# \[Chapel Merge\] Bump docker/build-push-action from 7.3.0 to 7.4.0 **URL:** \ **Category:** Commits\ **Created:** [October 1, 2026, 10:51pm UTC](https://chapel.discourse.group/t/chapel-merge-bump-docker-build-push-action-from-7-3-0-to-7-4-0/52015 "2026-10-01T22:51:30Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![chapelhpcBot](https://avatars.discourse-cdn.com/v4/letter/c/7feea3/32.png) [@chapelhpcBot](https://chapel.discourse.group/u/chapelhpcBot)\ **Post date:** [October 1, 2026, 10:51pm UTC](https://chapel.discourse.group/t/chapel-merge-bump-docker-build-push-action-from-7-3-0-to-7-4-0/52015/1 "2026-10-01T22:51:30Z")
Branch: refs/heads/main Revision: 391f99cfc1d1c78f823244042892f402df3a8009 Author: chapel-lang Link: [Bump docker/build-push-action from 7.3.0 to 7.4.0 by dependabot[bot] · Pull Request #29478 · chapel-lang/chapel · GitHub](https://github.com/chapel-lang/chapel/pull/29478) Log Message: Bump docker/build-push-action from 7.3.0 to 7.4.0 (#29478) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.3.0 to 7.4.0. > **Release notes** > > _Sourced from [docker/build-push-action's releases](https://github.com/docker/build-push-action/releases)._ > > > ## v7.4.0 > > > > - Use the shared error helper for Buildx commands by [`@​crazy-max`](https://github.com/crazy-max) in [docker/build-push-action#1620](https://redirect.github.com/docker/build-push-action/pull/1620) > > - Prevent workflow command injection in metadata logs by [`@​crazy-max`](https://github.com/crazy-max) in [docker/build-push-action#1617](https://redirect.github.com/docker/build-push-action/pull/1617) > > - Bump `@​docker/actions-toolkit` from 0.92.0 to 0.100.0 in [docker/build-push-action#1614](https://redirect.github.com/docker/build-push-action/pull/1614)[docker/build-push-action#1618](https://redirect.github.com/docker/build-push-action/pull/1618)[docker/build-push-action#1621](https://redirect.github.com/docker/build-push-action/pull/1621) > > - Bump `@​humanfs/node` from 0.16.7 to 0.16.8 in [docker/build-push-action#1609](https://redirect.github.com/docker/build-push-action/pull/1609) > > - Bump brace-expansion from 1.1.13 to 1.1.18 in [docker/build-push-action#1592](https://redirect.github.com/docker/build-push-action/pull/1592) > > - Bump csv-parse from 7.0.0 to 7.0.2 in [docker/build-push-action#1613](https://redirect.github.com/docker/build-push-action/pull/1613) > > - Bump js-yaml from 4.3.0 to 4.3.2 in [docker/build-push-action#1605](https://redirect.github.com/docker/build-push-action/pull/1605)[docker/build-push-action#1615](https://redirect.github.com/docker/build-push-action/pull/1615) > > - Bump nanoid from 3.3.16 to 3.3.18 in [docker/build-push-action#1611](https://redirect.github.com/docker/build-push-action/pull/1611) > > - Bump postcss from 8.5.10 to 8.5.25 in [docker/build-push-action#1590](https://redirect.github.com/docker/build-push-action/pull/1590) > > - Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [docker/build-push-action#1606](https://redirect.github.com/docker/build-push-action/pull/1606) > > - Bump sigstore from 4.1.0 to 4.1.1 in [docker/build-push-action#1577](https://redirect.github.com/docker/build-push-action/pull/1577) > > - Bump undici from 6.27.0 to 6.28.0 in [docker/build-push-action#1594](https://redirect.github.com/docker/build-push-action/pull/1594) > > > > **Full Changelog** : [https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0](https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0) > **Commits** > > - [`c3c9e26`](https://github.com/docker/build-push-action/commit/c3c9e263c25d99ce0380d002d59b67737d91b0dc) Merge pull request [#1621](https://redirect.github.com/docker/build-push-action/issues/1621) from docker/dependabot/npm\_and\_yarn/docker/actions-t... > - [`459b674`](https://github.com/docker/build-push-action/commit/459b6741834dcd35f946352017e7675bd2089d42) [dependabot skip] chore: update generated content > - [`4dedcb2`](https://github.com/docker/build-push-action/commit/4dedcb23c91d79c1629bf53ec2c3bcfffef5b34e) chore(deps): Bump `@​docker/actions-toolkit` from 0.99.0 to 0.100.0 > - [`379bf63`](https://github.com/docker/build-push-action/commit/379bf63a979bd70751945601fa04c50674509952) Merge pull request [#1620](https://redirect.github.com/docker/build-push-action/issues/1620) from crazy-max/buildx-error-message > - [`9877975`](https://github.com/docker/build-push-action/commit/9877975c9e0b0b661592ff61049069507f9bc2f6) chore: update generated content > - [`7ed0556`](https://github.com/docker/build-push-action/commit/7ed0556ffafb8eb312463411ef0a84a1dfe24d94) use the shared Buildx error summary helper > - [`91670ba`](https://github.com/docker/build-push-action/commit/91670ba5a4df99a24efff8637a78c83fd1b0f6b1) Merge pull request [#1618](https://redirect.github.com/docker/build-push-action/issues/1618) from docker/dependabot/npm\_and\_yarn/docker/actions-t... > - [`80dbc86`](https://github.com/docker/build-push-action/commit/80dbc8614a5c0ce4356740f69179cf829ecdc79a) [dependabot skip] chore: update generated content > - [`50cac3a`](https://github.com/docker/build-push-action/commit/50cac3a3b6f55e6015d6483d1dd72a3ecb90d20d) chore(deps): Bump `@​docker/actions-toolkit` from 0.98.0 to 0.99.0 > - [`03b4d6c`](https://github.com/docker/build-push-action/commit/03b4d6cac0163b44733e1fa60adfd6da560ee4d1) Merge pull request [#1617](https://redirect.github.com/docker/build-push-action/issues/1617) from crazy-max/fix-metadata-workflow-commands > - Additional commits viewable in [compare view](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=7.3.0&new-version=7.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.