chore(deps): update docker/setup-qemu-action action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-qemu-action	action	major	v3.7.0 → v4.0.0

---

Release Notes

docker/setup-qemu-action (docker/setup-qemu-action)

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​245
• Switch to ESM and update config/test wiring by @​crazy-max in #​241
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​244
• Bump @​docker/actions-toolkit from 0.67.0 to 0.77.0 in #​243
• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in #​240
• Bump js-yaml from 3.14.1 to 3.14.2 in #​231
• Bump lodash from 4.17.21 to 4.17.23 in #​238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

authentik FIPS Image build status - debian-fips (``)

Image built: ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-123 for commit 90078367912115887848df6d9743737fc011be3c

Test output:

image=ghcr.io/goauthentik/fips-debian
full=ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-123
### Debian version ###
docker run --rm ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-123 \
	cat /etc/debian_version
13.3
### Test that base images has OpenSSL with FIPS enabled ###
docker run --rm ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-123 \
	openssl list -providers -provider default -provider base -provider fips
Providers:
  base
    name: OpenSSL Base Provider
    version: 3.5.4
    status: active
  default
    name: OpenSSL Default Provider
    version: 3.5.4
    status: active
  fips
    name: OpenSSL FIPS Provider
    version: 3.1.2
    status: active

[github-actions]

authentik FIPS Image build status - xmlsec1-fips (``)

Image built: ghcr.io/goauthentik/fips-xmlsec1:1.3.9-slim-trixie-fips-pr-123 for commit 90078367912115887848df6d9743737fc011be3c

Test output:

image=ghcr.io/goauthentik/fips-xmlsec1
full=ghcr.io/goauthentik/fips-xmlsec1:1.3.9-slim-trixie-fips-pr-123
### Test that base images has OpenSSL with FIPS enabled ###
docker run --rm ghcr.io/goauthentik/fips-xmlsec1:1.3.9-slim-trixie-fips-pr-123 \
	openssl list -providers -provider default -provider base -provider fips
Providers:
  base
    name: OpenSSL Base Provider
    version: 3.5.4
    status: active
  default
    name: OpenSSL Default Provider
    version: 3.5.4
    status: active
  fips
    name: OpenSSL FIPS Provider
    version: 3.1.2
    status: active
### xmlsec1 version ###
docker run --rm ghcr.io/goauthentik/fips-xmlsec1:1.3.9-slim-trixie-fips-pr-123 \
	xmlsec1 --version
xmlsec1 1.3.9 (openssl)

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.14.3)

Image built: ghcr.io/goauthentik/fips-python:3.14.3-slim-trixie-fips-pr-123 for commit 90078367912115887848df6d9743737fc011be3c

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.14.3-slim-trixie-fips-pr-123
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.14.3-slim-trixie-fips-pr-123 \
	python --version
Python 3.14.3
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.14.3-slim-trixie-fips-pr-123 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.4+ak-fips 30 Sep 2025

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.15.0a2)

Image built: ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-123 for commit 90078367912115887848df6d9743737fc011be3c

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-123
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-123 \
	python --version
Python 3.15.0a2
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-123 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.4+ak-fips 30 Sep 2025

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.12.12)

Image built: ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips-pr-123 for commit 90078367912115887848df6d9743737fc011be3c

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips-pr-123
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips-pr-123 \
	python --version
Python 3.12.12
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips-pr-123 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.4+ak-fips 30 Sep 2025

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.13.9)

Image built: ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-123 for commit 90078367912115887848df6d9743737fc011be3c

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-123
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-123 \
	python --version
Python 3.13.9
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-123 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.4+ak-fips 30 Sep 2025