fix(deps): update all major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/checkout	action	major	v3 -> v4
actions/setup-python	action	major	v4 -> v5
docker/build-push-action	action	major	v3.3.1 -> v6.10.0
docker/#-action	action	major	v2 -> v3
docker/metadata-action	action	major	v4.6.0 -> v5.6.1
pre-commit		major	==3.8.0 -> ==4.0.1

---

Release Notes

actions/checkout (actions/checkout)

v4

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

actions/setup-python (actions/setup-python)

v5

Compare Source

docker/build-push-action (docker/build-push-action)

v6.10.0

Compare Source

v6.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.38.0 to 0.39.0 in https://github.com/docker/build-push-action/pull/1234
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/build-push-action/pull/1232

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

v6.8.0

Compare Source

• Bump @​docker/actions-toolkit from 0.37.1 to 0.38.0 in https://github.com/docker/build-push-action/pull/1230

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

v6.7.0

Compare Source

v6.6.1

Compare Source

• Bump @​docker/actions-toolkit from 0.37.0 to 0.37.1 in https://github.com/docker/build-push-action/pull/1205

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

v6.6.0

Compare Source

v6.5.0

Compare Source

v6.4.1

Compare Source

v6.4.0

Compare Source

• Set repository and ghtoken attributes for GitHub Actions cache backend by @​crazy-max in https://github.com/docker/build-push-action/pull/1133
• Bump @​docker/actions-toolkit from 0.31.0 to 0.33.0 in https://github.com/docker/build-push-action/pull/1179

Full Changelog: docker/build-push-action@v6.3.0...v6.4.0

v6.3.0

Compare Source

• DOCKER_BUILD_RECORD_UPLOAD environment variable to enable/disable build record upload by @​crazy-max in https://github.com/docker/build-push-action/pull/1172
• DOCKER_BUILD_NO_SUMMARY has been deprecated. Set DOCKER_BUILD_SUMMARY to false instead by @​crazy-max in https://github.com/docker/build-push-action/pull/1170 https://github.com/docker/build-push-action/pull/1173
• Bump @​docker/actions-toolkit from 0.28.0 to 0.31.0 in https://github.com/docker/build-push-action/pull/1171 https://github.com/docker/build-push-action/pull/1159 https://github.com/docker/build-push-action/pull/1169

Full Changelog: docker/build-push-action@v6.2.0...v6.3.0

v6.2.0

Compare Source

• Use default retention days for build export artifact by @​crazy-max in https://github.com/docker/build-push-action/pull/1153
• Bump @​docker/actions-toolkit from 0.27.0 to 0.28.0 in https://github.com/docker/build-push-action/pull/1158

Full Changelog: docker/build-push-action@v6.1.0...v6.2.0

v6.1.0

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.4.0

Compare Source

v5.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.18.0 to 0.19.0 in https://github.com/docker/build-push-action/pull/1080

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

v5.2.0

Compare Source

• Disable quotes detection for outputs input by @​crazy-max in https://github.com/docker/build-push-action/pull/1074
• Warn about ignored inputs by @​favonia in https://github.com/docker/build-push-action/pull/1019
• Bump @​docker/actions-toolkit from 0.14.0 to 0.18.0 in https://github.com/docker/build-push-action/pull/1070
• Bump undici from 5.26.3 to 5.28.3 in https://github.com/docker/build-push-action/pull/1057

Full Changelog: docker/build-push-action@v5.1.0...v5.2.0

v5.1.0

Compare Source

• Add annotations input by @​crazy-max in https://github.com/docker/build-push-action/pull/992
• Add secret-envs input by @​elias-lundgren in https://github.com/docker/build-push-action/pull/980
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in https://github.com/docker/build-push-action/pull/991
• Bump @​docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in https://github.com/docker/build-push-action/pull/990 https://github.com/docker/build-push-action/pull/1006

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in https://github.com/docker/build-push-action/pull/954
• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/docker/build-push-action/pull/959

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in https://github.com/docker/build-push-action/pull/880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/build-push-action/pull/811 https://github.com/docker/build-push-action/pull/838 https://github.com/docker/build-push-action/pull/855 https://github.com/docker/build-push-action/pull/860 https://github.com/docker/build-push-action/pull/875
• e2e: quay.io by @​crazy-max in https://github.com/docker/build-push-action/pull/799 https://github.com/docker/build-push-action/pull/805
• e2e: local harbor and nexus by @​crazy-max in https://github.com/docker/build-push-action/pull/800
• e2e: add artifactory container registry to test against by @​jedevc in https://github.com/docker/build-push-action/pull/804
• e2e: add distribution tests by @​jedevc in https://github.com/docker/build-push-action/pull/814 https://github.com/docker/build-push-action/pull/815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Enable provenance by default if not set by @​crazy-max in https://github.com/docker/build-push-action/pull/784

Full Changelog: docker/build-push-action@v3.3.1...v4.0.0

docker/#-action (docker/#-action)

v3

Compare Source

docker/metadata-action (docker/metadata-action)

v5.6.1

Compare Source

• Fix GitHub API request fallback for commit date by @​crazy-max in https://github.com/docker/metadata-action/pull/478
• Revert to default commit SHA length of 7 by @​crazy-max in https://github.com/docker/metadata-action/pull/480

Full Changelog: docker/metadata-action@v5.6.0...v5.6.1

v5.6.0

Compare Source

• Add commit_date global expression by @​trim21 in https://github.com/docker/metadata-action/pull/471 https://github.com/docker/metadata-action/pull/475
• Increase short commit sha length to 12 for uniqueness by @​crazy-max in https://github.com/docker/metadata-action/pull/467
• Bump @​actions/core from 1.10.1 to 1.11.1 https://github.com/docker/metadata-action/pull/460
• Bump @​docker/actions-toolkit from 0.16.1 to 0.44.0 https://github.com/docker/metadata-action/pull/391 https://github.com/docker/metadata-action/pull/399 https://github.com/docker/metadata-action/pull/413 https://github.com/docker/metadata-action/pull/441
• Bump braces from 3.0.2 to 3.0.3 https://github.com/docker/metadata-action/pull/424
• Bump cross-spawn from 7.0.3 to 7.0.5 https://github.com/docker/metadata-action/pull/474
• Bump csv-parse from 5.5.5 to 5.5.6 https://github.com/docker/metadata-action/pull/412
• Bump moment-timezone from 0.5.44 to 0.5.46 https://github.com/docker/metadata-action/pull/383 https://github.com/docker/metadata-action/pull/470 https://github.com/docker/metadata-action/pull/459
• Bump path-to-regexp from 6.2.2 to 6.3.0 https://github.com/docker/metadata-action/pull/454
• Bump semver from 7.6.0 to 7.6.3 https://github.com/docker/metadata-action/pull/400 https://github.com/docker/metadata-action/pull/411 https://github.com/docker/metadata-action/pull/440
• Bump undici from 5.26.3 to 5.28.4 https://github.com/docker/metadata-action/pull/386 https://github.com/docker/metadata-action/pull/402

Full Changelog: docker/metadata-action@v5.5.1...v5.6.0

v5.5.1

Compare Source

• Don't set cwd:// prefix for local bake files by @​crazy-max in https://github.com/docker/metadata-action/pull/382

Full Changelog: docker/metadata-action@v5.5.0...v5.5.1

v5.5.0

Compare Source

• Set cwd:// prefix for bake files path by @​crazy-max in https://github.com/docker/metadata-action/pull/370
• Bump @​docker/actions-toolkit from 0.16.0 to 0.16.1 in https://github.com/docker/metadata-action/pull/371
• Bump moment from 2.29.4 to 2.30.1 in https://github.com/docker/metadata-action/pull/373
• Bump moment-timezone from 0.5.43 to 0.5.44 in https://github.com/docker/metadata-action/pull/374

Full Changelog: docker/metadata-action@v5.4.0...v5.5.0

v5.4.0

Compare Source

• Bump @​docker/actions-toolkit from 0.15.0 to 0.16.0 in https://github.com/docker/metadata-action/pull/369
• Bump csv-parse from 5.5.2 to 5.5.3 in https://github.com/docker/metadata-action/pull/365

Full Changelog: docker/metadata-action@v5.3.0...v5.4.0

v5.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.14.0 to 0.15.0 in https://github.com/docker/metadata-action/pull/363 (fixes #​362)

Full Changelog: docker/metadata-action@v5.2.0...v5.3.0

v5.2.0

Compare Source

• Custom annotations support by @​crazy-max in https://github.com/docker/metadata-action/pull/361

Full Changelog: docker/metadata-action@v5.1.0...v5.2.0

v5.1.0

Compare Source

• Annotations support by @​crazy-max in https://github.com/docker/metadata-action/pull/352
• Split bake definition into two files by @​crazy-max in https://github.com/docker/metadata-action/pull/353
• Allow images input to be empty to output bare tags by @​crazy-max in https://github.com/docker/metadata-action/pull/358
• Bump @​actions/github from 5.1.1 to 6.0.0 in https://github.com/docker/metadata-action/pull/348
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in https://github.com/docker/metadata-action/pull/350
• Bump @​docker/actions-toolkit from 0.12.0 to 0.14.0 in https://github.com/docker/metadata-action/pull/349 https://github.com/docker/metadata-action/pull/357
• Bump csv-parse from 5.5.0 to 5.5.2 in https://github.com/docker/metadata-action/pull/346
• Bump semver from 7.5.3 to 7.5.4 in https://github.com/docker/metadata-action/pull/335

Full Changelog: docker/metadata-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in https://github.com/docker/metadata-action/pull/328
• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/docker/metadata-action/pull/333
• Bump csv-parse from 5.4.0 to 5.5.0 in https://github.com/docker/metadata-action/pull/320
• Bump semver from 7.5.1 to 7.5.2 in https://github.com/docker/metadata-action/pull/304
• Bump handlebars from 4.7.7 to 4.7.8 in https://github.com/docker/metadata-action/pull/315

Full Changelog: docker/metadata-action@v4.6.0...v5.0.0

pre-commit/pre-commit (pre-commit)

v4.0.1

Compare Source

==================

Fixes

• Fix pre-commit migrate-config for unquoted deprecated stages names with
  purelib pyyaml.
  • #​3324 PR by @​asottile.
  • pre-commit-ci/issues#234 issue by @​lorenzwalthert.

v4.0.0

Compare Source

==================

Features

• Improve pre-commit migrate-config to handle more yaml formats.
  • #​3301 PR by @​asottile.
• Handle stages deprecation in pre-commit migrate-config.
  • #​3302 PR by @​asottile.
  • #​2732 issue by @​asottile.
• Upgrade ruby-build.
  • #​3199 PR by @​ThisGuyCodes.
• Add "sensible regex" warnings to repo: meta.
  • #​3311 PR by @​asottile.
• Add warnings for deprecated stages (commit -> pre-commit, push ->
  pre-push, merge-commit -> pre-merge-commit).
  • #​3312 PR by @​asottile.
  • #​3313 PR by @​asottile.
  • #​3315 PR by @​asottile.
  • #​2732 issue by @​asottile.

Migrating

• language: python_venv has been removed -- use language: python instead.
  • #​3320 PR by @​asottile.
  • #​2734 issue by @​asottile.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.