From 568e4900f62f6320a484281aa732bf319b1143a6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 05:11:58 +0000
Subject: [PATCH] deps(ci): bump the github-actions group with 3 updates

Bumps the github-actions group with 3 updates: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/build-push-action](https://github.com/docker/build-push-action) and [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action).


Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc)

Updates `docker/setup-qemu-action` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/1f40c72289eff860ee54a304f1438e3cff362e0a...99012661954931238ded8c8b007157a8430204e1)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/devcontainer-validate.yml        |  4 ++--
 .github/workflows/docker-image-backfill.yml        |  6 +++---
 .github/workflows/docker-image-preview-publish.yml | 10 +++++-----
 .github/workflows/docker-image-security-scan.yml   |  6 +++---
 .github/workflows/docker-image-validate.yml        |  8 ++++----
 .github/workflows/test.yml                         |  4 ++--
 6 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/devcontainer-validate.yml b/.github/workflows/devcontainer-validate.yml
index befc8816..bf2a4d0d 100644
--- a/.github/workflows/devcontainer-validate.yml
+++ b/.github/workflows/devcontainer-validate.yml
@@ -50,10 +50,10 @@ jobs:
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Build devcontainer target
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         context: .
         file: ./Dockerfile
diff --git a/.github/workflows/docker-image-backfill.yml b/.github/workflows/docker-image-backfill.yml
index cc03e458..f060b2cc 100644
--- a/.github/workflows/docker-image-backfill.yml
+++ b/.github/workflows/docker-image-backfill.yml
@@ -167,10 +167,10 @@ jobs:
       run: git rev-parse HEAD > GIT_COMMIT
 
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
+      uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Set up crane
       uses: ./.github/actions/setup-crane
@@ -239,7 +239,7 @@ jobs:
 
     - name: Export attested OCI layout for bundle backfill
       if: ${{ steps.bundle.outputs.exists != 'true' }}
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         annotations: ${{ steps.image.outputs.annotations }}
         context: .
diff --git a/.github/workflows/docker-image-preview-publish.yml b/.github/workflows/docker-image-preview-publish.yml
index 373c9548..609bd423 100644
--- a/.github/workflows/docker-image-preview-publish.yml
+++ b/.github/workflows/docker-image-preview-publish.yml
@@ -265,11 +265,11 @@ jobs:
         password: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Build and push preview platform image
       id: build
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         annotations: ${{ steps.image.outputs.annotations }}
         context: .
@@ -424,7 +424,7 @@ jobs:
         ref: ${{ needs.prepare.outputs.checkout_ref }}
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Set up crane
       uses: ./.github/actions/setup-crane
@@ -564,7 +564,7 @@ jobs:
       run: git rev-parse HEAD > GIT_COMMIT
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Set up crane
       uses: ./.github/actions/setup-crane
@@ -591,7 +591,7 @@ jobs:
           --annotation-platform "${{ matrix.docker_platform }}"
 
     - name: Export attested platform OCI layout
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         annotations: ${{ steps.image.outputs.annotations }}
         context: .
diff --git a/.github/workflows/docker-image-security-scan.yml b/.github/workflows/docker-image-security-scan.yml
index c2dc251b..58c4304a 100644
--- a/.github/workflows/docker-image-security-scan.yml
+++ b/.github/workflows/docker-image-security-scan.yml
@@ -51,7 +51,7 @@ jobs:
 
     - name: Set up QEMU
       if: ${{ matrix.platform_id == 'amd64' }}
-      uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
+      uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
     - name: Sync and verify version metadata
       uses: ./.github/actions/sync-version-check
@@ -61,10 +61,10 @@ jobs:
       run: git rev-parse HEAD > GIT_COMMIT
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Build image for security scan
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         context: .
         file: ./Dockerfile
diff --git a/.github/workflows/docker-image-validate.yml b/.github/workflows/docker-image-validate.yml
index 022159f0..9525c460 100644
--- a/.github/workflows/docker-image-validate.yml
+++ b/.github/workflows/docker-image-validate.yml
@@ -122,7 +122,7 @@ jobs:
 
     - name: Set up QEMU
       if: ${{ matrix.platform_id == 'amd64' }}
-      uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
+      uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
     - name: Sync and verify version metadata
       uses: ./.github/actions/sync-version-check
@@ -132,10 +132,10 @@ jobs:
       run: git rev-parse HEAD > GIT_COMMIT
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Build validation image
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         context: .
         file: ./Dockerfile
@@ -156,7 +156,7 @@ jobs:
           --platform "${{ matrix.docker_platform }}"
 
     - name: Export attested validation OCI layout
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         context: .
         file: ./Dockerfile
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5b353338..774cb6f0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -88,10 +88,10 @@ jobs:
       run: python3 scripts/verify-archive-single-worker.py
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
     - name: Build backend test image
-      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
       with:
         context: .
         file: ./Dockerfile