chore(deps): update docker/build-push-action action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	major	v3.2.0 -> v5.1.0

---

Release Notes

docker/build-push-action (docker/build-push-action)

v5.1.0

Compare Source

• Add annotations input by @​crazy-max in https://github.com/docker/build-push-action/pull/992
• Add secret-envs input by @​elias-lundgren in https://github.com/docker/build-push-action/pull/980
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in https://github.com/docker/build-push-action/pull/991
• Bump @​docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in https://github.com/docker/build-push-action/pull/990 https://github.com/docker/build-push-action/pull/1006

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in https://github.com/docker/build-push-action/pull/954
• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/docker/build-push-action/pull/959

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in https://github.com/docker/build-push-action/pull/880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/build-push-action/pull/811 https://github.com/docker/build-push-action/pull/838 https://github.com/docker/build-push-action/pull/855 https://github.com/docker/build-push-action/pull/860 https://github.com/docker/build-push-action/pull/875
• e2e: quay.io by @​crazy-max in https://github.com/docker/build-push-action/pull/799 https://github.com/docker/build-push-action/pull/805
• e2e: local harbor and nexus by @​crazy-max in https://github.com/docker/build-push-action/pull/800
• e2e: add artifactory container registry to test against by @​jedevc in https://github.com/docker/build-push-action/pull/804
• e2e: add distribution tests by @​jedevc in https://github.com/docker/build-push-action/pull/814 https://github.com/docker/build-push-action/pull/815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Enable provenance by default if not set by @​crazy-max in https://github.com/docker/build-push-action/pull/784

Full Changelog: docker/build-push-action@v3.3.1...v4.0.0

v3.3.1

Compare Source

• Disable provenance by default if not set by @​crazy-max (#​781)

Full Changelog: docker/build-push-action@v3.3.0...v3.3.1

v3.3.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Add attests, provenance and sbom inputs by @​crazy-max (#​746 #​759)
• Log GitHub Actions runtime token access controls by @​crazy-max (#​707)
• Examples moved to docs website by @​crazy-max (#​718)
• Bump minimatch from 3.0.4 to 3.1.2 (#​732)
• Bump csv-parse from 5.3.0 to 5.3.3 (#​729)
• Bump json5 from 2.2.0 to 2.2.3 (#​749)

Full Changelog: docker/build-push-action@v3.2.0...v3.3.0

---

Configuration

📅 Schedule: Branch creation - "before 12pm on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.