chore(deps): update all non-major dependencies by renovate-appwrite[bot] · Pull Request #21 · utopia-php/docker-base

renovate-appwrite · 2026-11-09T07:16:55Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	minor	`v6.0.2` → `v6.1.0`
actions/download-artifact	action	patch	`v8.0.1` → `v8.0.2`
actions/upload-artifact	action	patch	`v7.0.1` → `v7.0.2`
docker/login-action	action	minor	`v4.1.0` → `v4.7.0`	`v4.8.0`
docker/metadata-action	action	minor	`v6.0.0` → `v6.2.0`
docker/setup-buildx-action	action	minor	`v4.0.0` → `v4.4.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/download-artifact

`v8.0.2`

Compare Source

What's Changed

Update the readme by @danwkennedy in #473
Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Update @actions/artifact to 6.3.1 by @tunc-d in #492
Prepare download-artifact v8.0.2 by @tunc-d in #493

New Contributors

@tunc-d made their first contribution in #492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/upload-artifact

`v7.0.2`

Compare Source

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in #821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

docker/login-action

`v4.7.0`

Compare Source

Preserve explicit ECR settings in registry-auth by @crazy-max in #1089
Use registry hosts for scoped credentials by @crazy-max in #1088
Raise Docker Hub OIDC max expiry to 6 hours by @crazy-max in #1068
Log Docker Hub OIDC token exchange progress by @crazy-max in #1061
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1154.0 in #1093
Bump @docker/actions-toolkit from 0.94.0 to 0.107.0 in #1100
Bump @humanfs/node from 0.16.7 to 0.16.8 in #1077
Bump csv-parse from 7.0.1 to 7.0.3 in #1078
Bump handlebars from 4.7.9 to 4.7.10 in #1091
Bump js-yaml from 5.2.2 to 5.5.0 in #1066
Bump postcss from 8.5.22 to 8.5.26 in #1071
Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #1092
Bump source-map-js from 1.2.1 to 1.2.2 in #1090
Bump undici from 6.27.0 to 6.29.1 in #1085
Bump uuid from 14.0.1 to 14.0.3 in #1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

`v4.6.0`

Compare Source

Harden buildx scoped config path handling by @crazy-max in #1059
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in #1051
Bump js-yaml from 5.2.1 to 5.2.2 in #1057
Bump postcss from 8.5.10 to 8.5.22 in #1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

`v4.5.2`

Compare Source

Surface Docker Hub OIDC error responses by @crazy-max in #1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

`v4.5.1`

Compare Source

Support dhi.io as Docker Hub OIDC registry by @crazy-max in #1054

Full Changelog: docker/login-action@v4.5.0...v4.5.1

`v4.5.0`

Compare Source

Docker Hub OIDC login support by @crazy-max in #1048
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in #1037
Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in #1044 #1050
Bump brace-expansion from 1.1.13 to 1.1.16 in #1046
Bump js-yaml from 5.2.0 to 5.2.1 in #1038

Full Changelog: docker/login-action@v4.4.0...v4.5.0

`v4.4.0`

Compare Source

Skip empty registry-auth secret mask by @crazy-max in #1035
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 #1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

`v4.3.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/metadata-action

`v6.2.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #689
Bump @actions/core from 3.0.0 to 3.0.1 in #663
Bump @actions/github from 9.0.0 to 9.1.1 in #666
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #672 #696
Bump @sigstore/core from 3.1.0 to 3.2.1 in #690
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #693
Bump csv-parse from 6.2.1 to 7.0.0 in #683
Bump js-yaml from 4.1.1 to 4.3.0 in #688
Bump moment-timezone from 0.6.1 to 0.6.2 in #664
Bump semver from 7.7.4 to 7.8.5 in #665 #695
Bump sigstore from 4.1.0 to 4.1.1 in #694
Bump tmp from 0.2.5 to 0.2.7 in #673
Bump undici from 6.25.0 to 6.27.0 in #686
Bump vite from 7.3.2 to 7.3.6 in #685

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #613
Bump brace-expansion from 1.1.12 to 5.0.6 in #658 #630
Bump csv-parse from 6.1.0 to 6.2.1 in #617
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #620
Bump flatted from 3.3.3 to 3.4.2 in #623
Bump glob from 10.3.15 to 10.5.0 in #621
Bump handlebars from 4.7.8 to 4.7.9 in #629
Bump lodash from 4.17.23 to 4.18.1 in #639
Bump moment-timezone from 0.6.0 to 0.6.1 in #619
Bump picomatch from 4.0.3 to 4.0.4 in #626
Bump postcss from 8.5.6 to 8.5.10 in #649
Bump tar from 6.2.1 to 7.5.15 in #657
Bump undici from 6.23.0 to 6.25.0 in #614
Bump vite from 7.3.1 to 7.3.2 in #637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

docker/setup-buildx-action

`v4.4.1`

Compare Source

Skip BuildKit image pre-pulls for explicit endpoints by @crazy-max in #624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

`v4.4.0`

Compare Source

Use official Buildx releases for cloud driver by @crazy-max in #606
Pull BuildKit image before builder creation by @crazy-max in #609
Use shared error helpers for Buildx and Docker commands by @crazy-max in #620
Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in #610 #618 #619
Bump @humanfs/node from 0.16.7 to 0.16.8 in #614
Bump js-yaml from 5.3.0 to 5.4.2 in #608 #617
Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in #595
Bump brace-expansion from 1.1.13 to 1.1.18 in #600
Bump js-yaml from 5.2.0 to 5.3.0 in #585
Bump postcss from 8.5.10 to 8.5.25 in #598
Bump undici from 6.27.0 to 6.28.0 in #601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #572
Bump @actions/core from 3.0.0 to 3.0.1 in #551
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #557 #580
Bump @sigstore/core from 3.1.0 to 3.2.1 in #573
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #576
Bump js-yaml from 4.1.1 to 5.2.0 in #562
Bump sigstore from 4.1.0 to 4.1.1 in #577
Bump tmp from 0.2.5 to 0.2.7 in #556
Bump undici from 6.25.0 to 6.27.0 in #570
Bump vite from 7.3.2 to 7.3.6 in #569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #489
Bump brace-expansion from 1.1.12 to 5.0.6 in #547 #508
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #540
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #496
Bump flatted from 3.3.3 to 3.4.2 in #499
Bump glob from 10.3.12 to 13.0.6 in #495
Bump handlebars from 4.7.8 to 4.7.9 in #504
Bump lodash from 4.17.23 to 4.18.1 in #523
Bump picomatch from 4.0.3 to 4.0.4 in #503
Bump postcss from 8.5.6 to 8.5.10 in #537
Bump tar from 6.2.1 to 7.5.15 in #545
Bump undici from 6.23.0 to 6.25.0 in #492
Bump vite from 7.3.1 to 7.3.2 in #520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Monday (* * * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

appwrite · 2026-11-09T07:22:14Z

🟢 Tier S · Ready to merge

The dependency pin updates do not introduce an apparent workflow behavior or compatibility issue.

Updates the pinned GitHub Actions dependencies in the CI, publish, and release workflows. The workflow steps and their inputs remain unchanged while the action versions and commit SHAs are refreshed.

Verdict	New comments	Fixed	Still open
✅ Approved	0	0	0

📂 Walkthrough · 3

File	Change
`.github/workflows/ci.yml`	Updates checkout, artifact upload, and artifact download action pins.
`.github/workflows/publish.yml`	Updates Docker login, metadata, and buildx action pins, plus artifact download.
`.github/workflows/release.yml`	Updates Docker login, metadata, and buildx action pins.

_{Reviewed 1af8609 · Details · Comment @appwrite review to re-run, or mention @appwrite with a question.}

appwrite

🟢 Tier S · Looks good to merge. Summary

chore(deps): update all non-major dependencies

1af8609

renovate-appwrite Bot added the dependencies label Nov 9, 2026

appwrite Bot approved these changes Nov 9, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): update all non-major dependencies - #21

chore(deps): update all non-major dependencies#21
renovate-appwrite[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate-appwrite Bot commented Nov 9, 2026

Uh oh!

appwrite Bot commented Nov 9, 2026 •

edited

Loading

Uh oh!

appwrite Bot left a comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate-appwrite Bot commented Nov 9, 2026

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

appwrite Bot commented Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🟢 Tier S · Ready to merge

Uh oh!

appwrite Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

appwrite Bot commented Nov 9, 2026 •

edited

Loading