Bump redhat-actions/buildah-build from 2 to 3

[dependabot]

Bumps redhat-actions/buildah-build from 2 to 3.

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.0.0

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. (#154)
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. (#161)

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. (#161)
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. (#168)
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. (#169)
• Multiple ports: The port input now accepts multiple ports separated by newline. (#165)
• Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. (#167)
• Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. (#166)
• Image digest output: The digest output now reliably returns the content digest of the built image. (#153, #165)

Bug Fixes

• Fix empty entrypoint being set when the input is not provided. (#161)
• Fix containerfile path resolution to check both workspace and context directory. (#165)
• Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. (#165)

CI & Infrastructure

• Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. (#156)
• Add workflow permissions, concurrency groups, and path filters. (#156)
• Remove broken install_latest_buildah.sh script and simplify CI matrices. (#164)
• Remove defunct CRDA vulnerability scan workflow. (#170)
• Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort/github-action-markdown-link-check. (#171)
• Enable Dependabot for npm and GitHub Actions dependencies. (#156)
• Add CODEOWNERS, SECURITY.md. (#156)

Dependency Updates

• Upgrade TypeScript to 6.x. (#163)
• Upgrade ESLint to 10 with flat config. (#156)
• Upgrade @actions/core, @actions/exec, @actions/io to latest versions. (#150, #156)
• Upgrade @types/node to v26. (#159)
• Upgrade redhat-actions/common to v2. (#158)

Full Changelog: redhat-actions/buildah-build@v2.13...v3.0.0

Update action to run on Node 20

Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Forcibly remove existing manifest before creating a new one. #103

Update action to run on node 16

v2.11

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v2.10

No release notes provided.

Image manifest support

... (truncated)

Changelog

Sourced from redhat-actions/buildah-build's changelog.

v2.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Commits

• 719e3c4 Update CHANGELOG and version for v3.1.0
• 3aa6b53 Add support for building multi-arch images sequentially (#191)
• bb79777 Skip fuse-overlayfs override when kernel supports rootless overlayfs (#193)
• 7b981d9 Fix digest output for multi-arch builds without host architecture (#192)
• f34ebba Bump esbuild from 0.28.1 to 0.28.2 (#187)
• 9b8e83b Bump typescript-eslint from 8.66.0 to 8.67.0 (#188)
• c315bd8 Bump typescript-eslint from 8.65.0 to 8.66.0 (#185)
• e2590df Bump eslint from 10.8.0 to 10.8.1 (#184)
• b311a5d Bump @​types/node from 26.1.2 to 26.2.0 (#183)
• f0f7a33 Bump undici from 6.27.0 to 6.28.0 (#181)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)