chore(deps): update docker/build-push-action action to v7

[renovate-bot-cbcoutinho]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	major	v6.19.2 → v7.1.0

---

Release Notes

docker/build-push-action (docker/build-push-action)

v7.1.0

Compare Source

• Git context query format support by @​crazy-max in #​1505
• Bump @​docker/actions-toolkit from 0.79.0 to 0.87.0 by @​crazy-max in #​1505
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​1500
• Bump fast-xml-parser from 5.4.2 to 5.5.7 in #​1489
• Bump flatted from 3.3.3 to 3.4.2 in #​1491
• Bump glob from 10.3.12 to 10.5.0 in #​1490
• Bump handlebars from 4.7.8 to 4.7.9 in #​1497
• Bump lodash from 4.17.23 to 4.18.1 in #​1510
• Bump picomatch from 4.0.3 to 4.0.4 in #​1496
• Bump undici from 6.23.0 to 6.24.1 in #​1486
• Bump vite from 7.3.1 to 7.3.2 in #​1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​1470
• Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @​crazy-max in #​1473
• Remove legacy export-build tool support for build summary by @​crazy-max in #​1474
• Switch to ESM and update config/test wiring by @​crazy-max in #​1466
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​1454
• Bump @​docker/actions-toolkit from 0.62.1 to 0.79.0 in #​1453 #​1472 #​1479
• Bump minimatch from 3.1.2 to 3.1.5 in #​1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v7

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[claude]

PR Review

This is a routine Renovate-generated dependency update for docker/build-push-action from v6.19.2 to v7.0.0.

Summary of v7.0.0 changes:

• Node 24 as default runtime (requires Actions Runner v2.327.1+)
• Removal of deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS env vars
• Removal of legacy export-build tool support for build summary
• Updated internal dependencies (@actions/core 1.x -> 3.x, @docker/actions-toolkit bump)

Assessment: Safe to merge

• The diff is minimal and correct -- only the action SHA/tag is updated
• The commit SHA pin (d08e5c354a6adb9ed34480a06d141179aa583294) is the expected hash for v7.0.0, which is good security practice
• No deprecated env vars (DOCKER_BUILD_NO_SUMMARY, DOCKER_BUILD_EXPORT_RETENTION_DAYS) are used in this workflow, so the removal is a non-issue
• The Node 24 runtime requirement is met by GitHub-hosted ubuntu-latest runners, which use Actions Runner v2.327.1+
• No changes to workflow inputs/outputs or calling convention -- the with: block is unaffected

No issues found. This is a low-risk, straightforward version bump.

[claude]

PR Review: docker/build-push-action v6 → v7

This is a straightforward Renovate-generated dependency update. Here's a quick assessment.

Summary

Single-line change pinning docker/build-push-action to v7.1.0 (SHA: bcafcacb...).

What changed in v7

v7.0.0 breaking changes:

• Node 24 as default runtime — requires Actions Runner v2.327.1+. ubuntu-latest on GitHub-hosted runners meets this requirement.
• Removes deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS env vars. The workflow doesn't use either.
• Removes legacy export-build tool support for build summaries. Not used here.

v7.1.0 additions:

• Git context query format support (not used here, no impact)
• Several transitive dependency security patches (handlebars, undici, lodash, brace-expansion)

Assessment

No issues. The workflow is unaffected by the breaking changes:

• No removed env vars are referenced
• ubuntu-latest runners are up-to-date enough for Node 24
• No legacy build summary tooling in use

Security: SHA pinning is correctly maintained (@bcafcacb16a39f128d818304e6c9c0c18556b85f), which is good practice. The transitive dependency patches are a minor security win.

Verdict

Safe to merge.