Update docker/metadata-action action to v5.6.1 #10
Conversation
WalkthroughThe pull request involves updates to the GitHub Actions workflow file located at Changes
Sequence Diagram(s)sequenceDiagram
participant User
participant GitHub Actions
participant Docker Registry
User->>GitHub Actions: Trigger workflow
GitHub Actions->>GitHub Actions: Check out repository
GitHub Actions->>GitHub Actions: Install cosign (if needed)
GitHub Actions->>GitHub Actions: Set up Docker Buildx
GitHub Actions->>Docker Registry: Log in (if needed)
GitHub Actions->>GitHub Actions: Extract Docker metadata
GitHub Actions->>Docker Registry: Build and push Docker image
GitHub Actions->>Docker Registry: Sign published Docker image
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (1)
🚧 Files skipped from review as they are similar to previous changes (1)
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
renovate-bot
changed the title
renovate-bot
force-pushed
the
renovate/docker-metadata-action-5.x
branch
from
229b2e7 to
d796fcf
Compare
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Outside diff range and nitpick comments (1)
.github/workflows/docker-publish.yml (1)
68-68: Consider adding a comment about the action's purpose.For better maintainability, consider adding a brief comment about why this specific version is being used and what the action does in the workflow.
+ # Extract metadata (tags, labels) for Docker images + # Version: v5.6.0 - Latest stable version with improved bake file handling uses: docker/metadata-action@359e915ab3220d88514ed693793a5cc795192aa6 # v5.6.0
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
📒 Files selected for processing (1)
.github/workflows/docker-publish.yml(1 hunks)
🔇 Additional comments (1)
.github/workflows/docker-publish.yml (1)
68-68: LGTM! Verified the commit hash and version bump.
The update from v5.0.0 to v5.6.0 of docker/metadata-action is safe as:
- The commit hash
359e915ab3220d88514ed693793a5cc795192aa6matches the official v5.6.0 release - The changes in v5.6.0 (removal of 'cwd://' prefix) don't impact this workflow
✅ Verification successful
Commit hash verification successful - safe to use docker/[email protected]
The commit hash 359e915ab3220d88514ed693793a5cc795192aa6 in the workflow exactly matches the official v5.6.0 release tag of docker/metadata-action repository, confirming this is a secure and legitimate update.
🏁 Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash
# Verify the commit hash matches the official v5.6.0 release
gh api repos/docker/metadata-action/git/refs/tags/v5.6.0 | jq -r '.object.sha'
Length of output: 119
renovate-bot
changed the title
renovate-bot
force-pushed
the
renovate/docker-metadata-action-5.x
branch
from
d796fcf to
810905c
Compare
This PR contains the following updates:
v5.0.0->v5.6.1Release Notes
docker/metadata-action (docker/metadata-action)
v5.6.1Compare Source
v5.6.0Compare Source
v5.5.1Compare Source
cwd://prefix for local bake files by @crazy-max in https://github.com/docker/metadata-action/pull/382Full Changelog: docker/metadata-action@v5.5.0...v5.5.1
v5.5.0Compare Source
cwd://prefix for bake files path by @crazy-max in https://github.com/docker/metadata-action/pull/370Full Changelog: docker/metadata-action@v5.4.0...v5.5.0
v5.4.0Compare Source
Full Changelog: docker/metadata-action@v5.3.0...v5.4.0
v5.3.0Compare Source
Full Changelog: docker/metadata-action@v5.2.0...v5.3.0
v5.2.0Compare Source
Full Changelog: docker/metadata-action@v5.1.0...v5.2.0
v5.1.0Compare Source
Full Changelog: docker/metadata-action@v5.0.0...v5.1.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.