docker/bake-action
0
0
Fork 0
mirror of https://github.com/docker/bake-action.git synced 2026-10-15 20:00:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
865 Commits 9 Branches 71 Tags
d8e2cf658bb87a5481f437b3a08afaa5a2848fbe
Commit Graph
865 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMax d8e2cf658b Merge pull request #534 from docker/dependabot/npm_and_yarn/postcss-selector-parser-7.1.6 
chore(deps): Bump postcss-selector-parser from 7.1.5 to 7.1.6
 2026-10-14 12:28:37 +02:00
CrazyMax bdcd95b643 Merge pull request #533 from docker/dependabot/npm_and_yarn/source-map-js-1.2.2 
chore(deps): Bump source-map-js from 1.2.1 to 1.2.2
 2026-10-14 12:28:11 +02:00
dependabot[bot] d6fa94294c chore(deps): Bump postcss-selector-parser from 7.1.5 to 7.1.6 
Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) from 7.1.5 to 7.1.6.
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/7.1.5...7.1.6)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 10:15:21 +00:00
dependabot[bot] 05fbcc04e1 chore(deps): Bump source-map-js from 1.2.1 to 1.2.2 
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 10:15:05 +00:00
CrazyMax 362691edfb Merge pull request #523 from docker/dependabot/github_actions/codeql-actions-c83b7ed659 
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
 2026-10-14 12:13:53 +02:00
CrazyMax 8a21970e1f Merge pull request #522 from docker/dependabot/github_actions/docker/setup-buildx-action-4.4.1 
chore(deps): Bump docker/setup-buildx-action from 4.3.0 to 4.4.1
 2026-10-14 12:13:42 +02:00
CrazyMax 16643d932d Merge pull request #521 from docker/dependabot/github_actions/codecov/codecov-action-7.1.1 
chore(deps): Bump codecov/codecov-action from 7.1.0 to 7.1.1
 2026-10-14 12:13:31 +02:00
CrazyMax 26d0f53c60 Merge pull request #517 from docker/dependabot/github_actions/docker/bake-action-7.4.0 
chore(deps): Bump docker/bake-action from 7.3.0 to 7.4.0
 2026-10-14 12:13:20 +02:00
CrazyMax 234eb69700 Merge pull request #516 from docker/dependabot/github_actions/docker/setup-qemu-action-4.4.0 
chore(deps): Bump docker/setup-qemu-action from 4.3.0 to 4.4.0
 2026-10-14 12:13:08 +02:00
CrazyMax dae0adf6d7 Merge pull request #530 from crazy-max/vars-json-support 
accept JSON arrays for bake vars to preserve multiline values
 2026-10-14 12:12:24 +02:00
CrazyMax df3ceb6aca chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-10-13 09:34:39 +02:00
CrazyMax a0190aa0a4 accept JSON arrays for bake vars to preserve multiline values 
Parse the vars input as a JSON array of strings, falling back to the
existing list parser when JSON parsing fails. Preserve multiline values,
whitespace, and literal quotes in each Buildx --var argument.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-10-13 09:34:38 +02:00
dependabot[bot] 8eb5e0bbb1 chore(deps): Bump the codeql-actions group across 1 directory with 2 updates 
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-21 23:46:17 +00:00
dependabot[bot] 62ba32beed chore(deps): Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.3.0 to 4.4.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-18 23:46:29 +00:00
dependabot[bot] bdd2abf86b chore(deps): Bump codecov/codecov-action from 7.1.0 to 7.1.1 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.1.0 to 7.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/0b35c9ecc4f0529d0eb674914510c22f85b196b4...303a32d7a59b442fa8d48b6a1cc6825c09c847a5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-18 23:46:22 +00:00
dependabot[bot] b1c79e2754 chore(deps): Bump docker/bake-action from 7.3.0 to 7.4.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b...018cb6412ab401ebaa809aa5f85966b74628600f)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-17 13:59:53 +00:00
dependabot[bot] 163579973f chore(deps): Bump docker/setup-qemu-action from 4.3.0 to 4.4.0 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/1f40c72289eff860ee54a304f1438e3cff362e0a...99012661954931238ded8c8b007157a8430204e1)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-17 13:59:34 +00:00
CrazyMax cac84ca08e Merge pull request #515 from docker/dependabot/github_actions/codecov/codecov-action-7.1.0 
chore(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.0
 2026-09-17 15:57:03 +02:00
CrazyMax b5f81af00e Merge pull request #514 from crazy-max/subaction-matrix-typescript 
move the matrix subaction to TypeScript
 2026-09-17 15:56:34 +02:00
dependabot[bot] a26212ded7 chore(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...0b35c9ecc4f0529d0eb674914510c22f85b196b4)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-16 23:47:36 +00:00
CrazyMax f3c42622c6 chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 21:33:24 +02:00
CrazyMax 0d76bb5b42 Use toolkit helpers and simplify matrix generation 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 21:31:11 +02:00
CrazyMax 6177c27edd Preserve names in the matrix subaction build 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 12:07:19 +02:00
CrazyMax e715f0d6af Replace Yarn catalogs with explicit dependency ranges 
Dependabot does not yet support updating Yarn catalog definitions in .yarnrc.yml. Keep explicit version ranges in both workspace manifests so Dependabot can continue updating shared dependencies.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 12:07:19 +02:00
Julian Liebig 0b4de374a9 Add subaction/matrix to dependabot for npm 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 12:07:18 +02:00
Julian Liebig 880848a056 Add subaction/matrix to update-dist and dev.Dockerfile 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 12:07:18 +02:00
Julian Liebig 265eed2e75 Replace github-script with separate package 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 12:07:17 +02:00
Julian Liebig 57e4f89b3c Add common packages to catalog 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 11:49:07 +02:00
CrazyMax 018cb6412a Merge pull request #512 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c 
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
v7.4.0 		2026-09-15 09:08:04 +02:00
CrazyMax 68e5dfc0ff Merge pull request #513 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.100.0 
chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
 2026-09-15 09:07:14 +02:00
dependabot[bot] 67548edc59 chore(deps): Bump the codeql-actions group across 1 directory with 2 updates 
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-14 23:45:58 +00:00
github-actions[bot] ad1760d7fc [dependabot skip] chore: update generated content 2026-09-14 23:44:22 +00:00
dependabot[bot] a2262a0f64 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0 
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.99.0...v0.100.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.100.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-14 23:43:20 +00:00
CrazyMax e04a701cb4 Merge pull request #511 from crazy-max/buildx-error-message 
use the shared Buildx error summary helper
 2026-09-13 12:45:44 +02:00
CrazyMax 0b5e3e4429 chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-11 14:01:06 +02:00
CrazyMax b0aab10764 use the shared Buildx error summary helper 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-11 14:01:06 +02:00
CrazyMax c86773a1b1 Merge pull request #510 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.99.0 
chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
 2026-09-11 13:45:11 +02:00
github-actions[bot] 70f5dd804d [dependabot skip] chore: update generated content 2026-09-11 11:40:08 +00:00
dependabot[bot] cb6c9f045c chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0 
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.98.0...v0.99.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-11 11:39:08 +00:00
CrazyMax b49cc9d12d Merge pull request #508 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2 
chore(deps): Bump js-yaml from 4.3.1 to 4.3.2
 2026-09-11 13:38:25 +02:00
Tõnis Tiigi d9969b0cc9 Merge pull request #509 from crazy-max/fix-metadata-workflow-commands 
prevent workflow command injection in metadata logs
 2026-09-10 18:13:35 -07:00
CrazyMax 4d7ac129ad chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-10 10:55:27 +02:00
CrazyMax 04c437fcdf prevent workflow command injection in metadata logs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-10 10:55:27 +02:00
dependabot[bot] e8b6bd1d7b chore(deps): Bump js-yaml from 4.3.1 to 4.3.2 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:53:05 +00:00
CrazyMax 2d51777c5e Merge pull request #502 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.98.0 
chore(deps): Bump @docker/actions-toolkit from 0.92.0 to 0.98.0
 2026-09-10 10:51:17 +02:00
github-actions[bot] 54a6fbc24b [dependabot skip] chore: update generated content 2026-09-10 08:48:39 +00:00
dependabot[bot] 47e8aa20d3 chore(deps): Bump @docker/actions-toolkit from 0.92.0 to 0.98.0 
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.98.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.92.0...v0.98.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:47:40 +00:00
CrazyMax b50c9b39ea Merge pull request #492 from docker/dependabot/npm_and_yarn/undici-6.28.0 
chore(deps): Bump undici from 6.27.0 to 6.28.1
 2026-09-10 10:45:29 +02:00
github-actions[bot] 2aa42a72ca [dependabot skip] chore: update generated content 2026-09-10 08:39:04 +00:00
dependabot[bot] 9138d24c91 chore(deps): Bump undici from 6.27.0 to 6.28.1 
Bumps [undici](https://github.com/nodejs/undici) from 6.27.0 to 6.28.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.27.0...v6.28.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:38:05 +00:00