[dependabot]

Bumps docker/setup-buildx-action from 4.3.0 to 4.4.1.

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

• Use official Buildx releases for cloud driver by @​crazy-max in docker/setup-buildx-action#606
• Pull BuildKit image before builder creation by @​crazy-max in docker/setup-buildx-action#609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in docker/setup-buildx-action#620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614
• Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

Commits

• f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
• e700274 chore: update generated content
• 3061c91 skip BuildKit image pre-pulls for explicit endpoints
• 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
• bd6e702 chore: update generated content
• 6268c9d pull BuildKit image before builder creation
• e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
• 533ed8e build(deps): bump the codeql-actions group with 2 updates
• bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
• d5079fb chore: update generated content
• Additional commits viewable in compare view

[changeset-bot]

⚠️ No Changeset found

Latest commit: e50b276

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

PR

Finding: This review covers #7834 at 207dea46b4ee1ad813b7704444671310deb7fd36, which is the current head.

Dependency change

Finding: docker/setup-buildx-action moves from 4.3.0 to 4.4.1 at the assistant-runtime, collector, and functions-image steps in .github/workflows/pr.yaml and at the tunnel-agent step in .github/workflows/release.yaml.

Lock and manifest

Finding: All four uses pins are f87e5991a6d7451dcb8d9637bfbc97413f497069, and that commit is the v4.4.1 tag.

Compatibility confidence

Finding:
9/10 for 207dea46
Call sites pass no inputs, and the action inputs, outputs, and Node 24 runtime are unchanged from 4.3.0; 4.4.x only pre-pulls the default moby/buildkit:buildx-stable-1 image before creating the default docker-container builder when no endpoint is set.

Risk and gaps

Finding: This pull request does not run the action: assistant-runtime-image and the functions-image Buildx step skip dependabot[bot], otel-collector is skipped, and release.yaml is outside PR CI, so the new BuildKit pre-pull is unexercised.

Local validation

Finding: The v4.4.1 tag object matches every updated pin. This ecosystem has no local product suite; Check formatting with hk and Detect UI anti-patterns are already green on this head.

SHA and CI

Finding: Current head 207dea46b4ee1ad813b7704444671310deb7fd36 has CI pending. Still in progress: server-checks, server-test shards 1–5, demo-seed-safety, client-test, docker-build-server, docker-build-client, docker-build-pystreams, and both functions-image matrices. CI Gate has not started. Check formatting with hk and Detect UI anti-patterns passed.

Merge readiness

Finding: CI pending until the in-progress jobs and CI Gate finish on this head.

  

_{Sent by Cursor Automation: Review Dependabot PRs (gram)}