docker/bake-action
0
0
Fork 0
mirror of https://github.com/docker/bake-action.git synced 2026-10-14 11:20:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
845 Commits 17 Branches 70 Tags
f3c42622c69c225dc7703bfa8db3522555648dc3
Commit Graph
845 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMax f3c42622c6 chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 21:33:24 +02:00
CrazyMax 0d76bb5b42 Use toolkit helpers and simplify matrix generation 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 21:31:11 +02:00
CrazyMax 6177c27edd Preserve names in the matrix subaction build 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 12:07:19 +02:00
CrazyMax e715f0d6af Replace Yarn catalogs with explicit dependency ranges 
Dependabot does not yet support updating Yarn catalog definitions in .yarnrc.yml. Keep explicit version ranges in both workspace manifests so Dependabot can continue updating shared dependencies.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-15 12:07:19 +02:00
Julian Liebig 0b4de374a9 Add subaction/matrix to dependabot for npm 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 12:07:18 +02:00
Julian Liebig 880848a056 Add subaction/matrix to update-dist and dev.Dockerfile 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 12:07:18 +02:00
Julian Liebig 265eed2e75 Replace github-script with separate package 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 12:07:17 +02:00
Julian Liebig 57e4f89b3c Add common packages to catalog 
Signed-off-by: Julian Liebig <julian.liebig@tudock.de>
 2026-09-15 11:49:07 +02:00
CrazyMax 018cb6412a Merge pull request #512 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c 
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
v7 v7.4.0 		2026-09-15 09:08:04 +02:00
CrazyMax 68e5dfc0ff Merge pull request #513 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.100.0 
chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
 2026-09-15 09:07:14 +02:00
dependabot[bot] 67548edc59 chore(deps): Bump the codeql-actions group across 1 directory with 2 updates 
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-14 23:45:58 +00:00
github-actions[bot] ad1760d7fc [dependabot skip] chore: update generated content 2026-09-14 23:44:22 +00:00
dependabot[bot] a2262a0f64 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0 
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.99.0...v0.100.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.100.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-14 23:43:20 +00:00
CrazyMax e04a701cb4 Merge pull request #511 from crazy-max/buildx-error-message 
use the shared Buildx error summary helper
 2026-09-13 12:45:44 +02:00
CrazyMax 0b5e3e4429 chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-11 14:01:06 +02:00
CrazyMax b0aab10764 use the shared Buildx error summary helper 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-11 14:01:06 +02:00
CrazyMax c86773a1b1 Merge pull request #510 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.99.0 
chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
 2026-09-11 13:45:11 +02:00
github-actions[bot] 70f5dd804d [dependabot skip] chore: update generated content 2026-09-11 11:40:08 +00:00
dependabot[bot] cb6c9f045c chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0 
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.98.0...v0.99.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-11 11:39:08 +00:00
CrazyMax b49cc9d12d Merge pull request #508 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2 
chore(deps): Bump js-yaml from 4.3.1 to 4.3.2
 2026-09-11 13:38:25 +02:00
Tõnis Tiigi d9969b0cc9 Merge pull request #509 from crazy-max/fix-metadata-workflow-commands 
prevent workflow command injection in metadata logs
 2026-09-10 18:13:35 -07:00
CrazyMax 4d7ac129ad chore: update generated content 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-10 10:55:27 +02:00
CrazyMax 04c437fcdf prevent workflow command injection in metadata logs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-09-10 10:55:27 +02:00
dependabot[bot] e8b6bd1d7b chore(deps): Bump js-yaml from 4.3.1 to 4.3.2 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:53:05 +00:00
CrazyMax 2d51777c5e Merge pull request #502 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.98.0 
chore(deps): Bump @docker/actions-toolkit from 0.92.0 to 0.98.0
 2026-09-10 10:51:17 +02:00
github-actions[bot] 54a6fbc24b [dependabot skip] chore: update generated content 2026-09-10 08:48:39 +00:00
dependabot[bot] 47e8aa20d3 chore(deps): Bump @docker/actions-toolkit from 0.92.0 to 0.98.0 
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.98.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.92.0...v0.98.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:47:40 +00:00
CrazyMax b50c9b39ea Merge pull request #492 from docker/dependabot/npm_and_yarn/undici-6.28.0 
chore(deps): Bump undici from 6.27.0 to 6.28.1
 2026-09-10 10:45:29 +02:00
github-actions[bot] 2aa42a72ca [dependabot skip] chore: update generated content 2026-09-10 08:39:04 +00:00
dependabot[bot] 9138d24c91 chore(deps): Bump undici from 6.27.0 to 6.28.1 
Bumps [undici](https://github.com/nodejs/undici) from 6.27.0 to 6.28.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.27.0...v6.28.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:38:05 +00:00
CrazyMax de263d0cfc Merge pull request #491 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.18 
chore(deps): Bump brace-expansion from 1.1.13 to 1.1.18
 2026-09-10 10:36:01 +02:00
CrazyMax e0350ccd6f Merge pull request #507 from docker/dependabot/github_actions/docker/setup-buildx-action-4.3.0 
chore(deps): Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
 2026-09-10 10:35:30 +02:00
CrazyMax ca4da0570b Merge pull request #506 from docker/dependabot/github_actions/actions/setup-node-7.0.0 
chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0
 2026-09-10 10:35:06 +02:00
CrazyMax 13504aa908 Merge pull request #505 from docker/dependabot/github_actions/actions/checkout-7.0.1 
chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1
 2026-09-10 10:34:01 +02:00
CrazyMax df7d299981 Merge pull request #504 from docker/dependabot/github_actions/docker/setup-qemu-action-4.3.0 
chore(deps): Bump docker/setup-qemu-action from 4.2.0 to 4.3.0
 2026-09-10 10:32:59 +02:00
CrazyMax b06502f17b Merge pull request #503 from docker/dependabot/github_actions/codeql-actions-f1ba23a83b 
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
 2026-09-10 10:32:42 +02:00
github-actions[bot] 6aca9793f8 [dependabot skip] chore: update generated content 2026-09-10 08:30:34 +00:00
dependabot[bot] bdadca2fa5 chore(deps): Bump brace-expansion from 1.1.13 to 1.1.18 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.13 to 1.1.18.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:29:33 +00:00
dependabot[bot] 88afd60568 chore(deps): Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:27:23 +00:00
dependabot[bot] cfb96533dd chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:27:17 +00:00
CrazyMax 5fa847cc65 Merge pull request #501 from docker/dependabot/github_actions/crazy-max-dot-github-6f52f8ed50 
chore(deps): Bump the crazy-max-dot-github group across 1 directory with 2 updates
 2026-09-10 10:27:17 +02:00
dependabot[bot] e9d995551f chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1 
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:27:09 +00:00
dependabot[bot] 6936e32bf7 chore(deps): Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/96fe6ef7f33517b61c61be40b68a1882f3264fb8...1f40c72289eff860ee54a304f1438e3cff362e0a)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:26:54 +00:00
CrazyMax 32b239003d Merge pull request #499 from docker/dependabot/npm_and_yarn/nanoid-3.3.18 
chore(deps): Bump nanoid from 3.3.16 to 3.3.18
 2026-09-10 10:26:54 +02:00
dependabot[bot] 5d7bc790dd chore(deps): Bump the codeql-actions group across 1 directory with 2 updates 
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.3 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...cdf488f595d80d6e07e03d4674febd5ab45fa938)

Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...cdf488f595d80d6e07e03d4674febd5ab45fa938)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:26:37 +00:00
dependabot[bot] 6a50e5a19f chore(deps): Bump nanoid from 3.3.16 to 3.3.18 
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.16 to 3.3.18.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.16...3.3.18)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:24:53 +00:00
dependabot[bot] f2a2b368df chore(deps): Bump the crazy-max-dot-github group across 1 directory with 2 updates 
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-10 08:24:26 +00:00
CrazyMax 7c26c65143 Merge pull request #500 from docker/dependabot/npm_and_yarn/csv-parse-7.0.2 
chore(deps): Bump csv-parse from 7.0.0 to 7.0.2
 2026-09-10 10:23:12 +02:00
CrazyMax 247dd23eb8 Merge pull request #498 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8 
chore(deps): Bump @humanfs/node from 0.16.7 to 0.16.8
 2026-09-10 10:22:42 +02:00
CrazyMax bdb41aa901 Merge pull request #497 from docker/dependabot/npm_and_yarn/postcss-selector-parser-7.1.5 
chore(deps): Bump postcss-selector-parser from 7.1.1 to 7.1.5
 2026-09-10 10:22:30 +02:00