2026.09.0

Warning

Since 2026.03.0, the home-assistant/builder action is deprecated in favor of more efficient and flexible composable actions. See the builder repository for details.

What's Changed

• Add option to skip publishing existing image tags (#347) @sairon
• Always collapse dependencies in the release notes (#348) @sairon
• Update README with migration guide for deprecated action (#304) @f18m, @sairon
• Add workflows to test the actions with a sample app (#346) @sairon
• Add the Open Home Foundation AI Policy (#333) @frenck

Dependencies

25 changes

• Bump home-assistant/actions/helpers/info from a7c616ce81ccda50150bf1595786c71b1883fabb to 58bff37c8947f690ace498be413a9b78d6f30f93 (#349) @dependabot[bot]
• Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in /actions/build-image (#344) @dependabot[bot]
• Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in /actions/publish-multi-arch-manifest (#345) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 (#341) @dependabot[bot]
• Bump docker/login-action from 4.5.2 to 4.6.0 in /actions/publish-multi-arch-manifest (#343) @dependabot[bot]
• Bump docker/login-action from 4.5.2 to 4.6.0 in /actions/build-image (#342) @dependabot[bot]
• Bump docker/login-action from 4.5.1 to 4.5.2 in /actions/build-image (#339) @dependabot[bot]
• Bump docker/login-action from 4.5.1 to 4.5.2 in /actions/publish-multi-arch-manifest (#340) @dependabot[bot]
• Bump docker/login-action from 4.5.0 to 4.5.1 in /actions/build-image (#337) @dependabot[bot]
• Bump docker/login-action from 4.5.0 to 4.5.1 in /actions/publish-multi-arch-manifest (#338) @dependabot[bot]
• Bump docker/login-action from 4.4.0 to 4.5.0 in /actions/build-image (#335) @dependabot[bot]
• Bump docker/login-action from 4.4.0 to 4.5.0 in /actions/publish-multi-arch-manifest (#336) @dependabot[bot]
• Bump actions/checkout from 7.0.0 to 7.0.1 (#334) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.5.1 to 7.6.0 (#332) @dependabot[bot]
• Bump docker/login-action from 4.3.0 to 4.4.0 in /actions/publish-multi-arch-manifest (#331) @dependabot[bot]
• Bump docker/login-action from 4.3.0 to 4.4.0 in /actions/build-image (#330) @dependabot[bot]
• Bump docker/login-action from 4.2.0 to 4.3.0 in /actions/publish-multi-arch-manifest (#328) @dependabot[bot]
• Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 in /actions/build-image (#327) @dependabot[bot]
• Bump docker/login-action from 4.2.0 to 4.3.0 in /actions/build-image (#326) @dependabot[bot]
• Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 in /actions/publish-multi-arch-manifest (#329) @dependabot[bot]
• Bump docker/build-push-action from 7.2.0 to 7.3.0 in /actions/build-image (#325) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.4.0 to 7.5.1 (#324) @dependabot[bot]
• Bump actions/checkout from 6.0.3 to 7.0.0 (#323) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.3.1 to 7.4.0 (#321) @dependabot[bot]
• Bump home-assistant/builder from 2026.03.2 to 2026.06.0 in /actions/build-image (#320) @dependabot[bot]

2026.06.0

Warning

Since 2026.03.0, the home-assistant/builder action is deprecated in favor of more efficient and flexible composable actions. See the builder repository for details.

What's Changed

• Bump actions/checkout from 6.0.2 to 6.0.3 (#319) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.3.0 to 7.3.1 (#318) @dependabot[bot]
• Bump docker/login-action from 4.1.0 to 4.2.0 in /actions/publish-multi-arch-manifest (#317) @dependabot[bot]
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 in /actions/publish-multi-arch-manifest (#316) @dependabot[bot]
• Bump docker/login-action from 4.1.0 to 4.2.0 in /actions/build-image (#315) @dependabot[bot]
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 in /actions/build-image (#314) @dependabot[bot]
• Bump docker/build-push-action from 7.1.0 to 7.2.0 in /actions/build-image (#313) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.2.1 to 7.3.0 (#312) @dependabot[bot]
• Remove legacy builder and its CI from the repo (#308) @sairon
• Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in /actions/publish-multi-arch-manifest (#311) @dependabot[bot]
• Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in /actions/build-image (#310) @dependabot[bot]
• Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#309) @dependabot[bot]
• Use default cosign-release for pinned cosign-installer version (#303) @eshattow
• Bump release-drafter/release-drafter from 7.2.0 to 7.2.1 (#305) @dependabot[bot]
• Bump docker/login-action from 4.0.0 to 4.1.0 in /actions/publish-multi-arch-manifest (#299) @dependabot[bot]
• Bump docker/login-action from 4.0.0 to 4.1.0 in /actions/build-image (#298) @dependabot[bot]
• Bump docker/build-push-action from 7.0.0 to 7.1.0 in /actions/build-image (#302) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#300) @dependabot[bot]
• Bump docker/login-action from 4.0.0 to 4.1.0 (#297) @dependabot[bot]
• Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 in /actions/publish-multi-arch-manifest (#295) @dependabot[bot]
• Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 in /actions/build-image (#294) @dependabot[bot]
• Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#293) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.1.0 to 7.1.1 (#292) @dependabot[bot]
• Bump home-assistant/builder from 2026.03.1 to 2026.03.2 in /actions/build-image (#291) @dependabot[bot]
• Bump release-drafter/release-drafter from 7.0.0 to 7.1.0 (#290) @dependabot[bot]

2026.03.2

Warning

Since 2026.03.0, the home-assistant/builder action is deprecated in favor of more efficient and flexible composable actions. See the builder repository for details.

What's Changed

• Correctly ignore home-assistant/builder update in action.yml and .github (#288) @sairon
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 in /actions/publish-multi-arch-manifest (#287) @dependabot[bot]
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 in /actions/build-image (#286) @dependabot[bot]
• Bump docker/build-push-action from 6.19.2 to 7.0.0 in /actions/build-image (#283) @dependabot[bot]
• Bump home-assistant/builder from 2026.03.0 to 2026.03.1 in /actions/build-image (#284) @dependabot[bot]
• Update dependabot configuration (#282) @sairon

2026.03.1

Warning

Since 2026.03.0, the home-assistant/builder action is deprecated in favor of more efficient and flexible composable actions. See the builder repository for details.

What's Changed

• Correctly pin cosign-verify action in build-image action (#281) @sairon

2026.03.0

Warning

This release deprecates the home-assistant/builder action in favor of more efficient and flexible composable actions. See the builder repository for details.

What's Changed

• Add reusable actions for native BuildKit build in GHA (#273) @sairon
• Deprecate usage of home-assistant/builder, update README (#279) @sairon
• Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#276) @dependabot[bot]
• Bump release-drafter/release-drafter from 6.4.0 to 7.0.0 (#278) @dependabot[bot]
• Bump release-drafter/release-drafter from 6.2.0 to 6.4.0 (#275) @dependabot[bot]
• Bump docker/login-action from 3.7.0 to 4.0.0 (#274) @dependabot[bot]
• Bump home-assistant/builder from 2026.02.0 to 2026.02.1 (#272) @dependabot[bot]

2026.02.1

What's Changed

• Use official hadolint/hadolint-action instead of fork (#271) @sairon
• SHA-pin all pinnable actions, use builder 2026.02.0 (#270) @sairon

2026.02.0

What's Changed

• Tag published builder images with commit SHA (#269) @sairon
• Revert "Disable ASLR to work around QEMU aarch64 issues (#229)" (#267) @sairon
• Bump docker/login-action from 3.6.0 to 3.7.0 (#268) @dependabot[bot]
• Bump home-assistant/builder from 2025.09.0 to 2025.11.0 (#266) @dependabot[bot]

2025.11.0

💥 Breaking Changes

This release removes support for the armv7, i386, and armhf architectures which were previously announced as deprecated in the Home Assistant architecture decisions (https://github.com/home-assistant/architecture/discussions/1230, https://github.com/home-assistant/architecture/discussions/1200, https://github.com/home-assistant/architecture/discussions/1199).

The --all flag has has been removed since it could silently fail for add-on developers who relied on it in builds for the deprecated architectures using the latest version of the builder action. If your build process uses --all, update it to specify architectures explicitly (e.g., --amd64 --aarch64) or use a matrix strategy for the build job (see addons-example for a concrete example of an add-on build workflow).

If you need to build images for the deprecated architectures, you can specify an older builder action, e.g. home-assistant/builder@2025.09.0 which still supports build of these architectures, including the --all flag.

What's Changed

• Drop support for --all in favor of explicit architecture arguments (#265) @sairon
• Don't refer to @master action in the readme examples (#264) @sairon
• actions/publish: use dotslash self-reference (#258) @eshattow
• Remove deprecated archs (#263) @edenhaus
• Bump actions/checkout from 5 to 6 (#262) @dependabot[bot]
• Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#254) @dependabot[bot]
• Bump docker/login-action from 3.5.0 to 3.6.0 (#253) @dependabot[bot]
• Bump home-assistant/builder from 2025.03.0 to 2025.09.0 (#252) @dependabot[bot]

2025.09.0

What's Changed

• Add --no-cosign-verify flag to disable Cosign signature verification (#251) @sairon
• Update to cosign v2.5.3 (#250) @agners
• Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 (#249) @dependabot[bot]
• Update to Alpine Linux 3.22 (#248) @eshattow
• Bump actions/checkout from 4 to 5 (#247) @dependabot[bot]
• Bump docker/login-action from 3.4.0 to 3.5.0 (#246) @dependabot[bot]
• Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#244) @dependabot[bot]
• Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#243) @dependabot[bot]
• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#242) @dependabot[bot]
• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#241) @dependabot[bot]
• Bump home-assistant/builder from 2025.02.0 to 2025.03.0 (#240) @dependabot[bot]

2025.03.0

What's Changed

• Migrate to tonistiigi/binfmt (#239) @frenck
• Bump docker/login-action from 3.3.0 to 3.4.0 (#238) @dependabot[bot]
• Bump home-assistant/builder from 2024.08.2 to 2025.02.0 (#235) @dependabot[bot]