fix(deps): update docker/setup-buildx-action action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-buildx-action	action	major	v3 → v4

---

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v4.4.1

Compare Source

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in #​624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Compare Source

• Use official Buildx releases for cloud driver by @​crazy-max in #​606
• Pull BuildKit image before builder creation by @​crazy-max in #​609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in #​620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in #​610 #​618 #​619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​614
• Bump js-yaml from 5.3.0 to 5.4.2 in #​608 #​617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.92.0 to 0.95.0 in #​595
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​600
• Bump js-yaml from 5.2.0 to 5.3.0 in #​585
• Bump postcss from 8.5.10 to 8.5.25 in #​598
• Bump undici from 6.27.0 to 6.28.0 in #​601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​572
• Bump @​actions/core from 3.0.0 to 3.0.1 in #​551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​557 #​580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​576
• Bump js-yaml from 4.1.1 to 5.2.0 in #​562
• Bump sigstore from 4.1.0 to 4.1.1 in #​577
• Bump tmp from 0.2.5 to 0.2.7 in #​556
• Bump undici from 6.25.0 to 6.27.0 in #​570
• Bump vite from 7.3.2 to 7.3.6 in #​569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
• Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
• Bump flatted from 3.3.3 to 3.4.2 in #​499
• Bump glob from 10.3.12 to 13.0.6 in #​495
• Bump handlebars from 4.7.8 to 4.7.9 in #​504
• Bump lodash from 4.17.23 to 4.18.1 in #​523
• Bump picomatch from 4.0.3 to 4.0.4 in #​503
• Bump postcss from 8.5.6 to 8.5.10 in #​537
• Bump tar from 6.2.1 to 7.5.15 in #​545
• Bump undici from 6.23.0 to 6.25.0 in #​492
• Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​483
• Remove deprecated inputs/outputs by @​crazy-max in #​464
• Switch to ESM and update config/test wiring by @​crazy-max in #​481
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​475
• Bump @​docker/actions-toolkit from 0.63.0 to 0.79.0 in #​482 #​485
• Bump js-yaml from 4.1.0 to 4.1.1 in #​452
• Bump lodash from 4.17.21 to 4.17.23 in #​472
• Bump minimatch from 3.1.2 to 3.1.5 in #​480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v3.12.0

Compare Source

• Deprecate install input by @​crazy-max in #​455
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in #​434
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​436
• Bump form-data from 2.5.1 to 2.5.5 in #​432
• Bump undici from 5.28.4 to 5.29.0 in #​435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

Compare Source

• Fix keep-state not being respected by @​crazy-max in #​429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Compare Source

• Keep BuildKit state support by @​crazy-max in #​427
• Remove aliases created when installing by default by @​hashhar in #​139
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in #​422 #​425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Compare Source

• Bump @​docker/actions-toolkit from 0.54.0 to 0.56.0 in #​408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.48.0 to 0.54.0 in #​402 #​404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Compare Source

• Make cloud prefix optional to download buildx if driver is cloud by @​crazy-max in #​390
• Bump @​actions/core from 1.10.1 to 1.11.1 in #​370
• Bump @​docker/actions-toolkit from 0.39.0 to 0.48.0 in #​389
• Bump cross-spawn from 7.0.3 to 7.0.6 in #​382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

v3.7.1

Compare Source

• Switch back to uuid package by @​crazy-max in #​369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Compare Source

• Always set buildkitd-flags if opt-in by @​crazy-max in #​363
• Remove uuid package and switch to crypto by @​crazy-max in #​366
• Bump @​docker/actions-toolkit from 0.35.0 to 0.39.0 in #​362
• Bump path-to-regexp from 6.2.2 to 6.3.0 in #​354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

v3.6.1

Compare Source

• Check for malformed docker context by @​crazy-max in #​347

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

v3.6.0

Compare Source

• Create temp docker context if default one has TLS data loaded before creating a container builder by @​crazy-max in #​341

Full Changelog: docker/setup-buildx-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

• Bump @​docker/actions-toolkit from 0.31.0 to 0.35.0 in #​340 #​344 #​345

Full Changelog: docker/setup-buildx-action@v3.4.0...v3.5.0

v3.4.0

Compare Source

• Throw error message instead of exit code by @​crazy-max in #​315
• Bump @​docker/actions-toolkit from 0.20.0 to 0.31.0 in #​321 #​338
• Bump braces from 3.0.2 to 3.0.3 in #​329
• Bump undici from 5.28.3 to 5.28.4 in #​312
• Bump uuid from 9.0.1 to 10.0.0 in #​326

Full Changelog: docker/setup-buildx-action@v3.3.0...v3.4.0

v3.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.19.0 to 0.20.0 by @​crazy-max in #​307

Full Changelog: docker/setup-buildx-action@v3.2.0...v3.3.0

v3.2.0

Compare Source

• Rename and align config inputs by @​crazy-max in #​303
  • config to buildkitd-config
  • config-inline to buildkitd-config-inline
• Bump @​docker/actions-toolkit from 0.17.0 to 0.19.0 in #​302 #​306

[!NOTE]
config and config-inline input names are deprecated and will be removed in next major release.

Full Changelog: docker/setup-buildx-action@v3.1.0...v3.2.0

v3.1.0

Compare Source

• cache-binary input to enable/disable caching binary to GHA cache backend by @​crazy-max in #​300
• build(deps): bump @​babel/traverse from 7.17.3 to 7.23.2 in #​282
• build(deps): bump @​docker/actions-toolkit from 0.12.0 to 0.17.0 in #​281 #​284 #​299
• build(deps): bump uuid from 9.0.0 to 9.0.1 in #​271
• build(deps): bump undici from 5.26.3 to 5.28.3 in #​297

Full Changelog: docker/setup-buildx-action@v3.0.0...v3.1.0

---

Configuration

📅 Schedule: (in timezone Asia/Ho_Chi_Minh)

• Branch creation
  • "before 5am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/docker/setup-buildx-action	f87e5991a6d7451dcb8d9637bfbc97413f497069	🟢 8.6	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Security-Policy 🟢 9 security policy file detected Maintained 🟢 10 30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Pinned-Dependencies 🟢 7 dependency not pinned by hash detected -- score normalized to 7 Packaging 🟢 10 packaging workflow detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/cd.yml