chore(actions): update github actions to v4 - #7415

Merged

JSONbored merged 1 commit into

mainfrom

renovate/major-4-github-actions

Jul 20, 2026

renovate Bot commented Jul 20, 2026

Contributor

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	major	`v3` → `v4`
docker/setup-buildx-action	action	major	`v3` → `v4`
docker/setup-qemu-action	action	major	`v3` → `v4`

Dependency PRs must keep npm run test:ci passing. The 97% coverage requirement is enforced as Codecov patch coverage on changed lines (codecov/patch), so dependency-only bumps satisfy it without new tests.

GitHub Actions updates must remain SHA-pinned.

Renovate is the sole dependency and security-update bot for this repo; GitHub Dependabot security updates are disabled to avoid duplicate PRs (e.g. the two hono advisory PRs).

Release Notes

docker/login-action (docker/login-action)

`v4.4.0`

`v4.3.0`

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

`v4.1.0`

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

`v4`

`v3.7.0`

Add scope input to set scopes for the authentication token by @crazy-max in #912
Add support for AWS European Sovereign Cloud ECR by @dphi in #914
Ensure passwords are redacted with registry-auth input by @crazy-max in #911
build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

`v3.6.0`

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

`v3.5.0`

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

`v3.4.0`

Bump @actions/core from 1.10.1 to 1.11.1 in #791
Bump @aws-sdk/client-ecr to 3.766.0 in #789 #856
Bump @aws-sdk/client-ecr-public to 3.758.0 in #789 #856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in #801 #806 #858
Bump cross-spawn from 7.0.3 to 7.0.6 in #814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in #823
Bump path-to-regexp from 6.2.2 to 6.3.0 in #777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

`v3.3.0`

Bump @docker/actions-toolkit from 0.24.0 to 0.35.0 in #754
Bump https-proxy-agent from 7.0.4 to 7.0.5 in #741
Bump braces from 3.0.2 to 3.0.3 in #730

Full Changelog: docker/login-action@v3.2.0...v3.3.0

`v3.2.0`

Improve missing username/password by @Frankkkkk in #706
Bump @docker/actions-toolkit from 0.18.0 to 0.24.0 in #715 #721
Bump aws-sdk-dependencies to 3.583.0 in #720
Bump undici from 5.28.3 to 5.28.4 in #694

Full Changelog: docker/login-action@v3.1.0...v3.2.0

`v3.1.0`

Bump @babel/traverse from 7.17.3 to 7.23.2 in #618
Bump @docker/actions-toolkit from 0.12.0 to 0.18.0 in #616 #636 #682
Bump aws-sdk dependencies to 3.529.1 in #624 #685
Bump http-proxy-agent to 7.0.2 in #676
Bump https-proxy-agent to 7.0.4 in #676
Bump undici from 5.26.5 to 5.28.3 in #677

Full Changelog: docker/login-action@v3.0.0...v3.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.2.0`

Preserve names in esbuild bundle by @crazy-max in #572
Bump @actions/core from 3.0.0 to 3.0.1 in #551
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #557 #580
Bump @sigstore/core from 3.1.0 to 3.2.1 in #573
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #576
Bump js-yaml from 4.1.1 to 5.2.0 in #562
Bump sigstore from 4.1.0 to 4.1.1 in #577
Bump tmp from 0.2.5 to 0.2.7 in #556
Bump undici from 6.25.0 to 6.27.0 in #570
Bump vite from 7.3.2 to 7.3.6 in #569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

`v4.1.0`

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #489
Bump brace-expansion from 1.1.12 to 5.0.6 in #547 #508
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #540
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #496
Bump flatted from 3.3.3 to 3.4.2 in #499
Bump glob from 10.3.12 to 13.0.6 in #495
Bump handlebars from 4.7.8 to 4.7.9 in #504
Bump lodash from 4.17.23 to 4.18.1 in #523
Bump picomatch from 4.0.3 to 4.0.4 in #503
Bump postcss from 8.5.6 to 8.5.10 in #537
Bump tar from 6.2.1 to 7.5.15 in #545
Bump undici from 6.23.0 to 6.25.0 in #492
Bump vite from 7.3.1 to 7.3.2 in #520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

`v4.0.0`

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #483
Remove deprecated inputs/outputs by @crazy-max in #464
Switch to ESM and update config/test wiring by @crazy-max in #481
Bump @actions/core from 1.11.1 to 3.0.0 in #475
Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in #482 #485
Bump js-yaml from 4.1.0 to 4.1.1 in #452
Bump lodash from 4.17.21 to 4.17.23 in #472
Bump minimatch from 3.1.2 to 3.1.5 in #480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

`v4`

`v3.12.0`

Deprecate install input by @crazy-max in #455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #434
Bump brace-expansion from 1.1.11 to 1.1.12 in #436
Bump form-data from 2.5.1 to 2.5.5 in #432
Bump undici from 5.28.4 to 5.29.0 in #435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

`v3.11.1`

Fix keep-state not being respected by @crazy-max in #429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Keep BuildKit state support by @crazy-max in #427
Remove aliases created when installing by default by @hashhar in #139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #422 #425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

`v3.10.0`

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

`v3.9.0`

Bump @docker/actions-toolkit from 0.48.0 to 0.54.0 in #402 #404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

`v3.8.0`

Make cloud prefix optional to download buildx if driver is cloud by @crazy-max in #390
Bump @actions/core from 1.10.1 to 1.11.1 in #370
Bump @docker/actions-toolkit from 0.39.0 to 0.48.0 in #389
Bump cross-spawn from 7.0.3 to 7.0.6 in #382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

`v3.7.1`

Switch back to uuid package by @crazy-max in #369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

`v3.7.0`

Always set buildkitd-flags if opt-in by @crazy-max in #363
Remove uuid package and switch to crypto by @crazy-max in #366
Bump @docker/actions-toolkit from 0.35.0 to 0.39.0 in #362
Bump path-to-regexp from 6.2.2 to 6.3.0 in #354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

`v3.6.1`

Check for malformed docker context by @crazy-max in #347

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

`v3.6.0`

Create temp docker context if default one has TLS data loaded before creating a container builder by @crazy-max in #341

Full Changelog: docker/setup-buildx-action@v3.5.0...v3.6.0

`v3.5.0`

Bump @docker/actions-toolkit from 0.31.0 to 0.35.0 in #340 #344 #345

Full Changelog: docker/setup-buildx-action@v3.4.0...v3.5.0

`v3.4.0`

Throw error message instead of exit code by @crazy-max in #315
Bump @docker/actions-toolkit from 0.20.0 to 0.31.0 in #321 #338
Bump braces from 3.0.2 to 3.0.3 in #329
Bump undici from 5.28.3 to 5.28.4 in #312
Bump uuid from 9.0.1 to 10.0.0 in #326

Full Changelog: docker/setup-buildx-action@v3.3.0...v3.4.0

`v3.3.0`

Bump @docker/actions-toolkit from 0.19.0 to 0.20.0 by @crazy-max in #307

Full Changelog: docker/setup-buildx-action@v3.2.0...v3.3.0

`v3.2.0`

Rename and align config inputs by @crazy-max in #303
- config to buildkitd-config
- config-inline to buildkitd-config-inline
Bump @docker/actions-toolkit from 0.17.0 to 0.19.0 in #302 #306

[!NOTE]
config and config-inline input names are deprecated and will be removed in next major release.

Full Changelog: docker/setup-buildx-action@v3.1.0...v3.2.0

`v3.1.0`

cache-binary input to enable/disable caching binary to GHA cache backend by @crazy-max in #300
build(deps): bump @babel/traverse from 7.17.3 to 7.23.2 in #282
build(deps): bump @docker/actions-toolkit from 0.12.0 to 0.17.0 in #281 #284 #299
build(deps): bump uuid from 9.0.0 to 9.0.1 in #271
build(deps): bump undici from 5.26.3 to 5.28.3 in #297

Full Changelog: docker/setup-buildx-action@v3.0.0...v3.1.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.2.0`

`v4.1.0`

Add reset input to uninstall current emulators by @crazy-max in #21
Bump @docker/actions-toolkit from 0.77.0 to 0.91.0 in #250 #247
Bump brace-expansion from 1.1.12 to 1.1.15 in #265
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #286
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #255
Bump flatted from 3.3.3 to 3.4.2 in #257
Bump glob from 10.3.15 to 10.5.0 in #254
Bump handlebars from 4.7.8 to 4.7.9 in #262
Bump lodash from 4.17.23 to 4.18.1 in #273
Bump postcss from 8.5.6 to 8.5.10 in #285
Bump tar from 6.2.1 to 7.5.15 in #287
Bump tmp from 0.2.5 to 0.2.6 in #291
Bump undici from 6.23.0 to 6.26.0 in #251
Bump vite from 7.3.1 to 7.3.2 in #271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

`v4.0.0`

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #245
Switch to ESM and update config/test wiring by @crazy-max in #241
Bump @actions/core from 1.11.1 to 3.0.0 in #244
Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in #243
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #240
Bump js-yaml from 3.14.1 to 3.14.2 in #231
Bump lodash from 4.17.21 to 4.17.23 in #238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

`v4`

`v3.7.0`

Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in #217 #230
Bump brace-expansion from 1.1.11 to 1.1.12 in #220
Bump form-data from 2.5.1 to 2.5.5 in #218
Bump tmp from 0.2.3 to 0.2.4 in #221
Bump undici from 5.28.4 to 5.29.0 in #219

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

`v3.6.0`

Display binfmt version by @crazy-max in #202

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

`v3.5.0`

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #205

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

`v3.4.0`

Bump @docker/actions-toolkit from 0.49.0 to 0.54.0 in #193 #197

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

`v3.3.0`

Add cache-image input to enable/disable caching of binfmt image by @crazy-max in #130
Bump @actions/core from 1.10.1 to 1.11.1 in #172
Bump @docker/actions-toolkit from 0.35.0 to 0.49.0 in #187
Bump cross-spawn from 7.0.3 to 7.0.6 in #182
Bump path-to-regexp from 6.2.2 to 6.3.0 in #162

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

`v3.2.0`

Bump @docker/actions-toolkit from 0.31.0 to 0.35.0 in #154 #155

Full Changelog: docker/setup-qemu-action@v3.1.0...v3.2.0

`v3.1.0`

Set docker.io domain for default binfmt image by @crazy-max in #151
Throw error message instead of exit code by @crazy-max in #129
Bump @docker/actions-toolkit from 0.12.0 to 0.31.0 in #115 #128 #131 #134 #149
Bump @babel/traverse from 7.20.13 to 7.23.2 in #109
Bump braces from 3.0.2 to 3.0.3 in #142
Bump undici from 5.28.2 to 5.28.4 in #118 #127

Full Changelog: docker/setup-qemu-action@v3.0.0...v3.1.0

Configuration

📅 Schedule: (in timezone America/Phoenix)

Branch creation
- "before 6am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          chore(actions): update github actions to v4

b8c9a50

renovate Bot requested a review from JSONbored as a code owner

July 20, 2026 08:09

renovate Bot assigned JSONbored

superagent-security Bot commented Jul 20, 2026

Contributor

Superagent didn't find any vulnerabilities or security issues in this PR.

codecov Bot commented Jul 20, 2026 •

edited

Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.27%. Comparing base (603ea35) to head (b8c9a50).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7415   +/-   ##
=======================================
  Coverage   91.27%   91.27%           
=======================================
  Files         716      716           
  Lines       72972    72972           
  Branches    21527    21528    +1     
=======================================
  Hits        66605    66605           
  Misses       5327     5327           
  Partials     1040     1040

Flag	Coverage Δ
shard-1	`32.64% <ø> (ø)`
shard-2	`36.07% <ø> (ø)`
shard-3	`34.54% <ø> (ø)`
shard-4	`42.90% <ø> (ø)`
shard-5	`36.98% <ø> (ø)`
shard-6	`33.56% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

JSONbored approved these changes

View reviewed changes

JSONbored merged commit fe3a344 into main

19 checks passed

JSONbored deleted the renovate/major-4-github-actions branch

July 20, 2026 08:41

loopover-orb Bot added the gittensor:bug label

github-actions Bot mentioned this pull request

chore(release): cut orb-v3.2.0 #7910

Merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels