chore(actions): update github-actions (major) by renovate[bot] · Pull Request #85 · SAP/component-operator

renovate · 2026-02-26T22:03:50Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	major	`v7` → `v8`
actions/upload-artifact	action	major	`v6` → `v7`
azure/setup-helm	action	major	`v4` → `v5`
docker/build-push-action	action	major	`v6` → `v7`
docker/login-action	action	major	`v3` → `v4`
docker/metadata-action	action	major	`v5` → `v6`
docker/setup-buildx-action	action	major	`v3` → `v4`

Release Notes

actions/download-artifact (actions/download-artifact)

`v8.0.1`

Compare Source

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in #471
Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472

Full Changelog: actions/download-artifact@v8...v8.0.1

`v8.0.0`

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

Full Changelog: actions/download-artifact@v7...v8.0.0

`v8`

Compare Source

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v7`

Compare Source

azure/setup-helm (azure/setup-helm)

`v5`

Compare Source

`v5.0.0`

Compare Source

Changed

`v4.3.1`

Compare Source

Changed

Added

#197 Add pre-commit hook

`v4.3.0`

Compare Source

#152 feat: log when restoring from cache
#157 Dependencies Update
#137 Add dependabot

`v4.2.0`

Compare Source

#124 Fix OS detection and download OS-native archive extension

`v4.1.0`

Compare Source

#130 switches to use Helm published file to read latest version instead of using GitHub releases

docker/build-push-action (docker/build-push-action)

`v7.1.0`

Compare Source

Git context query format support by @crazy-max in #1505
Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in #1505
Bump brace-expansion from 1.1.12 to 1.1.13 in #1500
Bump fast-xml-parser from 5.4.2 to 5.5.7 in #1489
Bump flatted from 3.3.3 to 3.4.2 in #1491
Bump glob from 10.3.12 to 10.5.0 in #1490
Bump handlebars from 4.7.8 to 4.7.9 in #1497
Bump lodash from 4.17.23 to 4.18.1 in #1510
Bump picomatch from 4.0.3 to 4.0.4 in #1496
Bump undici from 6.23.0 to 6.24.1 in #1486
Bump vite from 7.3.1 to 7.3.2 in #1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #1470
Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in #1473
Remove legacy export-build tool support for build summary by @crazy-max in #1474
Switch to ESM and update config/test wiring by @crazy-max in #1466
Bump @actions/core from 1.11.1 to 3.0.0 in #1454
Bump @docker/actions-toolkit from 0.62.1 to 0.79.0 in #1453 #1472 #1479
Bump minimatch from 3.1.2 to 3.1.5 in #1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

`v7`

Compare Source

`v6.19.2`

Compare Source

Preserve port in GIT_AUTH_TOKEN host by @crazy-max in #1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

`v6.19.1`

Compare Source

Derive GIT_AUTH_TOKEN host from GitHub server URL by @crazy-max in #1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

`v6.19.0`

Compare Source

Scope default git auth token to github.com by @crazy-max in #1451
Bump brace-expansion from 1.1.11 to 1.1.12 in #1396
Bump form-data from 2.5.1 to 2.5.5 in #1391
Bump js-yaml from 3.14.1 to 3.14.2 in #1429
Bump lodash from 4.17.21 to 4.17.23 in #1446
Bump tmp from 0.2.3 to 0.2.4 in #1398
Bump undici from 5.28.4 to 5.29.0 in #1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

`v6.18.0`

Compare Source

Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in #1381

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

`v6.17.0`

Compare Source

Bump @docker/actions-toolkit from 0.59.0 to 0.61.0 by @crazy-max in #1364

[!NOTE]
Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

`v6.16.0`

Compare Source

Handle no default attestations env var by @crazy-max in #1343
Only print secret keys in build summary output by @crazy-max in #1353
Bump @docker/actions-toolkit from 0.56.0 to 0.59.0 in #1352

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

`v6.15.0`

Compare Source

Bump @docker/actions-toolkit from 0.55.0 to 0.56.0 in #1330

Full Changelog: docker/build-push-action@v6.14.0...v6.15.0

`v6.14.0`

Compare Source

Bump @docker/actions-toolkit from 0.53.0 to 0.55.0 in #1324

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

`v6.13.0`

Compare Source

Bump @docker/actions-toolkit from 0.51.0 to 0.53.0 in #1308

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

`v6.12.0`

Compare Source

Bump @docker/actions-toolkit from 0.49.0 to 0.51.0 in #1300

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

`v6.11.0`

Compare Source

Handlebar defaultContext support for build-contexts input by @crazy-max in #1283
Bump @docker/actions-toolkit from 0.46.0 to 0.49.0 in #1281

Full Changelog: docker/build-push-action@v6.10.0...v6.11.0

`v6.10.0`

Compare Source

Add call input to set method for evaluating build by @crazy-max in #1265
Bump @actions/core from 1.10.1 to 1.11.1 in #1238
Bump @docker/actions-toolkit from 0.39.0 to 0.46.0 in #1268
Bump cross-spawn from 7.0.3 to 7.0.6 in #1261

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

`v6.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.38.0 to 0.39.0 in #1234
Bump path-to-regexp from 6.2.2 to 6.3.0 in #1232

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

`v6.8.0`

Compare Source

Bump @docker/actions-toolkit from 0.37.1 to 0.38.0 in #1230

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

`v6.7.0`

Compare Source

Print info message for build summary support checks by @crazy-max in #1211

Full Changelog: docker/build-push-action@v6.6.1...v6.7.0

`v6.6.1`

Compare Source

Bump @docker/actions-toolkit from 0.37.0 to 0.37.1 in #1205

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

`v6.6.0`

Compare Source

Generate GitHub annotations for build checks by @crazy-max in #1197
Bump @docker/actions-toolkit from 0.35.0 to 0.37.0 in #1196 #1198

Full Changelog: docker/build-push-action@v6.5.0...v6.6.0

`v6.5.0`

Compare Source

Bump @docker/actions-toolkit from 0.33.0 to 0.35.0 in #1186 #1191

Full Changelog: docker/build-push-action@v6.4.1...v6.5.0

`v6.4.1`

Compare Source

revert "Set repository and ghtoken attributes for GitHub Actions cache backend" by @crazy-max in #1183

Full Changelog: docker/build-push-action@v6.4.0...v6.4.1

`v6.4.0`

Compare Source

Set repository and ghtoken attributes for GitHub Actions cache backend by @crazy-max in #1133
Bump @docker/actions-toolkit from 0.31.0 to 0.33.0 in #1179

Full Changelog: docker/build-push-action@v6.3.0...v6.4.0

`v6.3.0`

Compare Source

DOCKER_BUILD_RECORD_UPLOAD environment variable to enable/disable build record upload by @crazy-max in #1172
DOCKER_BUILD_NO_SUMMARY has been deprecated. Set DOCKER_BUILD_SUMMARY to false instead by @crazy-max in #1170 #1173
Bump @docker/actions-toolkit from 0.28.0 to 0.31.0 in #1171 #1159 #1169

Full Changelog: docker/build-push-action@v6.2.0...v6.3.0

`v6.2.0`

Compare Source

Use default retention days for build export artifact by @crazy-max in #1153
Bump @docker/actions-toolkit from 0.27.0 to 0.28.0 in #1158

Full Changelog: docker/build-push-action@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.26.2 to 0.27.0 in #1149

Full Changelog: docker/build-push-action@v6.0.2...v6.1.0

`v6.0.2`

Compare Source

Bump @docker/actions-toolkit from 0.26.1 to 0.26.2 in #1147

Full Changelog: docker/build-push-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

Bump @docker/actions-toolkit from 0.26.0 to 0.26.1 in #1142

Full Changelog: docker/build-push-action@v6.0.0...v6.0.1

docker/login-action (docker/login-action)

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

`v4`

Compare Source

`v3.7.0`

Compare Source

Add scope input to set scopes for the authentication token by @crazy-max in #912
Add support for AWS European Sovereign Cloud ECR by @dphi in #914
Ensure passwords are redacted with registry-auth input by @crazy-max in #911
build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Bump @actions/core from 1.10.1 to 1.11.1 in #791
Bump @aws-sdk/client-ecr to 3.766.0 in #789 #856
Bump @aws-sdk/client-ecr-public to 3.758.0 in #789 #856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in #801 #806 #858
Bump cross-spawn from 7.0.3 to 7.0.6 in #814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in #823
Bump path-to-regexp from 6.2.2 to 6.3.0 in #777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

`v3.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.24.0 to 0.35.0 in #754
Bump https-proxy-agent from 7.0.4 to 7.0.5 in #741
Bump braces from 3.0.2 to 3.0.3 in #730

Full Changelog: docker/login-action@v3.2.0...v3.3.0

`v3.2.0`

Compare Source

Improve missing username/password by @Frankkkkk in #706
Bump @docker/actions-toolkit from 0.18.0 to 0.24.0 in #715 #721
Bump aws-sdk-dependencies to 3.583.0 in #720
Bump undici from 5.28.3 to 5.28.4 in #694

Full Changelog: docker/login-action@v3.1.0...v3.2.0

`v3.1.0`

Compare Source

Bump @babel/traverse from 7.17.3 to 7.23.2 in #618
Bump @docker/actions-toolkit from 0.12.0 to 0.18.0 in #616 #636 #682
Bump aws-sdk dependencies to 3.529.1 in #624 #685
Bump http-proxy-agent to 7.0.2 in #676
Bump https-proxy-agent to 7.0.4 in #676
Bump undici from 5.26.5 to 5.28.3 in #677

Full Changelog: docker/login-action@v3.0.0...v3.1.0

docker/metadata-action (docker/metadata-action)

`v6`

Compare Source

`v6.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #605
List inputs now preserve # inside values while still supporting full-line # comments by @crazy-max in #607
Switch to ESM and update config/test wiring by @crazy-max in #602
Bump lodash from 4.17.21 to 4.17.23 in #588
Bump @actions/core from 1.11.1 to 3.0.0 in #599
Bump @actions/github from 6.0.1 to 9.0.0 in #597
Bump @docker/actions-toolkit from 0.68.0 to 0.79.0 in #604
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #600
Bump semver from 7.7.3 to 7.7.4 in #603

Full Changelog: docker/metadata-action@v5.10.0...v6.0.0

`v5.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in #559 #569
Bump js-yaml from 3.14.1 to 3.14.2 in #564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

`v5.9.0`

Compare Source

Add tag-names output to return tag names without image base name by @crazy-max in #553
Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #539
Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in #555
Bump brace-expansion from 1.1.11 to 1.1.12 in #540
Bump csv-parse from 5.6.0 to 6.1.0 in #532
Bump semver from 7.7.2 to 7.7.3 in in #554
Bump tmp from 0.2.3 to 0.2.5 in #541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

`v5.8.0`

Compare Source

New is_not_default_branch global expression by @crazy-max in #535
Allow to match part of the git tag or value for semver/pep440 types by @crazy-max in #536 #537
Bump @actions/github from 6.0.0 to 6.0.1 in #523
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #526
Bump form-data from 2.5.1 to 2.5.5 in #533
Bump moment-timezone from 0.5.47 to 0.6.0 in #525
Bump semver from 7.7.1 to 7.7.2 in #524