Skip to content

chore(deps): bump redhat-actions/buildah-build from 3.0.2 to 3.1.0 in the github-actions group across 1 directory - #20

Merged
xnoto merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-66da5869db
Aug 28, 2026
Merged

chore(deps): bump redhat-actions/buildah-build from 3.0.2 to 3.1.0 in the github-actions group across 1 directory#20
xnoto merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-66da5869db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update in the / directory: redhat-actions/buildah-build.

Updates redhat-actions/buildah-build from 3.0.2 to 3.1.0

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.1.0

New Features

  • Sequential multi-arch builds: Add sequential input to run multi-arch builds one at a time instead of in parallel. Parallel remains the default, but sequential mode avoids qemu-related failures with FROM --platform=$(BUILDPLATFORM) stages. #191
  • Disable fuse-overlayfs override: Add disable-fuse-overlayfs input to prevent the action from overriding the storage mount program. The action now auto-detects kernel support for rootless native overlayfs (5.11+) and skips the fuse-overlayfs override when the kernel is new enough. This fixes silent data corruption and performance regressions on ubuntu-24.04 runners. #193

Bug Fixes

  • Fix digest output for non-x86 multi-arch builds: The digest output failed with image not known when the manifest only contained non-amd64 images (e.g. ppc64le, s390x). The action now uses buildah manifest inspect for multi-arch builds, which is architecture-agnostic. #192

CI & Infrastructure

  • Add workflow to rebuild bundle on Dependabot PRs. #180
  • Update CODEOWNERS to use @​redhat-actions/maintainers. Remove repo-level SECURITY.md in favor of org-wide default.

Full Changelog: redhat-actions/buildah-build@v3.0.2...v3.1.0

Changelog

Sourced from redhat-actions/buildah-build's changelog.

buildah-build Changelog

v3.1.0

New Features

  • Sequential multi-arch builds: Add sequential input to run multi-arch builds one at a time instead of in parallel. Parallel remains the default, but sequential mode avoids qemu-related failures with FROM --platform=$(BUILDPLATFORM) stages. #191
  • Disable fuse-overlayfs override: Add disable-fuse-overlayfs input to prevent the action from overriding the storage mount program. The action now auto-detects kernel support for rootless native overlayfs (5.11+) and skips the fuse-overlayfs override when the kernel is new enough. This fixes silent data corruption and performance regressions on ubuntu-24.04 runners. #193

Bug Fixes

  • Fix digest output for non-x86 multi-arch builds: The digest output failed with image not known when the manifest only contained non-amd64 images (e.g. ppc64le, s390x). The action now uses buildah manifest inspect for multi-arch builds, which is architecture-agnostic. #192

CI & Infrastructure

  • Add workflow to rebuild bundle on Dependabot PRs. #180
  • Update CODEOWNERS to use @​redhat-actions/maintainers. Remove repo-level SECURITY.md in favor of org-wide default.

Dependency Updates

  • Bump esbuild from 0.28.1 to 0.28.2. #187
  • Bump typescript-eslint from 8.65.0 to 8.67.0. #185, #188
  • Bump eslint from 10.7.0 to 10.8.1. #178, #184
  • Bump @​types/node from 26.1.1 to 26.2.0. #179, #183
  • Bump undici from 6.27.0 to 6.28.0. #181
  • Bump postcss from 8.5.22 to 8.5.25. #182

v3.0.2

Bug Fixes

  • Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. #177

CI & Infrastructure

  • Add integration test for buildah-image container mode with multiple tags. #177
  • Consolidate three containerfile build workflows into one (native, containerized, case normalization). #177

v3.0.1

Bug Fixes

  • Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. #175

CI & Infrastructure

  • Add unit test suite using vitest and a test job in CI. #175

v3.0.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. #154
  • Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. #161

New Features

  • Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. #161
  • Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. #168
  • Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. #169

... (truncated)

Commits
  • 719e3c4 Update CHANGELOG and version for v3.1.0
  • 3aa6b53 Add support for building multi-arch images sequentially (#191)
  • bb79777 Skip fuse-overlayfs override when kernel supports rootless overlayfs (#193)
  • 7b981d9 Fix digest output for multi-arch builds without host architecture (#192)
  • f34ebba Bump esbuild from 0.28.1 to 0.28.2 (#187)
  • 9b8e83b Bump typescript-eslint from 8.66.0 to 8.67.0 (#188)
  • c315bd8 Bump typescript-eslint from 8.65.0 to 8.66.0 (#185)
  • e2590df Bump eslint from 10.8.0 to 10.8.1 (#184)
  • b311a5d Bump @​types/node from 26.1.2 to 26.2.0 (#183)
  • f0f7a33 Bump undici from 6.27.0 to 6.28.0 (#181)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 26, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 26, 2026 18:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 26, 2026
Bumps the github-actions group with 1 update in the / directory: [redhat-actions/buildah-build](https://github.com/redhat-actions/buildah-build).


Updates `redhat-actions/buildah-build` from 3.0.2 to 3.1.0
- [Release notes](https://github.com/redhat-actions/buildah-build/releases)
- [Changelog](https://github.com/redhat-actions/buildah-build/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/buildah-build@3a51aad...719e3c4)

---
updated-dependencies:
- dependency-name: redhat-actions/buildah-build
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot changed the title chore(deps): bump redhat-actions/buildah-build from 3.0.2 to 3.1.0 in the github-actions group chore(deps): bump redhat-actions/buildah-build from 3.0.2 to 3.1.0 in the github-actions group across 1 directory Aug 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-66da5869db branch from 91fb6ed to b4e315e Compare August 27, 2026 15:47
@github-actions

github-actions Bot commented Aug 27, 2026

Copy link
Copy Markdown

Image CI passed

Pre-commit validation passed. View the workflow run.

@xnoto
xnoto merged commit cf72b27 into main Aug 28, 2026
3 checks passed
@xnoto
xnoto deleted the dependabot/github_actions/github-actions-66da5869db branch August 28, 2026 01:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant