837 Commits
Author SHA1 Message Date
CrazyMax 018cb6412a Merge pull request #512 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
v7 v7.4.0
2026-09-15 09:08:04 +02:00
CrazyMax 68e5dfc0ff Merge pull request #513 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.100.0
chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
2026-09-15 09:07:14 +02:00
dependabot[bot] 67548edc59 chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-14 23:45:58 +00:00
github-actions[bot] ad1760d7fc [dependabot skip] chore: update generated content 2026-09-14 23:44:22 +00:00
dependabot[bot] a2262a0f64 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.99.0...v0.100.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.100.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-14 23:43:20 +00:00
CrazyMax e04a701cb4 Merge pull request #511 from crazy-max/buildx-error-message
use the shared Buildx error summary helper
2026-09-13 12:45:44 +02:00
CrazyMax 0b5e3e4429 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-11 14:01:06 +02:00
CrazyMax b0aab10764 use the shared Buildx error summary helper
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-11 14:01:06 +02:00
CrazyMax c86773a1b1 Merge pull request #510 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.99.0
chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
2026-09-11 13:45:11 +02:00
github-actions[bot] 70f5dd804d [dependabot skip] chore: update generated content 2026-09-11 11:40:08 +00:00
dependabot[bot] cb6c9f045c chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.98.0...v0.99.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-11 11:39:08 +00:00
CrazyMax b49cc9d12d Merge pull request #508 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2
chore(deps): Bump js-yaml from 4.3.1 to 4.3.2
2026-09-11 13:38:25 +02:00
Tõnis Tiigi d9969b0cc9 Merge pull request #509 from crazy-max/fix-metadata-workflow-commands
prevent workflow command injection in metadata logs
2026-09-10 18:13:35 -07:00
CrazyMax 4d7ac129ad chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-10 10:55:27 +02:00
CrazyMax 04c437fcdf prevent workflow command injection in metadata logs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-10 10:55:27 +02:00
dependabot[bot] e8b6bd1d7b chore(deps): Bump js-yaml from 4.3.1 to 4.3.2
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:53:05 +00:00
CrazyMax 2d51777c5e Merge pull request #502 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.98.0
chore(deps): Bump @docker/actions-toolkit from 0.92.0 to 0.98.0
2026-09-10 10:51:17 +02:00
github-actions[bot] 54a6fbc24b [dependabot skip] chore: update generated content 2026-09-10 08:48:39 +00:00
dependabot[bot] 47e8aa20d3 chore(deps): Bump @docker/actions-toolkit from 0.92.0 to 0.98.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.98.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.92.0...v0.98.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:47:40 +00:00
CrazyMax b50c9b39ea Merge pull request #492 from docker/dependabot/npm_and_yarn/undici-6.28.0
chore(deps): Bump undici from 6.27.0 to 6.28.1
2026-09-10 10:45:29 +02:00
github-actions[bot] 2aa42a72ca [dependabot skip] chore: update generated content 2026-09-10 08:39:04 +00:00
dependabot[bot] 9138d24c91 chore(deps): Bump undici from 6.27.0 to 6.28.1
Bumps [undici](https://github.com/nodejs/undici) from 6.27.0 to 6.28.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.27.0...v6.28.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:38:05 +00:00
CrazyMax de263d0cfc Merge pull request #491 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.18
chore(deps): Bump brace-expansion from 1.1.13 to 1.1.18
2026-09-10 10:36:01 +02:00
CrazyMax e0350ccd6f Merge pull request #507 from docker/dependabot/github_actions/docker/setup-buildx-action-4.3.0
chore(deps): Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
2026-09-10 10:35:30 +02:00
CrazyMax ca4da0570b Merge pull request #506 from docker/dependabot/github_actions/actions/setup-node-7.0.0
chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0
2026-09-10 10:35:06 +02:00
CrazyMax 13504aa908 Merge pull request #505 from docker/dependabot/github_actions/actions/checkout-7.0.1
chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1
2026-09-10 10:34:01 +02:00
CrazyMax df7d299981 Merge pull request #504 from docker/dependabot/github_actions/docker/setup-qemu-action-4.3.0
chore(deps): Bump docker/setup-qemu-action from 4.2.0 to 4.3.0
2026-09-10 10:32:59 +02:00
CrazyMax b06502f17b Merge pull request #503 from docker/dependabot/github_actions/codeql-actions-f1ba23a83b
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
2026-09-10 10:32:42 +02:00
github-actions[bot] 6aca9793f8 [dependabot skip] chore: update generated content 2026-09-10 08:30:34 +00:00
dependabot[bot] bdadca2fa5 chore(deps): Bump brace-expansion from 1.1.13 to 1.1.18
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.13 to 1.1.18.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:29:33 +00:00
dependabot[bot] 88afd60568 chore(deps): Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:27:23 +00:00
dependabot[bot] cfb96533dd chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:27:17 +00:00
CrazyMax 5fa847cc65 Merge pull request #501 from docker/dependabot/github_actions/crazy-max-dot-github-6f52f8ed50
chore(deps): Bump the crazy-max-dot-github group across 1 directory with 2 updates
2026-09-10 10:27:17 +02:00
dependabot[bot] e9d995551f chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:27:09 +00:00
dependabot[bot] 6936e32bf7 chore(deps): Bump docker/setup-qemu-action from 4.2.0 to 4.3.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/96fe6ef7f33517b61c61be40b68a1882f3264fb8...1f40c72289eff860ee54a304f1438e3cff362e0a)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:26:54 +00:00
CrazyMax 32b239003d Merge pull request #499 from docker/dependabot/npm_and_yarn/nanoid-3.3.18
chore(deps): Bump nanoid from 3.3.16 to 3.3.18
2026-09-10 10:26:54 +02:00
dependabot[bot] 5d7bc790dd chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.3 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...cdf488f595d80d6e07e03d4674febd5ab45fa938)

Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...cdf488f595d80d6e07e03d4674febd5ab45fa938)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:26:37 +00:00
dependabot[bot] 6a50e5a19f chore(deps): Bump nanoid from 3.3.16 to 3.3.18
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.16 to 3.3.18.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.16...3.3.18)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:24:53 +00:00
dependabot[bot] f2a2b368df chore(deps): Bump the crazy-max-dot-github group across 1 directory with 2 updates
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 08:24:26 +00:00
CrazyMax 7c26c65143 Merge pull request #500 from docker/dependabot/npm_and_yarn/csv-parse-7.0.2
chore(deps): Bump csv-parse from 7.0.0 to 7.0.2
2026-09-10 10:23:12 +02:00
CrazyMax 247dd23eb8 Merge pull request #498 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
chore(deps): Bump @humanfs/node from 0.16.7 to 0.16.8
2026-09-10 10:22:42 +02:00
CrazyMax bdb41aa901 Merge pull request #497 from docker/dependabot/npm_and_yarn/postcss-selector-parser-7.1.5
chore(deps): Bump postcss-selector-parser from 7.1.1 to 7.1.5
2026-09-10 10:22:30 +02:00
CrazyMax be9b5f2ceb Merge pull request #496 from docker/dependabot/npm_and_yarn/js-yaml-4.3.1
chore(deps): Bump js-yaml from 4.3.0 to 4.3.1
2026-09-10 10:22:04 +02:00
CrazyMax 58f96ccd6a Merge pull request #489 from docker/dependabot/npm_and_yarn/postcss-8.5.25
chore(deps): Bump postcss from 8.5.10 to 8.5.25
2026-09-10 10:21:49 +02:00
CrazyMax 1c12310efe Merge pull request #477 from docker/dependabot/github_actions/docker/bake-action-7.3.0
chore(deps): Bump docker/bake-action from 7.2.0 to 7.3.0
2026-09-10 10:21:24 +02:00
CrazyMax 66aaa34cfc Merge pull request #478 from docker/dependabot/github_actions/docker/setup-qemu-action-4.2.0
chore(deps): Bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-09-10 10:21:14 +02:00
CrazyMax 6d882e51e6 Merge pull request #479 from docker/dependabot/github_actions/docker/setup-buildx-action-4.2.0
chore(deps): Bump docker/setup-buildx-action from 4.1.0 to 4.2.0
2026-09-10 10:21:03 +02:00
CrazyMax 21a2db88cc Merge pull request #480 from docker/dependabot/github_actions/docker/metadata-action-6.2.0
chore(deps): Bump docker/metadata-action from 6.1.0 to 6.2.0
2026-09-10 10:20:51 +02:00
CrazyMax 4b51ff4bd2 Merge pull request #483 from docker/dependabot/github_actions/codeql-actions-af2beed448
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
2026-09-10 10:20:38 +02:00
github-actions[bot] 9001f7c243 [dependabot skip] chore: update generated content 2026-09-09 10:08:06 +00:00