 and subsequent releases (v6.1.0, v6.2.0):
Breaking ChangesYes, major version with breaking changes:
Code Changes RequiredCheck your GitHub Actions workflows for:
Current usage: .github/workflows/*.yml files using Security ImpactNo direct security impact. This is a CI/CD infrastructure update that may require runner compatibility checks. RecommendationNeeds manual review — Major version bump with potential breaking changes (Node 24 runtime requirement, input parsing behavior change). Verify that:
|
3f1c824 to
2a5072b
Compare
Renovate PR AnalysisUpdate Summary
Release Changes
Breaking Changes
Code Changes RequiredNone. Single-line pin bump Security ImpactNo security fixes. Tag/label extraction behavior for our configuration is unchanged; no effect on image provenance or GHCR permissions ( RecommendationNeeds manual review — major version bump; policy is not to auto-merge majors. Static analysis shows no input or output incompatibility; validation requires a tag-push release run to confirm produced tags/labels are identical to v5 output. |
This PR contains the following updates:
v5→v6Release Notes
docker/metadata-action (docker/metadata-action)
v6.2.0Compare Source
v6.1.0Compare Source
Full Changelog: docker/metadata-action@v6.0.0...v6.1.0
v6.0.0Compare Source
#inside values while still supporting full-line#comments by @crazy-max in #607Full Changelog: docker/metadata-action@v5.10.0...v6.0.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.