chore(deps): update redhat-actions/buildah-build action to v3

[Leaced]

This PR contains the following updates:

Package	Type	Update	Change
redhat-actions/buildah-build	action	major	v2.13 → v3.0.1

---

Release Notes

redhat-actions/buildah-build (redhat-actions/buildah-build)

v3.0.1

Compare Source

Bug Fixes

• Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. #​175

CI & Infrastructure

• Add unit test suite using vitest and a test job in CI. #​175

v3.0.0

Compare Source

Breaking Changes

• Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. #​154
• Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. #​161

New Features

• Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. #​161
• Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. #​168
• Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. #​169
• Multiple ports: The port input now accepts multiple ports separated by newline. #​165
• Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. #​167
• Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. #​166
• Image digest output: The digest output now reliably returns the content digest of the built image. #​153, #​165

Bug Fixes

• Fix empty entrypoint being set when the input is not provided. #​161
• Fix containerfile path resolution to check both workspace and context directory. #​165
• Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. #​165

CI & Infrastructure

• Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. #​156
• Add workflow permissions, concurrency groups, and path filters. #​156
• Remove broken install_latest_buildah.sh script and simplify CI matrices. #​164
• Remove defunct CRDA vulnerability scan workflow. #​170
• Enable Dependabot for npm and GitHub Actions dependencies. #​156
• Add CODEOWNERS, SECURITY.md. #​156

Dependency Updates

• Upgrade TypeScript to 6.x. #​163
• Upgrade ESLint to 10 with flat config. #​156
• Upgrade @actions/core, @actions/exec, @actions/io to latest versions. #​150, #​156
• Upgrade @types/node to v26. #​159
• Upgrade redhat-actions/common to v2. #​158

v3

Compare Source

Bug Fixes

• Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. #​175

CI & Infrastructure

• Add unit test suite using vitest and a test job in CI. #​175

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.