Update minor-patch dependencies grouped by manager

[app-token-issuer-releng-renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.2 → v6.0.3
actions/download-artifact	action	minor	v4.1.8 → v4.3.0
aws-actions/amazon-ecr-login	action	patch	v2.1.2 → v2.1.6
aws-actions/configure-aws-credentials	action	minor	v6.0.0 → v6.2.1
aws-actions/configure-aws-credentials	action	minor	v6.1.0 → v6.2.1
azure/setup-helm	action	patch	v5.0.0 → v5.0.1
azure/setup-helm	action	minor	v4.2.0 → v4.3.1
benchmark-action/github-action-benchmark	action	minor	v1.20.3 → v1.22.1
buildx	uses-with	minor	v0.33.0 → v0.35.0
cardinalby/export-env-action	action	patch	2.2.2 → 2.2.3
docker/build-push-action	action	minor	v7.1.0 → v7.3.0
docker/login-action	action	minor	v4.1.0 → v4.4.0
docker/metadata-action	action	minor	v6.0.0 → v6.2.0
docker/setup-buildx-action	action	minor	v3.6.1 → v3.12.0
docker/setup-buildx-action	action	minor	v4.0.0 → v4.2.0
docker/setup-qemu-action	action	minor	v3.2.0 → v3.7.0
foundry-rs/foundry-toolchain	action	minor	v1.2.0 → v1.8.0
go	uses-with	minor	1.21.3 → 1.26.4
go	uses-with	minor	1.24.0 → 1.26.4
golangci/golangci-lint-action	action	minor	v9.2.0 → v9.3.0
google-github-actions/auth	action	patch	v2.1.2 → v2.1.13
goreleaser/goreleaser-action	action	minor	v6.2.1 → v6.4.0
goto-bus-stop/setup-zig	action	patch	v2.2.0 → v2.2.1
helm	uses-with	minor	v3.13.1 → v3.21.2
helm	uses-with	minor	v3.12.0 → v3.21.2
helm/chart-testing-action	action	minor	v2.6.1 → v2.8.0
hrishikesh-kadam/setup-lcov	action	minor	v1.0.0 → v1.1.0
mikefarah/yq	action	minor	v4.44.2 → v4.53.3
peter-evans/create-pull-request	action	patch	v7.0.8 → v7.0.11
planetscale/ghcommit-action	action	patch	v0.2.20 → v0.2.22
python	uses-with	minor	3.11 → 3.14
python	uses-with	minor	3.8 → 3.14
renovatebot/github-action	action	minor	v40.2.4 → v40.3.6
reviewdog/action-actionlint	action	minor	v1.71.0 → v1.72.0
richardsimko/update-tag	action	minor	v1.0.11 → v1.1.6
runs-on/action	action	minor	v2.1.0 → v2.2.0
sigstore/cosign-installer	action	minor	v4.0.0 → v4.1.2
sigstore/cosign-installer	action	patch	v4.1.1 → v4.1.2
slackapi/slack-github-action	action	minor	v1.26.0 → v1.27.1
slackapi/slack-github-action	action	minor	v1.25.0 → v1.27.1
smartcontractkit/chainlink-github-actions	action	patch	v2.3.25 → v2.3.32
smartcontractkit/chainlink-github-actions	action	patch	v2.3.19 → v2.3.32
sonarsource/sonarqube-scan-action	action	minor	v7.0.0 → v7.2.1
svenstaro/upload-release-action	action	minor	2.9.0 → 2.11.5
tailscale/github-action	action	patch	v4.1.2 → v4.1.3
trunk-io/analytics-uploader	action	minor	v2.0.8 → v2.1.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

actions/download-artifact (actions/download-artifact)

v4.3.0

Compare Source

What's Changed

• feat: implement new artifact-ids input by @​GrantBirki in #​401
• Fix workflow example for downloading by artifact ID by @​joshmgross in #​402
• Prep for v4.3.0 release by @​robherley in #​404

New Contributors

• @​GrantBirki made their first contribution in #​401

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

• Add unit tests by @​GhadimiR in #​392
• Fix bug introduced in 4.2.0 by @​GhadimiR in #​391

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

• Update README.md by @​lkfortuna in #​384
• Bump artifact version, do digest check by @​GhadimiR in #​383

New Contributors

• @​lkfortuna made their first contribution in #​384
• @​GhadimiR made their first contribution in #​383

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

v4.1.9

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​354
• docs: small migration fix by @​froblesmartin in #​370
• Update MIGRATION.md by @​andyfeller in #​372
• Update artifact package to 2.2.2 by @​yacaovsnc in #​380

New Contributors

• @​Jcambass made their first contribution in #​354
• @​froblesmartin made their first contribution in #​370
• @​andyfeller made their first contribution in #​372
• @​yacaovsnc made their first contribution in #​380

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

aws-actions/amazon-ecr-login (aws-actions/amazon-ecr-login)

v2.1.6

Compare Source

See the changelog for details about the changes included in this release.

v2.1.5

Compare Source

See the changelog for details about the changes included in this release.

v2.1.4

Compare Source

See the changelog for details about the changes included in this release.

v2.1.3

Compare Source

See the changelog for details about the changes included in this release.

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v6.2.1

Compare Source

Bug Fixes

• enforce allowed-account-ids on all auth paths (#​1847) (4d281fb)

v6.2.0

Compare Source

Features

• add additional session tags by default (#​1775) (e0ba768)
• add more retry logic and better logging (#​1764) (540d0c1)
• add regex validation to role-session-name (#​1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#​1759) (61f50f6)
• expose run id in STS client user-agent (#​1774) (29d1be3)
• support custom STS endpoints (#​1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#​1778) (58e7c47)
• assumeRole failing from session tag size too large (#​1808) (d6f5dc3)

v6.1.3

Compare Source

Bug Fixes

• fix: allow kubelet token symlink in #​1805

v6.1.2

Compare Source

Bug Fixes

• additional filesystem checks (#​1799) (c39f282)

v6.1.1

Compare Source

What's Changed

• chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @​dependabot[bot] in #​1722
• chore(deps-dev): bump @​types/node from 25.5.0 to 25.5.2 by @​dependabot[bot] in #​1723
• chore(deps-dev): bump @​smithy/property-provider from 4.2.12 to 4.2.13 by @​dependabot[bot] in #​1724
• chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @​dependabot[bot] in #​1726
• chore(deps): bump @​smithy/node-http-handler from 4.5.1 to 4.5.2 by @​dependabot[bot] in #​1725
• chore(deps): bump @​aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @​dependabot[bot] in #​1727
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @​dependabot[bot] in #​1728
• chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @​dependabot[bot] in #​1729
• chore(deps-dev): bump @​types/node from 25.5.2 to 25.6.0 by @​dependabot[bot] in #​1730
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @​dependabot[bot] in #​1733
• chore(deps): bump @​aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @​dependabot[bot] in #​1732
• chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 by @​dependabot[bot] in #​1734
• chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @​dependabot[bot] in #​1736
• chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @​dependabot[bot] in #​1737
• chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1740
• chore(deps-dev): bump @​smithy/property-provider from 4.2.13 to 4.2.14 by @​dependabot[bot] in #​1741
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @​dependabot[bot] in #​1742
• chore(deps): bump @​aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @​dependabot[bot] in #​1743
• chore(deps-dev): bump @​biomejs/biome from 2.4.11 to 2.4.12 by @​dependabot[bot] in #​1739
• chore(deps-dev): bump @​biomejs/biome from 2.4.12 to 2.4.13 by @​dependabot[bot] in #​1747
• chore(deps): bump postcss from 8.5.6 to 8.5.12 by @​dependabot[bot] in #​1752
• chore(deps): bump @​smithy/node-http-handler from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1750
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @​dependabot[bot] in #​1751
• chore(deps): bump @​aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @​dependabot[bot] in #​1749
• chore: release 6.1.1 by @​lehmanmj in #​1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

v6.1.0

Compare Source

Features

• add skip cleanup option (#​1716) (11b1c58), closes #​1545
• Support usage of AWS Profiles (#​1696) (a7f0c82)

azure/setup-helm (azure/setup-helm)

v5.0.1

Compare Source

Fixed

• #​271 Fix TypeScript 6.0 compatibility errors in run.ts
• #​278 fix: use chmod 755 instead of 777 for downloaded helm binary and folder

Changed

• #​286 Bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows in the actions group
• #​285 Bump the actions group with 2 updates
• #​284 Bump undici
• #​283 Bump the actions group with 5 updates
• #​280 Bump actions/checkout from 6.0.2 to 6.0.3 in /.github/workflows in the actions group
• #​279 Bump the actions group with 2 updates
• #​277 Bump vitest from 4.1.7 to 4.1.8 in the actions group
• #​276 chore: remove deprecated OliverMKing release workflow, pin to SHA
• #​275 Bump actions/stale from 10.2.0 to 10.3.0 in /.github/workflows in the actions group
• #​274 Bump the actions group with 3 updates
• #​273 Bump the actions group with 2 updates
• #​269 Bump the actions group across 1 directory with 7 updates
• #​268 Bump vite from 8.0.0 to 8.0.5
• #​260 Migrate to ESM with esbuild/vitest and upgrade to node24 (v5.0.0)

benchmark-action/github-action-benchmark (benchmark-action/github-action-benchmark)

v1.22.1

Compare Source

• fix scope tsconfig.build.json to src/ for reproducibility (#​352)
• chore bump minimatch from 3.1.2 to 3.1.5 (#​347)
• chore bump uuid and @​actions/core (#​350)
• chore bump flatted from 3.2.4 to 3.4.2 (#​346)
• chore bump js-yaml (#​344)
• chore bump picomatch from 2.3.0 to 2.3.2 (#​342)

v1.22.0

Compare Source

• chore bump node to 24 (#​339)

v1.21.0

Compare Source

• fix include package name for duplicate bench names (#​330)
• fix avoid duplicate package suffix in Go benchmarks (#​337)

v1.20.7

Compare Source

• fix improve parsing for custom benchmarks (#​323)

v1.20.5

Compare Source

• feat allow to parse generic cargo bench/criterion units (#​280)
• fix add summary even when failure threshold is surpassed (#​285)
• fix time units are not normalized (#​318)

v1.20.4

Compare Source

• feat add typings and validation workflow (#​257)

docker/buildx (buildx)

v0.35.0

Compare Source

buildx 0.35.0

Welcome to the v0.35.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Areeb Ahmed
• Jiří Moravčík
• Sopho Merkviladze
• Akihiro Suda
• Jonathan A. Sternberg

Notable Changes

• Local output now supports a mode=delete attribute for build and bake commands. This mode replaces the destination directory with the build result instead of merging it. Similar to the --delete flag in rsync. For safety, this mode is only allowed if the destination directory is a subdirectory of the working directory. To export to other destinations, --allow=buildx.local.delete needs to be provided or the action confirmed by the user in the TUI. When exporting multi-platform results, this mode requires BuildKit v0.31.0+. #​3883
• Source policies now support the new exec proxy feature of BuildKit v0.31.0+ that captures the network traffic of your build steps. To opt in to network proxy, your Dockerfile.rego source policy needs to return caps: { "exec.proxy": true } in the evaluation decision. After opting in, you can control what network requests are allowed to be made by the run steps with policy rules for regular input.http sources, similar to how this was done for direct HTTP build sources before. You can also opt in your whole builder with --buildkitd-flags '--proxy-network' in buildx create. #​3895
• Resource limits can now be set for CPU and memory using the --resource flag in build and the resource key in bake commands. This feature requires BuildKit v0.31.0+ and Dockerfile v1.25.0+. #​3876 #​3900
• Fix possible "closed channel" panic. #​3886

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.41.7 -> v1.42.0
• github.com/aws/aws-sdk-go-v2/config v1.32.17 -> v1.32.24
• github.com/aws/aws-sdk-go-v2/credentials v1.19.16 -> v1.19.23
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 -> v1.18.29
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 -> v1.4.29
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 -> v2.7.29
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24 -> v1.4.30
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9 -> v1.13.12
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23 -> v1.13.29
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.11 -> v1.1.5
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.17 -> v1.31.3
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.21 -> v1.36.6
• github.com/aws/aws-sdk-go-v2/service/sts v1.42.1 -> v1.43.3
• github.com/aws/smithy-go v1.25.1 -> v1.27.2
• github.com/containerd/containerd/v2 v2.2.3 -> v2.2.4
• github.com/containerd/continuity v0.4.5 -> v0.5.0
• github.com/containerd/platforms v1.0.0-rc.2 -> v1.0.0-rc.4
• github.com/containerd/typeurl/v2 v2.2.3 -> v2.3.0
• github.com/docker/cli v29.4.3 -> v29.5.3
• github.com/docker/distribution v2.8.3 new
• github.com/docker/docker-credential-helpers v0.9.5 -> v0.9.8
• github.com/go-openapi/analysis v0.24.3 -> v0.25.2
• github.com/go-openapi/jsonpointer v0.22.5 -> v0.23.1
• github.com/go-openapi/jsonreference v0.21.5 -> v0.21.6
• github.com/go-openapi/runtime v0.29.3 -> v0.32.3
• github.com/go-openapi/runtime/server-middleware v0.30.0 new
• github.com/go-openapi/spec v0.22.4 -> v0.22.5
• github.com/go-openapi/strfmt v0.26.1 -> v0.26.3
• github.com/go-openapi/swag v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/cmdutils v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/conv v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/fileutils v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/jsonname v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/jsonutils v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/loading v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/mangling v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/netutils v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/stringutils v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/typeutils v0.25.5 -> v0.26.0
• github.com/go-openapi/swag/yamlutils v0.25.5 -> v0.26.0
• github.com/go-openapi/validate v0.25.2 -> v0.25.3
• github.com/google/certificate-transparency-go v1.3.2 -> v1.3.3
• github.com/google/go-containerregistry v0.20.7 -> v0.21.6
• github.com/gorilla/mux v1.8.1 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 -> v2.29.0
• github.com/in-toto/attestation v1.1.2 -> v1.2.0
• github.com/moby/buildkit v0.30.0 -> v0.31.0
• github.com/moby/policy-helpers a39d601 -> d5411a9
• github.com/moby/sys/sequential v0.6.0 -> v0.7.0
• github.com/pelletier/go-toml/v2 v2.2.4 -> v2.3.1
• github.com/prometheus/common v0.66.1 -> v0.67.5
• github.com/prometheus/procfs v0.17.0 -> v0.20.1
• github.com/secure-systems-lab/go-securesystemslib v0.10.0 -> v0.11.0
• github.com/sigstore/protobuf-specs v0.5.0 -> v0.5.1
• github.com/sigstore/rekor v1.5.0 -> v1.5.2
• github.com/sigstore/rekor-tiles/v2 v2.0.1 -> 5d098a2
• github.com/sigstore/sigstore v1.10.5 -> v1.10.8
• github.com/sigstore/sigstore-go v1.1.4 -> v1.2.1
• github.com/sigstore/timestamp-authority/v2 v2.0.6 -> v2.1.2
• github.com/theupdateframework/go-tuf/v2 v2.4.1 -> v2.4.2
• github.com/tonistiigi/fsutil a2aa163 -> 0257b33
• github.com/transparency-dev/formats 404c0d5 -> v0.1.1
• github.com/youmark/pkcs8 a2c0da2 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.68.0 -> v0.69.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.68.0 -> v0.69.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 -> v0.69.0
• go.opentelemetry.io/otel v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0 -> v1.44.0
• go.opentelemetry.io/otel/metric v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/sdk v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/sdk/metric v1.43.0 -> v1.44.0
• go.opentelemetry.io/otel/trace v1.43.0 -> v1.44.0
• go.yaml.in/yaml/v2 v2.4.3 -> v2.4.4
• google.golang.org/genproto/googleapis/api 6f92a3b -> 3dc84a4
• google.golang.org/genproto/googleapis/rpc 6f92a3b -> 3dc84a4
• google.golang.org/grpc v1.80.0 -> v1.81.1
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 -> v1.6.1
• k8s.io/klog/v2 v2.130.1 -> v2.140.0

Previous release can be found at v0.34.1

v0.34.1

Compare Source

buildx 0.34.1

Welcome to the v0.34.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Jonathan A. Sternberg
• Tõnis Tiigi

Notable Changes

• Fix regression in Bake command when building from Compose files with empty array value #​3849 #​3852
• Fix possible panic in Kubernetes driver when using statefulset #​3853

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.34.0

v0.34.0

Compare Source

Welcome to the v0.34.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Guillaume Lours
• Hervé Le Meur
• Mateusz Gozdek

Notable Changes

• Buildx now supports a default source policy for common build pipeline images that are provided by Docker Inc and signed by Docker GitHub builder. These include docker/dockerfile frontend (including docker/dockerfile-upstream staging area) and docker/buildkit-syft-scanner image used for SBOM generation. These images are cryptographically verified to be authentic releases before they are used in builds. This feature is currently opt-in behind the BUILDX_DEFAULT_POLICY environment variable, but the intention is to enable it by default in a future release #​3807
• Add --policy flag to bake command to specify global policy evaluation options. #​3832
• Kubernetes driver now supports persistent storage options that change the deployment definition to use a StatefulSet and a persistent volume claim. #​3766
• Fix issue where progress policy errors may have been lost in progress output. #​3838
• Fix stopping dial-stdio command when the builder connection closes #​3790
• Fix possible panic in buildx debug command when solving fails #​3823
• Fix handling of Windows paths in local OCI layout definitions #​3825 #​3820 #​3812
• Fix possible incorrect error when using rm commands on Docker context based builders #​3817
• Fix possible cache miss due to nondeterministic ordering of extra hosts #​3789
• Fix mounting of WSL libraries for GPU devices only on local docker-container endpoints #​3784

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.41.4 -> v1.41.7
• github.com/aws/aws-sdk-go-v2/config v1.32.12 -> v1.32.17
• github.com/aws/aws-sdk-go-v2/credentials v1.19.12 -> v1.19.16
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 -> v1.18.23
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20 -> v1.4.23
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20 -> v2.7.23
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24 new
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 -> v1.13.9
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20 -> v1.13.23
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.8 -> v1.0.11
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.13 -> v1.30.17
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 -> v1.35.21
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.9 -> v1.42.1
• github.com/aws/smithy-go v1.24.2 -> v1.25.1
• github.com/clipperhouse/uax29/v2 v2.2.0 new
• github.com/compose-spec/compose-go/v2 v2.9.1 -> v2.10.2
• github.com/containerd/containerd/v2 v2.2.2 -> v2.2.3
• github.com/docker/cli v29.3.1 -> v29.4.3
• github.com/docker/go-connections v0.6.0 -> v0.7.0
• github.com/go-openapi/runtime v0.29.2 -> v0.29.3
• github.com/go-openapi/swag v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/netutils v0.25.4 -> v0.25.5
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 -> v2.28.0
• github.com/in-toto/in-toto-golang v0.10.0 -> v0.11.0
• github.com/klauspost/compress v1.18.5 -> v1.18.6
• github.com/mattn/go-runewidth v0.0.16 -> v0.0.23
• github.com/moby/buildkit v0.29.0 -> v0.30.0
• github.com/moby/moby/api v1.54.0 -> v1.54.2
• github.com/moby/moby/client v0.3.0 -> v0.4.1
• github.com/moby/policy-helpers b7c0b99 -> a39d601
• github.com/moby/spdystream v0.5.0 -> v0.5.1
• github.com/sigstore/sigstore v1.10.4 -> v1.10.5
• github.com/sigstore/timestamp-authority/v2 v2.0.3 -> v2.0.6
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 -> v0.68.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.63.0 -> v0.68.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 -> v0.68.0
• go.opentelemetry.io/otel v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.38.0 -> v1.42.0
• go.opentelemetry.io/otel/metric v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/sdk v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/sdk/metric v1.40.0 -> v1.43.0
• go.opentelemetry.io/otel/trace v1.40.0 -> v1.43.0
• go.opentelemetry.io/proto/otlp v1.9.0 -> v1.10.0
• go.yaml.in/yaml/v4 v4.0.0-rc.4 new
• golang.org/x/crypto v0.48.0 -> v0.50.0
• golang.org/x/mod v0.33.0 -> v0.34.0
• golang.org/x/net v0.51.0 -> v0.53.0
• golang.org/x/oauth2 v0.34.0 -> v0.36.0
• golang.org/x/sync v0.19.0 -> v0.20.0
• golang.org/x/sys v0.42.0 -> v0.43.0
• golang.org/x/term v0.41.0 -> v0.42.0
• golang.org/x/text v0.34.0 -> v0.36.0
• golang.org/x/time v0.14.0 -> v0.15.0
• golang.org/x/tools v0.41.0 -> v0.43.0
• google.golang.org/genproto/googleapis/api 8636f87 -> 6f92a3b
• google.golang.org/genproto/googleapis/rpc 8636f87 -> 6f92a3b
• google.golang.org/grpc v1.79.3 -> v1.80.0
• k8s.io/api v0.35.2 -> v0.35.4
• k8s.io/apimachinery v0.35.2 -> v0.35.4
• k8s.io/client-go v0.35.2 -> v0.35.4

Previous release can be found at v0.33.0

cardinalby/export-env-action (cardinalby/export-env-action)

v2.2.3

Compare Source

docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1567
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1545 #​1572
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1568
• Bump js-yaml from 4.1.1 to 4.3.0 in #​1566
• Bump tmp from 0.2.5 to 0.2.7 in #​1547
• Bump undici from 6.24.1 to 6.27.0 in #​1564
• Bump vite from 7.3.2 to 7.3.6 in #​1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​1525
• Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0 in #​1517
• Bump brace-expansion from 2.0.2 to 5.0.6 in #​1534
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​1529
• Bump fast-xml-parser from 5.5.7 to 5.8.0 in #​1521
• Bump postcss from 8.5.6 to 8.5.10 in #​1526
• Bump tar from 6.2.1 to 7.5.15 in #​1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

• Skip empty registry-auth secret mask by @​crazy-max in [#​1035](https://redirect.g

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.