Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 12, 2024

Bumps docker/setup-buildx-action from 0f069ddc17b8eb78586b08a7fe335fd54649e2d3 to 6524bf65af31da8d45b59e8c27de4bd072b392f5.

Commits
  • 6524bf6 Merge pull request #390 from crazy-max/buildx-cloud-latest
  • 8d5e074 chore: update generated content
  • 7199e57 make cloud prefix optional to download buildx if driver is cloud
  • db63cee Merge pull request #381 from docker/dependabot/github_actions/codecov/codecov...
  • 043ebe1 Merge pull request #389 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 686da90 chore: update generated content
  • a3d7487 Merge pull request #382 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.6
  • 4dcdbce build(deps): bump @​docker/actions-toolkit from 0.39.0 to 0.48.0
  • 1a8ac74 ci: fix deprecated input for codecov-action
  • e827ebe build(deps): bump cross-spawn from 7.0.3 to 7.0.6
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 0f069ddc17b8eb78586b08a7fe335fd54649e2d3 to 6524bf65af31da8d45b59e8c27de4bd072b392f5.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@0f069dd...6524bf6)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 12, 2024
@sayedimac sayedimac requested a review from Copilot November 7, 2025 13:46
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the docker/setup-buildx-action in the GitHub Actions workflow by replacing the pinned SHA hash, likely to use a newer version of the action with potential bug fixes or improvements.

Key Changes

  • Updated the SHA hash for docker/setup-buildx-action from 0f069ddc17b8eb78586b08a7fe335fd54649e2d3 to 6524bf65af31da8d45b59e8c27de4bd072b392f5

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

# Workaround: https://github.com/docker/build-push-action/issues/461
- name: Setup Docker buildx
uses: docker/setup-buildx-action@0f069ddc17b8eb78586b08a7fe335fd54649e2d3
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5
Copy link

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] Consider adding a version comment (e.g., #v3.x.x) after the SHA hash for better maintainability and clarity, similar to how the cosign-installer action is documented on line 37. This makes it easier to track which version the SHA corresponds to.

Suggested change
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 #v3.0.0

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant