 CrazyMaxandGitHub
|
cca5ec7e31
|
Merge pull request #461 from docker/dependabot/github_actions/github/codeql-action-4.36.2
chore(deps): Bump github/codeql-action from 4.36.0 to 4.36.2
|
2026-07-01 16:28:48 +02:00 |
|
 CrazyMaxandGitHub
|
9bb9c1e603
|
Merge pull request #455 from docker/dependabot/github_actions/docker/setup-qemu-action-4.1.0
chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
|
2026-07-01 16:28:25 +02:00 |
|
 CrazyMaxandGitHub
|
b29485d339
|
Merge pull request #471 from crazy-max/fix-yarn-preapprove-actions-toolkit
chore: allow actions-toolkit to bypass yarn age gate
|
2026-07-01 13:59:05 +02:00 |
|
 CrazyMaxandGitHub
|
5a18691071
|
Merge pull request #470 from crazy-max/dependabot-skip-update-dist
dependabot: skip for update-dist commits
|
2026-07-01 13:58:51 +02:00 |
|
CrazyMax
|
d084f5c67c
|
chore: allow actions-toolkit to bypass yarn age gate
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2026-07-01 11:43:28 +02:00 |
|
 CrazyMaxandGitHub
|
614f3189db
|
Merge pull request #467 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
|
2026-07-01 11:10:50 +02:00 |
|
github-actions[bot]
|
dd895b6d93
|
chore: update generated content
|
2026-07-01 09:04:29 +00:00 |
|
 dependabot[bot]andGitHub
|
5a93982b87
|
chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0)
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.2.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-01 09:03:26 +00:00 |
|
 CrazyMaxandGitHub
|
fcd4bcf0fb
|
Merge pull request #469 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1
chore(deps): Bump @sigstore/core from 3.1.0 to 3.2.1
|
2026-07-01 10:40:18 +02:00 |
|
CrazyMax
|
78d3d29093
|
dependabot: skip for update-dist commits
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2026-06-30 11:08:44 +02:00 |
|
github-actions[bot]
|
dd49676d06
|
chore: update generated content
|
2026-06-29 14:17:56 +00:00 |
|
 dependabot[bot]andGitHub
|
6486829fe0
|
chore(deps): Bump @sigstore/core from 3.1.0 to 3.2.1
Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) from 3.1.0 to 3.2.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...@sigstore/core@3.2.1)
---
updated-dependencies:
- dependency-name: "@sigstore/core"
dependency-version: 3.2.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-29 14:17:01 +00:00 |
|
 CrazyMaxandGitHub
|
17834aedc8
|
Merge pull request #468 from crazy-max/fix-esbuild
preserve names in esbuild bundle
|
2026-06-29 16:14:48 +02:00 |
|
CrazyMax
|
350fb1d351
|
preserve names in esbuild bundle
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2026-06-29 14:59:43 +02:00 |
|
 CrazyMaxandGitHub
|
1cce7bd46e
|
Merge pull request #463 from docker/sec-cli/npm-ci-20260612-145931
fix: replace npm install with npm ci (20260612-145931)
|
2026-06-12 17:16:27 +02:00 |
|
 securityeng-bot[bot]andGitHub
|
b4a0d4268e
|
fix: use lockfile-aware install commands
|
2026-06-12 14:59:33 +00:00 |
|
 dependabot[bot]andGitHub
|
3b4df41f2a
|
chore(deps): Bump github/codeql-action from 4.36.0 to 4.36.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-08 23:51:10 +00:00 |
|
 dependabot[bot]andGitHub
|
e3cbcdcc32
|
chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-29 00:08:18 +00:00 |
|
 CrazyMaxandGitHub
|
b522ed9b9b
|
Merge pull request #453 from crazy-max/yarn-update
update yarn to 4.15.0
|
2026-05-28 18:41:14 +02:00 |
|
CrazyMax
|
3807abb13c
|
update yarn to 4.15.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2026-05-28 15:11:47 +02:00 |
|
 CrazyMaxandGitHub
|
b48e756491
|
Merge pull request #451 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.91.0
chore(deps): Bump @docker/actions-toolkit from 0.90.0 to 0.91.0
|
2026-05-28 10:40:54 +02:00 |
|
github-actions[bot]
|
16246e91d6
|
chore: update generated content
|
2026-05-28 08:18:46 +00:00 |
|
 dependabot[bot]andGitHub
|
78970d44df
|
chore(deps): Bump @docker/actions-toolkit from 0.90.0 to 0.91.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.91.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.90.0...v0.91.0)
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.91.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-28 08:17:51 +00:00 |
|
 CrazyMaxandGitHub
|
8d9e8e938e
|
Merge pull request #452 from docker/dependabot/npm_and_yarn/tmp-0.2.7
chore(deps): Bump tmp from 0.2.5 to 0.2.7
|
2026-05-28 10:15:26 +02:00 |
|
 CrazyMaxandGitHub
|
ed9d2dc915
|
Merge pull request #450 from docker/sec-cli/ignore-scripts-fix-20260527-192659
ci: add ignore-scripts to Node package manager config (20260527-192659)
|
2026-05-28 09:49:39 +02:00 |
|
github-actions[bot]
|
73284d0e36
|
chore: update generated content
|
2026-05-28 03:12:49 +00:00 |
|
 dependabot[bot]andGitHub
|
1358ed6549
|
chore(deps): Bump tmp from 0.2.5 to 0.2.7
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7)
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-28 03:11:53 +00:00 |
|
 securityeng-bot[bot]andAlexandre Vallières-Lagacé
|
d9caed87ad
|
ci: enforce ignore-scripts policy for Node package managers
|
2026-05-27 20:05:24 +00:00 |
|
 CrazyMaxandGitHub
|
d8437235bd
|
Merge pull request #449 from docker/dependabot/github_actions/subaction/matrix/actions/github-script-9.0.0
chore(deps): Bump actions/github-script from 8.0.0 to 9.0.0 in /subaction/matrix
|
2026-05-26 20:11:10 +02:00 |
|
 dependabot[bot]andGitHub
|
6f2e2568d5
|
chore(deps): Bump actions/github-script in /subaction/matrix
Bumps [actions/github-script](https://github.com/actions/github-script) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3)
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-26 17:14:51 +00:00 |
|
 Tõnis TiigiandGitHub
|
4e2003362d
|
Merge pull request #444 from crazy-max/dependabot-subdir
dependabot: scan matrix subaction
|
2026-05-26 10:12:12 -07:00 |
|
 CrazyMaxandGitHub
|
319deeae86
|
Merge pull request #447 from docker/dependabot/github_actions/github/codeql-action-4.36.0
chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0
|
2026-05-26 09:47:18 +02:00 |
|
 CrazyMaxandGitHub
|
7b33a5efc5
|
Merge pull request #446 from docker/dependabot/github_actions/docker/setup-buildx-action-4.1.0
chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
|
2026-05-26 09:46:58 +02:00 |
|
 CrazyMaxandGitHub
|
7155ebf2d8
|
Merge pull request #445 from docker/dependabot/github_actions/docker/metadata-action-6.1.0
chore(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0
|
2026-05-26 09:46:38 +02:00 |
|
 CrazyMaxandGitHub
|
a3634cba36
|
Merge pull request #448 from docker/dependabot/github_actions/docker/bake-action-7.2.0
chore(deps): Bump docker/bake-action from 7.1.0 to 7.2.0
|
2026-05-26 09:30:53 +02:00 |
|
 dependabot[bot]andGitHub
|
ef67877e47
|
chore(deps): Bump docker/bake-action from 7.1.0 to 7.2.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584)
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-26 05:05:18 +00:00 |
|
 dependabot[bot]andGitHub
|
51998f2e23
|
chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-26 05:05:08 +00:00 |
|
 dependabot[bot]andGitHub
|
c3213e2454
|
chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-26 05:03:41 +00:00 |
|
 dependabot[bot]andGitHub
|
cfa1977d2c
|
chore(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-26 05:03:27 +00:00 |
|
CrazyMax
|
67998fd5c4
|
dependabot: scan matrix subaction
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2026-05-23 02:05:24 +02:00 |
|
 CrazyMaxandGitHub
|
6614cfa25e
|
Merge pull request #425 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.88.0
chore(deps): Bump @docker/actions-toolkit from 0.87.0 to 0.90.0
v7.2.0
|
2026-05-21 15:32:33 +02:00 |
|
github-actions[bot]
|
0a925a2f44
|
chore: update generated content
|
2026-05-21 13:29:22 +00:00 |
|
 dependabot[bot]andGitHub
|
b9ca7428b9
|
chore(deps): Bump @docker/actions-toolkit from 0.87.0 to 0.90.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.87.0...v0.90.0)
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.88.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-21 13:28:23 +00:00 |
|
 CrazyMaxandGitHub
|
48e6359a4a
|
Merge pull request #429 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.7.1
chore(deps): Bump fast-xml-parser from 5.5.9 to 5.8.0
|
2026-05-21 15:26:23 +02:00 |
|
github-actions[bot]
|
d1523f495a
|
chore: update generated content
|
2026-05-21 13:24:20 +00:00 |
|
 dependabot[bot]andGitHub
|
a73f293b0b
|
chore(deps): Bump fast-xml-parser from 5.5.9 to 5.8.0
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.5.9 to 5.8.0.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.9...v5.8.0)
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.7.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-21 13:23:23 +00:00 |
|
 CrazyMaxandGitHub
|
bc584acc2a
|
Merge pull request #430 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
chore(deps): Bump @actions/core from 3.0.0 to 3.0.1
|
2026-05-21 15:20:46 +02:00 |
|
github-actions[bot]
|
23050a11b3
|
chore: update generated content
|
2026-05-21 13:18:58 +00:00 |
|
 dependabot[bot]andGitHub
|
7ae1cf6599
|
chore(deps): Bump @actions/core from 3.0.0 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 3.0.0 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-05-21 13:18:03 +00:00 |
|
 CrazyMaxandGitHub
|
e7934f8394
|
Merge pull request #432 from docker/dependabot/npm_and_yarn/postcss-8.5.10
chore(deps): Bump postcss from 8.5.6 to 8.5.10
|
2026-05-21 15:15:59 +02:00 |
|