Skip to content

build(deps): bump the actions-major group with 2 updates - #3942

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-major-25ca3c3f07
Closed

build(deps): bump the actions-major group with 2 updates#3942
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-major-25ca3c3f07

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions-major group with 2 updates: redhat-actions/buildah-build and actions/stale.

Updates redhat-actions/buildah-build from 2.13 to 3.0.2

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.0.2

Bug Fixes

  • Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. (#177)

CI & Infrastructure

  • Add integration test for buildah-image container mode with multiple tags. (#177)
  • Consolidate three containerfile build workflows into one (native, containerized, case normalization). (#177)

Full Changelog: redhat-actions/buildah-build@v3.0.1...v3.0.2

v3.0.1

Bug Fixes

  • Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. (#175)

CI & Infrastructure

  • Add unit test suite using vitest and a test job in CI. (#175)

Full Changelog: redhat-actions/buildah-build@v3.0.0...v3.0.1

v3.0.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. (#154)
  • Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. (#161)

New Features

  • Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. (#161)
  • Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. (#168)
  • Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. (#169)
  • Multiple ports: The port input now accepts multiple ports separated by newline. (#165)
  • Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. (#167)
  • Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. (#166)
  • Image digest output: The digest output now reliably returns the content digest of the built image. (#153, #165)

Bug Fixes

  • Fix empty entrypoint being set when the input is not provided. (#161)
  • Fix containerfile path resolution to check both workspace and context directory. (#165)
  • Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. (#165)

CI & Infrastructure

  • Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. (#156)
  • Add workflow permissions, concurrency groups, and path filters. (#156)
  • Remove broken install_latest_buildah.sh script and simplify CI matrices. (#164)
  • Remove defunct CRDA vulnerability scan workflow. (#170)
  • Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort/github-action-markdown-link-check. (#171)
  • Enable Dependabot for npm and GitHub Actions dependencies. (#156)
  • Add CODEOWNERS, SECURITY.md. (#156)

Dependency Updates

  • Upgrade TypeScript to 6.x. (#163)
  • Upgrade ESLint to 10 with flat config. (#156)

... (truncated)

Changelog

Sourced from redhat-actions/buildah-build's changelog.

buildah-build Changelog

v3.0.2

Bug Fixes

  • Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. #177

CI & Infrastructure

  • Add integration test for buildah-image container mode with multiple tags. #177
  • Consolidate three containerfile build workflows into one (native, containerized, case normalization). #177

v3.0.1

Bug Fixes

  • Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. #175

CI & Infrastructure

  • Add unit test suite using vitest and a test job in CI. #175

v3.0.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. #154
  • Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. #161

New Features

  • Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. #161
  • Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. #168
  • Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. #169
  • Multiple ports: The port input now accepts multiple ports separated by newline. #165
  • Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. #167
  • Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. #166
  • Image digest output: The digest output now reliably returns the content digest of the built image. #153, #165

Bug Fixes

  • Fix empty entrypoint being set when the input is not provided. #161
  • Fix containerfile path resolution to check both workspace and context directory. #165
  • Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. #165

CI & Infrastructure

  • Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. #156
  • Add workflow permissions, concurrency groups, and path filters. #156
  • Remove broken install_latest_buildah.sh script and simplify CI matrices. #164
  • Remove defunct CRDA vulnerability scan workflow. #170
  • Enable Dependabot for npm and GitHub Actions dependencies. #156
  • Add CODEOWNERS, SECURITY.md. #156

Dependency Updates

  • Upgrade TypeScript to 6.x. #163
  • Upgrade ESLint to 10 with flat config. #156

... (truncated)

Commits
  • 3a51aad Update CHANGELOG and version for v3.0.2
  • 69263e9 Pass --root to containerized buildah so all invocations share storage (#177)
  • 27e5954 Update CHANGELOG and version for v3.0.1
  • 6c3509d Detect container storage root instead of hardcoding it (#174) (#175)
  • 3194d0c Document available buildah container images in README (#173)
  • 5d84797 Update README and CHANGELOG for v3.0.0 (#172)
  • 464212a Replace deprecated link checker and fix 429 rate limiting (#171)
  • 97fe4a5 Fall back to podman when buildah is unavailable (#169)
  • 3fe6dbb Remove defunct CRDA vulnerability scan workflow (#170)
  • 02f342b Add buildah-image input to run buildah from a container (#168)
  • Additional commits viewable in compare view

Updates actions/stale from 10 to 11

Release notes

Sourced from actions/stale's releases.

v11.0.0

What's Changed

Enhancement

Dependency Update

Full Changelog: actions/stale@v10...v11.0.0

v10.4.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10.3.0...v10.4.0

v10.3.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.3.0

v10.2.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.2.0

... (truncated)

Changelog

Sourced from actions/stale's changelog.

Changelog

[10.1.0]

What's Changed

[10.0.0]

What's Changed

Breaking Changes

Enhancement

Dependency Upgrades

Documentation changes

[9.1.0]

What's Changed

[9.0.0]

Breaking Changes

  1. Action is now stateful: If the action ends because of operations-per-run then the next run will start from the first unprocessed issue skipping the issues processed during the previous run(s). The state is reset when all the issues are processed. This should be considered for scheduling workflow runs.
  2. Version 9 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

... (truncated)

Commits
  • 4391f3d Fix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...
  • eaf9131 refactor: update imports to use ES module syntax and improve test structure (...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the actions-major group with 2 updates
17f15d8 
Bumps the actions-major group with 2 updates: [redhat-actions/buildah-build](https://github.com/redhat-actions/buildah-build) and [actions/stale](https://github.com/actions/stale).


Updates `redhat-actions/buildah-build` from 2.13 to 3.0.2
- [Release notes](https://github.com/redhat-actions/buildah-build/releases)
- [Changelog](https://github.com/redhat-actions/buildah-build/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/buildah-build@7a95fa7...3a51aad)

Updates `actions/stale` from 10 to 11
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v10...v11)

---
updated-dependencies:
- dependency-name: redhat-actions/buildah-build
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-major
- dependency-name: actions/stale
  dependency-version: '11'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-major-25ca3c3f07 branch August 10, 2026 01:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants