Bump redhat-actions/buildah-build from 2.13 to 3

[dependabot]

Bumps redhat-actions/buildah-build from 2.13 to 3.

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.0.0

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. (#154)
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. (#161)

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. (#161)
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. (#168)
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. (#169)
• Multiple ports: The port input now accepts multiple ports separated by newline. (#165)
• Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. (#167)
• Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. (#166)
• Image digest output: The digest output now reliably returns the content digest of the built image. (#153, #165)

Bug Fixes

• Fix empty entrypoint being set when the input is not provided. (#161)
• Fix containerfile path resolution to check both workspace and context directory. (#165)
• Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. (#165)

CI & Infrastructure

• Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. (#156)
• Add workflow permissions, concurrency groups, and path filters. (#156)
• Remove broken install_latest_buildah.sh script and simplify CI matrices. (#164)
• Remove defunct CRDA vulnerability scan workflow. (#170)
• Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort/github-action-markdown-link-check. (#171)
• Enable Dependabot for npm and GitHub Actions dependencies. (#156)
• Add CODEOWNERS, SECURITY.md. (#156)

Dependency Updates

• Upgrade TypeScript to 6.x. (#163)
• Upgrade ESLint to 10 with flat config. (#156)
• Upgrade @actions/core, @actions/exec, @actions/io to latest versions. (#150, #156)
• Upgrade @types/node to v26. (#159)
• Upgrade redhat-actions/common to v2. (#158)

Full Changelog: redhat-actions/buildah-build@v2.13...v3.0.0

Changelog

Sourced from redhat-actions/buildah-build's changelog.

buildah-build Changelog

v3.0.0

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. #154
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. #161

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. #161
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. #168
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. #169
• Multiple ports: The port input now accepts multiple ports separated by newline. #165
• Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. #167
• Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. #166
• Image digest output: The digest output now reliably returns the content digest of the built image. #153, #165

Bug Fixes

• Fix empty entrypoint being set when the input is not provided. #161
• Fix containerfile path resolution to check both workspace and context directory. #165
• Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. #165

CI & Infrastructure

• Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. #156
• Add workflow permissions, concurrency groups, and path filters. #156
• Remove broken install_latest_buildah.sh script and simplify CI matrices. #164
• Remove defunct CRDA vulnerability scan workflow. #170
• Enable Dependabot for npm and GitHub Actions dependencies. #156
• Add CODEOWNERS, SECURITY.md. #156

Dependency Updates

• Upgrade TypeScript to 6.x. #163
• Upgrade ESLint to 10 with flat config. #156
• Upgrade @actions/core, @actions/exec, @actions/io to latest versions. #150, #156
• Upgrade @types/node to v26. #159
• Upgrade redhat-actions/common to v2. #158

v2.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v2.12

• Forcibly remove existing manifest before creating a new one. #103

v2.11

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v2.10

• Make image and tag in lowercase, if found in uppercase. redhat-actions/buildah-build#89
• Add --tls-verify and extra-args input for buildah from command. redhat-actions/buildah-build#92
• Remove kubic packages from test workflows. redhat-actions/buildah-build#93

... (truncated)

Commits

• 5d84797 Update README and CHANGELOG for v3.0.0 (#172)
• 464212a Replace deprecated link checker and fix 429 rate limiting (#171)
• 97fe4a5 Fall back to podman when buildah is unavailable (#169)
• 3fe6dbb Remove defunct CRDA vulnerability scan workflow (#170)
• 02f342b Add buildah-image input to run buildah from a container (#168)
• 269c174 Build multi-arch images in parallel for faster builds (#167)
• 15373c9 Warn when multi-arch build produces wrong architecture (#166)
• a7b3b0c Fix containerfile paths, multiple ports, and digest output (#165)
• c252fb9 Remove broken install_latest_buildah.sh and simplify CI matrices (#164)
• 20a031b Bump typescript from 5.9.3 to 6.0.3 (#163)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)