diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 8b2dba97..fd33ca24 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -62,7 +62,7 @@ jobs: exclude: ${{ fromJSON(needs.platform-excludes.outputs.excludes) }} steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Prepare run: | @@ -71,7 +71,7 @@ jobs: - name: Docker meta id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@v6 with: images: | ${{ env.DOCKERHUB_REPO }} @@ -90,7 +90,7 @@ jobs: echo "EOS_REPO_DESCRIPTION=$(jq -cr '.labels."org.opencontainers.image.description"' <<< "$DOCKER_METADATA_OUTPUT_JSON")" >> $GITHUB_ENV - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@v4 # skip for pull requests if: ${{ github.event_name != 'pull_request' }} with: @@ -98,7 +98,7 @@ jobs: password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: Login to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 # skip for pull requests if: ${{ github.event_name != 'pull_request' }} with: @@ -107,16 +107,16 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 # skip for pull requests if: ${{ github.event_name != 'pull_request' }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Build and push by digest id: build - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: . platforms: ${{ matrix.platform }} @@ -125,7 +125,7 @@ jobs: outputs: type=image,"name=${{ env.DOCKERHUB_REPO }},${{ env.GHCR_REPO }}",push-by-digest=true,name-canonical=true,"push=${{ github.event_name != 'pull_request' }}","annotation-index.org.opencontainers.image.description=${{ env.EOS_REPO_DESCRIPTION }}" - name: Generate artifact attestation DockerHub - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 if: ${{ github.event_name != 'pull_request' }} with: subject-name: docker.io/${{ env.DOCKERHUB_REPO }} @@ -133,7 +133,7 @@ jobs: push-to-registry: true - name: Generate artifact attestation GitHub - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 if: ${{ github.event_name != 'pull_request' }} with: subject-name: ${{ env.GHCR_REPO }} @@ -147,7 +147,7 @@ jobs: touch "/tmp/digests/${digest#sha256:}" - name: Upload digest - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: digests-${{ env.PLATFORM_PAIR }} path: /tmp/digests/* @@ -166,31 +166,31 @@ jobs: if: ${{ github.event_name != 'pull_request' }} steps: - name: Download digests - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: path: /tmp/digests pattern: digests-* merge-multiple: true - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: Login to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Docker meta id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@v6 with: images: | ${{ env.DOCKERHUB_REPO }}