chore(deps): update github-actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v3.5.3 -> v4.1.0
actions/checkout	action	major	v3 -> v4
docker/build-push-action	action	major	v4.1.1 -> v5.0.0
docker/login-action	action	major	v2 -> v3
docker/metadata-action	action	major	v4 -> v5
docker/setup-buildx-action	action	major	v2.8.0 -> v3.0.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the logs for more information.

---

Release Notes

actions/checkout (actions/checkout)

v4.1.0

Compare Source

• Add support for partial checkout filters

v4.0.0

Compare Source

• Support fetching without the --progress option
• Update to node20

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

docker/build-push-action (docker/build-push-action)

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in https://github.com/docker/build-push-action/pull/954
• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/docker/build-push-action/pull/959

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

docker/login-action (docker/login-action)

v3

Compare Source

docker/metadata-action (docker/metadata-action)

v5

Compare Source

docker/setup-buildx-action (docker/setup-buildx-action)

v3.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/264
• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/docker/setup-buildx-action/pull/267

Full Changelog: docker/setup-buildx-action@v2.10.0...v3.0.0

v2.10.0

Compare Source

What's Changed

• Bump @​docker/actions-toolkit from 0.7.1 to 0.10.0 by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/258
• Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/setup-buildx-action/pull/253

Full Changelog: docker/setup-buildx-action@v2.9.1...v2.10.0

v2.9.1

Compare Source

• Bump @​docker/actions-toolkit from 0.7.0 to 0.7.1 in https://github.com/docker/setup-buildx-action/pull/248
  • Fixes an issue where building Buildx does not match the local platform (https://github.com/docker/actions-toolkit/pull/135)

Full Changelog: docker/setup-buildx-action@v2.9.0...v2.9.1

v2.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.6.0 to 0.7.0 in https://github.com/docker/setup-buildx-action/pull/246
  • Adds support to cache Buildx binary to hosted tool cache and GHA cache backend

Full Changelog: docker/setup-buildx-action@v2.8.0...v2.9.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	2		0	0.06s
✅ COPYPASTE	jscpd	yes		no	1.52s
✅ JSON	eslint-plugin-jsonc	4		0	1.75s
✅ JSON	jsonlint	4		0	0.19s
✅ JSON	prettier	4		0	0.48s
✅ JSON	v8r	4		0	4.07s
✅ MARKDOWN	markdownlint	1		0	0.31s
✅ MARKDOWN	markdown-link-check	1		0	0.5s
✅ MARKDOWN	markdown-table-formatter	1		0	0.3s
✅ REPOSITORY	checkov	yes		no	13.39s
✅ REPOSITORY	devskim	yes		no	0.7s
✅ REPOSITORY	dustilock	yes		no	0.01s
✅ REPOSITORY	gitleaks	yes		no	0.13s
✅ REPOSITORY	git_diff	yes		no	0.0s
✅ REPOSITORY	secretlint	yes		no	0.69s
✅ REPOSITORY	syft	yes		no	0.29s
✅ REPOSITORY	trivy	yes		no	5.07s
✅ YAML	prettier	3		0	0.49s
✅ YAML	v8r	3		0	4.58s
✅ YAML	yamllint	3		0	0.26s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/documentation@v7.1.0 (47 linters)
• oxsecurity/megalinter/flavors/ruby@v7.1.0 (47 linters)
• oxsecurity/megalinter/flavors/rust@v7.1.0 (47 linters)
• oxsecurity/megalinter/flavors/swift@v7.1.0 (47 linters)
• oxsecurity/megalinter/flavors/go@v7.1.0 (49 linters)
• oxsecurity/megalinter/flavors/php@v7.1.0 (50 linters)
• oxsecurity/megalinter/flavors/salesforce@v7.1.0 (50 linters)
• oxsecurity/megalinter/flavors/java@v7.1.0 (51 linters)
• oxsecurity/megalinter/flavors/terraform@v7.1.0 (51 linters)
• oxsecurity/megalinter/flavors/javascript@v7.1.0 (56 linters)
• oxsecurity/megalinter/flavors/python@v7.1.0 (58 linters)
• oxsecurity/megalinter/flavors/dotnet@v7.1.0 (59 linters)
• oxsecurity/megalinter/flavors/cupcake@v7.1.0 (81 linters)

MegaLinter is graciously provided by