chore(deps): bump blue-build/github-action from 1.8 to 1.10

[dependabot[bot]]

Bumps blue-build/github-action from 1.8 to 1.10.

Release notes

Sourced from blue-build/github-action's releases.

v1.10.0

1.10.0 (2025-11-26)

Features

• add options for build-chunked-oci (#106) (07ff155)
• add provenance verification (#107) (5ff2e30)
• set container policy to validate Blue-Build cli signature (#105) (c1c1e56)

Bug Fixes

• enable sigstore attachments for container verification (#111) (d150c94)
• missing mkdir (#113) (8484206)
• missing pubkey dir (#109) (9c9c416)
• set pipefail (#112) (90c0826)
• shell scripting error (#114) (82144b7)
• typo in input validation step (#115) (0235ef4)

v1.9.1

1.9.1 (2025-09-04)

Bug Fixes

• Use an array for the args (#97) (13d8262)

v1.9.0

1.9.0 (2025-09-02)

Features

• add retry_push_count option to expose retry-push CLI options (#91) (2c22aca)

v1.8.3

Full Changelog: https://github.com/blue-build/github-action/compare/v1...v1.8.3

v1.8.2

1.8.2 (2025-06-22)

Bug Fixes

• cosign version installer tag (695be33)

v1.8.1

1.8.1 (2024-12-11)

... (truncated)

Changelog

Sourced from blue-build/github-action's changelog.

Changelog

1.10.0 (2025-11-26)

Features

• add options for build-chunked-oci (#106) (07ff155)
• add provenance verification (#107) (5ff2e30)
• set container policy to validate Blue-Build cli signature (#105) (c1c1e56)

Bug Fixes

• enable sigstore attachments for container verification (#111) (d150c94)
• missing mkdir (#113) (8484206)
• missing pubkey dir (#109) (9c9c416)
• set pipefail (#112) (90c0826)
• shell scripting error (#114) (82144b7)
• typo in input validation step (#115) (0235ef4)

1.9.1 (2025-09-04)

Bug Fixes

• Use an array for the args (#97) (13d8262)

1.9.0 (2025-09-02)

Features

• add retry_push_count option to expose retry-push CLI options (#91) (2c22aca)

1.8.2 (2025-06-22)

Bug Fixes

• cosign version installer tag (695be33)

1.8.1 (2024-12-11)

Bug Fixes

• Check for user-provided build_opts (#71) (b22398a)

1.8.0 (2024-12-03)

... (truncated)

Commits

• 5d15e0a chore(main): release 1.10.0 (#108)
• d2cb877 chore(deps): bump googleapis/release-please-action from 4.2.0 to 4.4.0 (#102)
• 25b6acb chore(deps): bump actions/checkout from 4.2.2 to 6.0.0 (#110)
• 64929dd chore(deps): bump sigstore/cosign-installer from 3.9.1 to 4.0.0 (#101)
• 44643a8 chore(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 (#85)
• 172d490 chore: replace unmaintained free-disk-space action (#117)
• 0235ef4 fix: typo in input validation step (#115)
• 82144b7 fix: shell scripting error (#114)
• 8484206 fix: missing mkdir (#113)
• 90c0826 fix: set pipefail (#112)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)