Skip to content

chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.2.0 - #2

Merged
mdheller merged 1 commit into
mainfrom
dependabot/github_actions/docker/setup-buildx-action-4.2.0
Jul 5, 2026
Merged

chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.2.0#2
mdheller merged 1 commit into
mainfrom
dependabot/github_actions/docker/setup-buildx-action-4.2.0

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 5, 2026

Copy link
Copy Markdown

Bumps docker/setup-buildx-action from 3.12.0 to 4.2.0.

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

v4.0.0

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

Commits
  • bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 321c814 [dependabot skip] chore: update generated content
  • b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • 5c7b8ae [dependabot skip] chore: update generated content
  • 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
  • 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
  • 2211273 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@8d2750c...bb05f3f)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 5, 2026
@mdheller
mdheller merged commit 25f42a7 into mainJul 5, 2026
@mdheller
mdheller deleted the dependabot/github_actions/docker/setup-buildx-action-4.2.0 branch July 5, 2026 20:57
mdheller added a commit that referenced this pull request Aug 4, 2026
…mount (#23)
Integrates the demonstrated dev-environment patterns and proves real k8s dispatch end to end.
tools/devspace.py:
- devspace_manifests: Nocalhost-style isolated DevSpace — Namespace + ResourceQuota +
default-deny NetworkPolicy + the agent-machine's persistent INCEPTION MOUNT (a TopoLVM
PVC at /var/lib/sourceos/inception). Tenancy-labelled (tenant/user/space), grant-labelled.
- sandbox_manifests: Signadot / Nocalhost-MeshSpace sandbox — a fork Deployment + Istio
VirtualService routing `x-sandbox-routing-key` to the fork, else the baseline (share the
stack, don't duplicate it).
- agent_machine_statefulset: the agent-machine as a STATEFUL app — StatefulSet + headless
Service + per-replica TopoLVM inception mount via volumeClaimTemplates. (We weren't using
StatefulSets before; Jobs/Deployments can't give stable identity + per-replica storage.)
- DevSpacePlane: the User->Space->App tenancy model.
Real-cluster proof (kind on podman): the governed spine dispatched a real Job that printed
"hello-from-real-mesh"; the inception mount persisted across pods (wrote in pod #1, read the
same bytes in pod #2). Two real bugs the cluster caught + fixed in executor.py:
- image "": get(k, default) returns "" for a present-but-empty key -> Job invalid. Use or-default.
- a DevSpace ResourceQuota requires pod resource limits -> always set requests+limits defaults.
Also: K8sAdapter mounts the inception PVC when workload.inception_pvc is set; sourceosctl gains
--inception.
deploy/topolvm/ (StorageClass topolvm-provisioner + install runbook — production storage).
docs/PATTERN_INTEGRATION.md: every demonstrated pattern (Nocalhost, Signadot, ShellHub, Edge/Fog
K3s twin, 7-layer PaaS, IBM PE/Eclipse) mapped to our capability, honestly graded.
Tests: +6 devspace +1 executor inception = 105 tools tests green. Wired validate + CapD links.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filegithub_actionsPull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@mdheller