Bump docker/build-push-action from 7.3.0 to 7.4.0

[dependabot]

Bumps docker/build-push-action from 7.3.0 to 7.4.0.

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

• Use the shared error helper for Buildx commands by @​crazy-max in docker/build-push-action#1620
• Prevent workflow command injection in metadata logs by @​crazy-max in docker/build-push-action#1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592
• Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613
• Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615
• Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611
• Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606
• Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577
• Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits

• c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 459b674 [dependabot skip] chore: update generated content
• 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
• 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
• 9877975 chore: update generated content
• 7ed0556 use the shared Buildx error summary helper
• 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 80dbc86 [dependabot skip] chore: update generated content
• 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
• 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🔒 mcpg Read-Only Stress — default AWF

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: default (normal container isolation)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (list_issues, list_pull_requests, get_file_contents, list_commits)	data returned	ALLOWED	✅
B	MCP	writes (add_issue_comment/star_repository/issue_write/create_branch/create_or_update_file/create_pull_request)	all unknown tool (-32602) — absent from the 23-tool catalog exposed by the gateway	BLOCKED	⚠️
C	CLI	reads (list_issues, get_file_contents via github proxy CLI)	data returned	ALLOWED	✅
D	CLI	REST writes (reaction/star/issue/comment)	not attempted — gh is unauthenticated in this sandbox (gh auth status: not logged in)	BLOCKED	⚠️
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	not attempted — gh unauthenticated	BLOCKED	⚠️

Overall: INCONCLUSIVE

Notes:

• No write leaked through any surface — every attempted write was refused.
• Part B is INCONCLUSIVE per methodology: the 23 tools exposed by the gateway for this workflow are all reads (matches gh-aw's GITHUB_READ_ONLY=1 backend design, per the workflow's own architectural note). Since no write tool is even registered, the refusal doesn't independently confirm mcpg's own gateway-level DIFC/guard blocking layer — only that the backend never exposed a write tool to begin with.
• Parts D/E were skipped rather than run against an unauthenticated token, per the workflow's explicit instruction to avoid meaningless 401 noise; this is itself recorded as INCONCLUSIVE, not a pass.
• Full detail: /tmp/gh-aw/agent/readonly-stress-36252954639.txt (ephemeral, not committed).

🔒 mcpg read-only stress (default AWF runtime) by Read-Only Stress: default runtime

[github-actions]

🔒 mcpg Read-Only Stress — gVisor

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: gVisor (runsc)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads	data	ALLOWED	✅
B	MCP	writes (reaction/star/issue/comment/branch/file/PR)	all 6 targets absent from tool catalog ("unknown tool")	BLOCKED	⚠️
C	CLI	reads	data	ALLOWED	✅
D	CLI	REST writes (reaction/star/issue/comment)	gh unauthenticated — not exercised	BLOCKED	⚠️
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	gh unauthenticated — not exercised	BLOCKED	⚠️

Overall: INCONCLUSIVE

Notes:

• No write leaked through mcpg in any part.
• Part B: only 23 read-only tools exposed by the gateway (get_commit, get_file_contents, list_issues, list_pull_requests, etc.); add_issue_comment, star_repository, issue_write, create_branch, create_or_update_file, create_pull_request are all absent. Direct calls returned Error [-32602]: unknown tool "..." — this confirms backend/toolset read-only configuration, not mcpg's own DIFC/guard write-blocking layer independently.
• Parts D/E: gh auth status shows not logged in (gh: To use GitHub CLI in a GitHub Actions workflow, set the GH_TOKEN environment variable), so the token-scope write-rejection boundary could not be exercised this run.

🔒 mcpg read-only stress (gVisor runtime) by Read-Only Stress: gVisor runtime