build(deps): bump docker/setup-docker-action from 4.7.0 to 5.0.0 in /.github/workflows (#4807)

dependabot[bot] · web-flow · commit 2beb9a7f9e5a · 2026-03-23T09:50:13.000Z
Bumps [docker/setup-docker-action](https://github.com/docker/setup-docker-action) from 4.7.0 to 5.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-docker-action/releases">docker/setup-docker-action's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <ul> <li>Node 24 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Actions Runner v2.327.1</a> or later) by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-docker-action/pull/215">docker/setup-docker-action#215</a></li> <li>Switch to ESM and update config/test wiring by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-docker-action/pull/212">docker/setup-docker-action#212</a></li> <li>Bump <code>@​actions/core</code> from 2.0.1 to 3.0.0 in <a href="https://redirect.github.com/docker/setup-docker-action/pull/205">docker/setup-docker-action#205</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.71.0 to 0.77.0 in <a href="https://redirect.github.com/docker/setup-docker-action/pull/204">docker/setup-docker-action#204</a></li> <li>Bump <code>@​isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a href="https://redirect.github.com/docker/setup-docker-action/pull/208">docker/setup-docker-action#208</a></li> <li>Bump lodash from 4.17.21 to 4.17.23 in <a href="https://redirect.github.com/docker/setup-docker-action/pull/202">docker/setup-docker-action#202</a></li> <li>Bump fast-xml-parser from 5.3.3 to 5.4.1 in <a href="https://redirect.github.com/docker/setup-docker-action/pull/207">docker/setup-docker-action#207</a> <a href="https://redirect.github.com/docker/setup-docker-action/pull/209">docker/setup-docker-action#209</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-docker-action/compare/v4.7.0...v5.0.0">https://github.com/docker/setup-docker-action/compare/v4.7.0...v5.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-docker-action/commit/1a6edb0ba9ac496f6850236981f15d8f9a82254d"><code>1a6edb0</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-docker-action/issues/215">#215</a> from crazy-max/node24</li> <li><a href="https://github.com/docker/setup-docker-action/commit/1c63d0a9bc6e1a87c19bb890f02e8927c54e5ff9"><code>1c63d0a</code></a> node 24 as default runtime</li> <li><a href="https://github.com/docker/setup-docker-action/commit/36efcb97db9230800dfb7a808247e26483ad4f0c"><code>36efcb9</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-docker-action/issues/214">#214</a> from crazy-max/fix-vendoring</li> <li><a href="https://github.com/docker/setup-docker-action/commit/61e47f647ff6014102ba4dc92c972b9e32cf693a"><code>61e47f6</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-docker-action/issues/213">#213</a> from crazy-max/update-yarn</li> <li><a href="https://github.com/docker/setup-docker-action/commit/64e9804c9006d0aaf1fe4b5913e4a9e7629a61aa"><code>64e9804</code></a> dockerfile: fix vendoring</li> <li><a href="https://github.com/docker/setup-docker-action/commit/ca54cb1e9e99fda0669c1ed82a3953f01a05bafe"><code>ca54cb1</code></a> update yarn to 4.9.2</li> <li><a href="https://github.com/docker/setup-docker-action/commit/2d1c60152387c7158db7c27ab8ef0fc4412e5b0b"><code>2d1c601</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-docker-action/issues/209">#209</a> from docker/dependabot/npm_and_yarn/fast-xml-parser-5...</li> <li><a href="https://github.com/docker/setup-docker-action/commit/87e5e87f0e2a8d8469b927f3daf62acc6dbe82e8"><code>87e5e87</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-docker-action/issues/208">#208</a> from docker/dependabot/npm_and_yarn/isaacs/brace-expa...</li> <li><a href="https://github.com/docker/setup-docker-action/commit/c5620aed454515deb564cd221fb1d94f79fb6603"><code>c5620ae</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-docker-action/commit/76747bc859cd6ee6f09b6b6782fae7ba735f3b58"><code>76747bc</code></a> build(deps): bump fast-xml-parser from 5.3.4 to 5.3.6</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-docker-action/compare/e43656e248c0bd0647d3f5c195d116aacf6fcaf4...1a6edb0ba9ac496f6850236981f15d8f9a82254d">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/setup-docker-action&package-manager=github_actions&previous-version=4.7.0&new-version=5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
       # images (they become manifest lists), which breaks goreleaser's
       # docker manifest create step with "is a manifest list" error.
       - name: Set up Docker
-        uses: docker/setup-docker-action@e43656e248c0bd0647d3f5c195d116aacf6fcaf4 # v4.7.0
+        uses: docker/setup-docker-action@1a6edb0ba9ac496f6850236981f15d8f9a82254d # v5.0.0
         with:
           version: v28.0.4
 
