Bump docker/setup-buildx-action from 3 to 4
What the developer wrote
Authored by dependabot[bot]
Bump docker/setup-buildx-action from 3 to 4
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is an automated dependency update by Dependabot that bumps the GitHub Actions 'docker/setup-buildx-action' from version 3 to version 4 in the project's build workflow file. It is a routine maintenance change with no visible security-relevant code modifications.
No security action required. Review the upstream docker/setup-buildx-action v4 release notes for any breaking changes or security fixes as part of normal dependency hygiene, and verify CI builds still pass.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates four references in .github/workflows/build.yaml from docker/setup-buildx-action@v3 to @v4, preserving the same configuration (driver-opts: network=host). No other workflow logic, permissions, inputs, or build commands were changed. The diff is a pure version bump of a third-party GitHub Action used to configure Docker Buildx in CI.
Changed components
.github/workflows/build.yamlInspect captured patch +4 / −4
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index ec982e0..9740550 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -28,7 +28,7 @@ jobs:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- - uses: docker/setup-buildx-action@v3
+ - uses: docker/setup-buildx-action@v4
with:
driver-opts: network=host
- uses: docker/build-push-action@v6
@@ -123,7 +123,7 @@ jobs:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- - uses: docker/setup-buildx-action@v3
+ - uses: docker/setup-buildx-action@v4
with:
driver-opts: network=host
- uses: docker/build-push-action@v6
@@ -170,7 +170,7 @@ jobs:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- - uses: docker/setup-buildx-action@v3
+ - uses: docker/setup-buildx-action@v4
with:
driver-opts: network=host
- uses: docker/build-push-action@v6
@@ -204,7 +204,7 @@ jobs:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- - uses: docker/setup-buildx-action@v3
+ - uses: docker/setup-buildx-action@v4
with:
driver-opts: network=host
- uses: docker/build-push-action@v6
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.