1 files changed, 150 insertions, 0 deletions
diff --git a/packages/overlays/matrix-synapse/patches/0012-Bump-docker-build-push-action-from-6.15.0-to-6.16.0-.patch b/packages/overlays/matrix-synapse/patches/0012-Bump-docker-build-push-action-from-6.15.0-to-6.16.0-.patch
new file mode 100644
index 0000000..6b1a48c
--- /dev/null
+++ b/packages/overlays/matrix-synapse/patches/0012-Bump-docker-build-push-action-from-6.15.0-to-6.16.0-.patch
@@ -0,0 +1,150 @@
+From 7d4c3b64e34571f3ace10fa7e33d07853bf16d67 Mon Sep 17 00:00:00 2001
+From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
+Date: Mon, 19 May 2025 09:51:52 +0100
+Subject: [PATCH 12/34] Bump docker/build-push-action from 6.15.0 to 6.16.0
+ (#18397)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Bumps
+[docker/build-push-action](https://github.com/docker/build-push-action)
+from 6.15.0 to 6.16.0.
+<details>
+<summary>Release notes</summary>
+<p><em>Sourced from <a
+href="https://github.com/docker/build-push-action/releases">docker/build-push-action's
+releases</a>.</em></p>
+<blockquote>
+<h2>v6.16.0</h2>
+<ul>
+<li>Handle no default attestations env var by <a
+href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a
+href="https://redirect.github.com/docker/build-push-action/pull/1343">docker/build-push-action#1343</a></li>
+<li>Only print secret keys in build summary output by <a
+href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a
+href="https://redirect.github.com/docker/build-push-action/pull/1353">docker/build-push-action#1353</a></li>
+<li>Bump <code>@docker/actions-toolkit</code> from 0.56.0 to 0.59.0 in
+<a
+href="https://redirect.github.com/docker/build-push-action/pull/1352">docker/build-push-action#1352</a></li>
+</ul>
+<p><strong>Full Changelog</strong>: <a
+href="https://github.com/docker/build-push-action/compare/v6.15.0...v6.16.0">https://github.com/docker/build-push-action/compare/v6.15.0...v6.16.0</a></p>
+</blockquote>
+</details>
+<details>
+<summary>Commits</summary>
+<ul>
+<li><a
+href="https://github.com/docker/build-push-action/commit/14487ce63c7a62a4a324b0bfb37086795e31c6c1"><code>14487ce</code></a>
+Merge pull request <a
+href="https://redirect.github.com/docker/build-push-action/issues/1343">#1343</a>
+from crazy-max/fix-no-default-attest</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/0ec91264d895acf7dfe05d54d8a3cc28f95b6346"><code>0ec9126</code></a>
+Merge pull request <a
+href="https://redirect.github.com/docker/build-push-action/issues/1366">#1366</a>
+from crazy-max/pr-assign-author</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/b749522b90af1b517f52d8c1e67b2a965cea5eae"><code>b749522</code></a>
+pr-assign-author workflow</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/c566248492c912e39910ac79e2f05a82260233a8"><code>c566248</code></a>
+Merge pull request <a
+href="https://redirect.github.com/docker/build-push-action/issues/1363">#1363</a>
+from crazy-max/fix-codecov</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/13275dd76e44afdffdd61da8b8ae8e26ee11671f"><code>13275dd</code></a>
+ci: fix missing source for codecov</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/67dc78bbaf388b3265f7e1c880e681f4b90d5f48"><code>67dc78b</code></a>
+Merge pull request <a
+href="https://redirect.github.com/docker/build-push-action/issues/1361">#1361</a>
+from mschoettle/patch-1</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/0760504437ba8d0d98e7d5b625560bdede11b3b5"><code>0760504</code></a>
+docs: add validating build configuration example</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/1c198f4467ce458288d816cabd773cd574f16977"><code>1c198f4</code></a>
+chore: update generated content</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/288d9e2e4a70c24711ba959b94c2209b9205347e"><code>288d9e2</code></a>
+handle no default attestations env var</li>
+<li><a
+href="https://github.com/docker/build-push-action/commit/88844b95d8cbbb41035fa9c94e5967a33b92db78"><code>88844b9</code></a>
+Merge pull request <a
+href="https://redirect.github.com/docker/build-push-action/issues/1353">#1353</a>
+from crazy-max/summary-secret-keys</li>
+<li>Additional commits viewable in <a
+href="https://github.com/docker/build-push-action/compare/471d1dc4e07e5cdedd4c2171150001c434f0b7a4...14487ce63c7a62a4a324b0bfb37086795e31c6c1">compare
+view</a></li>
+</ul>
+</details>
+<br />
+
+
+[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+
+Dependabot will resolve any conflicts with this PR as long as you don't
+alter it yourself. You can also trigger a rebase manually by commenting
+`@dependabot rebase`.
+
+[//]: # (dependabot-automerge-start)
+[//]: # (dependabot-automerge-end)
+
+---
+
+<details>
+<summary>Dependabot commands and options</summary>
+<br />
+
+You can trigger Dependabot actions by commenting on this PR:
+- `@dependabot rebase` will rebase this PR
+- `@dependabot recreate` will recreate this PR, overwriting any edits
+that have been made to it
+- `@dependabot merge` will merge this PR after your CI passes on it
+- `@dependabot squash and merge` will squash and merge this PR after
+your CI passes on it
+- `@dependabot cancel merge` will cancel a previously requested merge
+and block automerging
+- `@dependabot reopen` will reopen this PR if it is closed
+- `@dependabot close` will close this PR and stop Dependabot recreating
+it. You can achieve the same result by closing it manually
+- `@dependabot show <dependency name> ignore conditions` will show all
+of the ignore conditions of the specified dependency
+- `@dependabot ignore this major version` will close this PR and stop
+Dependabot creating any more for this major version (unless you reopen
+the PR or upgrade to it yourself)
+- `@dependabot ignore this minor version` will close this PR and stop
+Dependabot creating any more for this minor version (unless you reopen
+the PR or upgrade to it yourself)
+- `@dependabot ignore this dependency` will close this PR and stop
+Dependabot creating any more for this dependency (unless you reopen the
+PR or upgrade to it yourself)
+
+
+</details>
+
+Signed-off-by: dependabot[bot] <support@github.com>
+Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
+---
+ .github/workflows/docker.yml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
+index c617753c7a..009089db3a 100644
+--- a/.github/workflows/docker.yml
++++ b/.github/workflows/docker.yml
+@@ -72,7 +72,7 @@ jobs:
+
+ - name: Build and push all platforms
+ id: build-and-push
+- uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
++ uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
+ with:
+ push: true
+ labels: |
+--
+2.49.0
+
|
