chore(deps): update github actions (major)

.github/workflows/build-and-push-components.yml

@@ -81,7 +81,7 @@ jobs:
 
       - name: List targets
         id: targets
-        uses: docker/bake-action/subaction/list-targets@a99697dcb6a3c90dfa91a96de6490ad7bbbe5f29 # v4.6.0
+        uses: docker/bake-action/subaction/list-targets@a4d7f0b5b91c14a296d792d4ec53a9db17f02e67 # v5.5.0
         with:
           target: ${{ inputs.bake-group }}
 
@@ -115,7 +115,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
-        uses: docker/bake-action@a99697dcb6a3c90dfa91a96de6490ad7bbbe5f29 # v4.6.0
+        uses: docker/bake-action@a4d7f0b5b91c14a296d792d4ec53a9db17f02e67 # v5.5.0
         id: bake
         with:
           targets: ${{ matrix.targets }}

.github/workflows/build-and-upload-components.yml

@@ -39,13 +39,15 @@ jobs:
 
       - name: List targets
         id: targets
-        uses: docker/bake-action/subaction/list-targets@a99697dcb6a3c90dfa91a96de6490ad7bbbe5f29 # v4.6.0
+        uses: docker/bake-action/subaction/list-targets@a4d7f0b5b91c14a296d792d4ec53a9db17f02e67 # v5.5.0
         with:
           target: ${{ inputs.bake-group }}
 
   build-and-upload:
     needs: prepare-build
     runs-on: ubuntu-latest
+    env:
+      DOCKER_BUILD_RECORD_UPLOAD: false
     strategy:
       fail-fast: false
       matrix:
@@ -65,7 +67,7 @@ jobs:
           restore-keys: ${{ runner.os }}-buildx-
 
       - name: Build
-        uses: docker/bake-action@a99697dcb6a3c90dfa91a96de6490ad7bbbe5f29 # v4.6.0
+        uses: docker/bake-action@a4d7f0b5b91c14a296d792d4ec53a9db17f02e67 # v5.5.0
         id: bake
         with:
           targets: ${{ matrix.targets }}

.github/workflows/image-cleanup.yml

@@ -17,8 +17,10 @@ on:
           The timezone-aware datetime you want to delete container versions that are older than.
           The parsed datetime must contain a timezone.
 
-          The `dateparser` is ued to parse the cut-off specified. See: [dateparser](https://dateparser.readthedocs.io/en/latest/)
-        default: '14 days ago UTC'
+          Examples:
+            - 14days 1min 7s
+            - 7years 4min 14us
+        default: '14days'
       dry-run:
         required: false
         type: boolean
@@ -38,15 +40,14 @@ jobs:
     name: Cleanup container images for Pull Request
     steps:
       - name: Remove images for PR#${{ github.event.pull_request.number }}
-        uses: snok/container-retention-policy@b56f4ff7539c1f94f01e5dc726671cd619aa8072 # v2.2.1
+        uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03 # v3.0.0
         with:
           image-names: ${{ env.images }}
-          cut-off: 1 second ago UTC
+          cut-off: 1s
           timestamp-to-use: created_at
-          account-type: org
-          org-name: openclarity
+          account: openclarity
           token: ${{ secrets.PAT }}
-          filter-tags: ${{ format( 'pr{0}-*', github.event.pull_request.number) }}
+          image-tags: "${{ format( 'pr{0}-*', github.event.pull_request.number) }}"
           dry-run: false
 
   schedule:
@@ -55,15 +56,14 @@ jobs:
     name: Cleanup stale container images
     steps:
       - name: Remove stale images
-        uses: snok/container-retention-policy@b56f4ff7539c1f94f01e5dc726671cd619aa8072 # v2.2.1
+        uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03 # v3.0.0
         with:
           image-names: ${{ env.images }}
-          cut-off: 7 days ago UTC
+          cut-off: 7days
           timestamp-to-use: created_at
-          account-type: org
-          org-name: openclarity
+          account: openclarity
           token: ${{ secrets.PAT }}
-          filter-include-untagged: true
+          tag-selection: both
           dry-run: false
 
   dispatch:
@@ -72,13 +72,12 @@ jobs:
     name: Cleanup stale container images
     steps:
       - name: Remove stale images
-        uses: snok/container-retention-policy@b56f4ff7539c1f94f01e5dc726671cd619aa8072 # v2.2.1
+        uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03 # v3.0.0
         with:
           image-names: ${{ env.images }}
           cut-off: ${{ inputs.cut-off }}
           timestamp-to-use: created_at
-          account-type: org
-          org-name: openclarity
+          account: openclarity
           token: ${{ secrets.PAT }}
-          filter-include-untagged: true
+          tag-selection: both
           dry-run: ${{ inputs.dry-run }}