chore(deps): update docker/setup-qemu-action action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-qemu-action	action	major	v3 → v4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

docker/setup-qemu-action (docker/setup-qemu-action)

v4.3.0

Compare Source

v4.2.0

Compare Source

v4.1.0

Compare Source

• Add reset input to uninstall current emulators by @​crazy-max in #​21
• Bump @​docker/actions-toolkit from 0.77.0 to 0.91.0 in #​250 #​247
• Bump brace-expansion from 1.1.12 to 1.1.15 in #​265
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​286
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​255
• Bump flatted from 3.3.3 to 3.4.2 in #​257
• Bump glob from 10.3.15 to 10.5.0 in #​254
• Bump handlebars from 4.7.8 to 4.7.9 in #​262
• Bump lodash from 4.17.23 to 4.18.1 in #​273
• Bump postcss from 8.5.6 to 8.5.10 in #​285
• Bump tar from 6.2.1 to 7.5.15 in #​287
• Bump tmp from 0.2.5 to 0.2.6 in #​291
• Bump undici from 6.23.0 to 6.26.0 in #​251
• Bump vite from 7.3.1 to 7.3.2 in #​271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​245
• Switch to ESM and update config/test wiring by @​crazy-max in #​241
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​244
• Bump @​docker/actions-toolkit from 0.67.0 to 0.77.0 in #​243
• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in #​240
• Bump js-yaml from 3.14.1 to 3.14.2 in #​231
• Bump lodash from 4.17.21 to 4.17.23 in #​238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• v4.1.0 adds reset input to uninstall current emulators
• Multiple dependency updates and maintenance improvements

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime
• Node 20 support dropped in v4

Code Changes Required

None - the action interface is backward compatible. Used in release.yml for multi-arch Docker builds.

Security Impact

No security fixes mentioned. This is primarily a maintenance update.

Recommendation

Safe to merge — The action interface is backward compatible. GitHub-hosted runners support Node 24. Used for setting up QEMU for multi-arch Docker builds in the release workflow.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Add reset input to uninstall current emulators
• Switch to ESM and update config/test wiring
• Dependency updates: @docker/actions-toolkit, @actions/core, brace-expansion, js-yaml, lodash, etc.

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 support
• ESM module conversion (internal change, should be transparent to users)

Code Changes Required

• Verify Actions Runner version meets v2.327.1+ requirement
• No code changes expected for current usage (basic QEMU setup for multi-arch builds)
• Optional: Consider adding reset: true input if emulator state management is needed

Security Impact

• No direct security impact
• Dependency updates include security patches for underlying packages (brace-expansion, fast-xml-parser, lodash, etc.)

Recommendation

Safe to merge — Routine major version update for Docker build infrastructure. No breaking changes to usage patterns. Node 24 runtime requirement aligns with other Docker action updates.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM and update config/test wiring
• Bumped multiple dependencies including @actions/core, @docker/actions-toolkit, js-yaml, lodash
• Add reset input to uninstall current emulators

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime support

Code Changes Required

• Verify Actions Runner version is v2.327.1 or later
• No workflow changes needed - action inputs remain backward compatible

Security Impact

• No direct security impact
• Dependency updates include security patches for several npm packages (brace-expansion, fast-xml-parser, lodash, undici, tar, tmp, postcss)

Recommendation

Safe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Action inputs remain compatible.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• v4.2.0: No details provided
• v4.1.0: Add reset input to uninstall current emulators, dependency updates
• v4.0.0: Node 24 as default runtime (requires Actions Runner v2.327.1+), switched to ESM, dependency updates

Breaking Changes

• Requires Actions Runner v2.327.1 or later (Node 24)
• New reset input is optional, not required

Code Changes Required

• None. Workflow uses only uses: docker/setup-qemu-action@v3 with no custom inputs, which will change to @v4 automatically

Security Impact

• No security fixes mentioned. This is primarily a platform upgrade to Node 24 with a new optional reset feature

Recommendation

Safe to merge — This Docker QEMU action update requires Actions Runner v2.327.1+, which GitHub-hosted runners support. Our workflow uses the action without any custom inputs. The new reset input is optional and not needed for our multi-arch builds.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• v4.2.0: Various dependency bumps (actions-toolkit, fast-xml-parser, undici, vite, etc.)
• v4.1.0: Add reset input to uninstall current emulators, bump actions-toolkit to 0.91.0
• v4.0.0: Node 24 as default runtime (requires Actions Runner v2.327.1 or later), switch to ESM

Breaking Changes

• Node 24 as default runtime requires Actions Runner v2.327.1 or later
• Switch to ESM module system

Code Changes Required

None - update action version in .github/workflows/release.yml line 25

Security Impact

No security fixes. This is a build tooling action, not security-sensitive for TinyRSVP.

Recommendation

Safe to merge — Docker build action update with no code changes required, GitHub-hosted runners meet Node 24 requirement.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM and update config/test wiring
• v4.1.0: Add reset input to uninstall current emulators
• v4.2.0: Various dependency bumps (actions-toolkit, fast-xml-parser, undici, vite, etc.)

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime support
• Node 20 support dropped in v4

Code Changes Required

• Verify Actions Runner version is v2.327.1 or later
• No workflow changes needed - action inputs remain backward compatible
• Optional: Consider adding reset: true input if emulator state management is needed

Security Impact

• No direct security impact
• Dependency updates include security patches for underlying packages (brace-expansion, fast-xml-parser, lodash, undici, tar, tmp, postcss)

Recommendation

Safe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Action inputs remain compatible. Used for setting up QEMU for multi-arch Docker builds in the release workflow.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM and update config/test wiring
• Add reset input to uninstall current emulators (v4.1.0)
• Various dependency bumps including actions/core, docker/actions-toolkit

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime
• Switch to ESM module system (internal change)

Code Changes Required

• None (simple version bump in workflow file)
• Ensure GitHub Actions Runner infrastructure meets minimum version requirement (v2.327.1+)

Security Impact

• This is a CI/CD tool update, not application code
• No direct security impact on TinyRSVP application
• Dependency updates include security patches for underlying libraries

Recommendation

Needs manual review — Requires verifying GitHub Actions Runner infrastructure supports Node 24 (v2.327.1+)

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM module format
• Dependency updates: @actions/core, @docker/actions-toolkit, various npm packages
• Added reset input to uninstall current emulators

Breaking Changes

None affecting our usage. The action is used for multi-arch builds in release workflow with default inputs.

Code Changes Required

None. The workflow at .github/workflows/release.yml:25 uses the action with default inputs which are unchanged.

Security Impact

• No security fixes mentioned in release notes
• This is an infrastructure dependency (GitHub Actions) only used in CI/CD
• Does not affect application runtime or user-facing security

Recommendation

Safe to merge — This is a straightforward GitHub Actions version update with no breaking changes for our workflow usage. GitHub-hosted runners already meet the Actions Runner v2.327.1+ requirement.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/setup-qemu-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• v4.1.0: Add reset input to uninstall current emulators
• v4.2.0-v4.3.0: Dependency bumps including @docker/actions-toolkit, brace-expansion, fast-xml-parser, undici, postcss, tar, tmp
• Switch to ESM module format

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime
• Node 20 support dropped in v4

Code Changes Required

None. The workflow at .github/workflows/release.yml:25 uses the action with default inputs which are unchanged. The new reset input is optional.

Security Impact

• No direct security impact
• Dependency updates include security patches for underlying packages (brace-expansion, fast-xml-parser, lodash, undici, tar, tmp, postcss)

Recommendation

Safe to merge — This is a Docker QEMU setup action update with no breaking changes for our workflow usage. GitHub-hosted runners already meet the Actions Runner v2.327.1+ requirement.