Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 27, 2025

Bumps docker/build-push-action from 5 to 6.

Release notes

Sourced from docker/build-push-action's releases.

v6.0.0

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_SUMMARY: false environment variable in your workflow.

Full Changelog: docker/build-push-action@v5.4.0...v6.0.0

v5.4.0

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

v5.3.0

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

v5.2.0

Full Changelog: docker/build-push-action@v5.1.0...v5.2.0

v5.1.0

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

Commits
  • 2634353 Merge pull request #1381 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • c0432d2 chore: update generated content
  • 0bb1f27 set builder driver and endpoint attributes for dbc summary support
  • 5f9dbf9 chore(deps): Bump @​docker/actions-toolkit from 0.61.0 to 0.62.1
  • 0788c44 Merge pull request #1375 from crazy-max/remove-gcr
  • aa179ca e2e: remove GCR
  • 1dc7386 Merge pull request #1364 from crazy-max/history-export-cmd
  • 9c9803f chore: update generated content
  • db1f6c4 DOCKER_BUILD_EXPORT_LEGACY env var to opt-in for legacy export
  • 721e8c7 Bump @​docker/actions-toolkit from 0.59.0 to 0.61.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 27, 2025
@harperbot
Copy link

harperbot bot commented Nov 27, 2025

HarperBot

HarperBot Analysis

Summary

This PR updates the docker/build-push-action in the GitHub workflow from version v5 to v6. This is likely a dependency update to leverage newer features, bug fixes, or performance improvements in the action.

Scores

  • Code Quality: 10/10
  • Maintainability: 10/10
  • Security: 10/10

Strengths

  • Simple and straightforward update.
  • Keeps the workflow up-to-date with the latest version of the Docker build-push action.

Areas Needing Attention

  • None. This is a simple version bump. It would be good to check the release notes for the new version to understand any breaking changes, but that's not something that can be determined from the diff itself.

Recommendations

  • Review the release notes for docker/build-push-action@v6 to ensure compatibility and understand any new features or changes.

Code Suggestions

  • Suggestions posted as inline comments below.

Next Steps

  • Merge the PR after verifying the release notes for docker/build-push-action@v6.

@bniladridas
Copy link
Owner

@dependabot rebase

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v5...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/docker/build-push-action-6 branch from 0a04198 to 6bc9784 Compare November 27, 2025 23:38
@harperbot
Copy link

harperbot bot commented Nov 27, 2025

HarperBot

HarperBot Analysis

Summary

This PR updates the docker/build-push-action in the GitHub workflow from version 5 to version 6. This is likely to incorporate new features, bug fixes, and performance improvements provided by the newer version of the action.

Scores

  • Code Quality: 10/10
  • Maintainability: 10/10
  • Security: 10/10

Strengths

  • Simple and direct update.
  • Keeps the workflow up-to-date with the latest version of the Docker build-push action.

Areas Needing Attention

  • None. This is a straightforward update. It would be beneficial to review the release notes for docker/build-push-action@v6 to understand the changes and ensure compatibility.

Recommendations

  • Review the release notes for docker/build-push-action@v6 to understand the changes and ensure compatibility.

Code Suggestions

  • Suggestions posted as inline comments below.

Next Steps

  • Merge the PR after verifying the release notes and ensuring compatibility.

@bniladridas bniladridas merged commit a3f5ba1 into main Dec 4, 2025
10 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/docker/build-push-action-6 branch December 4, 2025 15:19
@github-project-automation github-project-automation bot moved this from Todo to Done in github-dotfiles Jan 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant