Skip to content

Bump docker/build-push-action from 6 to 7#87

Merged
cmeans merged 1 commit into
mainfrom
dependabot/github_actions/docker/build-push-action-7
Mar 29, 2026
Merged

Bump docker/build-push-action from 6 to 7#87
cmeans merged 1 commit into
mainfrom
dependabot/github_actions/docker/build-push-action-7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 28, 2026

Bumps docker/build-push-action from 6 to 7.

Release notes

Sourced from docker/build-push-action's releases.

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v6.19.2

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

v6.18.0

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

... (truncated)

Commits
  • d08e5c3 Merge pull request #1479 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • cbd2dff chore: update generated content
  • f76f51f chore(deps): Bump @​docker/actions-toolkit from 0.78.0 to 0.79.0
  • 7d03e66 Merge pull request #1473 from crazy-max/rm-deprecated-envs
  • 98f853d chore: update generated content
  • cadccf6 remove deprecated envs
  • 03fe877 Merge pull request #1478 from docker/dependabot/github_actions/docker/setup-b...
  • 827e366 chore(deps): Bump docker/setup-buildx-action from 3 to 4
  • e25db87 Merge pull request #1474 from crazy-max/rm-export-build-tool
  • 1ac2573 Merge pull request #1470 from crazy-max/node24
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Dependency updates label Mar 28, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 28, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@cmeans cmeans added Ready for QA Dev work complete — QA can begin review QA Active QA is actively reviewing; Dev should not push changes labels Mar 29, 2026
@github-actions github-actions Bot removed the Ready for QA Dev work complete — QA can begin review label Mar 29, 2026
Copy link
Copy Markdown
Owner

@cmeans cmeans left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

QA Review — PR #87:

Single-line version bump of a GitHub Actions dependency. Change is a major version tag update — no logic changes.

  • Diff: version tag only (@vN@vN+1)
  • Files: workflow YAML only
  • CI: no failing checks
  • No code, no runtime impact

Note for PRs #85-87: all three modify docker-publish.yml and will conflict after the first merge. Merge sequentially and rebase remaining.

Ready for QA Signoff.

@cmeans
Copy link
Copy Markdown
Owner

cmeans commented Mar 29, 2026

Adding Ready for QA Signoff — dependabot version bump, workflow-only change, no failing checks.

@cmeans cmeans added Ready for QA Signoff QA passed — ready for maintainer final review and merge and removed QA Active QA is actively reviewing; Dev should not push changes labels Mar 29, 2026
Copy link
Copy Markdown
Owner

@cmeans cmeans left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@cmeans cmeans added QA Approved Manual QA testing completed and passed and removed Ready for QA Signoff QA passed — ready for maintainer final review and merge labels Mar 29, 2026
@cmeans
Copy link
Copy Markdown
Owner

cmeans commented Mar 29, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/github_actions/docker/build-push-action-7 branch from 9fdc302 to 538025b Compare March 29, 2026 18:12
@github-actions github-actions Bot added Awaiting CI Dev complete, waiting for CI/Codecov to pass before QA and removed QA Approved Manual QA testing completed and passed labels Mar 29, 2026
@cmeans cmeans added Ready for QA Dev work complete — QA can begin review QA Active QA is actively reviewing; Dev should not push changes and removed Awaiting CI Dev complete, waiting for CI/Codecov to pass before QA labels Mar 29, 2026
@github-actions github-actions Bot removed the Ready for QA Dev work complete — QA can begin review label Mar 29, 2026
Copy link
Copy Markdown
Owner

@cmeans cmeans left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

QA re-review: diff unchanged from prior review — version tag bump only, CI green. Ready for QA Signoff.

@cmeans
Copy link
Copy Markdown
Owner

cmeans commented Mar 29, 2026

Adding Ready for QA Signoff — re-verified, same single-line version bump, CI green.

@cmeans cmeans added Ready for QA Signoff QA passed — ready for maintainer final review and merge QA Approved Manual QA testing completed and passed and removed QA Active QA is actively reviewing; Dev should not push changes Ready for QA Signoff QA passed — ready for maintainer final review and merge labels Mar 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/docker/build-push-action-7 branch from 538025b to 8fbfc0c Compare March 29, 2026 18:55
@github-actions github-actions Bot added Awaiting CI Dev complete, waiting for CI/Codecov to pass before QA and removed QA Approved Manual QA testing completed and passed labels Mar 29, 2026
@cmeans
Copy link
Copy Markdown
Owner

cmeans commented Mar 29, 2026

@dependabot rebase

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/docker/build-push-action-7 branch from 8fbfc0c to 1c8cd9d Compare March 29, 2026 18:58
@cmeans cmeans added QA Approved Manual QA testing completed and passed and removed Awaiting CI Dev complete, waiting for CI/Codecov to pass before QA labels Mar 29, 2026
@cmeans cmeans merged commit ca7e7e9 into main Mar 29, 2026
22 checks passed
@cmeans cmeans deleted the dependabot/github_actions/docker/build-push-action-7 branch March 29, 2026 19:03
cmeans pushed a commit that referenced this pull request Apr 20, 2026
Addresses QA round-1 finding #1 on PR #333. The actually-merged
mcp-clipboard PRs are:

  - #88 (merged 2026-04-20T01:31:47Z) — original env-routing hardening.
    #87 does not exist in that repo.
  - #92 (merged 2026-04-20T20:26:12Z) — comment-escape cascade.
    #90 was superseded and closed without merging.

No code change; CHANGELOG narrative only. PR body updated in parallel
with the same corrections (including the pull_request / pull_request_target
trigger correction for pr-labels.yml). Symmetric hardening follow-up
for pr-labels.yml filed as #334 (P3, non-blocking).

Refs #332.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates QA Approved Manual QA testing completed and passed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant