chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0 by dependabot[bot] · Pull Request #1572 · docker/build-push-action

dependabot · 2026-07-01T13:51:55Z

Bumps @docker/actions-toolkit from 0.91.0 to 0.92.0.

Release notes

Sourced from @docker/actions-toolkit's releases.

v0.92.0

sigstore: use cosign for provenance blob signing by @crazy-max in docker/actions-toolkit#1208 docker/actions-toolkit#1209

git: correctly extract tag name when commit has multiple decorations by @lucacome @crazy-max in docker/actions-toolkit#1188

build(deps): bump @actions/cache from 6.0.1 to 6.1.0 in docker/actions-toolkit#1195

build(deps): bump @sigstore/bundle from 4.0.0 to 5.0.0 in docker/actions-toolkit#1158

build(deps): bump @sigstore/core from 3.2.0 to 3.2.1 in docker/actions-toolkit#1200

build(deps): bump @sigstore/tuf from 4.0.2 to 5.0.0 in docker/actions-toolkit#1160

build(deps): bump @sigstore/verify from 3.1.1 to 4.1.0 in docker/actions-toolkit#1159

build(deps): bump csv-parse from 6.2.1 to 7.0.0 in docker/actions-toolkit#1186

build(deps): bump js-yaml from 4.1.1 to 5.2.0 in docker/actions-toolkit#1154 docker/actions-toolkit#1198 docker/actions-toolkit#1199

build(deps): bump minimatch from 3.1.2 to 3.1.5 in docker/actions-toolkit#1205

build(deps): bump semver from 7.8.1 to 7.8.5 in docker/actions-toolkit#1168 docker/actions-toolkit#1194

build(deps): bump tmp from 0.2.6 to 0.2.7 in docker/actions-toolkit#1153

build(deps): bump undici from 6.24.1 to 6.27.0 in docker/actions-toolkit#1196

build(deps): bump vite from 7.3.2 to 7.3.6 in docker/actions-toolkit#1201

Full Changelog: docker/actions-toolkit@v0.91.0...v0.92.0

Commits

e8e96a9 Merge pull request #1209 from crazy-max/drop-stale-signing-endpoints
9da7d41 sigstore: remove stale signing endpoints
5941fdb Merge pull request #1208 from docker/sigstore-sign-blobs-cosign
a3ddd0e sigstore: use cosign for provenance blob signing
b9edf7d Merge pull request #1188 from lucacome/fix/git-context
416c529 Merge pull request #1207 from crazy-max/sigstore-retry-manifest-error
3c38811 sigstore: retry transient manifest lookups
e1268af Merge pull request #1205 from docker/dependabot/npm_and_yarn/minimatch-3.1.5
93c20bb build(deps): bump minimatch from 3.1.2 to 3.1.5
585ed6f Merge pull request #1157 from docker/dependabot/npm_and_yarn/sigstore/sign-5.0.0
Additional commits viewable in compare view

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.91.0 to 0.92.0. - [Release notes](https://github.com/docker/actions-toolkit/releases) - [Commits](docker/actions-toolkit@v0.91.0...v0.92.0) --- updated-dependencies: - dependency-name: "@docker/actions-toolkit" dependency-version: 0.92.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v7.2.0` → `v7.3.0` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1725

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> ### [`v7.2.0`](https://github.com/docker/build-push-action/releases/tag/v7.2.0) [Compare Source](docker/build-push-action@v7.1.0...v7.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517) - Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529) - Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521) - Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526) - Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533) **Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0> ### [`v7.1.0`](https://github.com/docker/build-push-action/releases/tag/v7.1.0) [Compare Source](docker/build-push-action@v7...v7.1.0) - Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500) - Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489) - Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491) - Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490) - Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497) - Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510) - Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496) - Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486) - Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509) **Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0> ### [`v7.0.0`](https://github.com/docker/build-push-action/releases/tag/v7.0.0) [Compare Source](docker/build-push-action@v7...v7) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470) - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473) - Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479) - Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463) **Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0> ### [`v7`](docker/build-push-action@v6.19.2...v7) [Compare Source](docker/build-push-action@v6.19.2...v7) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/8 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

…n to v7 (#6) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>docker/build-push-action (https://github.com/docker/build-push-action)</summary> ### [`v7.4.0`](https://github.com/docker/build-push-action/releases/tag/v7.4.0) [Compare Source](docker/build-push-action@v7.3.0...v7.4.0) - Use the shared error helper for Buildx commands by [@crazy-max](https://github.com/crazy-max) in [#1620](docker/build-push-action#1620) - Prevent workflow command injection in metadata logs by [@crazy-max](https://github.com/crazy-max) in [#1617](docker/build-push-action#1617) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.100.0 in [#1614](docker/build-push-action#1614) [#1618](docker/build-push-action#1618) [#1621](docker/build-push-action#1621) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1609](docker/build-push-action#1609) - Bump brace-expansion from 1.1.13 to 1.1.18 in [#1592](docker/build-push-action#1592) - Bump csv-parse from 7.0.0 to 7.0.2 in [#1613](docker/build-push-action#1613) - Bump js-yaml from 4.3.0 to 4.3.2 in [#1605](docker/build-push-action#1605) [#1615](docker/build-push-action#1615) - Bump nanoid from 3.3.16 to 3.3.18 in [#1611](docker/build-push-action#1611) - Bump postcss from 8.5.10 to 8.5.25 in [#1590](docker/build-push-action#1590) - Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#1606](docker/build-push-action#1606) - Bump sigstore from 4.1.0 to 4.1.1 in [#1577](docker/build-push-action#1577) - Bump undici from 6.27.0 to 6.28.0 in [#1594](docker/build-push-action#1594) **Full Changelog**: <docker/build-push-action@v7.3.0...v7.4.0> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> ### [`v7.2.0`](https://github.com/docker/build-push-action/releases/tag/v7.2.0) [Compare Source](docker/build-push-action@v7.1.0...v7.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517) - Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529) - Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521) - Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526) - Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533) **Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0> ### [`v7.1.0`](https://github.com/docker/build-push-action/releases/tag/v7.1.0) [Compare Source](docker/build-push-action@v7.0.0...v7.1.0) - Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500) - Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489) - Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491) - Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490) - Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497) - Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510) - Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496) - Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486) - Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509) **Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0> ### [`v7.0.0`](https://github.com/docker/build-push-action/releases/tag/v7.0.0) [Compare Source](docker/build-push-action@v6.19.2...v7.0.0) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470) - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473) - Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479) - Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463) **Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.homelab.devncode.it/marco/vinted-search-mcp/pulls/6

dependabot Bot added bot dependencies labels Jul 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 branch from 32b7cdf to 6b18c97 Compare July 1, 2026 13:57

dependabot Bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 branch from 8584749 to cb1238b Compare July 1, 2026 14:04

[dependabot skip] chore: update generated content

154298c

crazy-max approved these changes Jul 1, 2026

View reviewed changes

crazy-max merged commit 53b7df9 into master Jul 1, 2026
72 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 branch July 1, 2026 14:11

mika-platform-qa mentioned this pull request Aug 26, 2026

chore(deps): bump docker/build-push-action from 6.18.0 to 7.3.0 senara-solutions/mika#2003

Merged

Navigation Menu

chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0 - #1572

chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0#1572
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Uh oh!

Labels

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.92.0

Uh oh!

Labels

1 participant

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading