Skip to content

Bump docker/build-push-action from 6 to 7 - #5861

Merged
falkoschindler merged 1 commit into
mainfrom
dependabot/github_actions/docker/build-push-action-7
Mar 10, 2026
Merged

Bump docker/build-push-action from 6 to 7#5861
falkoschindler merged 1 commit into
mainfrom
dependabot/github_actions/docker/build-push-action-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor

Bumps docker/build-push-action from 6 to 7.

Release notes

Sourced from docker/build-push-action's releases.

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v6.19.2

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

v6.18.0

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

... (truncated)

Commits
  • d08e5c3 Merge pull request #1479 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • cbd2dff chore: update generated content
  • f76f51f chore(deps): Bump @​docker/actions-toolkit from 0.78.0 to 0.79.0
  • 7d03e66 Merge pull request #1473 from crazy-max/rm-deprecated-envs
  • 98f853d chore: update generated content
  • cadccf6 remove deprecated envs
  • 03fe877 Merge pull request #1478 from docker/dependabot/github_actions/docker/setup-b...
  • 827e366 chore(deps): Bump docker/setup-buildx-action from 3 to 4
  • e25db87 Merge pull request #1474 from crazy-max/rm-export-build-tool
  • 1ac2573 Merge pull request #1470 from crazy-max/node24
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added the dependencies Type/scope: Third party libraries label Mar 9, 2026
@evnchn

evnchn commented Mar 10, 2026

Copy link
Copy Markdown
Collaborator

TL;DR: Safe to merge. Routine bump of an official Docker action (Node 24 runtime). NiceGUI's workflow uses only standard stable inputs — none of the removed deprecated features apply.

Full Review

What Changed

  • 1 file, 3 lines: three occurrences of docker/build-push-action@v6docker/build-push-action@v7 in .github/workflows/_docker.yml

Why the Major Version Bump

  • Node 24 as default runtime (requires Actions Runner v2.327.1+, already satisfied by GitHub-hosted runners)
  • Removed deprecated env vars: DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS — NiceGUI does not use either
  • Removed legacy export-build tool for build summaries — NiceGUI does not rely on this
  • Internal: ESM switch, dependency bumps (@actions/core → 3.0.0, @docker/actions-toolkit 0.62.1 → 0.79.0)

Impact on NiceGUI

The workflow uses only standard, stable inputs (context, file, platforms, tags, push, cache-from, cache-to) — all fully supported and unchanged between v6 and v7.

Trust / Security

  • Publisher: docker — official Docker GitHub org, verified publisher
  • Maintainer: crazy-max, Docker employee and maintainer of all Docker GitHub Actions
  • No new permissions or secrets introduced

CI Status

All checks passing (pre-commit, mypy, pylint, pytest).

Risk: Low

None of the breaking changes affect NiceGUI's usage pattern.

Recommendation: ✅ Approve and merge

🤖 Review by Claude Code on behalf of @evnchn

@falkoschindler falkoschindler added the review Status: PR is open and needs review label Mar 10, 2026
@falkoschindler falkoschindler added this to the 3.9 milestone Mar 10, 2026
falkoschindler
falkoschindler previously approved these changes Mar 10, 2026
@falkoschindler
falkoschindler added this pull request to the merge queue Mar 10, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Mar 10, 2026
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/docker/build-push-action-7 branch from aed8cd8 to 308ed6f Compare March 10, 2026 07:32
@falkoschindler
falkoschindler added this pull request to the merge queue Mar 10, 2026
Merged via the queue into main with commit ef84a5c Mar 10, 2026
7 checks passed
@falkoschindler
falkoschindler deleted the dependabot/github_actions/docker/build-push-action-7 branch March 10, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Type/scope: Third party libraries review Status: PR is open and needs review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants