ci(deps): bump docker/setup-buildx-action from 3 to 4

[dependabot]

Bumps docker/setup-buildx-action from 3 to 4.

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in docker/setup-buildx-action#483
• Remove deprecated inputs/outputs by @​crazy-max in docker/setup-buildx-action#464
• Switch to ESM and update config/test wiring by @​crazy-max in docker/setup-buildx-action#481
• Bump @​actions/core from 1.11.1 to 3.0.0 in docker/setup-buildx-action#475
• Bump @​docker/actions-toolkit from 0.63.0 to 0.79.0 in docker/setup-buildx-action#482 docker/setup-buildx-action#485
• Bump js-yaml from 4.1.0 to 4.1.1 in docker/setup-buildx-action#452
• Bump lodash from 4.17.21 to 4.17.23 in docker/setup-buildx-action#472
• Bump minimatch from 3.1.2 to 3.1.5 in docker/setup-buildx-action#480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v3.12.0

• Deprecate install input by @​crazy-max in docker/setup-buildx-action#455
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/setup-buildx-action#434
• Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-buildx-action#436
• Bump form-data from 2.5.1 to 2.5.5 in docker/setup-buildx-action#432
• Bump undici from 5.28.4 to 5.29.0 in docker/setup-buildx-action#435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

• Fix keep-state not being respected by @​crazy-max in docker/setup-buildx-action#429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

• Keep BuildKit state support by @​crazy-max in docker/setup-buildx-action#427
• Remove aliases created when installing by default by @​hashhar in docker/setup-buildx-action#139
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in docker/setup-buildx-action#422 docker/setup-buildx-action#425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

• Bump @​docker/actions-toolkit from 0.54.0 to 0.56.0 in docker/setup-buildx-action#408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

• Bump @​docker/actions-toolkit from 0.48.0 to 0.54.0 in docker/setup-buildx-action#402 docker/setup-buildx-action#404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

• Make cloud prefix optional to download buildx if driver is cloud by @​crazy-max in docker/setup-buildx-action#390
• Bump @​actions/core from 1.10.1 to 1.11.1 in docker/setup-buildx-action#370
• Bump @​docker/actions-toolkit from 0.39.0 to 0.48.0 in docker/setup-buildx-action#389
• Bump cross-spawn from 7.0.3 to 7.0.6 in docker/setup-buildx-action#382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

... (truncated)

Commits

• f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
• e700274 chore: update generated content
• 3061c91 skip BuildKit image pre-pulls for explicit endpoints
• 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
• bd6e702 chore: update generated content
• 6268c9d pull BuildKit image before builder creation
• e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
• 533ed8e build(deps): bump the codeql-actions group with 2 updates
• bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
• d5079fb chore: update generated content
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

Warning

Your comment is too long (maximum is 65536 characters), so the coverage report was not added. See the job log for how to reduce it.

[all-hands-bot]

👋 This PR needs a couple of things fixed before OpenHands can review it:

• the PR description's HUMAN: section needs at least 20 characters describing what you tested, not just the template placeholder

Push an update once this is addressed and this check re-runs automatically.

This is an automated check - no AI was used to generate this comment.

[neubig]

Approved: checks are green. This review was created by an AI agent (OpenHands) on behalf of the user.

[all-hands-bot]

This review was posted by an AI agent (OpenHands).

Bumps docker/setup-buildx-action from v3 to v4 in the two workflows that use it: .github/workflows/ghcr-build.yml and .github/workflows/tag-image.yml. Both changes are tag-only bumps with no new inputs and no behavior changes to the surrounding steps.

Assessment:

• Scope: The change belongs in this repository. AGENTS.md (Cross-Repository Boundaries / Repository Structure) confirms these workflows live and are owned here, and .github/dependabot.yml explicitly configures weekly github-actions updates for this repo. No product or architecture decision is needed.
• Compatibility of the changed inputs: The only input passed to the action in either workflow is driver-opts (ghcr-build.yml); tag-image.yml passes none. Comparing the action metadata for v4.0.0 and v3.12.0, driver-opts still exists in v4, so the existing usage remains valid. The inputs removed in v4 (config, config-inline, install) are not referenced by either workflow, so v4's "Remove deprecated inputs/outputs" change does not affect this repo.
• Runtime requirement: v4 switches the action runtime to Node 24, which needs Actions Runner v2.327.1+. Both jobs use GitHub-hosted ubuntu-24.04 runners, which are always current, so this is satisfied.
• CI evidence at this head: All checks on the exact head 27175d12a0ceb017f3c44d31c060e66fd87b3767 are green (Docker / "Build and Push Automation Image", ci, Run tests, pr). The Docker run is the one that actually exercises the bumped action end to end and it succeeded, so the bump is validated on the production-facing path rather than by inspection alone.
• No security regression: No secret handling, permissions, or trigger conditions changed in the diff.

No material correctness, security, compatibility, or acceptance-criterion defect found on the current head.

✅ APPROVED

[neubig]

Current CI checks pass. Approved by an AI agent (OpenHands) on behalf of Graham Neubig.