Skip to content

🌱 Update github-actions group (major)#325

Open
cluster-stack-bot[bot] wants to merge 1 commit intomainfrom
renovate/major-4-github-actions
Open

🌱 Update github-actions group (major)#325
cluster-stack-bot[bot] wants to merge 1 commit intomainfrom
renovate/major-4-github-actions

Conversation

@cluster-stack-bot
Copy link
Contributor

@cluster-stack-bot cluster-stack-bot bot commented Oct 20, 2025

This PR contains the following updates:

Package Type Update Change
docker/login-action action major v3.5.0 -> v4.0.0
docker/setup-buildx-action action major v3 -> v4
docker/setup-qemu-action action major v3 -> v4
sigstore/cosign-installer action major v3.10.0 -> v4.0.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

docker/login-action (docker/login-action)

v4.0.0

Compare Source

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v3.7.0

Compare Source

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4

Compare Source

docker/setup-qemu-action (docker/setup-qemu-action)

v4

Compare Source

sigstore/cosign-installer (sigstore/cosign-installer)

v4.0.0

Compare Source

What's Changed?

Note: You must upgrade to cosign-installer v4 if you want to install Cosign v3+. You may still install Cosign v2.x with cosign-installer v4.

In version v3+, using cosign sign-blob requires adding the --bundle flag which may require you to update your signing command.

  • Add support for Cosign v3 releases (#​201)

v3.10.1

Compare Source

What's Changed?

Note: cosign-installer v3.x cannot be used to install Cosign v3.x. You must upgrade to cosign-installer v4 in order to use Cosign v3.

Note: This is planned to be the final release of Cosign v2, though we will cut new releases for any critical security or bug fixes. We recommend transitioning to Cosign v3.

  • Bump default Cosign to v2.6.1 (#​203)

Configuration

📅 Schedule: Branch creation - "on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@cluster-stack-bot cluster-stack-bot bot changed the title 🌱 Update Github Actions group to v4.0.0 🌱 Update github-actions group (major) Mar 4, 2026
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/major-4-github-actions branch from 9eb27da to b401d36 Compare March 4, 2026 11:38
| datasource  | package                    | from    | to     |
| ----------- | -------------------------- | ------- | ------ |
| github-tags | docker/login-action        | v3.5.0  | v4.0.0 |
| github-tags | docker/setup-buildx-action | v3      | v4     |
| github-tags | docker/setup-qemu-action   | v3      | v4     |
| github-tags | sigstore/cosign-installer  | v3.10.0 | v4.0.0 |
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/major-4-github-actions branch from b401d36 to 29f8f2d Compare March 5, 2026 11:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants