dependabot[bot]
130a7099f5
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.38.1 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...24c54180a607b1449ed407dd24f251e4e9147c8d )
Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...24c54180a607b1449ed407dd24f251e4e9147c8d )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 23:46:01 +00:00
CrazyMax
59cb1203cd
Merge pull request #537 from docker/dependabot/github_actions/actions/create-github-app-token-3.3.0
...
chore(deps): Bump actions/create-github-app-token from 3.2.0 to 3.3.0
v7
v7.5.0
2026-10-14 13:02:12 +02:00
CrazyMax
61bae61f74
Merge pull request #536 from docker/dependabot/github_actions/actions/setup-node-7.1.0
...
chore(deps): Bump actions/setup-node from 7.0.0 to 7.1.0
2026-10-14 13:02:00 +02:00
CrazyMax
9b7f51a147
Merge pull request #538 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.106.0
...
chore(deps): Bump @docker/actions-toolkit from 0.100.0 to 0.106.0
2026-10-14 13:01:28 +02:00
github-actions[bot]
b01514a853
[dependabot skip] chore: update generated content
2026-10-14 10:50:47 +00:00
dependabot[bot]
477529a413
chore(deps): Bump @docker/actions-toolkit from 0.100.0 to 0.106.0
...
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit ) from 0.100.0 to 0.106.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases )
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.100.0...v0.106.0 )
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.106.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 10:49:46 +00:00
dependabot[bot]
b9a92575c7
chore(deps): Bump actions/create-github-app-token from 3.2.0 to 3.3.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/create-github-app-token/compare/bcd2ba49218906704ab6c1aa796996da409d3eb1...64ab729a6294000f5aa4a4bc0b73d1f32bc45510 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 10:45:47 +00:00
dependabot[bot]
6cc3b05572
chore(deps): Bump actions/setup-node from 7.0.0 to 7.1.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 10:45:42 +00:00
CrazyMax
d833f609e9
Merge pull request #529 from docker/dependabot/npm_and_yarn/handlebars-4.7.10
...
chore(deps): Bump handlebars from 4.7.9 to 4.7.10
2026-10-14 12:41:53 +02:00
github-actions[bot]
e97a6a8cbd
[dependabot skip] chore: update generated content
2026-10-14 10:30:47 +00:00
dependabot[bot]
711b3e67b3
chore(deps): Bump handlebars from 4.7.9 to 4.7.10
...
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js ) from 4.7.9 to 4.7.10.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases )
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md )
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10 )
---
updated-dependencies:
- dependency-name: handlebars
dependency-version: 4.7.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 10:29:37 +00:00
CrazyMax
d8e2cf658b
Merge pull request #534 from docker/dependabot/npm_and_yarn/postcss-selector-parser-7.1.6
...
chore(deps): Bump postcss-selector-parser from 7.1.5 to 7.1.6
2026-10-14 12:28:37 +02:00
CrazyMax
bdcd95b643
Merge pull request #533 from docker/dependabot/npm_and_yarn/source-map-js-1.2.2
...
chore(deps): Bump source-map-js from 1.2.1 to 1.2.2
2026-10-14 12:28:11 +02:00
dependabot[bot]
d6fa94294c
chore(deps): Bump postcss-selector-parser from 7.1.5 to 7.1.6
...
Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser ) from 7.1.5 to 7.1.6.
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases )
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/7.1.5...7.1.6 )
---
updated-dependencies:
- dependency-name: postcss-selector-parser
dependency-version: 7.1.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 10:15:21 +00:00
dependabot[bot]
05fbcc04e1
chore(deps): Bump source-map-js from 1.2.1 to 1.2.2
...
Bumps [source-map-js](https://github.com/7rulnik/source-map-js ) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases )
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2 )
---
updated-dependencies:
- dependency-name: source-map-js
dependency-version: 1.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-14 10:15:05 +00:00
CrazyMax
362691edfb
Merge pull request #523 from docker/dependabot/github_actions/codeql-actions-c83b7ed659
...
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
2026-10-14 12:13:53 +02:00
CrazyMax
8a21970e1f
Merge pull request #522 from docker/dependabot/github_actions/docker/setup-buildx-action-4.4.1
...
chore(deps): Bump docker/setup-buildx-action from 4.3.0 to 4.4.1
2026-10-14 12:13:42 +02:00
CrazyMax
16643d932d
Merge pull request #521 from docker/dependabot/github_actions/codecov/codecov-action-7.1.1
...
chore(deps): Bump codecov/codecov-action from 7.1.0 to 7.1.1
2026-10-14 12:13:31 +02:00
CrazyMax
26d0f53c60
Merge pull request #517 from docker/dependabot/github_actions/docker/bake-action-7.4.0
...
chore(deps): Bump docker/bake-action from 7.3.0 to 7.4.0
2026-10-14 12:13:20 +02:00
CrazyMax
234eb69700
Merge pull request #516 from docker/dependabot/github_actions/docker/setup-qemu-action-4.4.0
...
chore(deps): Bump docker/setup-qemu-action from 4.3.0 to 4.4.0
2026-10-14 12:13:08 +02:00
CrazyMax
dae0adf6d7
Merge pull request #530 from crazy-max/vars-json-support
...
accept JSON arrays for bake vars to preserve multiline values
2026-10-14 12:12:24 +02:00
CrazyMax
df3ceb6aca
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-13 09:34:39 +02:00
CrazyMax
a0190aa0a4
accept JSON arrays for bake vars to preserve multiline values
...
Parse the vars input as a JSON array of strings, falling back to the
existing list parser when JSON parsing fails. Preserve multiline values,
whitespace, and literal quotes in each Buildx --var argument.
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-13 09:34:38 +02:00
dependabot[bot]
8eb5e0bbb1
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd )
Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-21 23:46:17 +00:00
dependabot[bot]
62ba32beed
chore(deps): Bump docker/setup-buildx-action from 4.3.0 to 4.4.1
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.3.0 to 4.4.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-18 23:46:29 +00:00
dependabot[bot]
bdd2abf86b
chore(deps): Bump codecov/codecov-action from 7.1.0 to 7.1.1
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 7.1.0 to 7.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/0b35c9ecc4f0529d0eb674914510c22f85b196b4...303a32d7a59b442fa8d48b6a1cc6825c09c847a5 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-18 23:46:22 +00:00
dependabot[bot]
b1c79e2754
chore(deps): Bump docker/bake-action from 7.3.0 to 7.4.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b...018cb6412ab401ebaa809aa5f85966b74628600f )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-17 13:59:53 +00:00
dependabot[bot]
163579973f
chore(deps): Bump docker/setup-qemu-action from 4.3.0 to 4.4.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/1f40c72289eff860ee54a304f1438e3cff362e0a...99012661954931238ded8c8b007157a8430204e1 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-17 13:59:34 +00:00
CrazyMax
cac84ca08e
Merge pull request #515 from docker/dependabot/github_actions/codecov/codecov-action-7.1.0
...
chore(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.0
2026-09-17 15:57:03 +02:00
CrazyMax
b5f81af00e
Merge pull request #514 from crazy-max/subaction-matrix-typescript
...
move the matrix subaction to TypeScript
2026-09-17 15:56:34 +02:00
dependabot[bot]
a26212ded7
chore(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...0b35c9ecc4f0529d0eb674914510c22f85b196b4 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 23:47:36 +00:00
CrazyMax
f3c42622c6
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-09-15 21:33:24 +02:00
CrazyMax
0d76bb5b42
Use toolkit helpers and simplify matrix generation
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-09-15 21:31:11 +02:00
CrazyMax
6177c27edd
Preserve names in the matrix subaction build
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-09-15 12:07:19 +02:00
CrazyMax
e715f0d6af
Replace Yarn catalogs with explicit dependency ranges
...
Dependabot does not yet support updating Yarn catalog definitions in .yarnrc.yml. Keep explicit version ranges in both workspace manifests so Dependabot can continue updating shared dependencies.
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-09-15 12:07:19 +02:00
Julian Liebig
0b4de374a9
Add subaction/matrix to dependabot for npm
...
Signed-off-by: Julian Liebig <julian.liebig@tudock.de >
2026-09-15 12:07:18 +02:00
Julian Liebig
880848a056
Add subaction/matrix to update-dist and dev.Dockerfile
...
Signed-off-by: Julian Liebig <julian.liebig@tudock.de >
2026-09-15 12:07:18 +02:00
Julian Liebig
265eed2e75
Replace github-script with separate package
...
Signed-off-by: Julian Liebig <julian.liebig@tudock.de >
2026-09-15 12:07:17 +02:00
Julian Liebig
57e4f89b3c
Add common packages to catalog
...
Signed-off-by: Julian Liebig <julian.liebig@tudock.de >
2026-09-15 11:49:07 +02:00
CrazyMax
018cb6412a
Merge pull request #512 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c
...
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
v7.4.0
2026-09-15 09:08:04 +02:00
CrazyMax
68e5dfc0ff
Merge pull request #513 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.100.0
...
chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
2026-09-15 09:07:14 +02:00
dependabot[bot]
67548edc59
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63 )
Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-14 23:45:58 +00:00
github-actions[bot]
ad1760d7fc
[dependabot skip] chore: update generated content
2026-09-14 23:44:22 +00:00
dependabot[bot]
a2262a0f64
chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
...
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit ) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases )
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.99.0...v0.100.0 )
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.100.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-14 23:43:20 +00:00
CrazyMax
e04a701cb4
Merge pull request #511 from crazy-max/buildx-error-message
...
use the shared Buildx error summary helper
2026-09-13 12:45:44 +02:00
CrazyMax
0b5e3e4429
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-09-11 14:01:06 +02:00
CrazyMax
b0aab10764
use the shared Buildx error summary helper
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-09-11 14:01:06 +02:00
CrazyMax
c86773a1b1
Merge pull request #510 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.99.0
...
chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
2026-09-11 13:45:11 +02:00
github-actions[bot]
70f5dd804d
[dependabot skip] chore: update generated content
2026-09-11 11:40:08 +00:00
dependabot[bot]
cb6c9f045c
chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
...
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit ) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases )
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.98.0...v0.99.0 )
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.99.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-11 11:39:08 +00:00