chore(actions): update github actions to v4 by renovate[bot] · Pull Request #1728 · JSONbored/gittensory

renovate · 2026-06-29T08:22:15Z

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	major	`v3` → `v4`
docker/setup-buildx-action	action	major	`v3` → `v4`
docker/setup-qemu-action	action	major	`v3` → `v4`

Dependency PRs must keep npm run test:ci passing. The 97% coverage requirement is enforced as Codecov patch coverage on changed lines (codecov/patch), so dependency-only bumps satisfy it without new tests.

GitHub Actions updates must remain SHA-pinned.

Renovate is the sole dependency and security-update bot for this repo; GitHub Dependabot security updates are disabled to avoid duplicate PRs (e.g. the two hono advisory PRs).

Release Notes

docker/login-action (docker/login-action)

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

`v4`

Compare Source

`v3.7.0`

Compare Source

Add scope input to set scopes for the authentication token by @crazy-max in #912
Add support for AWS European Sovereign Cloud ECR by @dphi in #914
Ensure passwords are redacted with registry-auth input by @crazy-max in #911
build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Bump @actions/core from 1.10.1 to 1.11.1 in #791
Bump @aws-sdk/client-ecr to 3.766.0 in #789 #856
Bump @aws-sdk/client-ecr-public to 3.758.0 in #789 #856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in #801 #806 #858
Bump cross-spawn from 7.0.3 to 7.0.6 in #814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in #823
Bump path-to-regexp from 6.2.2 to 6.3.0 in #777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

`v3.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.24.0 to 0.35.0 in #754
Bump https-proxy-agent from 7.0.4 to 7.0.5 in #741
Bump braces from 3.0.2 to 3.0.3 in #730

Full Changelog: docker/login-action@v3.2.0...v3.3.0

`v3.2.0`

Compare Source

Improve missing username/password by @Frankkkkk in #706
Bump @docker/actions-toolkit from 0.18.0 to 0.24.0 in #715 #721
Bump aws-sdk-dependencies to 3.583.0 in #720
Bump undici from 5.28.3 to 5.28.4 in #694

Full Changelog: docker/login-action@v3.1.0...v3.2.0

`v3.1.0`

Compare Source

Bump @babel/traverse from 7.17.3 to 7.23.2 in #618
Bump @docker/actions-toolkit from 0.12.0 to 0.18.0 in #616 #636 #682
Bump aws-sdk dependencies to 3.529.1 in #624 #685
Bump http-proxy-agent to 7.0.2 in #676
Bump https-proxy-agent to 7.0.4 in #676
Bump undici from 5.26.5 to 5.28.3 in #677

Full Changelog: docker/login-action@v3.0.0...v3.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #489
Bump brace-expansion from 1.1.12 to 5.0.6 in #547 #508
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #540
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #496
Bump flatted from 3.3.3 to 3.4.2 in #499
Bump glob from 10.3.12 to 13.0.6 in #495
Bump handlebars from 4.7.8 to 4.7.9 in #504
Bump lodash from 4.17.23 to 4.18.1 in #523
Bump picomatch from 4.0.3 to 4.0.4 in #503
Bump postcss from 8.5.6 to 8.5.10 in #537
Bump tar from 6.2.1 to 7.5.15 in #545
Bump undici from 6.23.0 to 6.25.0 in #492
Bump vite from 7.3.1 to 7.3.2 in #520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #483
Remove deprecated inputs/outputs by @crazy-max in #464
Switch to ESM and update config/test wiring by @crazy-max in #481
Bump @actions/core from 1.11.1 to 3.0.0 in #475
Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in #482 #485
Bump js-yaml from 4.1.0 to 4.1.1 in #452
Bump lodash from 4.17.21 to 4.17.23 in #472
Bump minimatch from 3.1.2 to 3.1.5 in #480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

`v4`

Compare Source

`v3.12.0`

Compare Source

Deprecate install input by @crazy-max in #455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #434
Bump brace-expansion from 1.1.11 to 1.1.12 in #436
Bump form-data from 2.5.1 to 2.5.5 in #432
Bump undici from 5.28.4 to 5.29.0 in #435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

`v3.11.1`

Compare Source

Fix keep-state not being respected by @crazy-max in #429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Compare Source

Keep BuildKit state support by @crazy-max in #427
Remove aliases created when installing by default by @hashhar in #139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #422 #425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

`v3.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

`v3.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.48.0 to 0.54.0 in #402 #404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

`v3.8.0`

Compare Source

Make cloud prefix optional to download buildx if driver is cloud by @crazy-max in #390
Bump @actions/core from 1.10.1 to 1.11.1 in #370
Bump @docker/actions-toolkit from 0.39.0 to 0.48.0 in #389
Bump cross-spawn from 7.0.3 to 7.0.6 in #382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

`v3.7.1`

Compare Source

Switch back to uuid package by @crazy-max in #369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

`v3.7.0`

Compare Source

Always set buildkitd-flags if opt-in by @crazy-max in #363
Remove uuid package and switch to crypto by @crazy-max in #366
Bump @docker/actions-toolkit from 0.35.0 to 0.39.0 in #362
Bump path-to-regexp from 6.2.2 to 6.3.0 in #354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

`v3.6.1`

Compare Source

Check for malformed docker context by @crazy-max in #347

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

`v3.6.0`

Compare Source

Create temp docker context if default one has TLS data loaded before creating a container builder by @crazy-max in #341

Full Changelog: docker/setup-buildx-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Bump @docker/actions-toolkit from 0.31.0 to 0.35.0 in #340 #344 #345

Full Changelog: docker/setup-buildx-action@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Throw error message instead of exit code by @crazy-max in #315
Bump @docker/actions-toolkit from 0.20.0 to 0.31.0 in #321 #338
Bump braces from 3.0.2 to 3.0.3 in #329
Bump undici from 5.28.3 to 5.28.4 in #312
Bump uuid from 9.0.1 to 10.0.0 in #326

Full Changelog: docker/setup-buildx-action@v3.3.0...v3.4.0

`v3.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.19.0 to 0.20.0 by @crazy-max in #307

Full Changelog: docker/setup-buildx-action@v3.2.0...v3.3.0

`v3.2.0`

Compare Source

Rename and align config inputs by @crazy-max in #303
- config to buildkitd-config
- config-inline to buildkitd-config-inline
Bump @docker/actions-toolkit from 0.17.0 to 0.19.0 in #302 #306

[!NOTE]
config and config-inline input names are deprecated and will be removed in next major release.

Full Changelog: docker/setup-buildx-action@v3.1.0...v3.2.0

`v3.1.0`

Compare Source

cache-binary input to enable/disable caching binary to GHA cache backend by @crazy-max in #300
build(deps): bump @babel/traverse from 7.17.3 to 7.23.2 in #282
build(deps): bump @docker/actions-toolkit from 0.12.0 to 0.17.0 in #281 #284 #299
build(deps): bump uuid from 9.0.0 to 9.0.1 in #271
build(deps): bump undici from 5.26.3 to 5.28.3 in #297

Full Changelog: docker/setup-buildx-action@v3.0.0...v3.1.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.1.0`

Compare Source

Add reset input to uninstall current emulators by @crazy-max in #21
Bump @docker/actions-toolkit from 0.77.0 to 0.91.0 in #250 #247
Bump brace-expansion from 1.1.12 to 1.1.15 in #265
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #286
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #255
Bump flatted from 3.3.3 to 3.4.2 in #257
Bump glob from 10.3.15 to 10.5.0 in #254
Bump handlebars from 4.7.8 to 4.7.9 in #262
Bump lodash from 4.17.23 to 4.18.1 in #273
Bump postcss from 8.5.6 to 8.5.10 in #285
Bump tar from 6.2.1 to 7.5.15 in #287
Bump tmp from 0.2.5 to 0.2.6 in #291
Bump undici from 6.23.0 to 6.26.0 in #251
Bump vite from 7.3.1 to 7.3.2 in #271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #245
Switch to ESM and update config/test wiring by @crazy-max in #241
Bump @actions/core from 1.11.1 to 3.0.0 in #244
Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in #243
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #240
Bump js-yaml from 3.14.1 to 3.14.2 in #231
Bump lodash from 4.17.21 to 4.17.23 in #238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

`v4`

Compare Source

`v3.7.0`

Compare Source

Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in #217 #230
Bump brace-expansion from 1.1.11 to 1.1.12 in #220
Bump form-data from 2.5.1 to 2.5.5 in #218
Bump tmp from 0.2.3 to 0.2.4 in #221
Bump undici from 5.28.4 to 5.29.0 in #219

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

`v3.6.0`

Compare Source

Display binfmt version by @crazy-max in #202

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #205

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Bump @docker/actions-toolkit from 0.49.0 to 0.54.0 in #193 #197

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

`v3.3.0`

Compare Source

Add cache-image input to enable/disable caching of binfmt image by @crazy-max in #130
Bump @actions/core from 1.10.1 to 1.11.1 in #172
Bump @docker/actions-toolkit from 0.35.0 to 0.49.0 in #187
Bump cross-spawn from 7.0.3 to 7.0.6 in #182
Bump path-to-regexp from 6.2.2 to 6.3.0 in #162

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

`v3.2.0`

Compare Source

Bump @docker/actions-toolkit from 0.31.0 to 0.35.0 in #154 #155

Full Changelog: docker/setup-qemu-action@v3.1.0...v3.2.0

`v3.1.0`

Compare Source

Set docker.io domain for default binfmt image by @crazy-max in #151
Throw error message instead of exit code by @crazy-max in #129
Bump @docker/actions-toolkit from 0.12.0 to 0.31.0 in #115 #128 #131 #134 #149
Bump @babel/traverse from 7.20.13 to 7.23.2 in #109
Bump braces from 3.0.2 to 3.0.3 in #142
Bump undici from 5.28.2 to 5.28.4 in #118 #127

Full Changelog: docker/setup-qemu-action@v3.0.0...v3.1.0

Configuration

📅 Schedule: (in timezone America/Phoenix)

Branch creation
- "before 6am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-06-29T08:49:47Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@77f0da1). Learn more about missing BASE report.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1728   +/-   ##
=======================================
  Coverage        ?   95.58%           
=======================================
  Files           ?      204           
  Lines           ?    22316           
  Branches        ?     8067           
=======================================
  Hits            ?    21331           
  Misses          ?      408           
  Partials        ?      577

🚀 New features to boost your workflow:

📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate · 2026-06-29T09:33:30Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot assigned JSONbored Jun 29, 2026

renovate Bot requested a review from JSONbored as a code owner June 29, 2026 08:22

renovate Bot force-pushed the renovate/major-4-github-actions branch from e64112a to f141cb7 Compare June 29, 2026 09:07

chore(actions): update github actions to v4

571512c

renovate Bot force-pushed the renovate/major-4-github-actions branch from f141cb7 to 571512c Compare June 29, 2026 09:30

Merge branch 'main' into renovate/major-4-github-actions

bd79e57

dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jun 29, 2026

This was referenced Jun 29, 2026

fix(github): normalize public_repos/followers from the users API with finiteCount #1711

Merged

fix(github): classify backfill permission 403s as errors, not rate limits #1747

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(actions): update github actions to v4#1728

chore(actions): update github actions to v4#1728
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/major-4-github-actions

renovate Bot commented Jun 29, 2026

Uh oh!

codecov Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Jun 29, 2026

Release Notes

Configuration

Uh oh!

codecov Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovate Bot commented Jun 29, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

codecov Bot commented Jun 29, 2026 •

edited

Loading