ci: bump the github-actions group across 2 directories with 5 updates

[dependabot]

Bumps the github-actions group with 4 updates in the / directory: docker/setup-buildx-action, docker/login-action, docker/metadata-action and docker/build-push-action.
Bumps the github-actions group with 1 update in the /publish-gh-pages directory: softprops/action-gh-release.

Updates docker/setup-buildx-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-buildx-action#572
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-buildx-action#551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/setup-buildx-action#557 docker/setup-buildx-action#580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-buildx-action#573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-buildx-action#576
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/setup-buildx-action#562
• Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-buildx-action#577
• Bump tmp from 0.2.5 to 0.2.7 in docker/setup-buildx-action#556
• Bump undici from 6.25.0 to 6.27.0 in docker/setup-buildx-action#570
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-buildx-action#569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

Commits

• bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 321c814 [dependabot skip] chore: update generated content
• b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 5c7b8ae [dependabot skip] chore: update generated content
• 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
• 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
• 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
• 2211273 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/login-action from 4.2.0 to 4.4.0

Release notes

Sourced from docker/login-action's releases.

v4.4.0

• Skip empty registry-auth secret mask by @​crazy-max in docker/login-action#1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/login-action#1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028
• Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031
• Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002
• Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020
• Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits

• af1e73f Merge pull request #1034 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• da722bd [dependabot skip] chore: update generated content
• 2916ad6 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• ca0a662 Merge pull request #1035 from crazy-max/fix-registry-auth-empty-mask
• c455755 chore: update generated content
• 4835190 skip empty registry-auth secret mask
• 992421c Merge pull request #1033 from docker/dependabot/github_actions/docker/bake-ac...
• b249b43 Merge pull request #1032 from docker/dependabot/github_actions/docker/bake-ac...
• 1b67977 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
• 9d49d6a build(deps): bump docker/bake-action/subaction/matrix
• Additional commits viewable in compare view

Updates docker/metadata-action from 6.1.0 to 6.2.0

Release notes

Sourced from docker/metadata-action's releases.

v6.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/metadata-action#689
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/metadata-action#663
• Bump @​actions/github from 9.0.0 to 9.1.1 in docker/metadata-action#666
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/metadata-action#672 docker/metadata-action#696
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/metadata-action#690
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/metadata-action#693
• Bump csv-parse from 6.2.1 to 7.0.0 in docker/metadata-action#683
• Bump js-yaml from 4.1.1 to 4.3.0 in docker/metadata-action#688
• Bump moment-timezone from 0.6.1 to 0.6.2 in docker/metadata-action#664
• Bump semver from 7.7.4 to 7.8.5 in docker/metadata-action#665 docker/metadata-action#695
• Bump sigstore from 4.1.0 to 4.1.1 in docker/metadata-action#694
• Bump tmp from 0.2.5 to 0.2.7 in docker/metadata-action#673
• Bump undici from 6.25.0 to 6.27.0 in docker/metadata-action#686
• Bump vite from 7.3.2 to 7.3.6 in docker/metadata-action#685

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0

Commits

• dc80280 Merge pull request #696 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 2b9fe83 [dependabot skip] chore: update generated content
• 8128ce3 chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 1d1c895 Merge pull request #695 from docker/dependabot/npm_and_yarn/semver-7.8.5
• 7f0c2dd Merge pull request #694 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
• 025f8c5 [dependabot skip] chore: update generated content
• e98d63c chore(deps): Bump semver from 7.8.1 to 7.8.5
• 37d9379 chore(deps): Bump sigstore from 4.1.0 to 4.1.1
• a1b8072 Merge pull request #690 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1
• e0e3381 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/build-push-action from 7.2.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/build-push-action#1567
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/build-push-action#1545 docker/build-push-action#1572
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/build-push-action#1568
• Bump js-yaml from 4.1.1 to 4.3.0 in docker/build-push-action#1566
• Bump tmp from 0.2.5 to 0.2.7 in docker/build-push-action#1547
• Bump undici from 6.24.1 to 6.27.0 in docker/build-push-action#1564
• Bump vite from 7.3.2 to 7.3.6 in docker/build-push-action#1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

Commits

• 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 154298c [dependabot skip] chore: update generated content
• cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• 9c69730 [dependabot skip] chore: update generated content
• bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
• a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
• 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
• c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
• d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
• Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.0 to 3.0.1

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.1

3.0.1

• maintenance release with updated dependencies

Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.1

• maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

• Move the action runtime and bundle target to Node 24
• Update @types/node to the Node 24 line and allow future Dependabot updates
• Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

2.6.2

What's Changed

Other Changes 🔄

• chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in softprops/action-gh-release#775
• chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @​dependabot[bot] in softprops/action-gh-release#777
• chore(deps): bump vite from 8.0.0 to 8.0.5 by @​dependabot[bot] in softprops/action-gh-release#781

2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

• fix: preserve discussion category on publish by @​chenrui333 in softprops/action-gh-release#765

2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

... (truncated)

Commits

• 718ea10 release 3.0.1
• f1a938b chore(deps): bump esbuild from 0.28.0 to 0.28.1 (#802)
• 0066ead chore(deps): bump vite from 8.0.14 to 8.0.16 (#806)
• dc643ca chore(deps): bump the npm group with 3 updates (#805)
• 85ee99b chore(deps): bump actions/checkout in the github-actions group (#804)
• 9ed3cf9 chore(deps): bump the npm group with 2 updates (#800)
• 3efcac8 chore(deps): bump the npm group with 3 updates (#798)
• 05d6b91 chore(deps): bump brace-expansion from 5.0.5 to 5.0.6 (#797)
• 403a524 chore(deps): bump @​types/node from 24.12.2 to 24.12.3 in the npm group (#796)
• 437e073 chore(deps): bump the npm group with 4 updates (#792)
• Additional commits viewable in compare view