ehco DNM： build(deps): bump the dependencies group across 1 directory with 2 updates

Bumps the dependencies group with 2 updates in the / directory: docker/build-push-action and goreleaser/goreleaser-action.

Updates docker/build-push-action from 5 to 6

Release notes

Sourced from docker/build-push-action's releases.

v6.0.0

Export build record and generate build summary by @crazy-max in docker/build-push-action#1120

Bump @docker/actions-toolkit from 0.24.0 to 0.26.0 in docker/build-push-action#1132 docker/build-push-action#1136 docker/build-push-action#1138

Bump braces from 3.0.2 to 3.0.3 in docker/build-push-action#1137

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_NO_SUMMARY: true environment variable in your workflow.

Full Changelog: https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0

v5.4.0

Show builder information before building by @crazy-max in docker/build-push-action#1128

Handle attestations correctly with provenance and sbom inputs by @crazy-max in docker/build-push-action#1086

Bump @docker/actions-toolkit from 0.19.0 to 0.24.0 in docker/build-push-action#1088 docker/build-push-action#1105 docker/build-push-action#1121 docker/build-push-action#1127

Bump undici from 5.28.3 to 5.28.4 in docker/build-push-action#1090

Full Changelog: https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0

v5.3.0

Bump @docker/actions-toolkit from 0.18.0 to 0.19.0 in docker/build-push-action#1080

Full Changelog: https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0

v5.2.0

Disable quotes detection for outputs input by @crazy-max in docker/build-push-action#1074

Warn about ignored inputs by @favonia in docker/build-push-action#1019

Bump @docker/actions-toolkit from 0.14.0 to 0.18.0 in docker/build-push-action#1070

Bump undici from 5.26.3 to 5.28.3 in docker/build-push-action#1057

Full Changelog: https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0

v5.1.0

Add annotations input by @crazy-max in docker/build-push-action#992

Add secret-envs input by @elias-lundgren in docker/build-push-action#980

Bump @babel/traverse from 7.17.3 to 7.23.2 in docker/build-push-action#991

Bump @docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in docker/build-push-action#990 docker/build-push-action#1006

Full Changelog: https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0

Commits

94f8f8c Merge pull request #1142 from docker/dependabot/npm_and_yarn/docker/actions-t...
22f4433 chore: update generated content
6721c56 chore(deps): Bump @docker/actions-toolkit from 0.26.0 to 0.26.1
4367da9 Merge pull request #1140 from docker/dependabot/github_actions/docker/bake-ac...
0883ebe Merge pull request #1139 from crazy-max/bump-major
76e5c2d chore(deps): Bump docker/bake-action from 4 to 5
29d6782 docs: bump actions to latest major
c382f71 Merge pull request #1120 from crazy-max/build-summary
5a5b70d chore: update generated content
dc24cf9 don't generate summary for cloud driver
Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 5 to 6

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v6.0.0

[!WARNING] This is a breaking change!

Follow the instructions here to upgrade!

What's Changed

feat!: use "~> v2" as default by @caarlos0 in goreleaser/goreleaser-action#463

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0

v5.1.0

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

docs: bump actions to latest major by @crazy-max in goreleaser/goreleaser-action#435

chore(deps): bump docker/bake-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#436

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#437

chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in goreleaser/goreleaser-action#443

chore(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in goreleaser/goreleaser-action#444

Delete .kodiak.toml by @vedantmgoyal9 in goreleaser/goreleaser-action#446

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#448

chore(deps): bump ip from 2.0.0 to 2.0.1 by @dependabot in goreleaser/goreleaser-action#450

Upgrade setup-go action version in README by @kishaningithub in goreleaser/goreleaser-action#455

chore(deps): bump tar from 6.1.14 to 6.2.1 by @dependabot in goreleaser/goreleaser-action#456

chore: use corepack to install yarn by @crazy-max in goreleaser/goreleaser-action#458

feat: lock this major version of the action to use '~> v1' as 'latest' by @caarlos0 in goreleaser/goreleaser-action#461

chore(deps): bump semver from 7.6.0 to 7.6.2 by @dependabot in goreleaser/goreleaser-action#462

chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 by @dependabot in goreleaser/goreleaser-action#451

New Contributors

@vedantmgoyal9 made their first contribution in goreleaser/goreleaser-action#446

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0

Commits

286f3b1 ci: fix tests
beac410 ci: update workflow and .goreleaser.yml
18bbabc feat!: use "~> v2" as default (#463)
See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Jun 19 '24 03:06 dependabot[bot]

this pr have breaking changes

Jun 25 '24 00:06 Ehco1996

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Jul 13 '25 08:07 dependabot[bot]