[dependabot]

Bumps the docker-actions group with 1 update: docker/github-builder/.github/workflows/bake.yml.

Updates docker/github-builder/.github/workflows/bake.yml from 1.17.0 to 1.18.0

Release notes

Sourced from docker/github-builder/.github/workflows/bake.yml's releases.

v1.18.0

• build/bake: Support BuildKit secrets through the build-secrets workflow secret, including multiline values and target-specific secrets for Bake. Bake secrets must already be declared in the target definition by @​crazy-max in docker/github-builder#248
• build/bake: Add opt-in BuildKit proxy networking with buildkit-proxy-network, enabling HTTP(S) request logging and capture of downloaded build materials in provenance by @​crazy-max in docker/github-builder#280
• build/bake: Add a registry-login input to enable authentication before builds that do not push images, such as builds using private base images with local output. The default auto mode preserves the existing login behavior by @​crazy-max in docker/github-builder#225
• build/bake: Disable per-job Docker Build summaries to reduce clutter in workflow runs with multiple targets or platforms by @​crazy-max in docker/github-builder#319
• bake: Pass variables explicitly to Buildx, preventing unrelated runner and workflow environment values from implicitly overriding the Bake definition. Caller-provided variables take precedence over forwarded CI and metadata variables by @​crazy-max in docker/github-builder#277
• build/bake: Retry fetching Sigstore trust metadata to reduce transient failures when verifying downloaded build tools by @​crazy-max in docker/actions-toolkit#1297
• build/bake: Update default runners to Ubuntu 26.04 by @​crazy-max in docker/github-builder#320
• registry-identities: Support Azure Container Registry and Chainguard authentication through GitHub OIDC, without storing long-lived registry credentials by @​crazy-max in docker/github-builder#302
• registry-identities: Support additional private Amazon ECR account IDs through account_ids, allowing authentication to multiple accounts in the same region using the assumed role by @​crazy-max in docker/github-builder#301
• registry-identities: Support an optional scope field for Docker Hub OIDC authentication to control the authentication token's access by @​crazy-max in docker/github-builder#306
• update Buildx version to v0.38.0 in docker/github-builder#285 docker/github-builder#289 docker/github-builder#298 docker/github-builder#309
• update BuildKit image to v0.34.0 in docker/github-builder#286 docker/github-builder#299 docker/github-builder#308
• update github-builder-runtime module to 0.106.0 in docker/github-builder#283 docker/github-builder#288 docker/github-builder#300 docker/github-builder#303 docker/github-builder#305 docker/github-builder#290 docker/github-builder#313
• update actions/download-artifact from 8.0.1 to 8.0.2 in docker/github-builder#312
• update actions/upload-artifact from 7.0.1 to 7.0.2 in docker/github-builder#310 docker/github-builder#311
• update aws-actions/configure-aws-credentials from 6.2.3 to 6.3.0 in docker/github-builder#284 docker/github-builder#293
• update docker/bake-action from 7.3.0 to 7.5.0 in docker/github-builder#292 docker/github-builder#317
• update docker/build-push-action from 7.3.0 to 7.4.0 in docker/github-builder#294
• update docker/setup-buildx-action from 4.3.0 to 4.4.1 in docker/github-builder#296
• update docker/setup-qemu-action from 4.2.0 to 4.4.0 in docker/github-builder#287 docker/github-builder#291

Full Changelog: docker/github-builder@v1.17.0...v1.18.0

Commits

• 4345a1c Merge pull request #320 from crazy-max/ubuntu-26.04
• 176313c update workflow runners to ubuntu-26.04
• 3d5fa9b Merge pull request #277 from crazy-max/bake-vars
• 377ca3c Merge pull request #319 from crazy-max/disable-build-summaries
• c46d11b build/bake: disable build summaries in reusable workflows
• fcb5a0c bake: pass variables explicitly to buildx
• 62eefc8 Merge pull request #317 from docker/dependabot/github_actions/docker/bake-act...
• a27a266 build(deps): Bump docker/bake-action from 7.4.0 to 7.5.0
• a483d8e Merge pull request #316 from crazy-max/dependabot-exclude-docker-cooldown
• a60a173 Merge pull request #315 from crazy-max/input-disable-summaries
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions