Skip to content

chore(deps): bump the github-actions-dependencies group across 2 directories with 2 updates#789

Merged
neilime merged 1 commit into
mainfrom
dependabot/github_actions/actions/docker/build-image/github-actions-dependencies-86e9dbc941
May 22, 2026
Merged

chore(deps): bump the github-actions-dependencies group across 2 directories with 2 updates#789
neilime merged 1 commit into
mainfrom
dependabot/github_actions/actions/docker/build-image/github-actions-dependencies-86e9dbc941

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps the github-actions-dependencies group with 1 update in the /actions/docker/build-image directory: docker/build-push-action.
Bumps the github-actions-dependencies group with 1 update in the /actions/docker/clean-images directory: dataaxiom/ghcr-cleanup-action.

Updates docker/build-push-action from 7.1.0 to 7.2.0

Release notes

Sourced from docker/build-push-action's releases.

v7.2.0

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

Commits
  • f9f3042 Merge pull request #1517 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 812d5fd chore: update generated content
  • b6f6693 chore(deps): Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0
  • c1c626e Merge pull request #1525 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 51bb284 chore: update generated content
  • 5f7884d chore(deps): Bump @​actions/core from 3.0.0 to 3.0.1
  • e01deff Merge pull request #1521 from docker/dependabot/npm_and_yarn/fast-xml-parser-...
  • 3804d49 chore: update generated content
  • 71e8947 chore(deps): Bump fast-xml-parser from 5.5.7 to 5.8.0
  • 4925ad2 Merge pull request #1526 from docker/dependabot/npm_and_yarn/postcss-8.5.10
  • Additional commits viewable in compare view

Updates dataaxiom/ghcr-cleanup-action from 1.1.0 to 1.2.0

Release notes

Sourced from dataaxiom/ghcr-cleanup-action's releases.

v1.2.0

  • feature: cross-run manifest cache; warm runs only fetch newly-published manifests (hit rate logged)
  • perf: parallel API throughout — package pagination, manifest fetches, untag PUTs, child/referrer deletes
  • perf: batched untagging — one reload per batch instead of one per tag
  • perf: push token reuse across untag PUTs + 429/secondary rate-limit retries on registry auth
  • fix: repository input is now informational; cleanup uses owner + package directly (supports unlinked / cross-account packages)
  • log volume cap at 1000 lines per group (info); per-image log output buffered to avoid interleaving under concurrent deletes
  • package version upgrades
Commits
  • 374e202 Merge pull request #120 from rohanmars/code-review
  • e1e6176 perf: cap per-listing log volume at 1000 lines (truncate at INFO)
  • 6516895 fix: drop the post-reload untag-ops invariant assertion (3.1.5 retraction)
  • 5a020af feat: buffer deleteImage logs per top-level tree, flush atomically
  • 8263ff3 chore: refresh dependencies to latest patches within current ranges
  • 5a3f4cc chore: update coverage badge to 94.47%
  • 330e4bb test: cover Octokit log handlers, primeManifests referrer walk, regex digest ...
  • bfb6a36 refactor: lock keep-n-tagged invariants in code (review 3.1.4, 3.1.5)
  • 0b761d7 refactor: remove all production any types; enforce no-explicit-any via lint
  • eb56352 docs: drop repository from the "omitted, defaults to project" line
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctories with 2 updates

Bumps the github-actions-dependencies group with 1 update in the /actions/docker/build-image directory: [docker/build-push-action](https://github.com/docker/build-push-action).
Bumps the github-actions-dependencies group with 1 update in the /actions/docker/clean-images directory: [dataaxiom/ghcr-cleanup-action](https://github.com/dataaxiom/ghcr-cleanup-action).


Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@bcafcac...f9f3042)

Updates `dataaxiom/ghcr-cleanup-action` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/dataaxiom/ghcr-cleanup-action/releases)
- [Commits](dataaxiom/ghcr-cleanup-action@34a2b6c...374e202)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: dataaxiom/ghcr-cleanup-action
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 22, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

@neilime neilime merged commit 60f6f81 into main May 22, 2026
87 of 88 checks passed
@neilime neilime deleted the dependabot/github_actions/actions/docker/build-image/github-actions-dependencies-86e9dbc941 branch May 22, 2026 05:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant