chore(deps): update docker/metadata-action action to v6

[renovate-bot-cbcoutinho]

This PR contains the following updates:

Package	Type	Update	Change
docker/metadata-action	action	major	v5.10.0 → v6

---

Release Notes

docker/metadata-action (docker/metadata-action)

v6

Compare Source

v6.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​605
• List inputs now preserve # inside values while still supporting full-line # comments by @​crazy-max in #​607
• Switch to ESM and update config/test wiring by @​crazy-max in #​602
• Bump lodash from 4.17.21 to 4.17.23 in #​588
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​599
• Bump @​actions/github from 6.0.1 to 9.0.0 in #​597
• Bump @​docker/actions-toolkit from 0.68.0 to 0.79.0 in #​604
• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in #​600
• Bump semver from 7.7.3 to 7.7.4 in #​603

Full Changelog: docker/metadata-action@v5.10.0...v6.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[claude]

Claude finished @renovate-bot-cbcoutinho[bot]'s task in 44s —— View job

---

PR Review: chore(deps): update docker/metadata-action action to v6

• Gather context
• Review changed file
• Assess v6 breaking changes
• Post review findings

---

Summary

This is a clean, low-risk dependency update. The change is a single-line SHA-pinned action version bump in .github/workflows/docker-build-publish.yml.

What Changed

.github/workflows/docker-build-publish.yml:39 — docker/metadata-action bumped from v5.10.0 → v6.0.0.

v6 Breaking Changes Assessment

The v6 release notes list these changes:

Change	Impact on this workflow
Node 24 runtime (requires Actions Runner ≥ v2.327.1)	✅ No issue — GitHub-hosted ubuntu-latest runners are well past this version
# inside list values now preserved (only full-line # treated as comments)	✅ No impact — the tags: block has no inline # comments
ESM migration + dependency bumps	✅ Internal only, no API changes

Workflow Usage Review

The workflow uses only:

• inputs.images and inputs.tags → no API changes here
• outputs.tags and outputs.labels → unchanged outputs

No breaking changes affect this workflow's configuration.

Security

• SHA pinning is correctly maintained (030e881283bb7a6894de51c315a6bfe6a94e05cf) — good practice consistent with the rest of the workflow file.

Minor Nit

The comment reads # v6 rather than # v6.0.0. This is Renovate's default behavior for major-only version pins and is not a problem — just noting it for awareness.

---

Verdict: ✅ LGTM — straightforward major version bump with no functional changes to this workflow's usage. Safe to merge.