Upgrade GitHub Actions to latest versions by salmanmkc · Pull Request #854 · InsForge/InsForge

salmanmkc · Mar 13, 2026

Bumps GitHub Actions to their latest versions for bug fixes and security patches.

Changes

Action	Old Version(s)	New Version	Compare	Files
`aws-actions/configure-aws-credentials`	`v4`	`v6`	Diff	build-image.yml
`docker/build-push-action`	`v5`	`v7`	Diff	build-image.yml, ci-premerge-check.yml
`docker/login-action`	`v3`	`v4`	Diff	build-image.yml
`docker/metadata-action`	`v5`	`v6`	Diff	build-image.yml
`docker/setup-buildx-action`	`v3`	`v4`	Diff	build-image.yml
`docker/setup-qemu-action`	`v3`	`v4`	Diff	build-image.yml
`imjasonh/setup-crane`	`31b88ef`	`6da1ae0`	Diff	build-image.yml

Release Notes

Release notes for docker/setup-qemu-action

v4.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/setup-qemu-action#245
Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/setup-qemu-action#241
Bump @actions/core from 1.11.1 to 3.0.0 in build(deps): bump @actions/core from 1.11.1 to 3.0.0 docker/setup-qemu-action#244
Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in https://github.com/docker

...truncated

v3.7.0

Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in build(deps): bump @docker/actions-toolkit from 0.56.0 to 0.62.1 docker/setup-qemu-action#217 build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.67.0 docker/setup-qemu-action#230
Bump brace-expansion from 1.1.11 to 1.1.12 in build(deps): bump brace-expansion from 1.1.11 to 1.1.12 docker/setup-qemu-action#220
Bump form-data from 2.5.1 to 2.5.5 in build(deps): bump form-data from 2.5.1 to 2.5.5 docker/setup-qemu-action#218
Bump tmp from 0.2.3 to 0.2.4 in build(deps): bump tmp from 0.2.3 to 0.2.4 docker/setup-qemu-action#221
Bump undici from 5.28.4 to 5.29.0 in https://github

...truncated

Release notes for docker/setup-buildx-action

v4.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/setup-buildx-action#483
Remove deprecated inputs/outputs by @crazy-max in remove deprecated inputs/outputs docker/setup-buildx-action#464
Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/setup-buildx-action#481
Bump @actions/core from 1.11.1 to 3.0.0 in https://github.com/dock

...truncated

v3.12.0

Deprecate install input by @crazy-max in deprecate install input docker/setup-buildx-action#455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.63.0 docker/setup-buildx-action#434
Bump brace-expansion from 1.1.11 to 1.1.12 in build(deps): bump brace-expansion from 1.1.11 to 1.1.12 docker/setup-buildx-action#436
Bump form-data from 2.5.1 to 2.5.5 in build(deps): bump form-data from 2.5.1 to 2.5.5 docker/setup-buildx-action#432
Bump undici from 5.28.4 to 5.29.0 in https://github.com/docker/setup-buildx-action/pu

...truncated

v3.11.1

Fix keep-state not being respected by @crazy-max in fix keep-state not being respected docker/setup-buildx-action#429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Keep BuildKit state support by @crazy-max in Keep BuildKit state support docker/setup-buildx-action#427
Remove aliases created when installing by default by @hashhar in Remove aliases created by buildx when installing by default docker/setup-buildx-action#139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in build(deps): bump @docker/actions-toolkit from 0.56.0 to 0.61.0 docker/setup-buildx-action#422 build(deps): bump @docker/actions-toolkit from 0.61.0 to 0.62.1 docker/setup-buildx-action#425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in build(deps): bump @docker/actions-toolkit from 0.54.0 to 0.56.0 docker/setup-buildx-action#408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

Release notes for docker/login-action

v4.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/login-action#929
Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/login-action#927
Bump @actions/core from 1.11.1 to 3.0.0 in build(deps): bump @actions/core from 1.11.1 to 3.0.0 docker/login-action#919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in https://github.com/docker/login-action/pu

...truncated

v3.7.0

Add scope input to set scopes for the authentication token by @crazy-max in Add scope input to set scopes for the authentication token docker/login-action#912
Add support for AWS European Sovereign Cloud ECR by @dphi in feat: add support for AWS European Sovereign Cloud ECR docker/login-action#914
Ensure passwords are redacted with registry-auth input by @crazy-max in ensure passwords are redacted with registry-auth docker/login-action#911
build(deps): bump lodash from 4.17.21 to 4.17.23 in build(deps): bump lodash from 4.17.21 to 4.17.23 docker/login-action#915

Full Changelog: https://g

...truncated

v3.6.0

Add registry-auth input for raw authentication to registries by @crazy-max in raw authentication to registries docker/login-action#887
Bump @aws-sdk/client-ecr to 3.890.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#882 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#890
Bump @aws-sdk/client-ecr-public to 3.890.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#882 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in https://github.com/docker/logi

...truncated

v3.5.0

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in Support new <registry-id>.dkr-ecr.<aws-region>.on.aws endpoint docker/login-action#874 support dual-stack for aws public ecr docker/login-action#876
Bump @aws-sdk/client-ecr to 3.859.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#860 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#878
Bump @aws-sdk/client-ecr-public to 3.859.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#860 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#878
Bump @docker/actions-toolkit from 0.57.0 to 0.6

...truncated

v3.4.0

Bump @actions/core from 1.10.1 to 1.11.1 in build(deps): bump @actions/core from 1.10.1 to 1.11.1 docker/login-action#791
Bump @aws-sdk/client-ecr to 3.766.0 in build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#789 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#856
Bump @aws-sdk/client-ecr-public to 3.758.0 in build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#789 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in build(deps): bump @docker/actions-toolkit from 0.35.0 to 0.40.0 docker/login-action#801 https://github.com

...truncated

Release notes for docker/metadata-action

v6.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/metadata-action#605
List inputs now preserve # inside values while still supporting full-line # comments by @crazy-max in preserve comments in list input values with commentNoInfix docker/metadata-action#607
Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/metadata-action#602
Bump lodash from 4.17.

...truncated

v5.10.0

Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in chore(deps): Bump @docker/actions-toolkit from 0.66.0 to 0.67.0 docker/metadata-action#559 chore(deps): Bump @docker/actions-toolkit from 0.67.0 to 0.68.0 docker/metadata-action#569
Bump js-yaml from 3.14.1 to 3.14.2 in chore(deps): Bump js-yaml from 3.14.1 to 3.14.2 docker/metadata-action#564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Add tag-names output to return tag names without image base name by @crazy-max in tag-names output to return tag names without image base name docker/metadata-action#553
Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in chore(deps): Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 docker/metadata-action#539
Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in chore(deps): Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 docker/metadata-action#555
Bump brace-expansion from 1.1.11 to 1.1.12 in chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12 docker/metadata-action#540
Bump csv-parse from 5.6.0 to 6.1.0 in https:/

...truncated

v5.8.0

New is_not_default_branch global expression by @crazy-max in is_not_default_branch global expression docker/metadata-action#535
Allow to match part of the git tag or value for semver/pep440 types by @crazy-max in allow to match part of the git tag or value for semver type docker/metadata-action#536 allow to match part of the git tag or value for pep440 type docker/metadata-action#537
Bump @actions/github from 6.0.0 to 6.0.1 in chore(deps): Bump @actions/github from 6.0.0 to 6.0.1 docker/metadata-action#523
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/metadata-acti

...truncated

v5.7.0

Global expressions support for labels and annotations by @crazy-max in global expressions support for labels and annotations docker/metadata-action#489
Support disabling outputs as environment variables by @omus in Support disabling DOCKER_METADATA_OUTPUT_* environment variables docker/metadata-action#497
Bump @docker/actions-toolkit from 0.44.0 to 0.56.0 in chore(deps): Bump @docker/actions-toolkit from 0.44.0 to 0.55.0 docker/metadata-action#507 chore(deps): Bump @docker/actions-toolkit from 0.55.0 to 0.56.0 docker/metadata-action#509
Bump csv-parse from 5.5.6 to 5.6.0 in chore(deps): Bump csv-parse from 5.5.6 to 5.6.0 docker/metadata-action#482
Bump

...truncated

Release notes for docker/build-push-action

v7.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/build-push-action#1470
Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in remove deprecated envs docker/build-push-action#1473
Remove legacy export-build tool support for build summary by @crazy-max in remove legacy export-build tool support docker/build-push-action#1474

...truncated

v6.19.2

Preserve port in GIT_AUTH_TOKEN host by @crazy-max in preserve port in GIT_AUTH_TOKEN host docker/build-push-action#1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Derive GIT_AUTH_TOKEN host from GitHub server URL by @crazy-max in derive GIT_AUTH_TOKEN host from GitHub server URL docker/build-push-action#1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Scope default git auth token to github.com by @crazy-max in scope default git auth token to github.com docker/build-push-action#1451
Bump brace-expansion from 1.1.11 to 1.1.12 in chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12 docker/build-push-action#1396
Bump form-data from 2.5.1 to 2.5.5 in chore(deps): Bump form-data from 2.5.1 to 2.5.5 docker/build-push-action#1391
Bump js-yaml from 3.14.1 to 3.14.2 in chore(deps): Bump js-yaml from 3.14.1 to 3.14.2 docker/build-push-action#1429
Bump lodash from 4.17.21 to 4.17.23 in https://github.com/docker/build-push-action/pul

...truncated

v6.18.0

Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in chore(deps): Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 docker/build-push-action#1381

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

Release notes for aws-actions/configure-aws-credentials

v6.0.0

6.0.0 (2026-02-04)

⚠ BREAKING CHANGES

Update action to use node24 Note this requires GitHub action runner version v2.327.1 or later (#1632) (a7a2c11)

Fe

...truncated

v5.1.1

5.1.1 (2025-11-24)

Miscellaneous Chores

release 5.1.1 (56d6a58)
various dependency updates

v5.1.0

5.1.0 (2025-10-06)

Features

Add global timeout support (#1487) (1584b8b)
add no-proxy support (#1482) ([dde9b22](https://github.com/aws-actions/

...truncated

v5.0.0

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

Cleanup input handling. Changes invalid boolean input behavior (see feat(storage): O(1) cached aggregates with safe cross-bucket triggers (#1435) #1445)

Features

add skip OIDC option (#1458) (8c45f6b)
Cleanup input handling. Changes invalid boo

...truncated

v4.3.1

4.3.1 (2025-08-04)

Bug Fixes

update readme to 4.3.1 (#1424) (be2e7ad)

Release notes for imjasonh/setup-crane

v0.5

What's Changed

Skip release lookup and retry download errors by @markusthoemmes in Skip release lookup and retry download errors imjasonh/setup-crane#17

New Contributors

@markusthoemmes made their first contribution in Skip release lookup and retry download errors imjasonh/setup-crane#17

Full Changelog: imjasonh/setup-crane@v0.4...v0.5

Notes

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA).

Worth running the workflows on a branch before merging to make sure everything still works.

Validation Warnings

The following issues were detected by actionlint:

build-image.yml: .github/workflows/build-image.yml:103:9: shellcheck reported issue in this script: SC2086:info:4:12: Double quote to prevent globbing and word splitting [shellcheck]
build-image.yml: |
build-image.yml: 103 | run: |

Summary by CodeRabbit

Chores
- Updated CI/CD build pipelines to use newer versions of Docker and deployment tools.
- Enhanced build process with improved caching strategies and metadata configuration.

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

coderabbitai · Mar 13, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: e3ac6a82-0e88-4dd5-8afc-0d75eca7c785

📥 Commits

Reviewing files that changed from the base of the PR and between 03c6aa2 and df19309.

📒 Files selected for processing (2)

.github/workflows/build-image.yml
.github/workflows/ci-premerge-check.yml

Walkthrough

Multiple GitHub Actions in CI/CD workflows are upgraded to newer major versions, including Docker tooling (setup-qemu, setup-buildx, login, metadata, build-push) and AWS credential configuration. The primary build workflow receives expanded caching and build argument configurations alongside the version bump for docker/build-push-action.

Changes

Cohort / File(s) Summary

Primary Build Workflow
.github/workflows/build-image.yml Upgraded docker/setup-qemu-action (v3→v4), docker/setup-buildx-action (v3→v4), docker/login-action (v3→v4), docker/metadata-action (v5→v6), docker/build-push-action (v5→v7), aws-actions/configure-aws-credentials (v4→v6), and imjasonh/setup-crane. Expanded build-push step with caching configuration, build arguments (VERSION, BUILD_DATE, COMMIT_SHA, VITE_PUBLIC_POSTHOG_KEY), and explicit push settings.

CI Premerge Workflow
.github/workflows/ci-premerge-check.yml Upgraded docker/build-push-action from v5 to v7 in the Docker image build step.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Poem

🐰 GitHub Actions dance with glee,
Version bumps from three to... see!
Caches built and arguments pass,
Docker runs with newfound class. 🚀

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Upgrade GitHub Actions to latest versions' directly and clearly summarizes the main change: upgrading multiple GitHub Actions to newer versions across workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment

📝 Coding Plan

Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Tip

CodeRabbit can scan for known vulnerabilities in your dependencies using OSV Scanner.

OSV Scanner will automatically detect and report security vulnerabilities in your project's dependencies. No additional configuration is required.

Upgrade GitHub Actions to latest versions

df19309

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

tonychang04 self-requested a review March 13, 2026 16:01

tonychang04 approved these changes Mar 13, 2026

View reviewed changes

tonychang04 merged commit 03ad6e0 into InsForge:main Mar 13, 2026
5 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Upgrade GitHub Actions to latest versions#854

Upgrade GitHub Actions to latest versions#854
tonychang04 merged 1 commit into
InsForge:mainInsForge/InsForge:mainfrom
salmanmkc:upgrade-github-actions-node24-generalsalmanmkc/InsForge:upgrade-github-actions-node24-generalCopy head branch name to clipboard

salmanmkc commented Mar 13, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Mar 13, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Search code, repositories, users, issues, pull requests...

Uh oh!

Uh oh!

Conversation

salmanmkc commented Mar 13, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Release Notes

6.0.0 (2026-02-04)

⚠ BREAKING CHANGES

Fe

5.1.1 (2025-11-24)

Miscellaneous Chores

5.1.0 (2025-10-06)

Features

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

Features

4.3.1 (2025-08-04)

Bug Fixes

What's Changed

New Contributors

Notes

Validation Warnings

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Poem

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

salmanmkc commented Mar 13, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Mar 13, 2026 •

edited

Loading