chore(deps): bump redhat-actions/buildah-build from 3.0.0 to 3.1.0

[dependabot]

Bumps redhat-actions/buildah-build from 3.0.0 to 3.1.0.

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.1.0

New Features

• Sequential multi-arch builds: Add sequential input to run multi-arch builds one at a time instead of in parallel. Parallel remains the default, but sequential mode avoids qemu-related failures with FROM --platform=$(BUILDPLATFORM) stages. #191
• Disable fuse-overlayfs override: Add disable-fuse-overlayfs input to prevent the action from overriding the storage mount program. The action now auto-detects kernel support for rootless native overlayfs (5.11+) and skips the fuse-overlayfs override when the kernel is new enough. This fixes silent data corruption and performance regressions on ubuntu-24.04 runners. #193

Bug Fixes

• Fix digest output for non-x86 multi-arch builds: The digest output failed with image not known when the manifest only contained non-amd64 images (e.g. ppc64le, s390x). The action now uses buildah manifest inspect for multi-arch builds, which is architecture-agnostic. #192

CI & Infrastructure

• Add workflow to rebuild bundle on Dependabot PRs. #180
• Update CODEOWNERS to use @​redhat-actions/maintainers. Remove repo-level SECURITY.md in favor of org-wide default.

Full Changelog: redhat-actions/buildah-build@v3.0.2...v3.1.0

v3.0.2

Bug Fixes

• Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. (#177)

CI & Infrastructure

• Add integration test for buildah-image container mode with multiple tags. (#177)
• Consolidate three containerfile build workflows into one (native, containerized, case normalization). (#177)

Full Changelog: redhat-actions/buildah-build@v3.0.1...v3.0.2

v3.0.1

Bug Fixes

• Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. (#175)

CI & Infrastructure

• Add unit test suite using vitest and a test job in CI. (#175)

Full Changelog: redhat-actions/buildah-build@v3.0.0...v3.0.1

Changelog

Sourced from redhat-actions/buildah-build's changelog.

buildah-build Changelog

v3.1.0

New Features

• Sequential multi-arch builds: Add sequential input to run multi-arch builds one at a time instead of in parallel. Parallel remains the default, but sequential mode avoids qemu-related failures with FROM --platform=$(BUILDPLATFORM) stages. #191
• Disable fuse-overlayfs override: Add disable-fuse-overlayfs input to prevent the action from overriding the storage mount program. The action now auto-detects kernel support for rootless native overlayfs (5.11+) and skips the fuse-overlayfs override when the kernel is new enough. This fixes silent data corruption and performance regressions on ubuntu-24.04 runners. #193

Bug Fixes

• Fix digest output for non-x86 multi-arch builds: The digest output failed with image not known when the manifest only contained non-amd64 images (e.g. ppc64le, s390x). The action now uses buildah manifest inspect for multi-arch builds, which is architecture-agnostic. #192

CI & Infrastructure

• Add workflow to rebuild bundle on Dependabot PRs. #180
• Update CODEOWNERS to use @​redhat-actions/maintainers. Remove repo-level SECURITY.md in favor of org-wide default.

Dependency Updates

• Bump esbuild from 0.28.1 to 0.28.2. #187
• Bump typescript-eslint from 8.65.0 to 8.67.0. #185, #188
• Bump eslint from 10.7.0 to 10.8.1. #178, #184
• Bump @​types/node from 26.1.1 to 26.2.0. #179, #183
• Bump undici from 6.27.0 to 6.28.0. #181
• Bump postcss from 8.5.22 to 8.5.25. #182

v3.0.2

Bug Fixes

• Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. #177

CI & Infrastructure

• Add integration test for buildah-image container mode with multiple tags. #177
• Consolidate three containerfile build workflows into one (native, containerized, case normalization). #177

v3.0.1

Bug Fixes

• Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. #175

CI & Infrastructure

• Add unit test suite using vitest and a test job in CI. #175

v3.0.0

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. #154
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. #161

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. #161
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. #168
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. #169

... (truncated)

Commits

• 719e3c4 Update CHANGELOG and version for v3.1.0
• 3aa6b53 Add support for building multi-arch images sequentially (#191)
• bb79777 Skip fuse-overlayfs override when kernel supports rootless overlayfs (#193)
• 7b981d9 Fix digest output for multi-arch builds without host architecture (#192)
• f34ebba Bump esbuild from 0.28.1 to 0.28.2 (#187)
• 9b8e83b Bump typescript-eslint from 8.66.0 to 8.67.0 (#188)
• c315bd8 Bump typescript-eslint from 8.65.0 to 8.66.0 (#185)
• e2590df Bump eslint from 10.8.0 to 10.8.1 (#184)
• b311a5d Bump @​types/node from 26.1.2 to 26.2.0 (#183)
• f0f7a33 Bump undici from 6.27.0 to 6.28.0 (#181)
• Additional commits viewable in compare view