Bump docker/setup-buildx-action from 3 to 4

[dependabot]

Bumps docker/setup-buildx-action from 3 to 4.

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in docker/setup-buildx-action#483
• Remove deprecated inputs/outputs by @​crazy-max in docker/setup-buildx-action#464
• Switch to ESM and update config/test wiring by @​crazy-max in docker/setup-buildx-action#481
• Bump @​actions/core from 1.11.1 to 3.0.0 in docker/setup-buildx-action#475
• Bump @​docker/actions-toolkit from 0.63.0 to 0.79.0 in docker/setup-buildx-action#482 docker/setup-buildx-action#485
• Bump js-yaml from 4.1.0 to 4.1.1 in docker/setup-buildx-action#452
• Bump lodash from 4.17.21 to 4.17.23 in docker/setup-buildx-action#472
• Bump minimatch from 3.1.2 to 3.1.5 in docker/setup-buildx-action#480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v3.12.0

• Deprecate install input by @​crazy-max in docker/setup-buildx-action#455
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/setup-buildx-action#434
• Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-buildx-action#436
• Bump form-data from 2.5.1 to 2.5.5 in docker/setup-buildx-action#432
• Bump undici from 5.28.4 to 5.29.0 in docker/setup-buildx-action#435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

• Fix keep-state not being respected by @​crazy-max in docker/setup-buildx-action#429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

• Keep BuildKit state support by @​crazy-max in docker/setup-buildx-action#427
• Remove aliases created when installing by default by @​hashhar in docker/setup-buildx-action#139
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in docker/setup-buildx-action#422 docker/setup-buildx-action#425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

• Bump @​docker/actions-toolkit from 0.54.0 to 0.56.0 in docker/setup-buildx-action#408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

• Bump @​docker/actions-toolkit from 0.48.0 to 0.54.0 in docker/setup-buildx-action#402 docker/setup-buildx-action#404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

• Make cloud prefix optional to download buildx if driver is cloud by @​crazy-max in docker/setup-buildx-action#390
• Bump @​actions/core from 1.10.1 to 1.11.1 in docker/setup-buildx-action#370
• Bump @​docker/actions-toolkit from 0.39.0 to 0.48.0 in docker/setup-buildx-action#389
• Bump cross-spawn from 7.0.3 to 7.0.6 in docker/setup-buildx-action#382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

... (truncated)

Commits

• 4d04d5d Merge pull request #485 from docker/dependabot/npm_and_yarn/docker/actions-to...
• cd74e05 chore: update generated content
• eee38ec build(deps): bump @​docker/actions-toolkit from 0.77.0 to 0.79.0
• 7a83f65 Merge pull request #484 from docker/dependabot/github_actions/docker/setup-qe...
• a5aa967 Merge pull request #464 from crazy-max/rm-deprecated
• e73d53f build(deps): bump docker/setup-qemu-action from 3 to 4
• 28a438e Merge pull request #483 from crazy-max/node24
• 034e9d3 chore: update generated content
• b4664d8 remove deprecated inputs/outputs
• a8257de node 24 as default runtime
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #485
Resolves #484
Resolves #464
Resolves #483
Resolves docker/setup-buildx-action#483
Resolves docker/setup-buildx-action#464
Resolves docker/setup-buildx-action#481
Resolves docker/setup-buildx-action#475
Resolves docker/setup-buildx-action#482
Resolves docker/setup-buildx-action#485
Resolves docker/setup-buildx-action#452
Resolves docker/setup-buildx-action#472
Resolves docker/setup-buildx-action#480
Resolves docker/setup-buildx-action#455
Resolves docker/setup-buildx-action#434
Resolves docker/setup-buildx-action#436
Resolves docker/setup-buildx-action#432
Resolves docker/setup-buildx-action#435
Resolves docker/setup-buildx-action#429
Resolves docker/setup-buildx-action#427
Resolves docker/setup-buildx-action#139
Resolves docker/setup-buildx-action#422
Resolves docker/setup-buildx-action#425
Resolves docker/setup-buildx-action#408
Resolves docker/setup-buildx-action#402
Resolves docker/setup-buildx-action#404
Resolves docker/setup-buildx-action#390
Resolves docker/setup-buildx-action#370
Resolves docker/setup-buildx-action#389
Resolves docker/setup-buildx-action#382

[github-actions]

🤖 Claude Code Review

PR Code Review

PR Summary: Bumps docker/setup-buildx-action from v3 to v4, consistent with the recent upgrades to docker/setup-qemu-action@v4 and docker/login-action@v4.

---

Code Quality

• ✅ Style guide: Single-line change follows existing conventions in the file.
• ✅ No commented-out code: None present in the diff.
• ✅ Meaningful variable names: N/A for this change.
• ✅ DRY principle: N/A for this change.
• ✅ Defects: No bugs or logic errors. The version bump aligns setup-buildx-action with the already-upgraded peer actions (setup-qemu-action@v4, login-action@v4), making the action versions consistent.
• ✅ Project memory (CLAUDE.md): No .claude/CLAUDE.md found; nothing to evaluate.

Testing

• ✅ No new functions or logic introduced; version bump only. Unit/integration tests are not applicable.

Documentation

• ✅ README: No README changes needed for a dependency version bump.
• ✅ API docs: N/A.
• ✅ Inline comments: N/A.
• ✅ CHANGELOG.md: Not checked in the diff, but for a dependency bump PR this is typically acceptable to omit or handled separately.
• ✅ Markdown formatting: N/A for this change.

Security

• ✅ No hardcoded credentials: None.
• ✅ Input validation: N/A.
• ✅ Error handling: N/A.
• ✅ No sensitive data in logs: N/A.
• ✅ License files: No .lic files or AQAAAD-prefixed strings present.

---

Verdict: APPROVED

This is a straightforward, low-risk dependency version bump that brings docker/setup-buildx-action in line with the other Docker-related actions already upgraded to v4. No issues found.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter