From b4232c3b00afdad75cebd5ace770010897b45172 Mon Sep 17 00:00:00 2001
From: Max Ustinov <mustinov@keepersecurity.com>
Date: Thu, 27 Aug 2026 11:07:43 -0700
Subject: [PATCH] Bump Docker actions off the deprecated Node 20 runtime

GitHub Actions reported that setup-qemu-action@v3, setup-buildx-action@v3
and build-push-action@v6 target Node 20 and are being forced onto Node 24.

- docker/setup-qemu-action v3 -> v4
- docker/setup-buildx-action v3 -> v4
- docker/build-push-action v6 -> v7

build-push-action v7 drops the DOCKER_BUILD_NO_SUMMARY and
DOCKER_BUILD_EXPORT_RETENTION_DAYS environment variables and legacy build
summary export, none of which are used here.

actions/checkout@v6 and docker/login-action@v4 were not flagged and are
unchanged.
---
 .github/workflows/ci.yml                    | 8 ++++----
 .github/workflows/docker-promote-latest.yml | 2 +-
 .github/workflows/docker-release.yml        | 6 +++---
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a5809a4..48a657a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,13 +36,13 @@ jobs:
         run: npm run test:local
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build both published architectures
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
@@ -54,7 +54,7 @@ jobs:
           cache-to: ${{ github.ref == 'refs/heads/main' && 'type=gha,mode=max,scope=gchat-app' || '' }}
 
       - name: Load the amd64 image for a smoke test
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/docker-promote-latest.yml b/.github/workflows/docker-promote-latest.yml
index d5aef36..cdaa29c 100644
--- a/.github/workflows/docker-promote-latest.yml
+++ b/.github/workflows/docker-promote-latest.yml
@@ -63,7 +63,7 @@ jobs:
           echo "OK: $VERSION is the highest GA tag"
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to DockerHub
         uses: docker/login-action@v4
diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml
index b62f137..49a0e79 100644
--- a/.github/workflows/docker-release.yml
+++ b/.github/workflows/docker-release.yml
@@ -100,10 +100,10 @@ jobs:
       # BuildKit provides its own emulators for cross-platform builds. QEMU is registered
       # here so the arm64 image can also be executed in the smoke test below.
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to DockerHub
         uses: docker/login-action@v4
@@ -130,7 +130,7 @@ jobs:
 
       - name: Build and push
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile