chore(deps): bump redhat-actions/push-to-registry from 2.8 to 3 in /.github/workflows

[dependabot]

Bumps redhat-actions/push-to-registry from 2.8 to 3.

Release notes

Sourced from redhat-actions/push-to-registry's releases.

v3.0.0

Breaking Changes

• Upgrade action runtime from Node 20 to Node 24. #113
• Tags are no longer lowercased. Per the OCI distribution spec, only image names and registries are normalized to lowercase; tag case is now preserved. #112, #121

Features

• Add Sigstore signing support via sigstore-private-key and sign-passphrase inputs. #120
• Add podman-args input for global podman flags (e.g. --storage-driver=vfs) that apply to all podman invocations, not just push. #102, #121
• Add remote input for podman remote mode (--remote). When enabled, Docker image storage checks are skipped. #95, #122

Bug Fixes

• Prefix unqualified source images with localhost/ when pushing to prevent podman from resolving to remote registries. #66, #121
• Fix default tag fallback when tags input is empty. #109
• Fix registry input not being lowercased for OCI compliance. #110
• Fix deprecated fs.rmdir usage, replace with fs.rm. #113

Dependency Updates

• Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x. #113
• Upgrade TypeScript 5.3 to 6.0, migrate ESLint 8 to 10 with flat config. #113
• Bump ini from 5.0.0 to 7.0.0. #118

CI & Infrastructure

• Modernize all CI workflows: ubuntu-24.04, latest action versions, permissions, concurrency groups. #114
• Enable secret scanning, push protection, and Dependabot. #114
• Replace archived link checker with maintained fork. Remove defunct CRDA workflow. #123

Documentation

• Add Required Permissions section, multi-line tag docs, qemu guidance, and podman remote docs to README.

Full Changelog: redhat-actions/push-to-registry@v2...v3.0.0

Changelog

Sourced from redhat-actions/push-to-registry's changelog.

push-to-registry Changelog

v3.0.0

Breaking Changes

• Upgrade action runtime from Node 20 to Node 24. #113
• Tags are no longer lowercased. Per the OCI distribution spec, only image names and registries are normalized to lowercase; tag case is now preserved. #112, #121

Features

• Add Sigstore signing support via sigstore-private-key and sign-passphrase inputs. #120
• Add podman-args input for global podman flags (e.g. --storage-driver=vfs) that apply to all podman invocations, not just push. #102, #121
• Add remote input for podman remote mode (--remote). When enabled, Docker image storage checks are skipped. #95, #122

Bug Fixes

• Prefix unqualified source images with localhost/ when pushing to prevent podman from resolving to remote registries. #66, #121
• Fix default tag fallback when tags input is empty. #109
• Fix registry input not being lowercased for OCI compliance. #110
• Fix deprecated fs.rmdir usage, replace with fs.rm. #113
• Fix typo in createDockerPodmanImageStorage function name. #113

Dependency Updates

• Upgrade @actions/core from 1.x to 3.x. #113
• Upgrade @actions/exec from 1.x to 3.x. #113
• Upgrade @actions/io from 1.x to 3.x. #113
• Upgrade TypeScript from 5.3 to 6.0. #113
• Migrate ESLint from v8 to v10 with flat config. #113
• Bump ini from 5.0.0 to 7.0.0. #118

CI & Infrastructure

• Modernize all CI workflows: update to ubuntu-24.04, latest action versions, add permissions and concurrency groups. #114
• Enable secret scanning and push protection. #114
• Add Dependabot configuration for npm and GitHub Actions. #114
• Add CODEOWNERS and SECURITY.md. #114

Documentation

• Add Required Permissions section to README. #107, #121
• Document multi-line tag support using YAML pipe syntax. #101, #121
• Add qemu version guidance for multi-arch manifest builds. #85, #121
• Document podman remote mode usage. #122

Commits

• 94ade33 Update changelog for v3.0.0 (#123)
• f74711b Add podman remote mode support (#122)
• 1a04376 Fix open issues: tag casing, podman-args, localhost prefix, docs (#121)
• 7861acc Add Sigstore signing support for container images (#120)
• 5546179 Rebuild dist bundle after merging #109 and #110
• 1ea7388 fix: lowercase registry input for OCI compliance (#110)
• 0e92057 fix: default tag fallback (#109)
• 93dab12 Bump ini from 5.0.0 to 7.0.0 (#118)
• f1ffa1e Bump @​types/node from 22.20.1 to 26.1.1 (#117)
• d007cdb Bump redhat-actions/common from 1 to 2 (#116)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Deploy build 29412 of dotcom:rendering-all to CODE

All deployment options

• Deploy build 29412 of dotcom:rendering-all to CODE
• Deploy parts of build 29412 to CODE by previewing it first
• What's on CODE right now?

---

From guardian/actions-riff-raff.