chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0 by dependabot[bot] · Pull Request #1572 · docker/build-push-action

dependabot · 2026-07-01T13:51:55Z

Bumps @docker/actions-toolkit from 0.91.0 to 0.92.0.

Release notes

Sourced from @docker/actions-toolkit's releases.

v0.92.0

sigstore: use cosign for provenance blob signing by @crazy-max in docker/actions-toolkit#1208 docker/actions-toolkit#1209

git: correctly extract tag name when commit has multiple decorations by @lucacome @crazy-max in docker/actions-toolkit#1188

build(deps): bump @actions/cache from 6.0.1 to 6.1.0 in docker/actions-toolkit#1195

build(deps): bump @sigstore/bundle from 4.0.0 to 5.0.0 in docker/actions-toolkit#1158

build(deps): bump @sigstore/core from 3.2.0 to 3.2.1 in docker/actions-toolkit#1200

build(deps): bump @sigstore/tuf from 4.0.2 to 5.0.0 in docker/actions-toolkit#1160

build(deps): bump @sigstore/verify from 3.1.1 to 4.1.0 in docker/actions-toolkit#1159

build(deps): bump csv-parse from 6.2.1 to 7.0.0 in docker/actions-toolkit#1186

build(deps): bump js-yaml from 4.1.1 to 5.2.0 in docker/actions-toolkit#1154 docker/actions-toolkit#1198 docker/actions-toolkit#1199

build(deps): bump minimatch from 3.1.2 to 3.1.5 in docker/actions-toolkit#1205

build(deps): bump semver from 7.8.1 to 7.8.5 in docker/actions-toolkit#1168 docker/actions-toolkit#1194

build(deps): bump tmp from 0.2.6 to 0.2.7 in docker/actions-toolkit#1153

build(deps): bump undici from 6.24.1 to 6.27.0 in docker/actions-toolkit#1196

build(deps): bump vite from 7.3.2 to 7.3.6 in docker/actions-toolkit#1201

Full Changelog: docker/actions-toolkit@v0.91.0...v0.92.0

Commits

e8e96a9 Merge pull request #1209 from crazy-max/drop-stale-signing-endpoints
9da7d41 sigstore: remove stale signing endpoints
5941fdb Merge pull request #1208 from docker/sigstore-sign-blobs-cosign
a3ddd0e sigstore: use cosign for provenance blob signing
b9edf7d Merge pull request #1188 from lucacome/fix/git-context
416c529 Merge pull request #1207 from crazy-max/sigstore-retry-manifest-error
3c38811 sigstore: retry transient manifest lookups
e1268af Merge pull request #1205 from docker/dependabot/npm_and_yarn/minimatch-3.1.5
93c20bb build(deps): bump minimatch from 3.1.2 to 3.1.5
585ed6f Merge pull request #1157 from docker/dependabot/npm_and_yarn/sigstore/sign-5.0.0
Additional commits viewable in compare view

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.91.0 to 0.92.0. - [Release notes](https://github.com/docker/actions-toolkit/releases) - [Commits](docker/actions-toolkit@v0.91.0...v0.92.0) --- updated-dependencies: - dependency-name: "@docker/actions-toolkit" dependency-version: 0.92.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v7.2.0` → `v7.3.0` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1725

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> ### [`v7.2.0`](https://github.com/docker/build-push-action/releases/tag/v7.2.0) [Compare Source](docker/build-push-action@v7.1.0...v7.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517) - Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529) - Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521) - Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526) - Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533) **Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0> ### [`v7.1.0`](https://github.com/docker/build-push-action/releases/tag/v7.1.0) [Compare Source](docker/build-push-action@v7...v7.1.0) - Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500) - Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489) - Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491) - Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490) - Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497) - Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510) - Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496) - Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486) - Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509) **Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0> ### [`v7.0.0`](https://github.com/docker/build-push-action/releases/tag/v7.0.0) [Compare Source](docker/build-push-action@v7...v7) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470) - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473) - Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479) - Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463) **Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0> ### [`v7`](docker/build-push-action@v6.19.2...v7) [Compare Source](docker/build-push-action@v6.19.2...v7) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/8 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

…n to v7 (#6) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>docker/build-push-action (https://github.com/docker/build-push-action)</summary> ### [`v7.4.0`](https://github.com/docker/build-push-action/releases/tag/v7.4.0) [Compare Source](docker/build-push-action@v7.3.0...v7.4.0) - Use the shared error helper for Buildx commands by [@crazy-max](https://github.com/crazy-max) in [#1620](docker/build-push-action#1620) - Prevent workflow command injection in metadata logs by [@crazy-max](https://github.com/crazy-max) in [#1617](docker/build-push-action#1617) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.100.0 in [#1614](docker/build-push-action#1614) [#1618](docker/build-push-action#1618) [#1621](docker/build-push-action#1621) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1609](docker/build-push-action#1609) - Bump brace-expansion from 1.1.13 to 1.1.18 in [#1592](docker/build-push-action#1592) - Bump csv-parse from 7.0.0 to 7.0.2 in [#1613](docker/build-push-action#1613) - Bump js-yaml from 4.3.0 to 4.3.2 in [#1605](docker/build-push-action#1605) [#1615](docker/build-push-action#1615) - Bump nanoid from 3.3.16 to 3.3.18 in [#1611](docker/build-push-action#1611) - Bump postcss from 8.5.10 to 8.5.25 in [#1590](docker/build-push-action#1590) - Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#1606](docker/build-push-action#1606) - Bump sigstore from 4.1.0 to 4.1.1 in [#1577](docker/build-push-action#1577) - Bump undici from 6.27.0 to 6.28.0 in [#1594](docker/build-push-action#1594) **Full Changelog**: <docker/build-push-action@v7.3.0...v7.4.0> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> ### [`v7.2.0`](https://github.com/docker/build-push-action/releases/tag/v7.2.0) [Compare Source](docker/build-push-action@v7.1.0...v7.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517) - Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529) - Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521) - Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526) - Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533) **Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0> ### [`v7.1.0`](https://github.com/docker/build-push-action/releases/tag/v7.1.0) [Compare Source](docker/build-push-action@v7.0.0...v7.1.0) - Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500) - Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489) - Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491) - Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490) - Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497) - Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510) - Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496) - Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486) - Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509) **Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0> ### [`v7.0.0`](https://github.com/docker/build-push-action/releases/tag/v7.0.0) [Compare Source](docker/build-push-action@v6.19.2...v7.0.0) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470) - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473) - Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479) - Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463) **Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.homelab.devncode.it/marco/vinted-search-mcp/pulls/6

@crazy-max

@crazy-max

dependabot Bot added bot dependencies labels Jul 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 branch from 32b7cdf to 6b18c97 Compare July 1, 2026 13:57

dependabot Bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 branch from 8584749 to cb1238b Compare July 1, 2026 14:04

[dependabot skip] chore: update generated content

154298c

crazy-max approved these changes Jul 1, 2026

View reviewed changes

crazy-max merged commit 53b7df9 into master Jul 1, 2026
72 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 branch July 1, 2026 14:11

mika-platform-qa mentioned this pull request Aug 26, 2026

chore(deps): bump docker/build-push-action from 6.18.0 to 7.3.0 senara-solutions/mika#2003

Merged

Navigation Menu

Repository navigation

chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0 - #1572

chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0#1572
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.92.0

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading