Upgrade GitHub Actions to latest versions

[salmanmkc]

Bumps GitHub Actions to their latest versions for bug fixes and security patches.

Changes

Action	Old Version(s)	New Version	Compare	Files
actions/upload-pages-artifact	v3	v4	Diff	deploy-docs.yml
astral-sh/setup-uv	v4, v5	v7	Diff	deploy-docs.yml, release.yml, test.yml
docker/build-push-action	v6	v7	Diff	release.yml, test.yml
docker/login-action	v3	v4	Diff	release.yml
docker/metadata-action	v5	v6	Diff	release.yml
docker/setup-buildx-action	v3	v4	Diff	release.yml, test.yml
docker/setup-qemu-action	v3	v4	Diff	release.yml

Release Notes

Release notes for astral-sh/setup-uv

v7.5.0

No more rate-limits

This release addresses a long-standing source of timeouts and rate-limit failures in setup-uv.

Previously, the action resolved version identifiers like 0.5.x by iterating over available uv releases via the GitHub API to find the best match. In contrast, latest and exact versions such as 0.5.0 skipped version resolution entirely and downloaded uv directly.

The manifest-file input was an earlier attempt to improve this. It allows providing an url to a file that li

...truncated

v7.4.0

Changes

Thank you @luhenry for adding support for riscv64 arch

🚀 Enhancements

• Add riscv64 architecture support to platform detection @luhenry (#791)

🧰 Maintenance

• Delete .github/workflows/dependabot-build.yml @eifinger (#789)
• Harden Dependabot build workflow @eifinger (#788)
• Fix: check PR author instead of event sender for Dependabot detection @eifinger-bot (#787)
• chore: update known checksums for 0.10.9 @[github-actions[bot]](https://github.com/apps/github-a

...truncated

v7.3.1

Changes

This release adds support for running in containers like debian:testing or debian:unstable

🐛 Bug fixes

• fix: fall back to VERSION_CODENAME when VERSION_ID is not available @eifinger-bot (#774)

🧰 Maintenance

• chore: update known checksums for 0.10.6 @github-actions[bot] (#771)
• chore: update known checksums for 0.10.5 @github-actions[bot] (#770)
• chore: update known checks

...truncated

v7.3.0

Changes

This release contains a few bug fixes and a new feature for the activate-environment functionality.

🐛 Bug fixes

• fix: warn instead of error when no python to cache @eifinger (#762)
• fix: use --clear to create venv @eifinger (#761)

🚀 Enhancements

• feat: add venv-path input for activate-environment @eifinger (#746)

🧰 Maintenance

• chore: update known checksums for 0.10.0 @github-actions[bot] (#759)
• refactor:

...truncated

v7.2.1

Changes

🧰 Maintenance

• chore: update known checksums for 0.9.28 @github-actions[bot] (#744)
• chore: update known checksums for 0.9.27 @github-actions[bot] (#742)
• chore: update known checksums for 0.9.26 @github-actions[bot] (#734)
• chore: update known checksums for 0.9.25 @github-actions[bot] (#733)
• chore: u

...truncated

Release notes for actions/upload-pages-artifact

v4.0.0

What's Changed

• Potentially breaking change: hidden files (specifically dotfiles) will not be included in the artifact by @tsusdere in ignore all hidden files when creating zip actions/upload-pages-artifact#102
  If you need to include dotfiles in your artifact: instead of using this action, create your own artifact according to these requirements https://github.com/actions/upload-pages-artifact?tab=readme-ov-file#artifact-validation
• Pin actions/upload-artifact to SHA by @heavymachinery in https://git

...truncated

v3.0.1

Changelog

• Group tar's output to prevent it from messing up action logs @SilverRainZ (MCP HTTP endpoint returns 404 - FastMCP http_app path mismatch #94)
• Update README.md @uiolee (feat: Add local LLM improvements for reasoning models and Docker startup #88)
• Bump the non-breaking-changes group with 1 update @dependabot (API: Cannot delete documents with slashes in 'document_id' (404 Not Found) #92)
• Update Dependabot config to group non-breaking changes @JamesMGreene (feat: Add user-provided entities support to retain endpoint #91)
• Bump actions/checkout from 3 to 4 @dependabot (Use local LLM or even other clouds instead of OpenAI #76)

See details of all code changes since previous release.

Release notes for docker/setup-qemu-action

v4.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/setup-qemu-action#245
• Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/setup-qemu-action#241
• Bump @actions/core from 1.11.1 to 3.0.0 in build(deps): bump @actions/core from 1.11.1 to 3.0.0 docker/setup-qemu-action#244
• Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in https://github.com/docker

...truncated

v3.7.0

• Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in build(deps): bump @docker/actions-toolkit from 0.56.0 to 0.62.1 docker/setup-qemu-action#217 build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.67.0 docker/setup-qemu-action#230
• Bump brace-expansion from 1.1.11 to 1.1.12 in build(deps): bump brace-expansion from 1.1.11 to 1.1.12 docker/setup-qemu-action#220
• Bump form-data from 2.5.1 to 2.5.5 in build(deps): bump form-data from 2.5.1 to 2.5.5 docker/setup-qemu-action#218
• Bump tmp from 0.2.3 to 0.2.4 in build(deps): bump tmp from 0.2.3 to 0.2.4 docker/setup-qemu-action#221
• Bump undici from 5.28.4 to 5.29.0 in https://github

...truncated

v3.6.0

• Display binfmt version by @crazy-max in display binfmt version docker/setup-qemu-action#202

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

v3.5.0

• Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in build(deps): bump @docker/actions-toolkit from 0.54.0 to 0.56.0 docker/setup-qemu-action#205

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

v3.4.0

• Bump @docker/actions-toolkit from 0.49.0 to 0.54.0 in build(deps): bump @docker/actions-toolkit from 0.49.0 to 0.53.0 docker/setup-qemu-action#193 build(deps): bump @docker/actions-toolkit from 0.53.0 to 0.54.0 docker/setup-qemu-action#197

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

Release notes for docker/setup-buildx-action

v4.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/setup-buildx-action#483
• Remove deprecated inputs/outputs by @crazy-max in remove deprecated inputs/outputs docker/setup-buildx-action#464
• Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/setup-buildx-action#481
• Bump @actions/core from 1.11.1 to 3.0.0 in https://github.com/dock

...truncated

v3.12.0

• Deprecate install input by @crazy-max in deprecate install input docker/setup-buildx-action#455
• Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.63.0 docker/setup-buildx-action#434
• Bump brace-expansion from 1.1.11 to 1.1.12 in build(deps): bump brace-expansion from 1.1.11 to 1.1.12 docker/setup-buildx-action#436
• Bump form-data from 2.5.1 to 2.5.5 in build(deps): bump form-data from 2.5.1 to 2.5.5 docker/setup-buildx-action#432
• Bump undici from 5.28.4 to 5.29.0 in https://github.com/docker/setup-buildx-action/pu

...truncated

v3.11.1

• Fix keep-state not being respected by @crazy-max in fix keep-state not being respected docker/setup-buildx-action#429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

• Keep BuildKit state support by @crazy-max in Keep BuildKit state support docker/setup-buildx-action#427
• Remove aliases created when installing by default by @hashhar in Remove aliases created by buildx when installing by default docker/setup-buildx-action#139
• Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in build(deps): bump @docker/actions-toolkit from 0.56.0 to 0.61.0 docker/setup-buildx-action#422 build(deps): bump @docker/actions-toolkit from 0.61.0 to 0.62.1 docker/setup-buildx-action#425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

• Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in build(deps): bump @docker/actions-toolkit from 0.54.0 to 0.56.0 docker/setup-buildx-action#408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

Release notes for docker/login-action

v4.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/login-action#929
• Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/login-action#927
• Bump @actions/core from 1.11.1 to 3.0.0 in build(deps): bump @actions/core from 1.11.1 to 3.0.0 docker/login-action#919
• Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in https://github.com/docker/login-action/pu

...truncated

v3.7.0

• Add scope input to set scopes for the authentication token by @crazy-max in Add scope input to set scopes for the authentication token docker/login-action#912
• Add support for AWS European Sovereign Cloud ECR by @dphi in feat: add support for AWS European Sovereign Cloud ECR docker/login-action#914
• Ensure passwords are redacted with registry-auth input by @crazy-max in ensure passwords are redacted with registry-auth docker/login-action#911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in build(deps): bump lodash from 4.17.21 to 4.17.23 docker/login-action#915

Full Changelog: https://g

...truncated

v3.6.0

• Add registry-auth input for raw authentication to registries by @crazy-max in raw authentication to registries docker/login-action#887
• Bump @aws-sdk/client-ecr to 3.890.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#882 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#890
• Bump @aws-sdk/client-ecr-public to 3.890.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#882 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#890
• Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in https://github.com/docker/logi

...truncated

v3.5.0

• Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in Support new <registry-id>.dkr-ecr.<aws-region>.on.aws endpoint docker/login-action#874 support dual-stack for aws public ecr docker/login-action#876
• Bump @aws-sdk/client-ecr to 3.859.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#860 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#878
• Bump @aws-sdk/client-ecr-public to 3.859.0 in build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#860 build(deps): bump the aws-sdk-dependencies group with 2 updates docker/login-action#878
• Bump @docker/actions-toolkit from 0.57.0 to 0.6

...truncated

v3.4.0

• Bump @actions/core from 1.10.1 to 1.11.1 in build(deps): bump @actions/core from 1.10.1 to 1.11.1 docker/login-action#791
• Bump @aws-sdk/client-ecr to 3.766.0 in build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#789 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#856
• Bump @aws-sdk/client-ecr-public to 3.758.0 in build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#789 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates docker/login-action#856
• Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in build(deps): bump @docker/actions-toolkit from 0.35.0 to 0.40.0 docker/login-action#801 https://github.com

...truncated

Release notes for docker/metadata-action

v6.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/metadata-action#605
• List inputs now preserve # inside values while still supporting full-line # comments by @crazy-max in preserve comments in list input values with commentNoInfix docker/metadata-action#607
• Switch to ESM and update config/test wiring by @crazy-max in switch to ESM and update config/test wiring docker/metadata-action#602
• Bump lodash from 4.17.

...truncated

v5.10.0

• Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in chore(deps): Bump @docker/actions-toolkit from 0.66.0 to 0.67.0 docker/metadata-action#559 chore(deps): Bump @docker/actions-toolkit from 0.67.0 to 0.68.0 docker/metadata-action#569
• Bump js-yaml from 3.14.1 to 3.14.2 in chore(deps): Bump js-yaml from 3.14.1 to 3.14.2 docker/metadata-action#564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

• Add tag-names output to return tag names without image base name by @crazy-max in tag-names output to return tag names without image base name docker/metadata-action#553
• Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in chore(deps): Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 docker/metadata-action#539
• Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in chore(deps): Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 docker/metadata-action#555
• Bump brace-expansion from 1.1.11 to 1.1.12 in chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12 docker/metadata-action#540
• Bump csv-parse from 5.6.0 to 6.1.0 in https:/

...truncated

v5.8.0

• New is_not_default_branch global expression by @crazy-max in is_not_default_branch global expression docker/metadata-action#535
• Allow to match part of the git tag or value for semver/pep440 types by @crazy-max in allow to match part of the git tag or value for semver type docker/metadata-action#536 allow to match part of the git tag or value for pep440 type docker/metadata-action#537
• Bump @actions/github from 6.0.0 to 6.0.1 in chore(deps): Bump @actions/github from 6.0.0 to 6.0.1 docker/metadata-action#523
• Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/metadata-acti

...truncated

v5.7.0

• Global expressions support for labels and annotations by @crazy-max in global expressions support for labels and annotations docker/metadata-action#489
• Support disabling outputs as environment variables by @omus in Support disabling DOCKER_METADATA_OUTPUT_* environment variables docker/metadata-action#497
• Bump @docker/actions-toolkit from 0.44.0 to 0.56.0 in chore(deps): Bump @docker/actions-toolkit from 0.44.0 to 0.55.0 docker/metadata-action#507 chore(deps): Bump @docker/actions-toolkit from 0.55.0 to 0.56.0 docker/metadata-action#509
• Bump csv-parse from 5.5.6 to 5.6.0 in chore(deps): Bump csv-parse from 5.5.6 to 5.6.0 docker/metadata-action#482
• Bump

...truncated

Release notes for docker/build-push-action

v7.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in node 24 as default runtime docker/build-push-action#1470
• Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in remove deprecated envs docker/build-push-action#1473
• Remove legacy export-build tool support for build summary by @crazy-max in remove legacy export-build tool support docker/build-push-action#1474

...truncated

v6.19.2

• Preserve port in GIT_AUTH_TOKEN host by @crazy-max in preserve port in GIT_AUTH_TOKEN host docker/build-push-action#1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

• Derive GIT_AUTH_TOKEN host from GitHub server URL by @crazy-max in derive GIT_AUTH_TOKEN host from GitHub server URL docker/build-push-action#1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

• Scope default git auth token to github.com by @crazy-max in scope default git auth token to github.com docker/build-push-action#1451
• Bump brace-expansion from 1.1.11 to 1.1.12 in chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12 docker/build-push-action#1396
• Bump form-data from 2.5.1 to 2.5.5 in chore(deps): Bump form-data from 2.5.1 to 2.5.5 docker/build-push-action#1391
• Bump js-yaml from 3.14.1 to 3.14.2 in chore(deps): Bump js-yaml from 3.14.1 to 3.14.2 docker/build-push-action#1429
• Bump lodash from 4.17.21 to 4.17.23 in https://github.com/docker/build-push-action/pul

...truncated

v6.18.0

• Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in chore(deps): Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 docker/build-push-action#1381

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

Notes

Worth running the workflows on a branch before merging to make sure everything still works.

Validation Warnings

The following issues were detected by actionlint:

• release.yml: .github/workflows/release.yml:483:7: shellcheck reported issue in this script: SC2086:info:1:45: Double quote to prevent globbing and word splitting [shellcheck]
• release.yml: |
• release.yml: 483 | run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
• test.yml: .github/workflows/test.yml:208:7: shellcheck reported issue in this script: SC2086:info:3:61: Double quote to prevent globbing and word splitting [shellcheck]
• test.yml: |
• test.yml: 208 | run: |

[nicoloboschi]

LGTM