Skip to content

chore(deps): update docker/build-push-action action to v7 #151

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update docker/build-push-action action to v7 #151

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build-docker.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Build and push
uses: docker/build-push-action@v6
uses: docker/build-push-action@v7
Copy link
Copy Markdown

@coderabbitai coderabbitai bot Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🌐 Web query:

What is the recommended immutable commit SHA for docker/build-push-action v7, and are there any breaking changes from v6 to v7 in its official release notes?

💡 Result:

  • Recommended immutable commit SHA to pin for docker/build-push-action@v7 (v7.0.0): d08e5c354a6adb9ed34480a06d141179aa583294 (the commit the v7.0.0 release/tag points to). (github.com)

    • Example: uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 (github.com)

  • Breaking changes noted in the official v7.0.0 release notes (vs v6):

    1. Node 24 is the default runtime, and it requires GitHub Actions Runner v2.327.1+ (workflows on older runners may fail). (github.com)
    2. Removed deprecated env vars: DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS (workflows still using them will break / no longer have effect). (github.com)
    3. Removed legacy export-build tool support for build summary (could break setups relying on that legacy path). (github.com)

Citations:

Pin the action to the v7 commit SHA and verify breaking change compatibility.

Replace docker/build-push-action@v7 with docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 to improve CI supply-chain integrity.

Additionally, v7.0.0 includes breaking changes that require validation:

  • Node 24 is now the default runtime (requires GitHub Actions Runner v2.327.1 or later)
  • Removed deprecated environment variables: DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS
  • Removed legacy export-build tool support

Ensure your workflow and any downstream dependencies are compatible with these changes.

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In @.github/workflows/build-docker.yml at line 30, Replace the floating tag
docker/build-push-action@v7 with the specific commit
docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 in the
workflow to pin the action; then validate the workflow and downstream steps for
v7.0.0 breaking changes — ensure the runner supports Node 24 (GitHub Actions
Runner v2.327.1+), remove or replace uses of DOCKER_BUILD_NO_SUMMARY and
DOCKER_BUILD_EXPORT_RETENTION_DAYS, and update any logic relying on the legacy
export-build tool so the build-push usage (the step referencing
docker/build-push-action) remains compatible.

with:
context: .
file: ./Dockerfile
Expand Down
Loading