From 97e5f8d21d6b66b86a753df84acc1e118b44c6cb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:32:32 +0000 Subject: [PATCH 1/8] chore(deps): bump actions/upload-artifact from 4 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-images.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml index 4a9ba02..c123d5c 100644 --- a/.github/workflows/build-images.yml +++ b/.github/workflows/build-images.yml @@ -187,7 +187,7 @@ jobs: - name: Upload digests if: ${{ env.PUSH == 'ghcr' }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: digests-${{ steps.plan.outputs.tag }}-${{ matrix.arch }} path: ${{ runner.temp }}/digests/ From d98d42eacf3c0c48881ed105e86c7d8fa2486659 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:32:41 +0000 Subject: [PATCH 2/8] chore(deps): bump docker/login-action from 3 to 4 Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-images.yml | 4 ++-- .github/workflows/publish-images.yml | 2 +- .github/workflows/publish.compat.yml | 6 +++--- .github/workflows/test.compat.yml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml index 4a9ba02..909df03 100644 --- a/.github/workflows/build-images.yml +++ b/.github/workflows/build-images.yml @@ -87,13 +87,13 @@ jobs: driver-opts: network=host - name: Login to DockerHub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.pull-username }} password: ${{ secrets.pull-password }} - name: Login to GitHub Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.repository_owner }} diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml index f727624..9d46511 100644 --- a/.github/workflows/publish-images.yml +++ b/.github/workflows/publish-images.yml @@ -54,7 +54,7 @@ jobs: uses: docker/setup-buildx-action@v3 - name: Login to GitHub Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.repository_owner }} diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml index d1b4d68..4f0a1cd 100644 --- a/.github/workflows/publish.compat.yml +++ b/.github/workflows/publish.compat.yml @@ -35,7 +35,7 @@ jobs: driver-opts: network=host - name: Login to DockerHub (pull) - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_PULL_USER_4 }} password: ${{ secrets.DOCKER_PULL_PASS_4 }} @@ -44,13 +44,13 @@ jobs: run: docker pull debian:stretch-slim - name: Login to DockerHub (push) - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GitHub Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.repository_owner }} diff --git a/.github/workflows/test.compat.yml b/.github/workflows/test.compat.yml index 90cbac2..e065b32 100644 --- a/.github/workflows/test.compat.yml +++ b/.github/workflows/test.compat.yml @@ -32,7 +32,7 @@ jobs: uses: actions/checkout@v4 - name: Login to DockerHub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_PULL_USER_4 }} password: ${{ secrets.DOCKER_PULL_PASS_4 }} From bfcc912dd42f47f621f13da043b2bcadae3f2a6b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:32:47 +0000 Subject: [PATCH 3/8] chore(deps): bump docker/setup-buildx-action from 3 to 4 Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-images.yml | 2 +- .github/workflows/publish-images.yml | 2 +- .github/workflows/publish.compat.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml index 4a9ba02..d27066d 100644 --- a/.github/workflows/build-images.yml +++ b/.github/workflows/build-images.yml @@ -82,7 +82,7 @@ jobs: } >> "$GITHUB_OUTPUT" - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 with: driver-opts: network=host diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml index f727624..105b2bd 100644 --- a/.github/workflows/publish-images.yml +++ b/.github/workflows/publish-images.yml @@ -51,7 +51,7 @@ jobs: github-token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Login to GitHub Container Registry uses: docker/login-action@v3 diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml index d1b4d68..c53f4af 100644 --- a/.github/workflows/publish.compat.yml +++ b/.github/workflows/publish.compat.yml @@ -30,7 +30,7 @@ jobs: uses: docker/setup-qemu-action@v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 with: driver-opts: network=host From 0b6c09efe2c44625fa86be1db54d0bf5a84ae188 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:32:56 +0000 Subject: [PATCH 4/8] chore(deps): bump docker/build-push-action from 5 to 7 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 7. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v5...v7) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/publish.compat.yml | 2 +- .github/workflows/test.compat.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml index d1b4d68..813699c 100644 --- a/.github/workflows/publish.compat.yml +++ b/.github/workflows/publish.compat.yml @@ -57,7 +57,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Build image and push to registry - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: platforms: linux/amd64,linux/arm64 # cache-from: type=registry,ref=ghcr.io/chialab/php-compat:${{ matrix.version }}${{ matrix.flavor }} diff --git a/.github/workflows/test.compat.yml b/.github/workflows/test.compat.yml index 90cbac2..ec94d33 100644 --- a/.github/workflows/test.compat.yml +++ b/.github/workflows/test.compat.yml @@ -38,7 +38,7 @@ jobs: password: ${{ secrets.DOCKER_PULL_PASS_4 }} - name: Build image for testing - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: # cache-from: type=registry,ref=ghcr.io/chialab/php-compat:${{ matrix.version }}${{ matrix.flavor }} cache-to: type=inline From 46efa9d91821a7044639e38c5556f34aebfff1b5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:33:01 +0000 Subject: [PATCH 5/8] chore(deps): bump docker/setup-qemu-action from 3 to 4 Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/publish.compat.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml index d1b4d68..811c219 100644 --- a/.github/workflows/publish.compat.yml +++ b/.github/workflows/publish.compat.yml @@ -27,7 +27,7 @@ jobs: uses: actions/checkout@v4 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 From 75669dab6164f3bbd7ab94b69d2d6b5d11d69abb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:33:18 +0000 Subject: [PATCH 6/8] chore(deps): bump docker/build-push-action Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 7. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v5...v7) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/actions/build-image/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/build-image/action.yml b/.github/actions/build-image/action.yml index 8bac9e2..4c34c8e 100644 --- a/.github/actions/build-image/action.yml +++ b/.github/actions/build-image/action.yml @@ -48,7 +48,7 @@ runs: steps: - name: Build ${{ inputs.image }} id: build - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: context: ${{ inputs.context }} file: ${{ inputs.file }} From f8d9e90860ed8023abae327451d1aec448483851 Mon Sep 17 00:00:00 2001 From: Paolo Cuffiani Date: Fri, 23 Oct 2026 16:27:35 +0200 Subject: [PATCH 7/8] chore(deps): upgrade actions/checkout to v7 and actions/download-artifact to v8 --- .github/workflows/build-images.yml | 2 +- .github/workflows/publish-images.yml | 2 +- .github/workflows/publish.compat.yml | 2 +- .github/workflows/test.compat.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml index 6976882..797f5a4 100644 --- a/.github/workflows/build-images.yml +++ b/.github/workflows/build-images.yml @@ -52,7 +52,7 @@ jobs: NO_CACHE: ${{ github.event_name == 'schedule' }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Plan id: plan diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml index 0d86cb4..32a70d3 100644 --- a/.github/workflows/publish-images.yml +++ b/.github/workflows/publish-images.yml @@ -43,7 +43,7 @@ jobs: exclude: ${{ fromJSON(inputs.exclude) }} steps: - name: Download digests - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: digests-${{ matrix.version }}${{ matrix.flavor }}-{amd64,arm64} path: ${{ runner.temp }}/digests diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml index 612f754..ffe5b37 100644 --- a/.github/workflows/publish.compat.yml +++ b/.github/workflows/publish.compat.yml @@ -24,7 +24,7 @@ jobs: flavor: [ '', '-apache', '-fpm' ] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set up QEMU uses: docker/setup-qemu-action@v4 diff --git a/.github/workflows/test.compat.yml b/.github/workflows/test.compat.yml index b9f96eb..8e52382 100644 --- a/.github/workflows/test.compat.yml +++ b/.github/workflows/test.compat.yml @@ -29,7 +29,7 @@ jobs: - 5000:5000 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Login to DockerHub uses: docker/login-action@v4 From d0e64635cee05afba17e7c7b74c27a694934ee56 Mon Sep 17 00:00:00 2001 From: Paolo Cuffiani Date: Fri, 23 Oct 2026 16:27:49 +0200 Subject: [PATCH 8/8] chore(deps): change dependabot schedule from daily to weekly, group updates by vendor --- .github/dependabot.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c41fdb1..836928c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,11 +3,17 @@ version: 2 updates: - # Maintain dependencies for GitHub Actions - package-ecosystem: "github-actions" directories: - "/" - "/.github/actions/build-image" schedule: - interval: "daily" + interval: "weekly" + groups: + docker: + patterns: + - "docker/*" + github-actions: + patterns: + - "actions/*"