Bump the github-actions-all group with 3 updates

[dependabot]

Bumps the github-actions-all group with 3 updates: redhat-actions/buildah-build, redhat-actions/podman-login and redhat-actions/push-to-registry.

Updates redhat-actions/buildah-build from 2 to 3

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.0.0

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. (#154)
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. (#161)

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. (#161)
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. (#168)
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. (#169)
• Multiple ports: The port input now accepts multiple ports separated by newline. (#165)
• Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. (#167)
• Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. (#166)
• Image digest output: The digest output now reliably returns the content digest of the built image. (#153, #165)

Bug Fixes

• Fix empty entrypoint being set when the input is not provided. (#161)
• Fix containerfile path resolution to check both workspace and context directory. (#165)
• Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. (#165)

CI & Infrastructure

• Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. (#156)
• Add workflow permissions, concurrency groups, and path filters. (#156)
• Remove broken install_latest_buildah.sh script and simplify CI matrices. (#164)
• Remove defunct CRDA vulnerability scan workflow. (#170)
• Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort/github-action-markdown-link-check. (#171)
• Enable Dependabot for npm and GitHub Actions dependencies. (#156)
• Add CODEOWNERS, SECURITY.md. (#156)

Dependency Updates

• Upgrade TypeScript to 6.x. (#163)
• Upgrade ESLint to 10 with flat config. (#156)
• Upgrade @actions/core, @actions/exec, @actions/io to latest versions. (#150, #156)
• Upgrade @types/node to v26. (#159)
• Upgrade redhat-actions/common to v2. (#158)

Full Changelog: redhat-actions/buildah-build@v2.13...v3.0.0

Update action to run on Node 20

Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Forcibly remove existing manifest before creating a new one. #103

Update action to run on node 16

v2.11

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v2.10

No release notes provided.

Image manifest support

... (truncated)

Changelog

Sourced from redhat-actions/buildah-build's changelog.

v2.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Commits

• 27e5954 Update CHANGELOG and version for v3.0.1
• 6c3509d Detect container storage root instead of hardcoding it (#174) (#175)
• 3194d0c Document available buildah container images in README (#173)
• 5d84797 Update README and CHANGELOG for v3.0.0 (#172)
• 464212a Replace deprecated link checker and fix 429 rate limiting (#171)
• 97fe4a5 Fall back to podman when buildah is unavailable (#169)
• 3fe6dbb Remove defunct CRDA vulnerability scan workflow (#170)
• 02f342b Add buildah-image input to run buildah from a container (#168)
• 269c174 Build multi-arch images in parallel for faster builds (#167)
• 15373c9 Warn when multi-arch build produces wrong architecture (#166)
• Additional commits viewable in compare view

Updates redhat-actions/podman-login from 1 to 2

Release notes

Sourced from redhat-actions/podman-login's releases.

v2.0

Breaking Changes

• Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
• Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
• Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

• Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
• Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
• Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

• Add tls_verify input to skip TLS certificate verification for self-signed registries
• Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
• Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

• TypeScript 5.x to 6.0.3
• ESLint 8 (EOL) to 10 with flat config
• @aws-sdk/client-ecr 3.535 to 3.1094
• @vercel/ncc 0.38 to 0.44
• Remove unused @aws-sdk/util-base64
• Resolve all npm audit vulnerabilities

CI & Infrastructure

• Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
• Add workflow-level permissions: contents: read
• Add concurrency groups to cancel redundant CI runs
• Pin runs-on to ubuntu-24.04
• Add Dependabot for npm and GitHub Actions updates
• Add SECURITY.md
• Enable secret scanning and push protection
• Remove deprecated CRDA vulnerability scan workflow

Full Changelog: redhat-actions/podman-login@v1.7...v2.0

Update action to run on Node20.https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v1.6

Update action/core dependency to 1.10.0

Update action to run on Node16

v1.5

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v1.4

No release notes provided.

v1.3

No release notes provided.

... (truncated)

Changelog

Sourced from redhat-actions/podman-login's changelog.

podman-login Changelog

v2.0

Breaking Changes

• Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
• Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
• Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

• Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
• Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
• Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

• Add tls_verify input to skip TLS certificate verification for self-signed registries
• Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
• Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

• TypeScript 5.x to 6.0.3
• ESLint 8 (EOL) to 10 with flat config
• @aws-sdk/client-ecr 3.535 to 3.1094
• @vercel/ncc 0.38 to 0.44
• Remove unused @aws-sdk/util-base64
• Resolve all npm audit vulnerabilities

CI & Infrastructure

• Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
• Add workflow-level permissions: contents: read
• Add concurrency groups to cancel redundant CI runs
• Pin runs-on to ubuntu-24.04
• Add Dependabot for npm and GitHub Actions updates
• Add SECURITY.md
• Enable secret scanning and push protection
• Remove deprecated CRDA vulnerability scan workflow

v1.8

• Update action to run on Node24. https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

v1.7

• Update action to run on Node20.https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v1.6

• Update action/core dependency to 1.10.0

v1.5

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v1.4

... (truncated)

Commits

• 50c2d9a Update CHANGELOG.md for v2.0 release
• 8b1d074 Merge pull request #64 from redhat-actions/fix/remaining-issues
• 6be3c81 Fix auth file path detection, lowercase registry, and ECR OIDC support
• b1530e7 Merge pull request #63 from redhat-actions/feature/tls-verify
• b0eba47 Add tls_verify input to skip TLS certificate verification
• dff696f Remove CRDA vulnerability scan workflow
• 20eef96 Merge pull request #62 from redhat-actions/update/types-node-and-dependabot-c...
• b9e7b01 Update @​types/node to 26.1.1 and exclude TypeScript 7 from Dependabot
• 07532ea Fix ENOENT error when ~/.docker directory does not exist
• 36756be Merge pull request #59 from redhat-actions/dependabot/github_actions/redhat-a...
• Additional commits viewable in compare view

Updates redhat-actions/push-to-registry from 2 to 3

Release notes

Sourced from redhat-actions/push-to-registry's releases.

v3.0.0

Breaking Changes

• Upgrade action runtime from Node 20 to Node 24. #113
• Tags are no longer lowercased. Per the OCI distribution spec, only image names and registries are normalized to lowercase; tag case is now preserved. #112, #121

Features

• Add Sigstore signing support via sigstore-private-key and sign-passphrase inputs. #120
• Add podman-args input for global podman flags (e.g. --storage-driver=vfs) that apply to all podman invocations, not just push. #102, #121
• Add remote input for podman remote mode (--remote). When enabled, Docker image storage checks are skipped. #95, #122

Bug Fixes

• Prefix unqualified source images with localhost/ when pushing to prevent podman from resolving to remote registries. #66, #121
• Fix default tag fallback when tags input is empty. #109
• Fix registry input not being lowercased for OCI compliance. #110
• Fix deprecated fs.rmdir usage, replace with fs.rm. #113

Dependency Updates

• Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x. #113
• Upgrade TypeScript 5.3 to 6.0, migrate ESLint 8 to 10 with flat config. #113
• Bump ini from 5.0.0 to 7.0.0. #118

CI & Infrastructure

• Modernize all CI workflows: ubuntu-24.04, latest action versions, permissions, concurrency groups. #114
• Enable secret scanning, push protection, and Dependabot. #114
• Replace archived link checker with maintained fork. Remove defunct CRDA workflow. #123

Documentation

• Add Required Permissions section, multi-line tag docs, qemu guidance, and podman remote docs to README.

Full Changelog: redhat-actions/push-to-registry@v2...v3.0.0

Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Update action to run on Node16

v2.7

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v2.6

No release notes provided.

v2.5.1

No release notes provided.

Image manifest support

• Allow pushing image manifest.

v2.4.1

No release notes provided.

Allow fully qualified image names in 'tags' input

... (truncated)

Changelog

Sourced from redhat-actions/push-to-registry's changelog.

push-to-registry Changelog

v3.0.0

Breaking Changes

• Upgrade action runtime from Node 20 to Node 24. #113
• Tags are no longer lowercased. Per the OCI distribution spec, only image names and registries are normalized to lowercase; tag case is now preserved. #112, #121

Features

• Add Sigstore signing support via sigstore-private-key and sign-passphrase inputs. #120
• Add podman-args input for global podman flags (e.g. --storage-driver=vfs) that apply to all podman invocations, not just push. #102, #121
• Add remote input for podman remote mode (--remote). When enabled, Docker image storage checks are skipped. #95, #122

Bug Fixes

• Prefix unqualified source images with localhost/ when pushing to prevent podman from resolving to remote registries. #66, #121
• Fix default tag fallback when tags input is empty. #109
• Fix registry input not being lowercased for OCI compliance. #110
• Fix deprecated fs.rmdir usage, replace with fs.rm. #113
• Fix typo in createDockerPodmanImageStorage function name. #113

Dependency Updates

• Upgrade @actions/core from 1.x to 3.x. #113
• Upgrade @actions/exec from 1.x to 3.x. #113
• Upgrade @actions/io from 1.x to 3.x. #113
• Upgrade TypeScript from 5.3 to 6.0. #113
• Migrate ESLint from v8 to v10 with flat config. #113
• Bump ini from 5.0.0 to 7.0.0. #118

CI & Infrastructure

• Modernize all CI workflows: update to ubuntu-24.04, latest action versions, add permissions and concurrency groups. #114
• Enable secret scanning and push protection. #114
• Add Dependabot configuration for npm and GitHub Actions. #114
• Add CODEOWNERS and SECURITY.md. #114

Documentation

• Add Required Permissions section to README. #107, #121
• Document multi-line tag support using YAML pipe syntax. #101, #121
• Add qemu version guidance for multi-arch manifest builds. #85, #121
• Document podman remote mode usage. #122

v2.8

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v2.7.1

• Don't add docker.io prefix to ECR images. #69

v2.7

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v2.6

... (truncated)

Commits

• 94ade33 Update changelog for v3.0.0 (#123)
• f74711b Add podman remote mode support (#122)
• 1a04376 Fix open issues: tag casing, podman-args, localhost prefix, docs (#121)
• 7861acc Add Sigstore signing support for container images (#120)
• 5546179 Rebuild dist bundle after merging #109 and #110
• 1ea7388 fix: lowercase registry input for OCI compliance (#110)
• 0e92057 fix: default tag fallback (#109)
• 93dab12 Bump ini from 5.0.0 to 7.0.0 (#118)
• f1ffa1e Bump @​types/node from 22.20.1 to 26.1.1 (#117)
• d007cdb Bump redhat-actions/common from 1 to 2 (#116)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign lpiwowar for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment