chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/bake-action	action	minor	v7.3.0 → v7.5.0
docker/setup-buildx-action	action	minor	v4.2.0 → v4.4.1

---

Release Notes

docker/bake-action

v7.5.0

Compare Source

• Accept JSON arrays for bake vars to preserve multiline values by @​crazy-max in #​530
• Move the matrix subaction to TypeScript by @​crazy-max in #​514
• Bump @​docker/actions-toolkit from 0.100.0 to 0.106.0 in #​538
• Bump handlebars from 4.7.9 to 4.7.10 in #​529
• Bump postcss-selector-parser from 7.1.5 to 7.1.6 in #​534
• Bump source-map-js from 1.2.1 to 1.2.2 in #​533

Full Changelog: docker/bake-action@v7.4.0...v7.5.0

v7.4.0

Compare Source

• Use the shared error helper for Buildx commands by @​crazy-max in #​511
• Prevent workflow command injection in metadata logs by @​crazy-max in #​509
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in #​502 #​510 #​513
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​498
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​491
• Bump csv-parse from 7.0.0 to 7.0.2 in #​500
• Bump js-yaml from 4.3.0 to 4.3.2 in #​496 #​508
• Bump nanoid from 3.3.16 to 3.3.18 in #​499
• Bump postcss from 8.5.10 to 8.5.25 in #​489
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​497
• Bump sigstore from 4.1.0 to 4.1.1 in #​476
• Bump undici from 6.27.0 to 6.28.1 in #​492

Full Changelog: docker/bake-action@v7.3.0...v7.4.0

docker/setup-buildx-action

v4.4.1

Compare Source

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in #​624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Compare Source

• Use official Buildx releases for cloud driver by @​crazy-max in #​606
• Pull BuildKit image before builder creation by @​crazy-max in #​609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in #​620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in #​610 #​618 #​619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​614
• Bump js-yaml from 5.3.0 to 5.4.2 in #​608 #​617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.92.0 to 0.95.0 in #​595
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​600
• Bump js-yaml from 5.2.0 to 5.3.0 in #​585
• Bump postcss from 8.5.10 to 8.5.25 in #​598
• Bump undici from 6.27.0 to 6.28.0 in #​601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/docker/bake-action	59cb1203cd42bcefd40a1b6d73b589e48c86040e	🟢 8.5	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 9 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 SAST 🟢 10 SAST tool is run on all commits
actions/docker/setup-buildx-action	f87e5991a6d7451dcb8d9637bfbc97413f497069	🟢 8.6	Details Check Score Reason Security-Policy 🟢 9 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies 🟢 7 dependency not pinned by hash detected -- score normalized to 7 Packaging 🟢 10 packaging workflow detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/test.yml

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: b3301805-eef6-4b52-a60d-0d0b38916014

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud