chore(deps): update all actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v3.3.0 -> v3.6.0
appleboy/ssh-action	action	patch	v0.1.8 -> v0.1.10
bobheadxi/deployments	action	minor	v1.4.0 -> v1.5.0
docker/build-push-action	action	minor	v4.0.0 -> v4.2.1
docker/login-action	action	minor	v2.1.0 -> v2.2.0
docker/setup-buildx-action	action	minor	v2.5.0 -> v2.10.0
getsentry/action-release	action	minor	v1.3.1 -> v1.9.0
guidojw/actions	action	minor	v1.3.3 -> v1.4.7
snok/container-retention-policy	action	minor	v2.0.0 -> v2.2.1

---

Release Notes

actions/checkout (actions/checkout)

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v3.5.2

Compare Source

• Fix api endpoint for GHES

v3.5.1

Compare Source

• Fix slow checkout on Windows

v3.5.0

Compare Source

• Add new public key for known_hosts

v3.4.0

Compare Source

• Upgrade codeql actions to v2
• Upgrade dependencies
• Upgrade @​actions/io

appleboy/ssh-action (appleboy/ssh-action)

v0.1.10

Compare Source

Enhancement

• Remove unused global variable https://github.com/appleboy/ssh-action/issues/214 https://github.com/appleboy/ssh-action/issues/32#issuecomment-1184700363 https://github.com/appleboy/ssh-action/issues/213

v0.1.9

Compare Source

Enhance

• 5f64c95 - chore: improve SSH key handling and documentation
• 3cd1bcf - feat: refactor code for parallel execution on multiple hosts (#​237 #​233)
• 4958308 - docs: add traditional Chinese documentation. (5 weeks ago) <Bo-Yi.Wu>

bobheadxi/deployments (bobheadxi/deployments)

v1.5.0

Compare Source

What's Changed

• Document that token now has a default. by @​buckett in https://github.com/bobheadxi/deployments/pull/136
• doc: correct auto_inactive default value by @​theodorton in https://github.com/bobheadxi/deployments/pull/142
• feat: add task input by @​EndBug in https://github.com/bobheadxi/deployments/pull/141
• Clarify token permissions by @​ai in https://github.com/bobheadxi/deployments/pull/166
• feat: Bump runtime to Node 20 by @​nschonni in https://github.com/bobheadxi/deployments/pull/163
• fix(delete-env): proper warning on 404 by @​mtfurlan in https://github.com/bobheadxi/deployments/pull/159

New Contributors

• @​buckett made their first contribution in https://github.com/bobheadxi/deployments/pull/136
• @​theodorton made their first contribution in https://github.com/bobheadxi/deployments/pull/142
• @​krainboltgreene made their first contribution in https://github.com/bobheadxi/deployments/pull/146
• @​EndBug made their first contribution in https://github.com/bobheadxi/deployments/pull/141
• @​ai made their first contribution in https://github.com/bobheadxi/deployments/pull/166
• @​nschonni made their first contribution in https://github.com/bobheadxi/deployments/pull/163
• @​mtfurlan made their first contribution in https://github.com/bobheadxi/deployments/pull/159

Full Changelog: bobheadxi/deployments@v1.4.0...v1.5.0

docker/build-push-action (docker/build-push-action)

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in https://github.com/docker/build-push-action/pull/880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/build-push-action/pull/811 https://github.com/docker/build-push-action/pull/838 https://github.com/docker/build-push-action/pull/855 https://github.com/docker/build-push-action/pull/860 https://github.com/docker/build-push-action/pull/875
• e2e: quay.io by @​crazy-max in https://github.com/docker/build-push-action/pull/799 https://github.com/docker/build-push-action/pull/805
• e2e: local harbor and nexus by @​crazy-max in https://github.com/docker/build-push-action/pull/800
• e2e: add artifactory container registry to test against by @​jedevc in https://github.com/docker/build-push-action/pull/804
• e2e: add distribution tests by @​jedevc in https://github.com/docker/build-push-action/pull/814 https://github.com/docker/build-push-action/pull/815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

docker/login-action (docker/login-action)

v2.2.0

Compare Source

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/login-action/pull/409 https://github.com/docker/login-action/pull/470 https://github.com/docker/login-action/pull/476
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.347.1 in https://github.com/docker/login-action/pull/524 https://github.com/docker/login-action/pull/364 https://github.com/docker/login-action/pull/363
• Bump minimatch from 3.0.4 to 3.1.2 in https://github.com/docker/login-action/pull/354
• Bump json5 from 2.2.0 to 2.2.3 in https://github.com/docker/login-action/pull/378
• Bump http-proxy-agent from 5.0.0 to 7.0.0 in https://github.com/docker/login-action/pull/509
• Bump https-proxy-agent from 5.0.1 to 7.0.0 in https://github.com/docker/login-action/pull/508

Full Changelog: docker/login-action@v2.1.0...v2.2.0

docker/setup-buildx-action (docker/setup-buildx-action)

v2.10.0

Compare Source

What's Changed

• Bump @​docker/actions-toolkit from 0.7.1 to 0.10.0 by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/258
• Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/setup-buildx-action/pull/253

Full Changelog: docker/setup-buildx-action@v2.9.1...v2.10.0

v2.9.1

Compare Source

• Bump @​docker/actions-toolkit from 0.7.0 to 0.7.1 in https://github.com/docker/setup-buildx-action/pull/248
  • Fixes an issue where building Buildx does not match the local platform (https://github.com/docker/actions-toolkit/pull/135)

Full Changelog: docker/setup-buildx-action@v2.9.0...v2.9.1

v2.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.6.0 to 0.7.0 in https://github.com/docker/setup-buildx-action/pull/246
  • Adds support to cache Buildx binary to hosted tool cache and GHA cache backend

Full Changelog: docker/setup-buildx-action@v2.8.0...v2.9.0

v2.8.0

Compare Source

• Only set specific flags for drivers supporting them by @​nicks in https://github.com/docker/setup-buildx-action/pull/241
• Bump @​docker/actions-toolkit from 0.5.0 to 0.6.0 in https://github.com/docker/setup-buildx-action/pull/242

Full Changelog: docker/setup-buildx-action@v2.7.0...v2.8.0

v2.7.0

Compare Source

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 in https://github.com/docker/setup-buildx-action/pull/237 https://github.com/docker/setup-buildx-action/pull/238

Full Changelog: docker/setup-buildx-action@v2.6.0...v2.7.0

v2.6.0

Compare Source

• Set node name for k8s driver when appending nodes by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/219
• Bump @​docker/actions-toolkit from 0.1.0-beta.18 to 0.3.0 in https://github.com/docker/setup-buildx-action/pull/220 https://github.com/docker/setup-buildx-action/pull/229 https://github.com/docker/setup-buildx-action/pull/231 https://github.com/docker/setup-buildx-action/pull/236

Full Changelog: docker/setup-buildx-action@v2.5.0...v2.6.0

getsentry/action-release (getsentry/action-release)

v1.9.0

Compare Source

What's Changed

Important Changes

• feat(sourcemaps): Add inject option to inject debug ids into source files and sourcemaps (#​229)

A new option to inject Debug IDs into source files and sourcemaps was added to the action to ensure proper un-minifaction of your stacktraces. We strongly recommend enabling this by setting inject: true in your action alongside providing a path to sourcemaps.

Other Changes

• feat(telemetry): Collect project specific tags (#​228)

Full Changelog: getsentry/action-release@v1...v1.9.0

v1.8.0

Compare Source

• feat(telemetry): Add telemetry via @sentry/node #​213

The action sends telemetry data and crash reports to Sentry. This helps us improve the action. You can turn this off by setting disable_telemetry.

v1.7.0

Compare Source

• Updates Sentry CLI to the latest 2.24.1 version

v1.6.0

Compare Source

Reverts the PR attempting to update the CLI to v2.x

v1.5.0

Compare Source

v1.4.1

Compare Source

What's Changed

• fix: dist option should be undefined if not specified by @​armenzg in https://github.com/getsentry/action-release/pull/148

Full Changelog: getsentry/action-release@v1.4.0...v1.4.1

v1.4.0: release

Compare Source

What's Changed

• feat: Add option to set dist on sourcemaps by @​tanyagray in https://github.com/getsentry/action-release/pull/125

New Contributors

• @​tanyagray made their first contribution in https://github.com/getsentry/action-release/pull/125

Full Changelog: getsentry/action-release@v1.3.1...v1.4.0

guidojw/actions (guidojw/actions)

v1.4.7

Compare Source

⚠ BREAKING CHANGES

• update-check-run: delete action (#​54)

Miscellaneous Chores

• deps: update all actions (#​49) (6cd2829)
• deps: update dependency conventional-changelog-conventionalcommits to v8.0.0 (#​55) (3ad9638)
• deps: update dependency semantic-release to v24 (#​51) (819dcf0)
• deps: update docker/build-push-action action to v6 (#​52) (6a5034e)
• deps: update node.js to v23 (#​53) (5a9acb7)

Code Refactoring

• update-check-run: delete action (#​54) (c7d10eb)

v1.4.6

Compare Source

Bug Fixes

• Renovate: change semantic-release match (#​45) (6b3e0c1)
• semantic-release: pin conventionalcommits (#​48) (ec8c080), closes /github.com/semantic-release/release-notes-generator/issues/633#issuecomment-2094571737

Miscellaneous Chores

• deps: update all actions (#​40) (3ea052e)
• deps: update all actions (#​42) (a3d6476)
• deps: update dependency node to v21.6.2 (#​41) (f6f0655)
• deps: update dependency node to v22 (#​44) (0b636d3)
• deps: update dependency semantic-release to v23 (#​47) (887330e)

v1.4.5

Compare Source

Miscellaneous Chores

• deps: update actions/download-artifact action to v4 (#​36) (2ec6d1b)
• deps: update actions/setup-node action to v4.0.1 (#​38) (9b54c8b)
• deps: update actions/upload-artifact action to v4 (#​37) (a2c7f82)
• deps: update dependency node to v21.6.1 (#​35) (c9efd29)
• deps: update louisbrunner/checks-action action to v2 (#​39) (5ae5c1f)

v1.4.4

Compare Source

Miscellaneous Chores

• deps: update actions/setup-node action to v4 (#​34) (4281475)
• deps: update all actions (#​32) (3beff67)
• deps: update dependency node to v21 (#​33) (24981b1)

v1.4.3

Compare Source

Bug Fixes

• semantic-release: include all update types in config (#​30) (dcd8dfc)

v1.4.2

Compare Source

v1.4.1

Compare Source

v1.4.0

Compare Source

Bug Fixes

• semantic-release: add branches configuration (#​15) (870d7c8)

Features

• add semantic-release workflow (#​13) (9578b7e)
• build-docker-image: scope cache more specifically (#​12) (87d2c00)

snok/container-retention-policy (snok/container-retention-policy)

v2.2.1

Compare Source

What's Changed

• fix: default token-type by @​ChandlerFerry in https://github.com/snok/container-retention-policy/pull/71

New Contributors

• @​ChandlerFerry made their first contribution in https://github.com/snok/container-retention-policy/pull/71

Full Changelog: snok/container-retention-policy@v2...v2.2.1

v2.2.0

Compare Source

What's Changed

This new version of the action introduces a token-type input variable, which enables the use of GITHUB_TOKEN instead of a personal access token - by @​Injabie3 in https://github.com/snok/container-retention-policy/pull/70

New Contributors

• @​Injabie3 made their first contribution in https://github.com/snok/container-retention-policy/pull/70

Full Changelog: snok/container-retention-policy@v2...v2.2.0

v2.1.3

Compare Source

What's Changed

• docs: cron schedule and comment in the example don't match by @​ccatterina in https://github.com/snok/container-retention-policy/pull/69
• Make behaviour of keep_at_least parameter predictable by @​yma-het in https://github.com/snok/container-retention-policy/pull/68

New Contributors

• @​ccatterina made their first contribution in https://github.com/snok/container-retention-policy/pull/69
• @​yma-het made their first contribution in https://github.com/snok/container-retention-policy/pull/68

Full Changelog: snok/container-retention-policy@v2...v2.1.3

v2.1.2

Compare Source

What's Changed

• Fix unhandled exception raised at runtime: 'x-ratelimit-remaining' by @​den-is in https://github.com/snok/container-retention-policy/pull/58

New Contributors

• @​den-is made their first contribution in https://github.com/snok/container-retention-policy/pull/58

Full Changelog: snok/container-retention-policy@v2...v2.1.2

v2.1.1

Compare Source

What's Changed

• Fix dry-run with filter by @​chris-schra in https://github.com/snok/container-retention-policy/pull/65

New Contributors

• @​chris-schra made their first contribution in https://github.com/snok/container-retention-policy/pull/65

Full Changelog: snok/container-retention-policy@v2...v2.1.1

v2.1.0

Compare Source

What's new

• Add a dry-run flag by @​jmichalicek in https://github.com/snok/container-retention-policy/pull/62

New Contributors

• @​jmichalicek made their first contribution in https://github.com/snok/container-retention-policy/pull/62

Full Changelog: snok/container-retention-policy@v2...v2.1.0

v2.0.1

Compare Source

What's Changed

• Mitigate shell injection attack by @​ad-m-ss in https://github.com/snok/container-retention-policy/pull/60

New Contributors

• @​ad-m-ss made their first contribution in https://github.com/snok/container-retention-policy/pull/60

Full Changelog: snok/container-retention-policy@v2...v2.0.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.