Skip to content

chore(deps): update docker/setup-buildx-action action to v4 - #96

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker-setup-buildx-action-4.x
Open

chore(deps): update docker/setup-buildx-action action to v4#96
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker-setup-buildx-action-4.x

Conversation

@renovate

@renovate renovate Bot commented Aug 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
docker/setup-buildx-action action major v3 → v4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v4.3.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
  • Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
  • Bump flatted from 3.3.3 to 3.4.2 in #​499
  • Bump glob from 10.3.12 to 13.0.6 in #​495
  • Bump handlebars from 4.7.8 to 4.7.9 in #​504
  • Bump lodash from 4.17.23 to 4.18.1 in #​523
  • Bump picomatch from 4.0.3 to 4.0.4 in #​503
  • Bump postcss from 8.5.6 to 8.5.10 in #​537
  • Bump tar from 6.2.1 to 7.5.15 in #​545
  • Bump undici from 6.23.0 to 6.25.0 in #​492
  • Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Removed deprecated inputs/outputs in v4.0.0
  • v4.3.0: Bumped dependencies and added dependency updates

Breaking Changes

  • Requires Actions Runner v2.327.1 or later for Node 24 runtime
  • Removed deprecated inputs/outputs (check if any deprecated inputs were used in release.yml)

Code Changes Required

None - review shows only the basic action usage without deprecated inputs. Used in release.yml for setting up Docker Buildx.

Security Impact

No security fixes mentioned. This is primarily a maintenance update.

Recommendation

Safe to merge — The action interface is backward compatible. GitHub-hosted runners support Node 24. Used for setting up Docker Buildx for multi-arch builds in the release workflow.

@github-actions

github-actions Bot commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Remove deprecated inputs/outputs
  • Switch to ESM and update config/test wiring
  • Preserve names in esbuild bundle
  • Dependency updates: @docker/actions-toolkit, @sigstore/core, @sigstore/verify, js-yaml, etc.

Breaking Changes

  • Requires Actions Runner v2.327.1 or later for Node 24 support
  • Deprecated inputs/outputs removed (verify no deprecated inputs are in use)
  • ESM module conversion (internal change, should be transparent to users)

Code Changes Required

  • Verify Actions Runner version meets v2.327.1+ requirement
  • Check workflow for any deprecated input/output usage (none currently in use)
  • No code changes expected for current usage (basic Buildx setup)

Security Impact

  • No direct security impact
  • Dependency updates include security patches for underlying packages
  • Sigstore library updates for improved verification

Recommendation

Safe to merge — Routine major version update for Docker build infrastructure. No deprecated inputs in current usage. Node 24 runtime requirement aligns with other Docker action updates.

@github-actions

github-actions Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Removed deprecated inputs/outputs
  • Switch to ESM and update config/test wiring
  • Bumped multiple dependencies including @actions/core, @docker/actions-toolkit, js-yaml, lodash, @sigstore/core, @sigstore/verify, sigstore
  • Preserve names in esbuild bundle

Breaking Changes

  • Requires Actions Runner v2.327.1 or later for Node 24 runtime support
  • Removed deprecated inputs/outputs (check if workflow uses any deprecated inputs)

Code Changes Required

  • Verify Actions Runner version is v2.327.1 or later
  • Check workflow for any deprecated inputs and remove them

Security Impact

  • No direct security impact
  • Dependency updates include security patches for several npm packages

Recommendation

Safe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Verify workflow doesn't use deprecated inputs.

@github-actions

github-actions Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • v4.3.0-v4.1.0: Dependency updates, bundle name preservation, sigstore updates
  • v4.0.0: Node 24 as default runtime (requires Actions Runner v2.327.1+), removed deprecated inputs/outputs, switched to ESM, dependency updates

Breaking Changes

  • Requires Actions Runner v2.327.1 or later (Node 24)
  • Removed deprecated inputs/outputs (not used in our workflow)

Code Changes Required

  • None. Workflow uses only uses: docker/setup-buildx-action@v3 with no custom inputs, which will change to @v4 automatically

Security Impact

  • No security fixes mentioned. This is primarily a platform upgrade to Node 24 with cleanup of deprecated features

Recommendation

Safe to merge — This Docker Buildx action update requires Actions Runner v2.327.1+, which GitHub-hosted runners support. Our workflow uses the action without any custom inputs or deprecated features.

@github-actions

github-actions Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • v4.3.0: Bump actions-toolkit to 0.95.0, dependency updates
  • v4.2.0: Preserve names in esbuild bundle, bump actions/core and sigstore dependencies
  • v4.1.0: Dependency bumps (actions-toolkit, glob, tar, undici, vite, etc.)
  • v4.0.0: Node 24 as default runtime, remove deprecated inputs/outputs, switch to ESM

Breaking Changes

  • Node 24 as default runtime requires Actions Runner v2.327.1 or later
  • Remove deprecated inputs/outputs
  • Switch to ESM module system

Code Changes Required

None - update action version in .github/workflows/release.yml line 28

Security Impact

No security fixes. This is a build tooling action, not security-sensitive for TinyRSVP.

Recommendation

Safe to merge — Docker build action update with no code changes required, GitHub-hosted runners meet Node 24 requirement.

@github-actions

github-actions Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Remove deprecated inputs/outputs
  • Switch to ESM and update config/test wiring
  • Preserve names in esbuild bundle
  • v4.3.0: Bump actions-toolkit to 0.95.0, dependency updates

Breaking Changes

  • Requires Actions Runner v2.327.1 or later for Node 24 support
  • Deprecated inputs/outputs removed

Code Changes Required

  • Verify Actions Runner version is v2.327.1 or later
  • No workflow changes needed - action inputs remain backward compatible

Security Impact

  • No direct security impact
  • Dependency updates include security patches for underlying packages

Recommendation

Safe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Used for setting up Docker Buildx for multi-arch builds in the release workflow.

@github-actions

github-actions Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Switch to ESM module format
  • Removed deprecated inputs/outputs
  • Dependency updates: @actions/core, @docker/actions-toolkit, various npm packages

Breaking Changes

None affecting our usage. The action is used for Docker Buildx setup in release workflow with default inputs.

Code Changes Required

None. The workflow at .github/workflows/release.yml:28 uses the action with default inputs which are unchanged.

Security Impact

  • No security fixes mentioned in release notes
  • This is an infrastructure dependency (GitHub Actions) only used in CI/CD
  • Does not affect application runtime or user-facing security

Recommendation

Safe to merge — This is a straightforward GitHub Actions version update with no breaking changes for our workflow usage. GitHub-hosted runners already meet the Actions Runner v2.327.1+ requirement.

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Removed deprecated inputs/outputs
  • Switched to ESM and updated config/test wiring
  • Multiple dependency updates (@actions/core, @docker/actions-toolkit, js-yaml, lodash, minimatch)
  • Preserve names in esbuild bundle (v4.2.0)
  • Multiple security-related dependency bumps (sigstore, undici, brace-expansion)

Breaking Changes

  • Node 24 runtime requirement: Requires Actions Runner v2.327.1 or later
  • Deprecated inputs/outputs removed: Check if workflow uses any deprecated parameters
  • ESM switch: Internal refactoring, should not affect action usage

Code Changes Required

None. The action is used in .github/workflows/release.yml:28 with standard configuration:

- name: Set up Docker Buildx
  uses: docker/setup-buildx-action@v3

Update to @v4 will handle automatically. No deprecated inputs are in use.

Security Impact

Positive. Multiple dependency updates include:

  • sigstore (4.1.0 → 4.1.1) - signing/verification fixes
  • undici (6.25.0 → 6.28.0) - HTTP client security patches
  • brace-expansion (1.1.12 → 1.1.18) - ReDoS vulnerability fixes
  • js-yaml (4.1.0 → 5.3.0) - YAML parsing security improvements

Recommendation

Safe to merge — This is a GitHub Actions major version update with Node 24 requirement. GitHub-hosted runners support Node 24. The update removes deprecated features but our workflow uses standard configuration. Multiple security dependency improvements are included. No manual changes needed beyond merging.

@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Renovate PR Analysis

Update Summary

  • Dependency: docker/setup-buildx-action
  • Version: v3 → v4
  • Type: major

Release Changes

Major version v4.0.0 and subsequent patch releases (v4.1.0, v4.2.0, v4.3.0):

  • Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
  • Removed deprecated inputs/outputs
  • Switched to ESM module system
  • Various dependency updates (@docker/actions-toolkit, js-yaml, lodash, etc.)

Breaking Changes

Yes, major version with breaking changes:

  • Requires Actions Runner v2.327.1 or later (Node 24 runtime)
  • Removed deprecated inputs/outputs (check if your workflows use any)
  • Switched to ESM (internal change, should be transparent)

Code Changes Required

Check your GitHub Actions workflows for:

  1. Any deprecated inputs that may have been removed
  2. Actions Runner version compatibility (ensure runners are v2.327.1+)

Current usage: .github/workflows/*.yml files using docker/setup-buildx-action@v3

Security Impact

No direct security impact. This is a CI/CD infrastructure update that may require runner compatibility checks.

Recommendation

Needs manual review — Major version bump with potential breaking changes (removed deprecated inputs, Node 24 runtime requirement). Verify that:

  1. Your GitHub Actions Runner version is v2.327.1 or later
  2. Your workflows don't use any removed deprecated inputs
  3. Test the workflow after merging to ensure buildx setup still works correctly

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants