Skip to content

chore(ci): bump docker/build-push-action from 5 to 7#2

Closed
dependabot[bot] wants to merge 1273 commits intodevelopfrom
dependabot/github_actions/docker/build-push-action-7
Closed

chore(ci): bump docker/build-push-action from 5 to 7#2
dependabot[bot] wants to merge 1273 commits intodevelopfrom
dependabot/github_actions/docker/build-push-action-7

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 14, 2026

Bumps docker/build-push-action from 5 to 7.

Release notes

Sourced from docker/build-push-action's releases.

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v6.19.2

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

v6.18.0

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

... (truncated)

Commits
  • d08e5c3 Merge pull request #1479 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • cbd2dff chore: update generated content
  • f76f51f chore(deps): Bump @​docker/actions-toolkit from 0.78.0 to 0.79.0
  • 7d03e66 Merge pull request #1473 from crazy-max/rm-deprecated-envs
  • 98f853d chore: update generated content
  • cadccf6 remove deprecated envs
  • 03fe877 Merge pull request #1478 from docker/dependabot/github_actions/docker/setup-b...
  • 827e366 chore(deps): Bump docker/setup-buildx-action from 3 to 4
  • e25db87 Merge pull request #1474 from crazy-max/rm-export-build-tool
  • 1ac2573 Merge pull request #1470 from crazy-max/node24
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

rett added 30 commits February 26, 2026 21:10
Migrate all AI services from direct Ai::Llm::Client / ProviderClientService
calls to WorkerLlmClient and WorkerEmbeddingClient. Services now delegate
LLM completions and embeddings to the worker process via HTTP.
…Service

Delete all server/app/jobs/ai/ job classes and their specs. These jobs
now run in the worker process; the server dispatches them via
WorkerJobService HTTP API calls.
Add internal API controllers for self-healing, ralph loops, trajectory,
and worktree sessions (worker → server callbacks). Update LLM proxy
controller to remove direct completion endpoints. Add provider_config
and embedding_config routes for worker credential resolution.
Add 12 AI job classes relocated from server (conversation, worktree,
ralph, self-healing, trajectory, merge, conflict detection). Expand
LlmProxyClient with direct provider calls using CredentialResolver.
Add AI service layer for worker-side LLM operations. Update Sidekiq
config with AI-specific queues and scheduled jobs.
Update test helpers, factories, and specs to use WorkerLlmClient stubs
instead of direct LLM client mocks. Add WorkerJobService stub helpers.
Update AI service specs for proxy-based LLM calls. Add MCP client
identity service spec.
…se submodule

Minor StepPlanReview UI adjustment, add AI utility agents seed,
update maintenance page, and update enterprise submodule pointer.
Use the repository's default_branch instead of the hardcoded column
default of "main" when creating missions. Prevents branch creation
failures on repos that use master or other default branches.
Add server/config/database.yml.example with pool default of 30.
Track .env.mcp.example, .env.production.example, and
.env.staging.example by adding !.env.*.example negation to
.gitignore. Update RAILS_MAX_THREADS to 10 in all env examples.
…r handling

ExtractionService called client.provider.name on WorkerLlmClient which
has nil provider when initialized with agent_id only — use provider_name
safe accessor instead. StreamableHttpController rescue ArgumentError was
catching parameter validation errors and silently returning null via
introspection fallback — scope to only catch unknown tool errors.
…alidation

Expand .gitleaks.toml allowlist from 12 to 21 path rules and 9 to 18
content regexes to suppress false positives from CI workflows, test
fixtures, seed data, and Docker configs. Add gitleaks as step 4/4 in
validate.sh with --skip-secrets flag. Add on-demand full-history scan
script for security audits across main repo and submodules.
Navigate to mission page with openApproval state flag so the
ApprovalGateModal auto-opens instead of just showing the mission detail
…reject

When a mission is approved or rejected, dismiss all pending ai_plan_review
notifications for that mission so they don't linger in the notification bell
Sessions revoked during server restarts can now be reactivated within a
10-minute grace window. Agent archival and workspace team membership
destruction is deferred during this period. McpClientIdentityService
reuses existing active agents by OAuth application ID instead of always
creating new ones, ensuring stable identity across reconnections.
…nup endpoint

StreamableHttpController and McpTokenAuthentication now detect recently-
revoked sessions and reactivate them on reconnect. GET requests no longer
touch last_activity_at to prevent SSE daemons from masking stale CLI
sessions. Adds cleanup_auth_artifacts maintenance endpoint for daily
purge of expired sessions, orphaned agents, and stale tokens.
…ool lookup

ConciergeService now checks send_message result_preview for success
before suppressing the LLM text response, preventing silent failures.
WorkspaceTool adds ILIKE partial match fallback for when LLMs pass team
names instead of conversation UUIDs. Concierge seed uses dynamic agent
names in delegation examples instead of hardcoded values.
Streaming chunks use temporary 'streaming-{id}' IDs that never match
the final message's UUID, causing both to persist in the message list
and display phantom 'N tokens' entries. Now purges all streaming-*
messages when ai_response_complete arrives.
…nup job

SSE daemon now discovers sessions by OAuth application ID (stable across
agent recreation) with agent ID fallback. Syncs agent ID cache from
session state on reconnect. Adds powernode MCP server and statusline to
project settings. Adds AuthCleanupJob to worker for daily purge of stale
auth artifacts at 3:00 AM UTC.
statusline.sh displays MCP daemon status, context usage, and cost in
the Claude Code TUI status bar. mcp-status-tmux.sh provides a tmux
status-right integration showing daemon state and active Claude session.
Add 10 migrations for the AI autonomy subsystem: kill switch events,
agent goals, observations, intervention policies, duty cycle config,
proposals, escalations, feedback, notification priority, and account
AI suspension flag.
Add new models: AgentEscalation, AgentFeedback, AgentGoal,
AgentObservation, AgentProposal, InterventionPolicy, KillSwitchEvent.
Update Account (AI suspension), MemoryPool, RalphLoop (duty cycle),
McpSession, and Notification (priority) with autonomy associations.
Add kill switch, duty cycle, observation pipeline, work claim, session
discovery, escalation, feedback loop, intervention policy, proposal,
and agent outreach services. Add 8 sensor classes for observing agent
behavior. Add autonomy and kill switch MCP tools. Update capability
matrix, execution gate, context injector, and A2A service for
autonomy integration.
Add public API controllers for goals, proposals, escalations, feedback,
intervention policies, and kill switch. Add internal controllers for
autonomy metrics and kill switch activation. Update ralph loops
controller and routes with autonomy endpoints.
Add autonomy dashboard with panels for goals, proposals, escalations,
feedback, intervention policies, and kill switch. Update agent list/detail
views with enhanced status and autonomy controls. Update navigation,
sidebar, and routing for new autonomy section.
Fix and update backend specs for pipeline schedules, AI orchestration,
security integration, MCP session, and parallel execution. Update
frontend tests for notification bell, account switcher, agent modal,
chat channels, floating widget, monitoring, login, and sidebar.
Add jobs for escalation timeout, goal maintenance, intervention policy
tuning, observation pipeline/cleanup, and proposal expiry. Add
AiSuspensionCheckConcern to guard all AI execution jobs. Update
sidekiq.yml with autonomy job schedules.
Add autonomy permissions seed, update utility agents seed with
autonomy-aware agents, update autonomy data seed. Update maintenance
page branding.
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Mar 14, 2026

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

rett and others added 17 commits March 14, 2026 03:21
Rename Gitea repository, reconfigure submodule path from
extensions/enterprise to extensions/business, update .gitmodules
with new URL, and update supply-chain submodule pointer.
Update FeatureGateService methods (enterprise_loaded? -> business_loaded?),
rename EnterpriseAware concern to BusinessAware, update all
PowernodeEnterprise::Engine checks to PowernodeBusiness::Engine,
rename tier enum values, update Flipper flag names, factories, and specs.
Add migration to update CHECK constraints and existing data rows from
enterprise to business across accounts, templates, credit packs,
tenants, and webhook endpoints. Rename Flipper feature flags and
update seed data.
Update extension slug checks from 'enterprise' to 'business',
rename admin settings API fields, navigation extensionSlug values,
skill categories, marketplace types, and dynamic import paths.
Rename ci-enterprise.yml workflow to ci-business.yml, update all
documentation references, CLAUDE.md configuration sections,
commit skill, and knowledge base entries.
Update supply-chain submodule to include enterprise→business
factory trait and test string renames.
…ments

- Add model_suitable_for_agent_type validation warning when lightweight
  models are used for reasoning-intensive agent types (monitor, data_analyst)
- Fix model_matches_provider to properly handle Grok provider
- Add ralph iteration/task fields for repeating tasks and scheduling
…ents

Update ralph task executor for repeating tasks, improve trading context
resolution, expand portfolio tool actions, and execution service refinements.
Add worker data and tool dispatch channels for real-time worker
communication. Update conversation AI generation and ralph loops controller.
Remove AI and supply chain job classes from server — jobs belong in
the worker service. Includes removal of corresponding specs.
Add new gems, update schema for ralph loop scheduling, remove legacy
recurring job entries, and update test helpers and task executor spec.
…xy improvements

- Add balance sync, confirmation poller, and on-chain transfer jobs
- Fix TradingRiskMonitorJob timeout handling with per-call Timeout wrapping
- Add ActionCable client service for real-time worker communication
- Improve LLM proxy concern and training session job execution
- Add chain signer service for on-chain transactions
…loop schedule updates

- Fix ChatWindowTabs test mock with missing required fields
- Increase floating chat default size from 420x520 to 480x640
- Update ralph loop schedule config and status components
Includes overseer settings panel, activity feed, agent roster,
compounding display fix, and trading infrastructure improvements.
Auto-generated updates to learnings, knowledge, skills, and graph docs.
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v5...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/docker/build-push-action-7 branch from 742b1c3 to 9a2abfb Compare March 15, 2026 07:08
@rett rett closed this Apr 19, 2026
@rett rett deleted the dependabot/github_actions/docker/build-push-action-7 branch April 19, 2026 19:43
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 19, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant