chore: bump docker/bake-action from 4 to 7#79
Conversation
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 4 to 7. - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](docker/bake-action@v4...v7) --- updated-dependencies: - dependency-name: docker/bake-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
|
|
||
| - name: Build with bake | ||
| uses: docker/bake-action@v4 | ||
| uses: docker/bake-action@v7 |
There was a problem hiding this comment.
Missing source input breaks dynamically generated bake file
High Severity
Bumping docker/bake-action from v4 to v7 introduces a breaking change: v6+ defaults to Git context instead of local path context. The docker-bake.hcl file is dynamically created in a preceding run step and doesn't exist in the repository. With Git context, BuildKit clones from the Git reference and ignores local file mutations, so the generated file won't be found and the build will fail. Adding source: . to the with: block is needed to restore local path context behavior.


Bumps docker/bake-action from 4 to 7.
Release notes
Sourced from docker/bake-action's releases.
... (truncated)
Commits
8249049Merge pull request #365 from crazy-max/context-input7017b89chore: update generated content8e8fbbbmerge workdir into source input471133cMerge pull request #386 from crazy-max/rm-deprecated-envsf4a2547chore: update generated content04d8281remove deprecated envs8fdd4fbMerge pull request #388 from docker/dependabot/github_actions/docker/setup-qe...549b427Merge pull request #389 from docker/dependabot/npm_and_yarn/docker/actions-to...a22e8b4chore: update generated content325dda5chore(deps): Bump@docker/actions-toolkitfrom 0.78.0 to 0.79.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)