Update docker/metadata-action action to v5

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Type	Update	Change
docker/metadata-action	action	major	v3.7.0 -> v5.8.0

---

Release Notes

docker/metadata-action (docker/metadata-action)

v5.8.0

Compare Source

• New is_not_default_branch global expression by @​crazy-max in #​535
• Allow to match part of the git tag or value for semver/pep440 types by @​crazy-max in #​536 #​537
• Bump @​actions/github from 6.0.0 to 6.0.1 in #​523
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in #​526
• Bump form-data from 2.5.1 to 2.5.5 in #​533
• Bump moment-timezone from 0.5.47 to 0.6.0 in #​525
• Bump semver from 7.7.1 to 7.7.2 in #​524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

v5.7.0

Compare Source

• Global expressions support for labels and annotations by @​crazy-max in #​489
• Support disabling outputs as environment variables by @​omus in #​497
• Bump @​docker/actions-toolkit from 0.44.0 to 0.56.0 in #​507 #​509
• Bump csv-parse from 5.5.6 to 5.6.0 in #​482
• Bump moment-timezone from 0.5.46 to 0.5.47 in #​501
• Bump semver from 7.6.3 to 7.7.1 in #​504

Full Changelog: docker/metadata-action@v5.6.1...v5.7.0

v5.6.1

Compare Source

• Fix GitHub API request fallback for commit date by @​crazy-max in #​478
• Revert to default commit SHA length of 7 by @​crazy-max in #​480

Full Changelog: docker/metadata-action@v5.6.0...v5.6.1

v5.6.0

Compare Source

• Add commit_date global expression by @​trim21 in #​471 #​475
• Increase short commit sha length to 12 for uniqueness by @​crazy-max in #​467
• Bump @​actions/core from 1.10.1 to 1.11.1 #​460
• Bump @​docker/actions-toolkit from 0.16.1 to 0.44.0 #​391 #​399 #​413 #​441
• Bump braces from 3.0.2 to 3.0.3 #​424
• Bump cross-spawn from 7.0.3 to 7.0.5 #​474
• Bump csv-parse from 5.5.5 to 5.5.6 #​412
• Bump moment-timezone from 0.5.44 to 0.5.46 #​383 #​470 #​459
• Bump path-to-regexp from 6.2.2 to 6.3.0 #​454
• Bump semver from 7.6.0 to 7.6.3 #​400 #​411 #​440
• Bump undici from 5.26.3 to 5.28.4 #​386 #​402

Full Changelog: docker/metadata-action@v5.5.1...v5.6.0

v5.5.1

Compare Source

• Don't set cwd:// prefix for local bake files by @​crazy-max in #​382

Full Changelog: docker/metadata-action@v5.5.0...v5.5.1

v5.5.0

Compare Source

• Set cwd:// prefix for bake files path by @​crazy-max in #​370
• Bump @​docker/actions-toolkit from 0.16.0 to 0.16.1 in #​371
• Bump moment from 2.29.4 to 2.30.1 in #​373
• Bump moment-timezone from 0.5.43 to 0.5.44 in #​374

Full Changelog: docker/metadata-action@v5.4.0...v5.5.0

v5.4.0

Compare Source

• Bump @​docker/actions-toolkit from 0.15.0 to 0.16.0 in #​369
• Bump csv-parse from 5.5.2 to 5.5.3 in #​365

Full Changelog: docker/metadata-action@v5.3.0...v5.4.0

v5.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.14.0 to 0.15.0 in #​363 (fixes #​362)

Full Changelog: docker/metadata-action@v5.2.0...v5.3.0

v5.2.0

Compare Source

• Custom annotations support by @​crazy-max in #​361

Full Changelog: docker/metadata-action@v5.1.0...v5.2.0

v5.1.0

Compare Source

• Annotations support by @​crazy-max in #​352
• Split bake definition into two files by @​crazy-max in #​353
• Allow images input to be empty to output bare tags by @​crazy-max in #​358
• Bump @​actions/github from 5.1.1 to 6.0.0 in #​348
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in #​350
• Bump @​docker/actions-toolkit from 0.12.0 to 0.14.0 in #​349 #​357
• Bump csv-parse from 5.5.0 to 5.5.2 in #​346
• Bump semver from 7.5.3 to 7.5.4 in #​335

Full Changelog: docker/metadata-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in #​328
• Bump @​actions/core from 1.10.0 to 1.10.1 in #​333
• Bump csv-parse from 5.4.0 to 5.5.0 in #​320
• Bump semver from 7.5.1 to 7.5.2 in #​304
• Bump handlebars from 4.7.7 to 4.7.8 in #​315

Full Changelog: docker/metadata-action@v4.6.0...v5.0.0

v4.6.0

Compare Source

• Dedup and sort labels by @​crazy-max in #​301
• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 in #​302

Full Changelog: docker/metadata-action@v4.5.0...v4.6.0

v4.5.0

Compare Source

• Bump @​docker/actions-toolkit from 0.1.0 to 0.3.0 in #​296
• Bump csv-parse from 5.3.8 to 5.4.0 in #​294

Full Changelog: docker/metadata-action@v4.4.0...v4.5.0

v4.4.0

Compare Source

• Add context input to define the metadata provider by @​neilime in #​248
• Switch to actions-toolkit implementation by @​crazy-max in #​266 #​273 #​284
• Bump csv-parse from 5.3.3 to 5.3.8 in #​271 #​286
• Bump moment-timezone from 0.5.40 to 0.5.43 in #​268 #​278 #​281
• Bump semver from 7.4.0 to 7.5.0 in #​285

Full Changelog: docker/metadata-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Provide outputs as env vars by @​crazy-max (#​257)

Full Changelog: docker/metadata-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

• Add tz attribute to handlebar date function by @​chroju (#​251)
• Bump minimatch from 3.0.4 to 3.1.2 (#​242)
• Bump csv-parse from 5.3.1 to 5.3.3 (#​245)
• Bump json5 from 2.2.0 to 2.2.3 (#​252)

Full Changelog: docker/metadata-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

• Revert changes to set associated head sha on pull request event by @​crazy-max (#​239)
  • User can still set associated head sha on PR by setting the env var DOCKER_METADATA_PR_HEAD_SHA=true
• Bump csv-parse from 5.3.0 to 5.3.1 (#​237)

Full Changelog: docker/metadata-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

• Do not trim whitespace for sep-tags and sep-labels inputs by @​crazy-max (#​233)
• Set associated head sha on pull request event by @​crazy-max (#​234)
• Remove workaround for setOutput by @​crazy-max (#​236)
• Bump @​actions/github from 5.0.1 to 5.1.1 (#​208 #​232)
• Bump @​actions/core from 1.6.0 to 1.10.0 (#​209 #​216 #​226 #​231)
• Bump csv-parse from 5.0.4 to 5.3.0 (#​210 #​221)
• Bump moment from 2.29.3 to 2.29.4 (#​220)

Full Changelog: docker/metadata-action@v4.0.1...v4.1.0

v4.0.1

Compare Source

• Sanitize tag earlier by @​crazy-max (#​203)

Full Changelog: docker/metadata-action@v4.0.0...v4.0.1

v4.0.0

Compare Source

• Node 16 as default runtime by @​crazy-max (#​176)
  • This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.
• Do not sanitize before pattern matching by @​crazy-max (#​201)
  • Breaking change with type=match pattern matching

Full Changelog: docker/metadata-action@v3.8.0...v4.0.0

v3.8.0

Compare Source

• Add attribute to enable/disable images by @​crazy-max (#​193)
• Add is_default_branch global expression by @​crazy-max (#​192 #​197 #​198)
• Update fixtures (dev) by @​crazy-max (#​190)
• Bump semver from 7.3.5 to 7.3.7 (#​185)
• Bump moment from 2.29.2 to 2.29.3 (#​187)
• Bump csv-parse from 4.16.3 to 5.0.4 (#​195)

Full Changelog: docker/metadata-action@v3.7.0...v3.8.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.