Bump redhat-actions/buildah-build from 2 to 3

[dependabot]

Bumps redhat-actions/buildah-build from 2 to 3.

Release notes

Sourced from redhat-actions/buildah-build's releases.

v3.0.0

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. (#154)
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. (#161)

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. (#161)
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. (#168)
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. (#169)
• Multiple ports: The port input now accepts multiple ports separated by newline. (#165)
• Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. (#167)
• Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. (#166)
• Image digest output: The digest output now reliably returns the content digest of the built image. (#153, #165)

Bug Fixes

• Fix empty entrypoint being set when the input is not provided. (#161)
• Fix containerfile path resolution to check both workspace and context directory. (#165)
• Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. (#165)

CI & Infrastructure

• Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. (#156)
• Add workflow permissions, concurrency groups, and path filters. (#156)
• Remove broken install_latest_buildah.sh script and simplify CI matrices. (#164)
• Remove defunct CRDA vulnerability scan workflow. (#170)
• Replace deprecated gaurav-nelson/github-action-markdown-link-check with tcort/github-action-markdown-link-check. (#171)
• Enable Dependabot for npm and GitHub Actions dependencies. (#156)
• Add CODEOWNERS, SECURITY.md. (#156)

Dependency Updates

• Upgrade TypeScript to 6.x. (#163)
• Upgrade ESLint to 10 with flat config. (#156)
• Upgrade @actions/core, @actions/exec, @actions/io to latest versions. (#150, #156)
• Upgrade @types/node to v26. (#159)
• Upgrade redhat-actions/common to v2. (#158)

Full Changelog: redhat-actions/buildah-build@v2.13...v3.0.0

Update action to run on Node 20

Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Forcibly remove existing manifest before creating a new one. #103

Update action to run on node 16

v2.11

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v2.10

No release notes provided.

Image manifest support

... (truncated)

Changelog

Sourced from redhat-actions/buildah-build's changelog.

v2.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Commits

• 3a51aad Update CHANGELOG and version for v3.0.2
• 69263e9 Pass --root to containerized buildah so all invocations share storage (#177)
• 27e5954 Update CHANGELOG and version for v3.0.1
• 6c3509d Detect container storage root instead of hardcoding it (#174) (#175)
• 3194d0c Document available buildah container images in README (#173)
• 5d84797 Update README and CHANGELOG for v3.0.0 (#172)
• 464212a Replace deprecated link checker and fix 429 rate limiting (#171)
• 97fe4a5 Fall back to podman when buildah is unavailable (#169)
• 3fe6dbb Remove defunct CRDA vulnerability scan workflow (#170)
• 02f342b Add buildah-image input to run buildah from a container (#168)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)