ci(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0

[dependabot]

Bumps docker/setup-qemu-action from 4.1.0 to 4.2.0.

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-qemu-action#311
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-qemu-action#295
• Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0 in docker/setup-qemu-action#315
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-qemu-action#312
• Bump js-yaml from 4.1.1 to 4.2.0 in docker/setup-qemu-action#310
• Bump tmp from 0.2.6 to 0.2.7 in docker/setup-qemu-action#304
• Bump undici from 6.26.0 to 6.27.0 in docker/setup-qemu-action#308
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-qemu-action#307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

Commits

• 96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 31f08d3 [dependabot skip] chore: update generated content
• 4e7017a build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
• ea66a41 chore: allow actions-toolkit to bypass yarn age gate
• 451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 532ae00 [dependabot skip] chore: update generated content
• b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
• cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
• f0ba643 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/docker/setup-qemu-action	96fe6ef7f33517b61c61be40b68a1882f3264fb8	🟢 8.4	Details Check Score Reason Security-Policy 🟢 9 security policy file detected Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/docker-release.yml