Bump docker/metadata-action from 3.6.2 to 4.6.0

[dependabot]

Bumps docker/metadata-action from 3.6.2 to 4.6.0.

Release notes

Sourced from docker/metadata-action's releases.

v4.6.0

• Dedup and sort labels by @​crazy-max in docker/metadata-action#301
• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 in docker/metadata-action#302

Full Changelog: docker/metadata-action@v4.5.0...v4.6.0

v4.5.0

• Bump @​docker/actions-toolkit from 0.1.0 to 0.3.0 in docker/metadata-action#296
• Bump csv-parse from 5.3.8 to 5.4.0 in docker/metadata-action#294

Full Changelog: docker/metadata-action@v4.4.0...v4.5.0

v4.4.0

• Add context input to define the metadata provider by @​neilime in docker/metadata-action#248
• Switch to actions-toolkit implementation by @​crazy-max in docker/metadata-action#266 docker/metadata-action#273 docker/metadata-action#284
• Bump csv-parse from 5.3.3 to 5.3.8 in docker/metadata-action#271 docker/metadata-action#286
• Bump moment-timezone from 0.5.40 to 0.5.43 in docker/metadata-action#268 docker/metadata-action#278 docker/metadata-action#281
• Bump semver from 7.4.0 to 7.5.0 in docker/metadata-action#285

Full Changelog: docker/metadata-action@v4.3.0...v4.4.0

v4.3.0

• Provide outputs as env vars by @​crazy-max (#257)

Full Changelog: docker/metadata-action@v4.2.0...v4.3.0

v4.2.0

• Add tz attribute to handlebar date function by @​chroju (#251)
• Bump minimatch from 3.0.4 to 3.1.2 (#242)
• Bump csv-parse from 5.3.1 to 5.3.3 (#245)
• Bump json5 from 2.2.0 to 2.2.3 (#252)

Full Changelog: docker/metadata-action@v4.1.1...v4.2.0

v4.1.1

• Revert changes to set associated head sha on pull request event by @​crazy-max (#239)
  • User can still set associated head sha on PR by setting the env var DOCKER_METADATA_PR_HEAD_SHA=true
• Bump csv-parse from 5.3.0 to 5.3.1 (#237)

Full Changelog: docker/metadata-action@v4.1.0...v4.1.1

v4.1.0

• Do not trim whitespace for sep-tags and sep-labels inputs by @​crazy-max (#233)
• Set associated head sha on pull request event by @​crazy-max (#234)
• Remove workaround for setOutput by @​crazy-max (#236)
• Bump @​actions/github from 5.0.1 to 5.1.1 (#208 #232)
• Bump @​actions/core from 1.6.0 to 1.10.0 (#209 #216 #226 #231)
• Bump csv-parse from 5.0.4 to 5.3.0 (#210 #221)
• Bump moment from 2.29.3 to 2.29.4 (#220)

... (truncated)

Upgrade guide

Sourced from docker/metadata-action's upgrade guide.

Upgrade notes

v2 to v3

• Repository has been moved to docker org. Replace crazy-max/ghaction-docker-meta@v2 with docker/metadata-action@v4
• The default bake target has been changed: ghaction-docker-meta > docker-metadata-action

v1 to v2

• inputs
  • tag-sha
  • tag-edge / tag-edge-branch
  • tag-semver
  • tag-match / tag-match-group
  • tag-latest
  • tag-schedule
  • tag-custom / tag-custom-only
  • label-custom
• Basic workflow
• Semver workflow

inputs

New	Unchanged	Removed
tags	images	tag-sha
flavor	sep-tags	tag-edge
labels	sep-labels	tag-edge-branch
		tag-semver
		tag-match
		tag-match-group
		tag-latest
		tag-schedule
		tag-custom
		tag-custom-only
		label-custom

tag-sha

tags: |
  type=sha

tag-edge / tag-edge-branch

tags: |
  # default branch
</tr></table> 

... (truncated)

Commits

• 818d4b7 Merge pull request #302 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 948134a update generated content
• ef7eee9 enable comments to avoid breaking change with current impl
• 8ec80c3 Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0
• 38650bb Merge pull request #301 from crazy-max/dedup-labels
• ebbd9b4 update generated content
• 2dadb92 dedup and sort labels
• 2c0bd77 Merge pull request #296 from docker/dependabot/npm_and_yarn/docker/actions-to...
• b10b364 update generated content
• 40a1c6f Bump @​docker/actions-toolkit from 0.1.0 to 0.3.0
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.