Sync upstream v7 (ESM, esbuild, vitest, yarn 4) by janakiram7755 · Pull Request #47 · WarpBuilds/build-push-action

janakiram7755 · 2026-08-02T11:13:13Z

Merges docker/build-push-action v7. Upstream replaced the build stack: CJS→ESM, ncc→esbuild (dist/index.cjs), jest→vitest, yarn classic→yarn 4, @actions/core 1.x→3.x, toolkit 0.68→0.92.

warpbuild.ts carries over unchanged apart from three lint fixes. It imported uuid without declaring it — that only resolved via yarn classic hoisting, so it is now a real dependency (same bug as bake-action #33).

Adds warp-e2e.yml on prod warp runners, which asserts the buildx driver is remote so a silent fall back to a local builder fails.

lint, test (42) and build all pass locally.

…actions/cache-5 chore(deps): Bump actions/cache from 4 to 5

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

update dev dependencies

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

ci: update-dist workflow

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

scope default git auth token to github.com

…dash-4.17.23 chore(deps): Bump lodash from 4.17.21 to 4.17.23

…-yaml-3.14.2 chore(deps): Bump js-yaml from 3.14.1 to 3.14.2

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…ace-expansion-1.1.12 chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12

Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.29.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.4...v5.29.0) --- updated-dependencies: - dependency-name: undici dependency-version: 5.29.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…dici-5.29.0 chore(deps): Bump undici from 5.28.4 to 5.29.0

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.3 to 0.2.4. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.3...v0.2.4) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…p-0.2.4 chore(deps): Bump tmp from 0.2.3 to 0.2.4

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

derive GIT_AUTH_TOKEN host from GitHub server URL

update yarn to 4.9.2

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 6.2.0 to 6.2.1. - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@e7f100c...254c19b) --- updated-dependencies: - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

…dici-6.27.0 chore(deps): Bump undici from 6.24.1 to 6.27.0

…actions/checkout-7.0.0 chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0

…actions/cache-6.1.0 chore(deps): Bump actions/cache from 5.0.5 to 6.1.0

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…aws-actions/configure-aws-credentials-6.2.1 chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1

…-yaml-4.2.0 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.91.0 to 0.92.0. - [Release notes](https://github.com/docker/actions-toolkit/releases) - [Commits](docker/actions-toolkit@v0.91.0...v0.92.0) --- updated-dependencies: - dependency-name: "@docker/actions-toolkit" dependency-version: 0.92.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…cker/actions-toolkit-0.92.0 chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0

Bumps [sigstore](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1) --- updated-dependencies: - dependency-name: sigstore dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…gstore-4.1.1 chore(deps): Bump sigstore from 4.1.0 to 4.1.1

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

…-updates chore: group codeql dependabot updates

Declares uuid, which warpbuild.ts imported but never listed, clears the eslint failures in that file, and adds a warp-e2e workflow on prod runners.

+
+jobs:
+  update-dist:
+    if: github.actor == 'dependabot[bot]' && github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name


    schedule:
      interval: "daily"
+    cooldown:
+      default-days: 2


abhijit-hota · 2026-08-04T09:17:34Z

@@ -52,5 +36,22 @@
    "lodash": "^4.18.1",
    "flatted": "^3.3.4",
    "uuid": "^11.1.1"


check if we need these anymore

crazy-max and others added 30 commits January 7, 2026 16:07

Merge pull request docker#1438 from docker/dependabot/github_actions/…

19e4966

…actions/cache-5 chore(deps): Bump actions/cache from 4 to 5

update dev dependencies

c6a539d

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

migrate eslint config to new format required since 9.0.0

f91d05a

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

update jest config since 30.0

2fec442

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

fix lint issues

607c92f

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

chore: update generated content

b035f36

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

Merge pull request docker#1443 from crazy-max/update-dev-deps

64c9b14

update dev dependencies

ci: update-dist workflow

456cabc

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

Merge pull request docker#1449 from crazy-max/update-dist-workflow

8c1e8f8

ci: update-dist workflow

scope default git auth token to github.com

d40bd56

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

chore: update generated content

9760b30

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

Merge pull request docker#1451 from crazy-max/fix-git-auth-token

f477955

scope default git auth token to github.com

Merge pull request docker#1446 from docker/dependabot/npm_and_yarn/lo…

469bed9

…dash-4.17.23 chore(deps): Bump lodash from 4.17.21 to 4.17.23

Merge pull request docker#1429 from docker/dependabot/npm_and_yarn/js…

176babe

…-yaml-3.14.2 chore(deps): Bump js-yaml from 3.14.1 to 3.14.2

chore: update generated content

d1d3988

Merge pull request docker#1396 from docker/dependabot/npm_and_yarn/br…

0149a90

…ace-expansion-1.1.12 chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12

chore: update generated content

ba15693

Merge pull request docker#1397 from docker/dependabot/npm_and_yarn/un…

a129300

…dici-5.29.0 chore(deps): Bump undici from 5.28.4 to 5.29.0

chore: update generated content

f1b3bb5

Merge pull request docker#1398 from docker/dependabot/npm_and_yarn/tm…

ee4ca42

…p-0.2.4 chore(deps): Bump tmp from 0.2.3 to 0.2.4

update yarn to 4.9.2

c4ca848

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

derive GIT_AUTH_TOKEN host from GitHub server URL

710e335

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

chore: update generated content

8f7fd7c

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

Merge pull request docker#1456 from crazy-max/auth-token-dyn-host

601a80b

derive GIT_AUTH_TOKEN host from GitHub server URL

Merge pull request docker#1452 from crazy-max/update-yarn

806c751

update yarn to 4.9.2

preserve port in GIT_AUTH_TOKEN host

cd130e4

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

github-actions Bot and others added 18 commits July 1, 2026 13:52

[dependabot skip] chore: update generated content

f53c18c

Merge pull request docker#1564 from docker/dependabot/npm_and_yarn/un…

d37484f

…dici-6.27.0 chore(deps): Bump undici from 6.24.1 to 6.27.0

Merge pull request docker#1575 from docker/dependabot/github_actions/…

c6ad2a3

…actions/checkout-7.0.0 chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0

Merge pull request docker#1573 from docker/dependabot/github_actions/…

0285a75

…actions/cache-6.1.0 chore(deps): Bump actions/cache from 5.0.5 to 6.1.0

Merge pull request docker#1574 from docker/dependabot/github_actions/…

bc3a3a5

…aws-actions/configure-aws-credentials-6.2.1 chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1

[dependabot skip] chore: update generated content

9c69730

Merge pull request docker#1566 from docker/dependabot/npm_and_yarn/js…

24f845d

…-yaml-4.2.0 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0

[dependabot skip] chore: update generated content

154298c

Merge pull request docker#1572 from docker/dependabot/npm_and_yarn/do…

53b7df9

…cker/actions-toolkit-0.92.0 chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0

Merge pull request docker#1577 from docker/dependabot/npm_and_yarn/si…

3add163

…gstore-4.1.1 chore(deps): Bump sigstore from 4.1.0 to 4.1.1

chore: group codeql dependabot updates

a9855f3

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

Merge pull request docker#1583 from crazy-max/group-codeql-dependabot…

cb941d0

…-updates chore: group codeql dependabot updates

Sync upstream v7 (ESM, esbuild, vitest, yarn 4)

9d9de4e

Declares uuid, which warpbuild.ts imported but never listed, clears the eslint failures in that file, and adds a warp-e2e workflow on prod runners.

github-actions Bot assigned janakiram7755 Aug 2, 2026

github-advanced-security Bot found potential problems Aug 2, 2026

View reviewed changes

janakiram7755 added 2 commits August 3, 2026 14:10

Trigger CI after disabling upstream ci workflow

113b08e

Drop stale ncc chunks left over from the esbuild switch

1f17c21

janakiram7755 marked this pull request as ready for review August 3, 2026 11:21

janakiram7755 requested a review from abhijit-hota August 3, 2026 11:22

Address zizmor findings in the warp e2e workflow

3f96911

abhijit-hota approved these changes Aug 4, 2026

View reviewed changes

abhijit-hota reviewed Aug 4, 2026

View reviewed changes

janakiram7755 added 2 commits August 5, 2026 16:38

Extend warp-e2e to cover build-args, labels and layer reuse

4991fa8

Export the image so the e2e can assert layer reuse

08e6ccd

janakiram7755 merged commit 5cab11a into main Aug 9, 2026
10 of 11 checks passed

Navigation Menu

Uh oh!

Sync upstream v7 (ESM, esbuild, vitest, yarn 4) - #47

Sync upstream v7 (ESM, esbuild, vitest, yarn 4)#47
janakiram7755 merged 254 commits into
mainfrom
sync/upstream-v7

janakiram7755 commented Aug 2, 2026

Uh oh!

Uh oh!

abhijit-hota Aug 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

janakiram7755 commented Aug 2, 2026

Uh oh!

Uh oh!

abhijit-hota Aug 4, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants