Bump the github group with 2 updates

[dependabot]

Bumps the github group with 2 updates: actions/setup-go and docker/build-push-action.

Updates actions/setup-go from 3 to 4

Release notes

Sourced from actions/setup-go's releases.

v4.0.0

In scope of release we enable cache by default. The action won’t throw an error if the cache can’t be restored or saved. The action will throw a warning message but it won’t stop a build process. The cache can be disabled by specifying cache: false.

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v4
    with:
      go-version: ‘1.19’
  - run: go run hello.go

Besides, we introduce such changes as

• Allow to use only GOCACHE for cache
• Bump json5 from 2.2.1 to 2.2.3
• Use proper version for primary key in cache
• Always add Go bin to the PATH
• Add step warning if go-version input is empty

Add support for stable and oldstable aliases

In scope of this release we introduce aliases for the go-version input. The stable alias instals the latest stable version of Go. The oldstable alias installs previous latest minor release (the stable is 1.19.x -> the oldstable is 1.18.x).

Stable

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version: 'stable'
  - run: go run hello.go

OldStable

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version: 'oldstable'
  - run: go run hello.go

Add support for go.work and pass the token input through on GHES

In scope of this release we added support for go.work file to pass it in go-version-file input.

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
</tr></table> 

... (truncated)

Commits

• 93397be Fix Install on Windows is very slow (#393)
• 27eec5b Merge pull request #396 from actions/dependabot/npm_and_yarn/semver-6.3.1
• ecfc77a Merge pull request #397 from actions/dependabot/npm_and_yarn/word-wrap-1.2.4
• 1b80a11 Bump word-wrap from 1.2.3 to 1.2.4
• b1c3434 Fix licensing for Semver 6.3.1
• 0bb97b1 Rebuild after updating Semver
• 4220624 Bump semver from 6.3.0 to 6.3.1
• db8764c Bump tough-cookie and @​azure/ms-rest-js (#392)
• 08b314a Merge pull request #383 from akv-platform/issue-368
• 4e0b6c7 Limit to Linux only
• Additional commits viewable in compare view

Updates docker/build-push-action from 3 to 4

Release notes

Sourced from docker/build-push-action's releases.

v4.0.0

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Enable provenance by default if not set by @​crazy-max in docker/build-push-action#784

Full Changelog: docker/build-push-action@v3.3.1...v4.0.0

v3.3.1

• Disable provenance by default if not set by @​crazy-max (#781)

Full Changelog: docker/build-push-action@v3.3.0...v3.3.1

v3.3.0

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Add attests, provenance and sbom inputs by @​crazy-max (#746 #759)
• Log GitHub Actions runtime token access controls by @​crazy-max (#707)
• Examples moved to docs website by @​crazy-max (#718)
• Bump minimatch from 3.0.4 to 3.1.2 (#732)
• Bump csv-parse from 5.3.0 to 5.3.3 (#729)
• Bump json5 from 2.2.0 to 2.2.3 (#749)

Full Changelog: docker/build-push-action@v3.2.0...v3.3.0

v3.2.0

• Remove workaround for setOutput by @​crazy-max (#704)
• Docs: fix Git context link and add more details about subdir support by @​crazy-max (#685)
• Docs: named context by @​baibaratsky and @​crazy-max (#665)
• Bump @​actions/core from 1.9.0 to 1.10.0 (#667 #695)
• Bump @​actions/github from 5.0.3 to 5.1.1 (#696)

Full Changelog: docker/build-push-action@v3.1.1...v3.2.0

v3.1.1

• Fix GitHub token not passed with Git context if subdir defined by @​crazy-max (#663)
• Replace deprecated fs.rmdir with fs.rm by @​bendrucker (#657)

Full Changelog: docker/build-push-action@v3.1.0...v3.1.1

v3.1.0

• no-cache-filters input by @​crazy-max (#653)
• Bump @​actions/github from 5.0.1 to 5.0.3 (#619)
• Bump @​actions/core from 1.6.0 to 1.9.0 (#620 #637)
• Bump csv-parse from 5.0.4 to 5.3.0 (#623 #650)

Full Changelog: docker/build-push-action@v3.0.0...v3.1.0

Commits

• 2eb1c19 Merge pull request #880 from crazy-max/fix-inputlist
• 27376fe update generated content
• c933000 test: build-arg with hash
• dac08d4 chore(deps): Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0
• 44ea916 Merge pull request #875 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 0167eef update generated content
• 91bf8bf chore(deps): Bump @​docker/actions-toolkit from 0.2.0 to 0.3.0
• a799b4d Merge pull request #860 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 87480bd update generated content
• f9efed5 Merge pull request #871 from dvdksn/fix/secret-example-link
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @KyleSanderson.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> dependency will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> dependency will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[KyleSanderson]

@dependabot squash and merge

[dependabot]

Dependabot was not able to determine that CI was successful.

Please try again once CI has succeeded.