chore(deps): bump the crazy-max-dot-github group with 2 updates

Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #101 from crazy-max/yarn-update
2026-06-09 06:48:43 +02:00 · 2026-06-08 01:33:06 +00:00 · 2026-05-28 18:45:01 +02:00 · 2026-05-28 15:13:46 +02:00 · 2026-05-28 10:22:30 +02:00 · 2026-05-28 09:59:38 +02:00
7 changed files with 129 additions and 126 deletions
@@ -11,7 +11,7 @@ on:
 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@9ba6e6f9450baf3b1237f8035c1fdc45932510bd # v1.8.0
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@716fd1c51a46c5d93a41d44a94b439c9ee802536 # v1.10.0
    permissions:
      contents: read
      pull-requests: write
@@ -19,7 +19,7 @@ on:
 jobs:
  zizmor:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@9ba6e6f9450baf3b1237f8035c1fdc45932510bd # v1.8.0
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@716fd1c51a46c5d93a41d44a94b439c9ee802536 # v1.10.0
    permissions:
      contents: read
      security-events: write
@@ -1,10 +1,10 @@
 # https://yarnpkg.com/configuration/yarnrc
-compressionLevel: mixed
+nodeLinker: node-modules
 enableGlobalCache: false
 enableHardenedMode: true
 logFilters:
  - code: YN0004
    level: discard
  - code: YN0013
    level: discard
  - code: YN0019
@@ -14,4 +14,8 @@ logFilters:
  - code: YN0086
    level: discard
-nodeLinker: node-modules
+compressionLevel: mixed
 enableGlobalCache: false
 enableHardenedMode: true
 enableScripts: false
 npmMinimalAgeGate: 2d
@@ -21,9 +21,9 @@
  ],
  "author": "Docker Inc.",
  "license": "Apache-2.0",
-  "packageManager": "yarn@4.9.2",
+  "packageManager": "yarn@4.15.0",
  "dependencies": {
-    "@actions/core": "^3.0.0",
+    "@actions/core": "^3.0.1",
    "@docker/actions-toolkit": "^0.91.0"
  },
  "devDependencies": {
@@ -2,7 +2,7 @@
 # Manual changes might be lost - proceed with caution!
 __metadata:
-  version: 8
+  version: 10
  cacheKey: 10
 "@aashutoshrathi/word-wrap@npm:^1.2.3":
@@ -2814,7 +2814,7 @@ __metadata:
  version: 0.0.0-use.local
  resolution: "docker-setup-compose@workspace:."
  dependencies:
-    "@actions/core": "npm:^3.0.0"
+    "@actions/core": "npm:^3.0.1"
    "@docker/actions-toolkit": "npm:^0.91.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/node": "npm:^24.11.0"
Author	SHA1	Message	Date
dependabot[bot]	317e0e2271	chore(deps): bump the crazy-max-dot-github group with 2 updates Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-08 01:33:06 +00:00
CrazyMax	dd8b913e80	Merge pull request #101 from crazy-max/yarn-update update yarn to 4.15.0	2026-05-28 18:45:01 +02:00
CrazyMax	168cd6c426	update yarn to 4.15.0 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-05-28 15:13:46 +02:00
CrazyMax	410c00e878	Merge pull request #100 from docker/dependabot/npm_and_yarn/actions/core-3.0.1 chore(deps): bump @actions/core from 3.0.0 to 3.0.1	2026-05-28 10:22:30 +02:00
CrazyMax	5d29e18d06	Merge pull request #99 from docker/sec-cli/ignore-scripts-fix-20260527-193420 ci: add ignore-scripts to Node package manager config (20260527-193420)	2026-05-28 09:59:38 +02:00
github-actions[bot]	70b1359563	chore: update generated content	2026-05-28 01:58:55 +00:00
dependabot[bot]	f0bcefd12e	chore(deps): bump @actions/core from 3.0.0 to 3.0.1 Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 3.0.0 to 3.0.1. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-28 01:58:09 +00:00
securityeng-bot[bot]	41e3c799a3	ci: enforce ignore-scripts policy for Node package managers	2026-05-27 20:05:06 +00:00