chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v3.3.0 -> v3.6.0
actions/setup-node	action	minor	v3.6.0 -> v3.8.2
docker/build-push-action	action	minor	v4.0.0 -> v4.2.1
docker/login-action	action	minor	v2.1.0 -> v2.2.0
docker/metadata-action	action	minor	v4.3.0 -> v4.6.0
docker/setup-buildx-action	action	minor	v2.4.1 -> v2.10.0
pnpm/action-setup	action	minor	v2.2.4 -> v2.4.1

---

Release Notes

actions/checkout (actions/checkout)

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v3.5.2

Compare Source

• Fix api endpoint for GHES

v3.5.1

Compare Source

• Fix slow checkout on Windows

v3.5.0

Compare Source

• Add new public key for known_hosts

v3.4.0

Compare Source

• Upgrade codeql actions to v2
• Upgrade dependencies
• Upgrade @​actions/io

actions/setup-node (actions/setup-node)

v3.8.2

Compare Source

What's Changed

• Update semver by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/861
• Update temp directory creation by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/859
• Bump @​babel/traverse from 7.15.4 to 7.23.2 by @​dependabot in https://github.com/actions/setup-node/pull/870
• Add notice about binaries not being updated yet by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/872
• Update toolkit cache and core by @​dmitry-shibanov and @​seongwon-privatenote in https://github.com/actions/setup-node/pull/875

Full Changelog: actions/setup-node@v3...v3.8.2

v3.8.1

Compare Source

What's Changed

In scope of this release, the filter was removed within the cache-save step by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/831. It is filtered and checked in the toolkit/cache library.

Full Changelog: actions/setup-node@v3...v3.8.1

v3.8.0

Compare Source

What's Changed

Bug fixes:

• Add check for existing paths by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/803
• Resolve SymbolicLink by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/809
• Change passing logic for cache input by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/816
• Fix armv7 cache issue by @​louislam in https://github.com/actions/setup-node/pull/794
• Update check-dist workflow name by @​sinchang in https://github.com/actions/setup-node/pull/710

Feature implementations:

• feat: handling the case where "node" is used for tool-versions file. by @​xytis in https://github.com/actions/setup-node/pull/812

Documentation changes:

• Refer to semver package name in README.md by @​olleolleolle in https://github.com/actions/setup-node/pull/808

Update dependencies:

• Update toolkit cache to fix zstd by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/804
• Bump tough-cookie and @​azure/ms-rest-js by @​dependabot in https://github.com/actions/setup-node/pull/802
• Bump semver from 6.1.2 to 6.3.1 by @​dependabot in https://github.com/actions/setup-node/pull/807
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in https://github.com/actions/setup-node/pull/815

New Contributors

• @​olleolleolle made their first contribution in https://github.com/actions/setup-node/pull/808
• @​louislam made their first contribution in https://github.com/actions/setup-node/pull/794
• @​sinchang made their first contribution in https://github.com/actions/setup-node/pull/710
• @​xytis made their first contribution in https://github.com/actions/setup-node/pull/812

Full Changelog: actions/setup-node@v3...v3.8.0

v3.7.0

Compare Source

What's Changed

In scope of this release we added a logic to save an additional cache path for yarn 3 (related pull request and feature request). Moreover, we added functionality to use all the sub directories derived from cache-dependency-path input and add detect all dependencies directories to cache (related pull request and feature request).

Besides, we made such changes as:

• Replace workflow badge with new badge by @​jongwooo in https://github.com/actions/setup-node/pull/653
• Fix a minor typo by @​phanan in https://github.com/actions/setup-node/pull/662
• docs: fix typo in advanced-usage.md by @​remarkablemark in https://github.com/actions/setup-node/pull/697
• bugfix: Don't attempt to use Windows fallbacks on non-Windows OSes by @​domdomegg in https://github.com/actions/setup-node/pull/718
• Update to node 18.x by @​feelepxyz in https://github.com/actions/setup-node/pull/751
• Remove implicit dependencies by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/758
• Fix description about ensuring workflow access to private package by @​x86chi in https://github.com/actions/setup-node/pull/704

New Contributors

• @​jongwooo made their first contribution in https://github.com/actions/setup-node/pull/653
• @​phanan made their first contribution in https://github.com/actions/setup-node/pull/662
• @​remarkablemark made their first contribution in https://github.com/actions/setup-node/pull/697
• @​domdomegg made their first contribution in https://github.com/actions/setup-node/pull/718
• @​feelepxyz made their first contribution in https://github.com/actions/setup-node/pull/751
• @​nikolai-laevskii made their first contribution in https://github.com/actions/setup-node/pull/758
• @​x86chi made their first contribution in https://github.com/actions/setup-node/pull/704

Full Changelog: actions/setup-node@v3...v3.7.0

docker/build-push-action (docker/build-push-action)

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in https://github.com/docker/build-push-action/pull/880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/build-push-action/pull/811 https://github.com/docker/build-push-action/pull/838 https://github.com/docker/build-push-action/pull/855 https://github.com/docker/build-push-action/pull/860 https://github.com/docker/build-push-action/pull/875
• e2e: quay.io by @​crazy-max in https://github.com/docker/build-push-action/pull/799 https://github.com/docker/build-push-action/pull/805
• e2e: local harbor and nexus by @​crazy-max in https://github.com/docker/build-push-action/pull/800
• e2e: add artifactory container registry to test against by @​jedevc in https://github.com/docker/build-push-action/pull/804
• e2e: add distribution tests by @​jedevc in https://github.com/docker/build-push-action/pull/814 https://github.com/docker/build-push-action/pull/815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

docker/login-action (docker/login-action)

v2.2.0

Compare Source

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/login-action/pull/409 https://github.com/docker/login-action/pull/470 https://github.com/docker/login-action/pull/476
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.347.1 in https://github.com/docker/login-action/pull/524 https://github.com/docker/login-action/pull/364 https://github.com/docker/login-action/pull/363
• Bump minimatch from 3.0.4 to 3.1.2 in https://github.com/docker/login-action/pull/354
• Bump json5 from 2.2.0 to 2.2.3 in https://github.com/docker/login-action/pull/378
• Bump http-proxy-agent from 5.0.0 to 7.0.0 in https://github.com/docker/login-action/pull/509
• Bump https-proxy-agent from 5.0.1 to 7.0.0 in https://github.com/docker/login-action/pull/508

Full Changelog: docker/login-action@v2.1.0...v2.2.0

docker/metadata-action (docker/metadata-action)

v4.6.0

Compare Source

• Dedup and sort labels by @​crazy-max in https://github.com/docker/metadata-action/pull/301
• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 in https://github.com/docker/metadata-action/pull/302

Full Changelog: docker/metadata-action@v4.5.0...v4.6.0

v4.5.0

Compare Source

• Bump @​docker/actions-toolkit from 0.1.0 to 0.3.0 in https://github.com/docker/metadata-action/pull/296
• Bump csv-parse from 5.3.8 to 5.4.0 in https://github.com/docker/metadata-action/pull/294

Full Changelog: docker/metadata-action@v4.4.0...v4.5.0

v4.4.0

Compare Source

• Add context input to define the metadata provider by @​neilime in https://github.com/docker/metadata-action/pull/248
• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/metadata-action/pull/266 https://github.com/docker/metadata-action/pull/273 https://github.com/docker/metadata-action/pull/284
• Bump csv-parse from 5.3.3 to 5.3.8 in https://github.com/docker/metadata-action/pull/271 https://github.com/docker/metadata-action/pull/286
• Bump moment-timezone from 0.5.40 to 0.5.43 in https://github.com/docker/metadata-action/pull/268 https://github.com/docker/metadata-action/pull/278 https://github.com/docker/metadata-action/pull/281
• Bump semver from 7.4.0 to 7.5.0 in https://github.com/docker/metadata-action/pull/285

Full Changelog: docker/metadata-action@v4.3.0...v4.4.0

docker/setup-buildx-action (docker/setup-buildx-action)

v2.10.0

Compare Source

What's Changed

• Bump @​docker/actions-toolkit from 0.7.1 to 0.10.0 by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/258
• Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/setup-buildx-action/pull/253

Full Changelog: docker/setup-buildx-action@v2.9.1...v2.10.0

v2.9.1

Compare Source

• Bump @​docker/actions-toolkit from 0.7.0 to 0.7.1 in https://github.com/docker/setup-buildx-action/pull/248
  • Fixes an issue where building Buildx does not match the local platform (https://github.com/docker/actions-toolkit/pull/135)

Full Changelog: docker/setup-buildx-action@v2.9.0...v2.9.1

v2.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.6.0 to 0.7.0 in https://github.com/docker/setup-buildx-action/pull/246
  • Adds support to cache Buildx binary to hosted tool cache and GHA cache backend

Full Changelog: docker/setup-buildx-action@v2.8.0...v2.9.0

v2.8.0

Compare Source

• Only set specific flags for drivers supporting them by @​nicks in https://github.com/docker/setup-buildx-action/pull/241
• Bump @​docker/actions-toolkit from 0.5.0 to 0.6.0 in https://github.com/docker/setup-buildx-action/pull/242

Full Changelog: docker/setup-buildx-action@v2.7.0...v2.8.0

v2.7.0

Compare Source

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 in https://github.com/docker/setup-buildx-action/pull/237 https://github.com/docker/setup-buildx-action/pull/238

Full Changelog: docker/setup-buildx-action@v2.6.0...v2.7.0

v2.6.0

Compare Source

• Set node name for k8s driver when appending nodes by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/219
• Bump @​docker/actions-toolkit from 0.1.0-beta.18 to 0.3.0 in https://github.com/docker/setup-buildx-action/pull/220 https://github.com/docker/setup-buildx-action/pull/229 https://github.com/docker/setup-buildx-action/pull/231 https://github.com/docker/setup-buildx-action/pull/236

Full Changelog: docker/setup-buildx-action@v2.5.0...v2.6.0

v2.5.0

Compare Source

• cleanup input to remove builder and temp files by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/213
• do not remove builder using the docker driver by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/218
• fix current context as builder name for docker driver by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/209

Full Changelog: docker/setup-buildx-action@v2.4.1...v2.5.0

pnpm/action-setup (pnpm/action-setup)

v2.4.1

Compare Source

v2.4.0

Compare Source

Add ability to install standalone binary (https://github.com/pnpm/action-setup/pull/92).

v2.3.0

Compare Source

• feat: specifying path to non-root package.json file (https://github.com/pnpm/action-setup/pull/88).
• docs: improve.

---

Configuration

📅 Schedule: Branch creation - "before 6am" in timezone Asia/Jakarta, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.