chore(deps): update docker/build-push-action action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	major	v3.1.1 -> v5.4.0

---

Release Notes

docker/build-push-action (docker/build-push-action)

v5.4.0

Compare Source

• Show builder information before building by @​crazy-max in #​1128
• Handle attestations correctly with provenance and sbom inputs by @​crazy-max in #​1086
• Bump @​docker/actions-toolkit from 0.19.0 to 0.24.0 in #​1088 #​1105 #​1121 #​1127
• Bump undici from 5.28.3 to 5.28.4 in #​1090

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

v5.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.18.0 to 0.19.0 in #​1080

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

v5.2.0

Compare Source

• Disable quotes detection for outputs input by @​crazy-max in #​1074
• Warn about ignored inputs by @​favonia in #​1019
• Bump @​docker/actions-toolkit from 0.14.0 to 0.18.0 in #​1070
• Bump undici from 5.26.3 to 5.28.3 in #​1057

Full Changelog: docker/build-push-action@v5.1.0...v5.2.0

v5.1.0

Compare Source

• Add annotations input by @​crazy-max in #​992
• Add secret-envs input by @​elias-lundgren in #​980
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in #​991
• Bump @​docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in #​990 #​1006

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in #​954
• Bump @​actions/core from 1.10.0 to 1.10.1 in #​959

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in #​957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in #​872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in #​930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in #​925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in #​902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in #​880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in #​811 #​838 #​855 #​860 #​875
• e2e: quay.io by @​crazy-max in #​799 #​805
• e2e: local harbor and nexus by @​crazy-max in #​800
• e2e: add artifactory container registry to test against by @​jedevc in #​804
• e2e: add distribution tests by @​jedevc in #​814 #​815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Enable provenance by default if not set by @​crazy-max in #​784

Full Changelog: docker/build-push-action@v3.3.1...v4.0.0

v3.3.1

Compare Source

• Disable provenance by default if not set by @​crazy-max (#​781)

Full Changelog: docker/build-push-action@v3.3.0...v3.3.1

v3.3.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Add attests, provenance and sbom inputs by @​crazy-max (#​746 #​759)
• Log GitHub Actions runtime token access controls by @​crazy-max (#​707)
• Examples moved to docs website by @​crazy-max (#​718)
• Bump minimatch from 3.0.4 to 3.1.2 (#​732)
• Bump csv-parse from 5.3.0 to 5.3.3 (#​729)
• Bump json5 from 2.2.0 to 2.2.3 (#​749)

Full Changelog: docker/build-push-action@v3.2.0...v3.3.0

v3.2.0

Compare Source

• Remove workaround for setOutput by @​crazy-max (#​704)
• Docs: fix Git context link and add more details about subdir support by @​crazy-max (#​685)
• Docs: named context by @​baibaratsky and @​crazy-max (#​665)
• Bump @​actions/core from 1.9.0 to 1.10.0 (#​667 #​695)
• Bump @​actions/github from 5.0.3 to 5.1.1 (#​696)

Full Changelog: docker/build-push-action@v3.1.1...v3.2.0

---

Configuration

📅 Schedule: Branch creation - "before 6am" in timezone Asia/Jakarta, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.