chore(deps): update tonistiigi/binfmt docker tag to v10.2.3

Merge pull request 'chore(deps): update docker/setup-buildx-action action to v4.4.1' (#96 ) from renovate/docker-setup-buildx-action-4.x into master
chore(deps): update docker/setup-buildx-action action to v4.4.1
2026-09-16 13:05:08 +00:00 · 2026-09-16 10:10:22 +00:00 · 2026-09-16 10:02:33 +00:00 · 2026-09-15 12:25:49 +00:00 · 2026-09-15 12:11:41 +00:00 · 2026-09-15 12:01:09 +00:00
5 changed files with 82 additions and 22 deletions
@@ -15,9 +15,19 @@ jobs:
  build-arch-linux:
    runs-on: ubuntu-latest-amd64
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
-    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: harbor.cryptic.systems
+        username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+        password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+    - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      with:
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+    - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1

    - name: Build image
      run: |
@@ -31,9 +41,19 @@ jobs:
  build-rocky-linux-8:
    runs-on: ubuntu-latest-amd64
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
-    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: harbor.cryptic.systems
+        username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+        password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+    - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      with:
+        image: docker.io/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+    - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1

    - name: Build image
      run: |
@@ -47,9 +67,19 @@ jobs:
  build-rocky-linux-9:
    runs-on: ubuntu-latest-amd64
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
-    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: harbor.cryptic.systems
+        username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+        password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+    - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      with:
+        image: docker.io/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+    - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1

    - name: Build image
      run: |
@@ -16,7 +16,7 @@ jobs:
    runs-on:
    - ubuntu-latest
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: DavidAnson/markdownlint-cli2-action@21c1be1b93ad9ed58fa840aacc3f279cde2a72ff # v24.2.0
      with:
        globs: '**/*.md'
@@ -9,9 +9,7 @@ jobs:
  push-arch-linux:
    runs-on: ubuntu-latest-amd64
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
-    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
      with:
@@ -19,6 +17,18 @@ jobs:
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}

+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: harbor.cryptic.systems
+        username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+        password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+    - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      with:
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+    - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
    - name: Build and push image
      run: |
        TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
@@ -32,9 +42,7 @@ jobs:
  push-rocky-linux-8:
    runs-on: ubuntu-latest-amd64
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
-    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
      with:
@@ -42,6 +50,18 @@ jobs:
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}

+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: harbor.cryptic.systems
+        username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+        password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+    - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      with:
+        image: docker.io/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+    - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
    - name: Build and push image
      run: |
        TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
@@ -55,9 +75,7 @@ jobs:
  push-rocky-linux-9:
    runs-on: ubuntu-latest-amd64
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
-    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
      with:
@@ -65,6 +83,18 @@ jobs:
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}

+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: harbor.cryptic.systems
+        username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+        password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+    - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      with:
+        image: docker.io/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+    - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
    - name: Build and push image
      run: |
        TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
@@ -13,7 +13,7 @@ jobs:
    runs-on:
    - ubuntu-latest
    steps:
-    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
    - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
      with:
        username: ${{ secrets.DOCKER_IO_USERNAME }}
@@ -1,4 +1,4 @@
-FROM docker.io/library/rockylinux:9
+FROM docker.io/library/rockylinux:8

 RUN dnf update --assumeyes && \
    dnf install --assumeyes bash-completion sudo && \
Author	SHA1	Message	Date
CSRBot	d93fa2fa16	chore(deps): update tonistiigi/binfmt docker tag to v10.2.3 Lint Markdown files / markdown-lint (pull_request) Successful in 10s Details Build / build-arch-linux (pull_request) Successful in 2m58s Details Build / build-rocky-linux-8 (pull_request) Successful in 5m12s Details Build / build-rocky-linux-9 (pull_request) Successful in 3m54s Details	2026-09-16 13:05:08 +00:00
CSRBot	e4fc62524a	Merge pull request 'chore(deps): update docker/setup-buildx-action action to v4.4.1' (#96 ) from renovate/docker-setup-buildx-action-4.x into master Lint Markdown files / markdown-lint (push) Successful in 10s Details Build / build-arch-linux (push) Successful in 2m26s Details Build / build-rocky-linux-8 (push) Successful in 4m3s Details Build / build-rocky-linux-9 (push) Successful in 2m44s Details	2026-09-16 10:10:22 +00:00
CSRBot	90c6e35913	chore(deps): update docker/setup-buildx-action action to v4.4.1 Lint Markdown files / markdown-lint (pull_request) Successful in 10s Details Build / build-arch-linux (pull_request) Successful in 3m14s Details Build / build-rocky-linux-8 (pull_request) Successful in 4m23s Details Build / build-rocky-linux-9 (pull_request) Successful in 2m58s Details	2026-09-16 10:02:33 +00:00
CSRBot	08c98c6caf	Merge pull request 'chore(deps): update docker/setup-qemu-action action to v4.4.0' (#95 ) from renovate/docker-setup-qemu-action-4.x into master Build / build-arch-linux (push) Successful in 3m6s Details Build / build-rocky-linux-8 (push) Successful in 4m38s Details Lint Markdown files / markdown-lint (push) Successful in 10s Details Build / build-rocky-linux-9 (push) Successful in 7m24s Details	2026-09-15 12:25:49 +00:00
CSRBot	85c70b2c3a	Merge pull request 'chore(deps): update docker/setup-buildx-action action to v4.4.0' (#94 ) from renovate/docker-setup-buildx-action-4.x into master Build / build-arch-linux (push) Successful in 2m45s Details Build / build-rocky-linux-8 (push) Successful in 5m1s Details Build / build-rocky-linux-9 (push) Successful in 2m53s Details Lint Markdown files / markdown-lint (push) Successful in 6s Details	2026-09-15 12:11:41 +00:00
CSRBot	30a7fe1c6e	chore(deps): update docker/setup-qemu-action action to v4.4.0 Lint Markdown files / markdown-lint (pull_request) Successful in 12s Details Build / build-arch-linux (pull_request) Successful in 4m12s Details Build / build-rocky-linux-8 (pull_request) Successful in 6m18s Details Build / build-rocky-linux-9 (pull_request) Successful in 3m43s Details	2026-09-15 12:01:09 +00:00
CSRBot	18c61257b6	chore(deps): update docker/setup-buildx-action action to v4.4.0 Lint Markdown files / markdown-lint (pull_request) Successful in 12s Details Build / build-arch-linux (pull_request) Successful in 4m10s Details Build / build-rocky-linux-8 (pull_request) Successful in 6m18s Details Build / build-rocky-linux-9 (pull_request) Successful in 3m36s Details	2026-09-15 12:00:56 +00:00
volker.raschek	400f4316a4	revert(ci): test if mirror works Lint Markdown files / markdown-lint (push) Successful in 1m38s Details Build / build-arch-linux (push) Successful in 2m50s Details Build / build-rocky-linux-8 (push) Successful in 4m41s Details Build / build-rocky-linux-9 (push) Successful in 2m48s Details Release / push-arch-linux (push) Successful in 3m49s Details Release / push-rocky-linux-8 (push) Successful in 5m25s Details Release / push-rocky-linux-9 (push) Successful in 4m22s Details Release / sync-to-hub-docker-io (push) Successful in 13m45s Details This reverts commit `0b8720408d`.	2026-09-07 10:36:20 +02:00
CSRBot	49f9456fae	chore(deps): update tonistiigi/binfmt docker tag to v10.2.3 Build / build-rocky-linux-9 (pull_request) Canceled after 0s Details Lint Markdown files / markdown-lint (push) Canceled after 0s Details Build / build-arch-linux (pull_request) Canceled after 0s Details Build / build-rocky-linux-8 (pull_request) Canceled after 0s Details Lint Markdown files / markdown-lint (pull_request) Canceled after 0s Details Build / build-arch-linux (push) Successful in 3m17s Details Build / build-rocky-linux-8 (push) Successful in 5m55s Details Build / build-rocky-linux-9 (push) Successful in 3m48s Details	2026-09-06 10:00:44 +00:00
volker.raschek	0b8720408d	fix(ci): test if mirror works Lint Markdown files / markdown-lint (push) Canceled after 0s Details Build / build-arch-linux (push) Canceled after 0s Details Build / build-rocky-linux-8 (push) Canceled after 0s Details Build / build-rocky-linux-9 (push) Canceled after 0s Details	2026-09-06 12:00:04 +02:00
volker.raschek	7cfce02503	fix(ci): use extractVersion Lint Markdown files / markdown-lint (push) Successful in 12s Details Build / build-arch-linux (push) Successful in 3m42s Details Build / build-rocky-linux-8 (push) Successful in 5m30s Details Build / build-rocky-linux-9 (push) Successful in 5m36s Details	2026-09-06 11:46:06 +02:00
volker.raschek	1e16823556	fix(ci): use extractVersion Lint Markdown files / markdown-lint (push) Successful in 10s Details Build / build-arch-linux (push) Successful in 3m44s Details Build / build-rocky-linux-8 (push) Successful in 24m52s Details Build / build-rocky-linux-9 (push) Canceled after 1m11s Details	2026-09-06 11:32:14 +02:00
volker.raschek	31f5965f7c	fix(ci): use extractVersion Lint Markdown files / markdown-lint (push) Successful in 11s Details Build / build-arch-linux (push) Canceled after 0s Details Build / build-rocky-linux-8 (push) Canceled after 0s Details Build / build-rocky-linux-9 (push) Canceled after 0s Details	2026-09-06 11:30:47 +02:00
volker.raschek	f906a5a3c8	fix(ci): use extractVersion Lint Markdown files / markdown-lint (push) Successful in 15s Details Build / build-arch-linux (push) Canceled after 0s Details Build / build-rocky-linux-8 (push) Canceled after 0s Details Build / build-rocky-linux-9 (push) Canceled after 0s Details	2026-09-06 11:28:27 +02:00
volker.raschek	3e5bab8d46	fix(ci): rollback tonistiigi/binfmt to qemu-v10.2.1 Lint Markdown files / markdown-lint (push) Successful in 15s Details Build / build-arch-linux (push) Successful in 5m52s Details Build / build-rocky-linux-9 (push) Canceled after 0s Details Build / build-rocky-linux-8 (push) Canceled after 51s Details	2026-09-06 11:24:32 +02:00
volker.raschek	f103308dff	fix(ci): use stable tag of tonistiigi/binfmt Lint Markdown files / markdown-lint (push) Successful in 12s Details Build / build-arch-linux (push) Successful in 3m34s Details Build / build-rocky-linux-8 (push) Successful in 5m44s Details Build / build-rocky-linux-9 (push) Successful in 2m37s Details	2026-09-02 22:33:22 +02:00
volker.raschek	1a8bdee1ed	fix(ci): use stable tag of tonistiigi/binfmt Lint Markdown files / markdown-lint (push) Successful in 11s Details Build / build-arch-linux (push) Successful in 3m15s Details Build / build-rocky-linux-8 (push) Successful in 4m52s Details Build / build-rocky-linux-9 (push) Successful in 3m4s Details	2026-09-02 22:31:12 +02:00
volker.raschek	76f6f55b44	fix(ci): use stable tag of tonistiigi/binfmt Lint Markdown files / markdown-lint (push) Successful in 11s Details Build / build-arch-linux (push) Successful in 3m4s Details Build / build-rocky-linux-8 (push) Successful in 5m32s Details Build / build-rocky-linux-9 (push) Successful in 3m34s Details	2026-09-02 21:30:37 +02:00
volker.raschek	f609f8ce1c	chore(ci): authenticate against harbor.cryptic.systems before pulling binfmt Lint Markdown files / markdown-lint (push) Successful in 10s Details Build / build-arch-linux (push) Successful in 2m39s Details Build / build-rocky-linux-8 (push) Successful in 4m59s Details Build / build-rocky-linux-9 (push) Successful in 12m28s Details The workflows pulled tonistiigi/binfmt through an unauthenticated request, either directly from docker.io or from harbor.cryptic.systems before any credentials had been configured. Both variants are subject to upstream rate limiting and made the multi arch builds fail sporadically. The docker/login-action steps are now placed in front of docker/setup-qemu-action and docker/setup-buildx-action, and a second login against harbor.cryptic.systems was added so that the binfmt image is always pulled from the internal registry with valid credentials. Leftover setup-qemu-action and setup-buildx-action steps from the previous ordering were removed. All pinned actions were additionally bumped to their latest upstream release to remove the version drift between the repositories.	2026-09-02 20:44:09 +02:00