Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

revert disable provenance by default if not set #784

Merged
merged 2 commits into from Jan 30, 2023

Conversation

crazy-max
Copy link
Member

follow-up #781 (comment)

This partially reverts 337a09d but keeps the newly added tests.

This partially reverts 337a09d but
keeps the newly added tests.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
jedevc
jedevc approved these changes Jan 30, 2023
@crazy-max crazy-max merged commit 3b5e802 into docker:master Jan 30, 2023
39 checks passed
@crazy-max crazy-max deleted the enable-provenance branch January 30, 2023 18:25
coolguy1771 pushed a commit to coolguy1771/home-ops that referenced this pull request Feb 2, 2023
#2406)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v3.3.1` -> `v4.0.0` |

---

### Release Notes

<details>
<summary>docker/build-push-action</summary>

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Revert disable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

 **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMDkuMSIsInVwZGF0ZWRJblZlciI6IjM0LjEwOS4xIn0=-->

Co-authored-by: lumiere-bot <98047013+lumiere-bot[bot]@users.noreply.github.com>
pascalberger pushed a commit to swissgrc/.github that referenced this pull request Feb 3, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://togithub.com/docker/build-push-action)
| action | major | `v3.3.1` -> `v4.0.0` |

---

### Release Notes

<details>
<summary>docker/build-push-action</summary>

###
[`v4.0.0`](https://togithub.com/docker/build-push-action/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/docker/build-push-action/compare/v3.3.1...v4.0.0)

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA
Provenance](https://slsa.dev/provenance/) attestation, which requires
support for
[OCI-compliant](https://togithub.com/opencontainers/image-spec)
multi-platform images. This may introduce issues with registry and
runtime support (e.g. [Google Cloud Run and AWS
Lambda](https://togithub.com/docker/buildx/issues/1533)). You can
optionally disable the default provenance attestation functionality
using `provenance: false`.

- Revert disable provenance by default if not set by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[docker/build-push-action#784

**Full Changelog**:
docker/build-push-action@v3.3.1...v4.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

 **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/swissgrc/.github).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMTkuNSIsInVwZGF0ZWRJblZlciI6IjM0LjExOS41In0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants