chore(deps): update docker/build-push-action action to v7

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	major	v6.19.2 → v7.1.0

---

Release Notes

docker/build-push-action (docker/build-push-action)

v7.1.0

Compare Source

• Git context query format support by @​crazy-max in #​1505
• Bump @​docker/actions-toolkit from 0.79.0 to 0.87.0 by @​crazy-max in #​1505
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​1500
• Bump fast-xml-parser from 5.4.2 to 5.5.7 in #​1489
• Bump flatted from 3.3.3 to 3.4.2 in #​1491
• Bump glob from 10.3.12 to 10.5.0 in #​1490
• Bump handlebars from 4.7.8 to 4.7.9 in #​1497
• Bump lodash from 4.17.23 to 4.18.1 in #​1510
• Bump picomatch from 4.0.3 to 4.0.4 in #​1496
• Bump undici from 6.23.0 to 6.24.1 in #​1486
• Bump vite from 7.3.1 to 7.3.2 in #​1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​1470
• Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @​crazy-max in #​1473
• Remove legacy export-build tool support for build summary by @​crazy-max in #​1474
• Switch to ESM and update config/test wiring by @​crazy-max in #​1466
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​1454
• Bump @​docker/actions-toolkit from 0.62.1 to 0.79.0 in #​1453 #​1472 #​1479
• Bump minimatch from 3.1.2 to 3.1.5 in #​1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Major Changes from v6.19.2 to v7.1.0:

1. Runtime Upgrade (v7.0.0 - Breaking Change)

   • Migrated from Node 20 to Node 24 as the default runtime
   • Requires GitHub Actions Runner v2.327.1 or later (released July 25, 2024)
   • GitHub-hosted runners (ubuntu-latest, ubuntu-24.04-arm) already support Node 24 as of 2026

2. Removed Deprecated Features (v7.0.0)

   • DOCKER_BUILD_NO_SUMMARY environment variable removed
   • DOCKER_BUILD_EXPORT_RETENTION_DAYS environment variable removed
   • Legacy export-build tool support for build summary discontinued

3. Code Modernization (v7.0.0)

   • Migrated from CommonJS to ESM (ECMAScript modules)
   • Updated @actions/core from 1.11.1 to 3.0.0
   • Updated @docker/actions-toolkit from 0.62.1 to 0.87.0 (v7.1.0)

4. New Features (v7.1.0)

   • Git context query format support added
   • Multiple security dependency updates (lodash, handlebars, undici, etc.)

Security Fixes:

• Multiple dependency security patches in v7.1.0 (lodash 4.17.23→4.18.1, handlebars 4.7.8→4.7.9, undici 6.23.0→6.24.1)

🎯 Impact Scope Investigation

Usage Locations Identified:

1. .github/workflows/ci.yml:84 - E2E test workflow using load: true with GitHub Actions cache
2. .github/workflows/release-please.yml:75 - Release workflow using push: true with multi-platform builds

Current Usage Analysis:

# CI Workflow (E2E Test)
- context: .
- load: true
- tags: sandbox:latest
- cache-from/cache-to: type=gha (GitHub Actions cache)

# Release Workflow (Publish)
- context: .
- push: true
- platforms: linux/amd64,linux/arm64
- cache-from/cache-to: type=gha

Impact Assessment:

• ✅ No deprecated environment variables (DOCKER_BUILD_NO_SUMMARY, DOCKER_BUILD_EXPORT_RETENTION_DAYS) found in codebase
• ✅ No API-level changes - All input parameters used (context, load, push, tags, cache-from, cache-to, platforms, labels) remain unchanged and fully compatible
• ✅ GitHub-hosted runners (ubuntu-latest, ubuntu-24.04-arm) already meet the Node 24 runtime requirement
• ✅ CI checks passing - All workflows (hadolint, lint, build, unit tests) successfully completed with v7.1.0
• ✅ No dependency conflicts - The action's internal ESM migration and dependency updates do not affect external usage

Other Dependencies:

• No impact on other GitHub Actions or Docker-related dependencies
• Complementary actions (docker/setup-buildx-action@v3.12.0) remain compatible

💡 Recommended Actions

Immediate Actions:

1. ✅ Merge this PR - Safe to merge immediately
2. ✅ Monitor CI/CD - E2E tests are currently running successfully on the PR branch, confirming compatibility

No Migration Required:

• No code changes needed
• No configuration changes needed
• No workflow modifications needed
• Current usage patterns are fully compatible with v7.1.0

Post-Merge Verification:

• Verify that Docker image builds complete successfully in both CI and release workflows
• Confirm that multi-platform builds (linux/amd64, linux/arm64) work as expected
• Monitor for any unexpected build performance changes

🔗 Reference Links

• v7.1.0 Release Notes
• v7.0.0 Release Notes
• GitHub Actions Runner v2.327.1 Release
• Deprecation of Node 20 on GitHub Actions runners
• Full Changelog v6.19.2...v7.1.0

Generated by koki-develop/claude-renovate-review