chore: bump docker/metadata-action from 5.10.0 to 6.0.0 (#1429)

dependabot[bot] · web-flow · commit f9022e8c0acc · 2026-03-23T21:36:48.000Z
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/metadata-action/releases">docker/metadata-action's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <ul> <li>Node 24 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Actions Runner v2.327.1</a> or later) by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/605">docker/metadata-action#605</a></li> <li>List inputs now preserve <code>#</code> inside values while still supporting full-line <code>#</code> comments by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/607">docker/metadata-action#607</a></li> <li>Switch to ESM and update config/test wiring by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/602">docker/metadata-action#602</a></li> <li>Bump lodash from 4.17.21 to 4.17.23 in <a href="https://redirect.github.com/docker/metadata-action/pull/588">docker/metadata-action#588</a></li> <li>Bump <code>@​actions/core</code> from 1.11.1 to 3.0.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/599">docker/metadata-action#599</a></li> <li>Bump <code>@​actions/github</code> from 6.0.1 to 9.0.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/597">docker/metadata-action#597</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.68.0 to 0.79.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/604">docker/metadata-action#604</a></li> <li>Bump <code>@​isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/600">docker/metadata-action#600</a></li> <li>Bump semver from 7.7.3 to 7.7.4 in <a href="https://redirect.github.com/docker/metadata-action/pull/603">docker/metadata-action#603</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/metadata-action/compare/v5.10.0...v6.0.0">https://github.com/docker/metadata-action/compare/v5.10.0...v6.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/metadata-action/commit/030e881283bb7a6894de51c315a6bfe6a94e05cf"><code>030e881</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/607">#607</a> from crazy-max/allow-comments</li> <li><a href="https://github.com/docker/metadata-action/commit/4b529ac4e5705260c379cc9bbb728db073561560"><code>4b529ac</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/metadata-action/commit/b0082b33bc58c0a21650367020cc8f713c26ea4a"><code>b0082b3</code></a> preserve comments in list input values with commentNoInfix</li> <li><a href="https://github.com/docker/metadata-action/commit/7b19fec71513bcf5cf7751eed7131d79687c9c82"><code>7b19fec</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/604">#604</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/metadata-action/commit/281c9b0599edd4ec6bdba1bc2ca9cc824505fd78"><code>281c9b0</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/metadata-action/commit/5f43b3b4f4d0343068a20cbca366768ac4ef8148"><code>5f43b3b</code></a> test: stabilize github mock setup since ESM</li> <li><a href="https://github.com/docker/metadata-action/commit/9d53276575003f95c1baf96fef2bfb21144c0b43"><code>9d53276</code></a> github class moved since actions-toolkit v0.77.0</li> <li><a href="https://github.com/docker/metadata-action/commit/eaa3d3973eabfaec0ede866d47761b7b8627387c"><code>eaa3d39</code></a> chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.68.0 to 0.77.0</li> <li><a href="https://github.com/docker/metadata-action/commit/6b695f7a8a3e9ce07613674750ee68840e5b6a1e"><code>6b695f7</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/605">#605</a> from crazy-max/node24</li> <li><a href="https://github.com/docker/metadata-action/commit/a1afadcb28cd960b7c3e6c9893866eb7cdc61155"><code>a1afadc</code></a> node 24 as default runtime</li> <li>Additional commits viewable in <a href="https://github.com/docker/metadata-action/compare/c299e40c65443455700f0fdfc63efafe5b349051...030e881283bb7a6894de51c315a6bfe6a94e05cf">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/metadata-action&package-manager=github_actions&previous-version=5.10.0&new-version=6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/test-build-publish.yml b/.github/workflows/test-build-publish.yml
@@ -186,7 +186,7 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
           images: |
             name=${{ vars.DOCKERHUB_REPOSITORY }}/${{ needs.setup.outputs.default-image-name }}
@@ -202,7 +202,7 @@ jobs:
       - name: Docker meta (py-suffixed tags for default version)
         id: meta-py
         if: steps.suffix.outputs.is-default == 'true'
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
           images: |
             name=${{ vars.DOCKERHUB_REPOSITORY }}/${{ needs.setup.outputs.default-image-name }}
@@ -296,7 +296,7 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
           # list of Docker images to use as base name for tags
           images: |
@@ -313,7 +313,7 @@ jobs:
       - name: Docker meta (py-suffixed tags for default version)
         id: meta-py
         if: steps.suffix.outputs.is-default == 'true'
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
           images: |
             name=${{ vars.DOCKERHUB_REPOSITORY }}/${{ needs.setup.outputs.default-image-name }}
