chore(deps): bump docker/metadata-action from 5.5.0 to 5.7.0 #12

New issue

Open

opened 2025-10-14 16:02:08 -06:00 by navan · 0 comments

navan commented

2025-10-14 16:02:08 -06:00

Owner

Originally created by @dependabot[bot] on 3/3/2025

Bumps docker/metadata-action from 5.5.0 to 5.7.0.

Release notes

Sourced from docker/metadata-action's releases.

v5.7.0

Global expressions support for labels and annotations by @crazy-max in docker/metadata-action#489

Support disabling outputs as environment variables by @omus in docker/metadata-action#497

Bump @docker/actions-toolkit from 0.44.0 to 0.56.0 in docker/metadata-action#507 docker/metadata-action#509

Bump csv-parse from 5.5.6 to 5.6.0 in docker/metadata-action#482

Bump moment-timezone from 0.5.46 to 0.5.47 in docker/metadata-action#501

Bump semver from 7.6.3 to 7.7.1 in docker/metadata-action#504

Full Changelog: https://github.com/docker/metadata-action/compare/v5.6.1...v5.7.0

v5.6.1

Fix GitHub API request fallback for commit date by @crazy-max in docker/metadata-action#478

Revert to default commit SHA length of 7 by @crazy-max in docker/metadata-action#480

Full Changelog: https://github.com/docker/metadata-action/compare/v5.6.0...v5.6.1

v5.6.0

Add commit_date global expression by @trim21 in docker/metadata-action#471 docker/metadata-action#475

Increase short commit sha length to 12 for uniqueness by @crazy-max in docker/metadata-action#467

Bump @actions/core from 1.10.1 to 1.11.1 docker/metadata-action#460

Bump @docker/actions-toolkit from 0.16.1 to 0.44.0 docker/metadata-action#391 docker/metadata-action#399 docker/metadata-action#413 docker/metadata-action#441

Bump braces from 3.0.2 to 3.0.3 docker/metadata-action#424

Bump cross-spawn from 7.0.3 to 7.0.5 docker/metadata-action#474

Bump csv-parse from 5.5.5 to 5.5.6 docker/metadata-action#412

Bump moment-timezone from 0.5.44 to 0.5.46 docker/metadata-action#383 docker/metadata-action#470 docker/metadata-action#459

Bump path-to-regexp from 6.2.2 to 6.3.0 docker/metadata-action#454

Bump semver from 7.6.0 to 7.6.3 docker/metadata-action#400 docker/metadata-action#411 docker/metadata-action#440

Bump undici from 5.26.3 to 5.28.4 docker/metadata-action#386 docker/metadata-action#402

Full Changelog: https://github.com/docker/metadata-action/compare/v5.5.1...v5.6.0

v5.5.1

Don't set cwd:// prefix for local bake files by @crazy-max in docker/metadata-action#382

Full Changelog: https://github.com/docker/metadata-action/compare/v5.5.0...v5.5.1

Commits

902fa8e Merge pull request #504 from docker/dependabot/npm_and_yarn/semver-7.7.1
c30b9c2 chore: update generated content
0698804 chore(deps): Bump semver from 7.6.3 to 7.7.1
bb3eeca Merge pull request #501 from docker/dependabot/npm_and_yarn/moment-timezone-0...
94a839c chore: update generated content
ecd51a0 Merge pull request #509 from docker/dependabot/npm_and_yarn/docker/actions-to...
a85b1db chore(deps): Bump @docker/actions-toolkit from 0.55.0 to 0.56.0
5a76a0e chore(deps): Bump moment-timezone from 0.5.46 to 0.5.47
1cc4a98 Merge pull request #482 from docker/dependabot/npm_and_yarn/csv-parse-5.6.0
d84de1e chore: update generated content
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

*Originally created by @dependabot[bot] on 3/3/2025* Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.5.0 to 5.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/metadata-action/releases">docker/metadata-action's releases</a>.</em></p> <blockquote> <h2>v5.7.0</h2> <ul> <li>Global expressions support for labels and annotations by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/489">docker/metadata-action#489</a></li> <li>Support disabling outputs as environment variables by <a href="https://github.com/omus"><code>@omus</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/497">docker/metadata-action#497</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.44.0 to 0.56.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/507">docker/metadata-action#507</a> <a href="https://redirect.github.com/docker/metadata-action/pull/509">docker/metadata-action#509</a></li> <li>Bump csv-parse from 5.5.6 to 5.6.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/482">docker/metadata-action#482</a></li> <li>Bump moment-timezone from 0.5.46 to 0.5.47 in <a href="https://redirect.github.com/docker/metadata-action/pull/501">docker/metadata-action#501</a></li> <li>Bump semver from 7.6.3 to 7.7.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/504">docker/metadata-action#504</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/metadata-action/compare/v5.6.1...v5.7.0">https://github.com/docker/metadata-action/compare/v5.6.1...v5.7.0</a></p> <h2>v5.6.1</h2> <ul> <li>Fix GitHub API request fallback for commit date by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/478">docker/metadata-action#478</a></li> <li>Revert to default commit SHA length of 7 by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/480">docker/metadata-action#480</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/metadata-action/compare/v5.6.0...v5.6.1">https://github.com/docker/metadata-action/compare/v5.6.0...v5.6.1</a></p> <h2>v5.6.0</h2> <ul> <li>Add <code>commit_date</code> global expression by <a href="https://github.com/trim21"><code>@trim21</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/471">docker/metadata-action#471</a> <a href="https://redirect.github.com/docker/metadata-action/pull/475">docker/metadata-action#475</a></li> <li>Increase short commit sha length to 12 for uniqueness by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/467">docker/metadata-action#467</a></li> <li>Bump <code>@actions/core</code> from 1.10.1 to 1.11.1 <a href="https://redirect.github.com/docker/metadata-action/pull/460">docker/metadata-action#460</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.16.1 to 0.44.0 <a href="https://redirect.github.com/docker/metadata-action/pull/391">docker/metadata-action#391</a> <a href="https://redirect.github.com/docker/metadata-action/pull/399">docker/metadata-action#399</a> <a href="https://redirect.github.com/docker/metadata-action/pull/413">docker/metadata-action#413</a> <a href="https://redirect.github.com/docker/metadata-action/pull/441">docker/metadata-action#441</a></li> <li>Bump braces from 3.0.2 to 3.0.3 <a href="https://redirect.github.com/docker/metadata-action/pull/424">docker/metadata-action#424</a></li> <li>Bump cross-spawn from 7.0.3 to 7.0.5 <a href="https://redirect.github.com/docker/metadata-action/pull/474">docker/metadata-action#474</a></li> <li>Bump csv-parse from 5.5.5 to 5.5.6 <a href="https://redirect.github.com/docker/metadata-action/pull/412">docker/metadata-action#412</a></li> <li>Bump moment-timezone from 0.5.44 to 0.5.46 <a href="https://redirect.github.com/docker/metadata-action/pull/383">docker/metadata-action#383</a> <a href="https://redirect.github.com/docker/metadata-action/pull/470">docker/metadata-action#470</a> <a href="https://redirect.github.com/docker/metadata-action/pull/459">docker/metadata-action#459</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 <a href="https://redirect.github.com/docker/metadata-action/pull/454">docker/metadata-action#454</a></li> <li>Bump semver from 7.6.0 to 7.6.3 <a href="https://redirect.github.com/docker/metadata-action/pull/400">docker/metadata-action#400</a> <a href="https://redirect.github.com/docker/metadata-action/pull/411">docker/metadata-action#411</a> <a href="https://redirect.github.com/docker/metadata-action/pull/440">docker/metadata-action#440</a></li> <li>Bump undici from 5.26.3 to 5.28.4 <a href="https://redirect.github.com/docker/metadata-action/pull/386">docker/metadata-action#386</a> <a href="https://redirect.github.com/docker/metadata-action/pull/402">docker/metadata-action#402</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/metadata-action/compare/v5.5.1...v5.6.0">https://github.com/docker/metadata-action/compare/v5.5.1...v5.6.0</a></p> <h2>v5.5.1</h2> <ul> <li>Don't set <code>cwd://</code> prefix for local bake files by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/382">docker/metadata-action#382</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/metadata-action/compare/v5.5.0...v5.5.1">https://github.com/docker/metadata-action/compare/v5.5.0...v5.5.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/metadata-action/commit/902fa8ec7d6ecbf8d84d538b9b233a880e428804"><code>902fa8e</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/504">#504</a> from docker/dependabot/npm_and_yarn/semver-7.7.1</li> <li><a href="https://github.com/docker/metadata-action/commit/c30b9c27e61e950956355394454702216b74bd42"><code>c30b9c2</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/metadata-action/commit/0698804aabf8041ea6b78301daf0baeb8dad2496"><code>0698804</code></a> chore(deps): Bump semver from 7.6.3 to 7.7.1</li> <li><a href="https://github.com/docker/metadata-action/commit/bb3eecaaf832752e6a3e352de3b1ff2d11194b49"><code>bb3eeca</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/501">#501</a> from docker/dependabot/npm_and_yarn/moment-timezone-0...</li> <li><a href="https://github.com/docker/metadata-action/commit/94a839cf6aa9c58e06cf1ea8c8490eae3ef9794b"><code>94a839c</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/metadata-action/commit/ecd51a0f6a5f2594db412c7e8304064c1be02f6a"><code>ecd51a0</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/509">#509</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/metadata-action/commit/a85b1dbfe6a9f73e361ba3404493fe57f9d783e7"><code>a85b1db</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.55.0 to 0.56.0</li> <li><a href="https://github.com/docker/metadata-action/commit/5a76a0efcf13a52fea4449d4e07d44d6f1e61046"><code>5a76a0e</code></a> chore(deps): Bump moment-timezone from 0.5.46 to 0.5.47</li> <li><a href="https://github.com/docker/metadata-action/commit/1cc4a9856a30691d5bd4376b110fab84260af4b5"><code>1cc4a98</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/482">#482</a> from docker/dependabot/npm_and_yarn/csv-parse-5.6.0</li> <li><a href="https://github.com/docker/metadata-action/commit/d84de1e022f1b49a635274988425c331f19d0f7a"><code>d84de1e</code></a> chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/docker/metadata-action/compare/dbef88086f6cef02e264edb7dbf63250c17cef6c...902fa8ec7d6ecbf8d84d538b9b233a880e428804">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/metadata-action&package-manager=github_actions&previous-version=5.5.0&new-version=5.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>