Commit Graph
100 Commits
Author SHA1 Message Date
CrazyMax d1b4d6a4ee Merge pull request #1605 from docker/dependabot/npm_and_yarn/js-yaml-4.3.1
chore(deps): Bump js-yaml from 4.3.0 to 4.3.1
2026-09-09 11:04:47 +02:00
CrazyMax 12f4b5e353 Merge pull request #1613 from docker/dependabot/npm_and_yarn/csv-parse-7.0.2
chore(deps): Bump csv-parse from 7.0.0 to 7.0.2
2026-09-09 11:04:24 +02:00
CrazyMax 5d2ba96cd6 Merge pull request #1611 from docker/dependabot/npm_and_yarn/nanoid-3.3.18
chore(deps): Bump nanoid from 3.3.16 to 3.3.18
2026-09-09 11:03:24 +02:00
CrazyMax 15b26a20de Merge pull request #1606 from docker/dependabot/npm_and_yarn/postcss-selector-parser-7.1.5
chore(deps): Bump postcss-selector-parser from 7.1.1 to 7.1.5
2026-09-09 10:59:53 +02:00
CrazyMax cc48d67973 Merge pull request #1609 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
chore(deps): Bump @humanfs/node from 0.16.7 to 0.16.8
2026-09-09 10:59:21 +02:00
CrazyMax 4a5b66783d Merge pull request #1590 from docker/dependabot/npm_and_yarn/postcss-8.5.25
chore(deps): Bump postcss from 8.5.10 to 8.5.25
2026-09-09 10:58:54 +02:00
CrazyMax 56ba23a372 Merge pull request #1594 from docker/dependabot/npm_and_yarn/undici-6.28.0
chore(deps): Bump undici from 6.27.0 to 6.28.0
2026-09-09 10:58:25 +02:00
CrazyMax ce50cab44a Merge pull request #1607 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.4
chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4
2026-09-09 10:58:07 +02:00
CrazyMax c039773389 Merge pull request #1608 from docker/dependabot/github_actions/docker/setup-qemu-action-4.3.0
chore(deps): Bump docker/setup-qemu-action from 4.2.0 to 4.3.0
2026-09-09 10:57:54 +02:00
CrazyMax 2b7168e974 Merge pull request #1604 from docker/dependabot/github_actions/docker/setup-buildx-action-4.3.0
chore(deps): Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
2026-09-09 10:57:45 +02:00
CrazyMax fff1612ee1 Merge pull request #1602 from docker/dependabot/github_actions/crazy-max-dot-github-6f52f8ed50
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-09-09 10:57:34 +02:00
CrazyMax 97f9a753b7 Merge pull request #1596 from docker/dependabot/github_actions/codeql-actions-97c731b4de
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
2026-09-09 10:57:22 +02:00
CrazyMax 2ca78c6bec Merge pull request #1595 from crazy-max/dockerhub-oidc
ci(e2e): use Docker Hub OIDC for test image
2026-08-10 19:39:20 +02:00
CrazyMax 2a30ab2a50 ci(e2e): use Docker Hub OIDC for test image
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-06 10:16:17 +02:00
CrazyMax b976998676 Merge pull request #1601 from docker/dependabot/github_actions/docker/login-action-4.6.0
chore(deps): Bump docker/login-action from 4.2.0 to 4.6.0
2026-08-06 10:14:57 +02:00
CrazyMax 9b5c9c8d06 Merge pull request #1600 from docker/dependabot/github_actions/actions/setup-node-7.0.0
chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0
2026-08-06 10:11:48 +02:00
CrazyMax d0461ab5b3 Merge pull request #1599 from docker/dependabot/github_actions/actions/checkout-7.0.1
chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1
2026-08-06 10:11:31 +02:00
CrazyMax 0d6e2d7127 Merge pull request #1598 from docker/dependabot/github_actions/docker/setup-buildx-action-4.2.0
chore(deps): Bump docker/setup-buildx-action from 4.1.0 to 4.2.0
2026-08-06 10:11:12 +02:00
CrazyMax 503c02ba08 Merge pull request #1597 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.3
chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.3
2026-08-06 10:10:51 +02:00
CrazyMax 46a74166d4 Merge pull request #1580 from docker/dependabot/github_actions/docker/bake-action/subaction/matrix-7.3.0
chore(deps): Bump docker/bake-action/subaction/matrix from 7.2.0 to 7.3.0
2026-08-06 10:03:49 +02:00
CrazyMax 21f9d62729 Merge pull request #1585 from docker/dependabot/github_actions/docker/metadata-action-6.2.0
chore(deps): Bump docker/metadata-action from 6.1.0 to 6.2.0
2026-08-06 10:03:28 +02:00
CrazyMax 75f33765e4 Merge pull request #1584 from docker/dependabot/github_actions/codeql-actions-af2beed448
chore(deps): Bump the codeql-actions group across 1 directory with 2 updates
2026-08-06 10:03:14 +02:00
CrazyMax 0d50e10ea8 Merge pull request #1579 from docker/dependabot/github_actions/docker/bake-action-7.3.0
chore(deps): Bump docker/bake-action from 7.2.0 to 7.3.0
2026-08-06 10:03:05 +02:00
CrazyMax 94ff12a254 Merge pull request #1578 from docker/dependabot/github_actions/docker/setup-qemu-action-4.2.0
chore(deps): Bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-08-06 10:02:49 +02:00
CrazyMax 11aabf2b92 Merge pull request #1593 from crazy-max/fix-e2e-gitlab
ci(e2e): fix GitLab e2e push attestations
2026-08-04 14:13:15 +02:00
CrazyMax d256265beb ci(e2e): fix GitLab e2e push attestations
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-04 14:03:55 +02:00
CrazyMax cb941d0b89 Merge pull request #1583 from crazy-max/group-codeql-dependabot-updates
chore: group codeql dependabot updates
2026-07-09 13:57:08 +02:00
CrazyMax a9855f30a5 chore: group codeql dependabot updates
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-09 12:39:06 +02:00
CrazyMax 3add1637a6 Merge pull request #1577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
chore(deps): Bump sigstore from 4.1.0 to 4.1.1
2026-07-03 11:08:48 +02:00
CrazyMax 53b7df96c9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0
chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0
2026-07-01 16:11:18 +02:00
CrazyMax 24f845d5cb Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
2026-07-01 16:02:16 +02:00
CrazyMax bc3a3a5f72 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.1
chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1
2026-07-01 15:58:09 +02:00
CrazyMax 0285a75190 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-6.1.0
chore(deps): Bump actions/cache from 5.0.5 to 6.1.0
2026-07-01 15:57:46 +02:00
CrazyMax c6ad2a3f96 Merge pull request #1575 from docker/dependabot/github_actions/actions/checkout-7.0.0
chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0
2026-07-01 15:57:22 +02:00
CrazyMax d37484fb97 Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
chore(deps): Bump undici from 6.24.1 to 6.27.0
2026-07-01 15:54:52 +02:00
CrazyMax 910f6850a6 Merge pull request #1568 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1
chore(deps): Bump @sigstore/core from 3.1.0 to 3.2.1
2026-07-01 15:49:14 +02:00
CrazyMax 33baeb834f Merge pull request #1563 from docker/dependabot/npm_and_yarn/vite-7.3.5
chore(deps): Bump vite from 7.3.2 to 7.3.6
2026-07-01 15:48:47 +02:00
CrazyMax 841b976440 Merge pull request #1560 from docker/dependabot/github_actions/github/codeql-action-4.36.2
chore(deps): Bump github/codeql-action from 4.36.0 to 4.36.2
2026-07-01 15:46:24 +02:00
CrazyMax dd7abbf170 Merge pull request #1559 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
chore(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-07-01 15:46:01 +02:00
CrazyMax 7c45d1eb06 Merge pull request #1558 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511
chore(deps): Bump the crazy-max-dot-github group across 1 directory with 2 updates
2026-07-01 15:45:36 +02:00
CrazyMax 8a43ac101c Merge pull request #1556 from docker/dependabot/github_actions/actions/checkout-6.0.3
chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3
2026-07-01 15:45:12 +02:00
CrazyMax b40e3ca8bc Merge pull request #1552 from docker/dependabot/github_actions/docker/setup-qemu-action-4.1.0
chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
2026-07-01 15:44:47 +02:00
CrazyMax 5f1f2303ad Merge pull request #1569 from crazy-max/dependabot-skip-update-dist
dependabot: skip for update-dist commits
2026-07-01 13:59:34 +02:00
CrazyMax 55f5969fae Merge pull request #1570 from crazy-max/fix-yarn-preapprove-actions-toolkit
chore: allow actions-toolkit to bypass yarn age gate
2026-07-01 13:59:31 +02:00
CrazyMax 4876fd8314 chore: allow actions-toolkit to bypass yarn age gate
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-01 11:43:30 +02:00
CrazyMax a64725ae19 dependabot: skip for update-dist commits
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-30 11:08:52 +02:00
CrazyMax b99c92828a Merge pull request #1567 from crazy-max/fix-esbuild
preserve names in esbuild bundle
2026-06-29 16:14:40 +02:00
CrazyMax 16ce5c6012 preserve names in esbuild bundle
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-29 14:58:08 +02:00
CrazyMax ff26911fd3 Merge pull request #1562 from docker/sec-cli/npm-ci-20260612-145940
fix: replace npm install with npm ci (20260612-145940)
2026-06-12 17:16:13 +02:00
CrazyMax d2aace88c2 Merge pull request #1561 from docker/e2e-aws-ecr-oidc
ci(e2e): use OIDC for AWS ECR
2026-06-11 23:21:40 +02:00
CrazyMax ffca5157f0 ci(e2e): use OIDC for AWS ECR
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-11 21:54:33 +02:00
CrazyMax f72b3cf665 Merge pull request #1555 from crazy-max/e2e-dockerhub
ci(e2e): use org-owned Docker Hub credentials for e2e pushes
2026-06-08 19:08:26 +02:00
CrazyMax 405b217da0 ci(e2e): use org-owned Docker Hub credentials for e2e pushes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-04 16:03:24 +02:00
CrazyMax 7b93b2b85c Merge pull request #1554 from crazy-max/e2e-ghcr
ci(e2e): use GITHUB_TOKEN for GHCR e2e
2026-06-04 16:00:12 +02:00
CrazyMax f55bd083f2 ci(e2e): use GITHUB_TOKEN for GHCR e2e
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-02 14:18:39 +02:00
CrazyMax abf612226d Merge pull request #1551 from crazy-max/yarn-update
update yarn to 4.15.0
2026-05-28 18:41:31 +02:00
CrazyMax fe2165d9f3 update yarn to 4.15.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 15:13:15 +02:00
CrazyMax 77c0af9da9 ci(e2e): limit push-scoped login to Docker Hub
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 11:38:49 +02:00
CrazyMax 2258452e7c readme: link secret inputs to the GitHub Actions secrets guide
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 11:22:02 +02:00
CrazyMax c0132ad86b Merge pull request #1545 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.91.0
chore(deps): Bump @docker/actions-toolkit from 0.90.0 to 0.91.0
2026-05-28 10:27:20 +02:00
CrazyMax 799faff3ac Merge pull request #1547 from docker/dependabot/npm_and_yarn/tmp-0.2.7
chore(deps): Bump tmp from 0.2.5 to 0.2.7
2026-05-28 10:16:11 +02:00
CrazyMax 9c9a2860cb Merge pull request #1546 from docker/sec-cli/ignore-scripts-fix-20260527-192735
ci: add ignore-scripts to Node package manager config (20260527-192735)
2026-05-28 09:51:59 +02:00
CrazyMax a00e37fb35 Merge pull request #1540 from docker/dependabot/github_actions/docker/metadata-action-6.1.0
chore(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0
2026-05-26 17:22:51 +02:00
CrazyMax 43af6b15d8 Merge pull request #1541 from docker/dependabot/github_actions/github/codeql-action-4.36.0
chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0
2026-05-26 17:22:40 +02:00
CrazyMax 79aa6fa61a Merge pull request #1542 from docker/dependabot/github_actions/docker/setup-buildx-action-4.1.0
chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
2026-05-26 17:22:38 +02:00
CrazyMax d0a02127dc Merge pull request #1544 from docker/dependabot/github_actions/docker/login-action-4.2.0
chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0
2026-05-26 17:22:36 +02:00
CrazyMax 9e8d01178c Merge pull request #1543 from docker/dependabot/github_actions/docker/bake-action-7.2.0
chore(deps): Bump docker/bake-action from 7.1.0 to 7.2.0
2026-05-26 09:48:58 +02:00
CrazyMax 41ef05cd53 ci(e2e): scope login to push
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-22 18:15:25 +02:00
CrazyMax be165868b7 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-22 17:44:11 +02:00
CrazyMax 2d1196fa34 preserve trailing whitespace in secrets input
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-22 17:43:30 +02:00
CrazyMax f9f3042f7e Merge pull request #1517 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.88.0
chore(deps): Bump @docker/actions-toolkit from 0.87.0 to 0.90.0
2026-05-21 17:17:52 +02:00
CrazyMax c1c626eced Merge pull request #1525 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
chore(deps): Bump @actions/core from 3.0.0 to 3.0.1
2026-05-21 17:02:09 +02:00
CrazyMax e01deff7d9 Merge pull request #1521 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.7.1
chore(deps): Bump fast-xml-parser from 5.5.7 to 5.8.0
2026-05-21 16:56:15 +02:00
CrazyMax 4925ad24cd Merge pull request #1526 from docker/dependabot/npm_and_yarn/postcss-8.5.10
chore(deps): Bump postcss from 8.5.6 to 8.5.10
2026-05-21 16:50:55 +02:00
CrazyMax 08c59e6569 Merge pull request #1529 from docker/dependabot/npm_and_yarn/fast-xml-builder-1.2.0
chore(deps): Bump fast-xml-builder from 1.1.4 to 1.2.0
2026-05-21 16:50:28 +02:00
CrazyMax d7cd9d7a35 Merge pull request #1533 from docker/dependabot/npm_and_yarn/tar-7.5.15
chore(deps): Bump tar from 6.2.1 to 7.5.15
2026-05-21 16:45:18 +02:00
CrazyMax 157becc75e Merge pull request #1534 from docker/dependabot/npm_and_yarn/brace-expansion-5.0.6
chore(deps): Bump brace-expansion from 2.0.2 to 5.0.6
2026-05-21 16:41:57 +02:00
CrazyMax 5ae6a4a064 Merge pull request #1531 from docker/dependabot/github_actions/crazy-max-dot-github-6667ecc476
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-05-21 16:26:51 +02:00
CrazyMax 422287b25a Merge pull request #1532 from docker/dependabot/github_actions/actions/create-github-app-token-3.2.0
chore(deps): Bump actions/create-github-app-token from 3.1.1 to 3.2.0
2026-05-21 16:26:28 +02:00
CrazyMax af6a07f739 Merge pull request #1535 from docker/dependabot/github_actions/github/codeql-action-4.35.5
chore(deps): Bump github/codeql-action from 4.35.1 to 4.35.5
2026-05-21 16:25:59 +02:00
CrazyMax 3d01f53c7b Merge pull request #1536 from docker/dependabot/github_actions/codecov/codecov-action-6.0.1
chore(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
2026-05-21 16:24:51 +02:00
CrazyMax e46f50c06e Merge pull request #1537 from crazy-max/zizmor-fixes
ci: restrict update-dist GitHub App token scope
2026-05-21 14:57:22 +02:00
CrazyMax 69b698e993 ci: restrict update-dist GitHub App token scope
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-21 14:23:33 +02:00
CrazyMax 789f686580 Merge pull request #1524 from docker/dependabot/github_actions/crazy-max-dot-github-a3893cf95f
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-04-27 09:36:37 +02:00
CrazyMax d70693f4ae replace ncc with esbuild for action bundling
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-24 11:09:46 +02:00
CrazyMax e0fea16cbf Merge pull request #1519 from docker/dependabot/github_actions/actions/setup-node-6.4.0
chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0
2026-04-24 09:48:12 +02:00
CrazyMax f832d4c773 Merge pull request #1520 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-04-24 09:46:03 +02:00
CrazyMax 64fda479ac ci(zizmor): update rules
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-15 16:01:32 +02:00
CrazyMax c1d0c0cc42 Merge pull request #1514 from docker/dependabot/github_actions/actions/create-github-app-token-3.1.1
chore(deps): Bump actions/create-github-app-token from 3.0.0 to 3.1.1
2026-04-15 14:48:56 +02:00
CrazyMax d5c8665698 Merge pull request #1515 from docker/dependabot/github_actions/actions/cache-5.0.5
chore(deps): Bump actions/cache from 5.0.4 to 5.0.5
2026-04-15 14:48:40 +02:00
CrazyMax e6ed27f63f Merge pull request #1513 from docker/dependabot/github_actions/docker/bake-action-7.1.0
chore(deps): Bump docker/bake-action from 7.0.0 to 7.1.0
2026-04-14 10:54:30 +02:00
CrazyMax bcafcacb16 Merge pull request #1509 from docker/dependabot/npm_and_yarn/vite-7.3.2
chore(deps): Bump vite from 7.3.1 to 7.3.2
2026-04-09 19:49:37 +02:00
CrazyMax 18e62f1158 Merge pull request #1510 from docker/dependabot/npm_and_yarn/lodash-4.18.1
chore(deps): Bump lodash from 4.17.23 to 4.18.1
2026-04-09 19:48:40 +02:00
CrazyMax efeec9557c Merge pull request #1505 from crazy-max/refactor-git-context
refactor: use new gitContext for build context resolution
2026-04-09 19:38:17 +02:00
CrazyMax ddf04b08eb Merge pull request #1511 from docker/dependabot/github_actions/crazy-max-dot-github-f0991e81fd
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-04-09 10:21:34 +02:00
CrazyMax ef1fb9688f Merge pull request #1508 from docker/dependabot/github_actions/docker/login-action-4.1.0
chore(deps): Bump docker/login-action from 4.0.0 to 4.1.0
2026-04-08 12:55:35 +02:00
CrazyMax 2d8f2a1a37 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:50:34 +02:00
CrazyMax 919ac7bd7d fix test since secrets are not written to temp path anymore
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:49:36 +02:00
CrazyMax c850e6994a refactor: use new gitContext for build context resolution
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:49:35 +02:00
CrazyMax 56795cf70a bump @docker/actions-toolkit from 0.79.0 to 0.87.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:49:35 +02:00