Skip to content

chore(deps): bump docker/build-push-action from 5 to 6 - #285

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/docker/build-push-action-6
Closed

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/docker/build-push-action-6

Merge remote-tracking branch 'origin/main' into dependabot/github_act…

5293386
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Jan 17, 2026 in 2s

2 new alerts including 2 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 64 in .github/workflows/release.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release' step
Uses Step: build_squid
uses 'docker/build-push-action' with ref 'v6', not a pinned commit hash

Check warning on line 95 in .github/workflows/release.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release' step
Uses Step: build_agent
uses 'docker/build-push-action' with ref 'v6', not a pinned commit hash