Merge pull request #277 from smlx/dependabot/github_actions/docker/setup-buildx-action-4.0.0

chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0

Author: smlx

.github/workflows/build.yaml

@@ -52,7 +52,7 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: Set up Docker Buildx to support SBOM generation
-      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+      uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
     - name: Get Docker metadata
       id: docker_metadata
       uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0

.github/workflows/release.yaml

@@ -45,7 +45,7 @@ jobs:
     # for the binaries attached to the GitHub release (see the "sboms" section
     # in .goreleaser.yaml), it also needs to install syft into the action
     # environment.
-    - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+    - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
     - uses: anchore/sbom-action/download-syft@17ae1740179002c89186b61233e0f892c3118b11 # v0.23.0
     - name: Login to GHCR
       uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0