Commit graph

  • c593b897f9
    Merge 680d5bb2e2 into 367f527aff dependabot[bot] 2026-07-06 01:35:53 +00:00
  • 680d5bb2e2
    chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 dependabot/github_actions/github/codeql-action/init-4.36.3 dependabot[bot] 2026-07-06 01:35:50 +00:00
  • 81f68a5849
    Merge 09fd942af4 into 367f527aff dependabot[bot] 2026-07-06 01:34:28 +00:00
  • 09fd942af4
    chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 dependabot/github_actions/github/codeql-action/analyze-4.36.3 dependabot[bot] 2026-07-06 01:34:25 +00:00
  • d764e91d30
    Merge 0138363dc6 into 367f527aff dependabot[bot] 2026-07-03 09:17:35 +00:00
  • 0138363dc6
    chore(deps): bump sigstore from 4.1.0 to 4.1.1 dependabot/npm_and_yarn/sigstore-4.1.1 dependabot[bot] 2026-07-03 09:17:32 +00:00
  • 367f527aff
    Merge pull request #123 from docker/dependabot/github_actions/docker/bake-action/subaction/matrix-7.3.0 main CrazyMax 2026-07-03 11:15:21 +02:00
  • d015707be9
    Merge pull request #122 from docker/dependabot/github_actions/docker/bake-action-7.3.0 CrazyMax 2026-07-03 11:15:02 +02:00
  • 98a82a90de
    Merge pull request #120 from docker/dependabot/npm_and_yarn/sigstore/verify-3.1.1 CrazyMax 2026-07-03 11:14:28 +02:00
  • 00039fda4c
    chore(deps): bump docker/bake-action/subaction/matrix dependabot[bot] 2026-07-03 01:34:27 +00:00
  • 39a6db919e
    chore(deps): bump docker/bake-action from 7.2.0 to 7.3.0 dependabot[bot] 2026-07-03 01:33:09 +00:00
  • 27d069315a
    chore(deps): bump @sigstore/verify from 3.1.0 to 3.1.1 dependabot[bot] 2026-07-02 02:37:18 +00:00
  • 4eb059ff7f
    Merge pull request #119 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.92.0 v2.3.0 v2 CrazyMax 2026-07-01 14:25:06 +02:00
  • 310654b5cc [dependabot skip] chore: update generated content github-actions[bot] 2026-07-01 12:21:25 +00:00
  • 2f4a3092b7
    chore(deps): bump @docker/actions-toolkit from 0.91.0 to 0.92.0 dependabot[bot] 2026-07-01 12:20:38 +00:00
  • 7d865ffaf9
    Merge pull request #111 from docker/dependabot/npm_and_yarn/undici-6.27.0 CrazyMax 2026-07-01 14:18:04 +02:00
  • a11ad46116 [dependabot skip] chore: update generated content github-actions[bot] 2026-07-01 12:13:46 +00:00
  • ea03e82695
    chore(deps): bump undici from 6.26.0 to 6.27.0 dependabot[bot] 2026-07-01 12:12:52 +00:00
  • d37dd72e1d
    Merge pull request #118 from docker/dependabot/npm_and_yarn/js-yaml-4.3.0 CrazyMax 2026-07-01 14:12:47 +02:00
  • 146a460e6d [dependabot skip] chore: update generated content github-actions[bot] 2026-07-01 12:10:56 +00:00
  • d3b0309f78
    Merge pull request #108 from docker/dependabot/npm_and_yarn/tmp-0.2.7 CrazyMax 2026-07-01 14:10:15 +02:00
  • e04d0bad3c
    chore(deps): bump js-yaml from 4.1.1 to 4.3.0 dependabot[bot] 2026-07-01 12:09:59 +00:00
  • cb0af0a09b [dependabot skip] chore: update generated content github-actions[bot] 2026-07-01 12:09:39 +00:00
  • aacabc8426 [dependabot skip] chore: update generated content github-actions[bot] 2026-07-01 12:09:10 +00:00
  • fd436c18c9
    Merge pull request #109 from docker/dependabot/github_actions/actions/checkout-7.0.0 CrazyMax 2026-07-01 14:09:05 +02:00
  • ae64015cc2
    chore(deps): bump tmp from 0.2.6 to 0.2.7 dependabot[bot] 2026-07-01 12:08:51 +00:00
  • 6ba698af1b
    Merge pull request #106 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0 CrazyMax 2026-07-01 14:08:41 +02:00
  • 2c38d8e5ae
    chore(deps): bump js-yaml from 4.1.1 to 4.3.0 dependabot[bot] 2026-07-01 12:08:21 +00:00
  • daf7ec5eda
    Merge pull request #104 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511 CrazyMax 2026-07-01 14:08:14 +02:00
  • bf10f6e6a0
    Merge pull request #105 from docker/dependabot/github_actions/github/codeql-action-4.36.2 CrazyMax 2026-07-01 14:07:51 +02:00
  • a55b08de68
    Merge pull request #110 from docker/dependabot/npm_and_yarn/vite-7.3.5 CrazyMax 2026-07-01 14:07:01 +02:00
  • 2a56b96c64
    Merge pull request #115 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1 CrazyMax 2026-07-01 14:06:21 +02:00
  • 398185fd5e
    Merge pull request #117 from crazy-max/fix-yarn-preapprove-actions-toolkit CrazyMax 2026-07-01 12:50:50 +02:00
  • 0b6d64dd19
    Merge pull request #116 from crazy-max/dependabot-skip-update-dist CrazyMax 2026-07-01 12:50:41 +02:00
  • b7884b55c0
    chore: allow actions-toolkit to bypass yarn age gate CrazyMax 2026-07-01 10:52:55 +02:00
  • 31417945f5
    dependabot: skip for update-dist commits CrazyMax 2026-06-30 11:09:28 +02:00
  • 9668eca79b
    chore(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates dependabot[bot] 2026-06-30 01:32:44 +00:00
  • a4632bf49a
    chore(deps): bump vite from 7.3.3 to 7.3.6 dependabot[bot] 2026-06-29 14:18:30 +00:00
  • e94f5ff3d8 chore: update generated content github-actions[bot] 2026-06-29 14:17:52 +00:00
  • 51d5930742
    chore(deps): bump @sigstore/core from 3.1.0 to 3.2.1 dependabot[bot] 2026-06-29 14:17:00 +00:00
  • a8074e13c2
    Merge pull request #114 from crazy-max/fix-esbuild CrazyMax 2026-06-29 16:15:18 +02:00
  • 7fbdfd3c1a
    preserve names in esbuild bundle CrazyMax 2026-06-29 15:04:20 +02:00
  • 981865f0a9
    chore(deps): bump github/codeql-action/analyze from 4.36.0 to 4.36.2 dependabot[bot] 2026-06-26 01:33:53 +00:00
  • 09ed12acf8
    chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 dependabot[bot] 2026-06-19 01:32:46 +00:00
  • 6fe408f5ba
    Merge pull request #107 from docker/sec-cli/npm-ci-20260615-142203 Alexandre Vallières-Lagacé 2026-06-15 11:53:25 -04:00
  • f6cde28f68
    fix: use lockfile-aware install commands sec-cli/npm-ci-20260615-142203 securityeng-bot[bot] 2026-06-15 14:22:04 +00:00
  • c1ee995bf9
    chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 dependabot[bot] 2026-06-08 01:34:29 +00:00
  • de9dc1b95d
    chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 dependabot[bot] 2026-06-08 01:34:24 +00:00
  • 561c456946
    chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 dependabot[bot] 2026-06-04 04:04:33 +00:00
  • a4ce917eb6
    chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 dependabot[bot] 2026-06-04 04:03:07 +00:00
  • dd8b913e80
    Merge pull request #101 from crazy-max/yarn-update CrazyMax 2026-05-28 18:45:01 +02:00
  • 168cd6c426
    update yarn to 4.15.0 CrazyMax 2026-05-28 15:13:46 +02:00
  • 410c00e878
    Merge pull request #100 from docker/dependabot/npm_and_yarn/actions/core-3.0.1 CrazyMax 2026-05-28 10:22:30 +02:00
  • 5d29e18d06
    Merge pull request #99 from docker/sec-cli/ignore-scripts-fix-20260527-193420 CrazyMax 2026-05-28 09:59:38 +02:00
  • 70b1359563 chore: update generated content github-actions[bot] 2026-05-28 01:58:55 +00:00
  • f0bcefd12e
    chore(deps): bump @actions/core from 3.0.0 to 3.0.1 dependabot[bot] 2026-05-28 01:58:09 +00:00
  • 41e3c799a3
    ci: enforce ignore-scripts policy for Node package managers securityeng-bot[bot] 2026-05-27 19:34:22 +00:00
  • 16feee727c
    Merge pull request #55 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.80.0 v2.2.0 CrazyMax 2026-05-27 12:04:17 +02:00
  • 739694b2b5 chore: update generated content github-actions[bot] 2026-05-27 10:02:59 +00:00
  • ae3c6883b5
    chore(deps): bump @docker/actions-toolkit from 0.79.0 to 0.91.0 dependabot[bot] 2026-05-27 10:02:11 +00:00
  • f399cc13d4
    Merge pull request #98 from docker/dependabot/npm_and_yarn/tmp-0.2.6 CrazyMax 2026-05-27 11:59:30 +02:00
  • edef9342ff chore: update generated content github-actions[bot] 2026-05-27 09:55:31 +00:00
  • 4c2012ebac
    chore(deps): bump tmp from 0.2.5 to 0.2.6 dependabot[bot] 2026-05-27 09:54:37 +00:00
  • 430a1543b5
    Merge pull request #70 from docker/dependabot/npm_and_yarn/handlebars-4.7.9 CrazyMax 2026-05-27 11:52:40 +02:00
  • 929bb642cc
    Merge pull request #69 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.13 CrazyMax 2026-05-27 11:52:14 +02:00
  • 86f8217480 chore: update generated content github-actions[bot] 2026-05-27 09:48:55 +00:00
  • 98cd8afa8b
    chore(deps): bump brace-expansion from 1.1.11 to 1.1.15 dependabot[bot] 2026-05-27 09:48:03 +00:00
  • 7007c0e690
    Merge pull request #63 from docker/dependabot/npm_and_yarn/flatted-3.4.2 CrazyMax 2026-05-27 11:47:38 +02:00
  • 39dc2ab81a
    Merge pull request #66 from docker/dependabot/npm_and_yarn/picomatch-4.0.4 CrazyMax 2026-05-27 11:47:14 +02:00
  • 63d8b08073
    Merge pull request #61 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.5.7 CrazyMax 2026-05-27 11:46:40 +02:00
  • 3f89bb310a chore: update generated content github-actions[bot] 2026-05-27 09:25:33 +00:00
  • d1b512a64d
    chore(deps): bump fast-xml-parser from 5.4.1 to 5.8.0 dependabot[bot] 2026-05-27 09:24:40 +00:00
  • 10b1732771
    Merge pull request #60 from docker/dependabot/npm_and_yarn/glob-10.5.0 CrazyMax 2026-05-27 11:22:29 +02:00
  • 458aba5714 chore: update generated content github-actions[bot] 2026-05-27 09:19:48 +00:00
  • fa4cd0b677
    chore(deps): bump glob from 10.3.12 to 10.5.0 dependabot[bot] 2026-05-27 09:18:45 +00:00
  • 2f86995c1e
    Merge pull request #56 from docker/dependabot/npm_and_yarn/undici-6.24.0 CrazyMax 2026-05-27 11:16:32 +02:00
  • 7928dbcb29 chore: update generated content github-actions[bot] 2026-05-27 09:15:03 +00:00
  • 765536d1ed
    chore(deps): bump undici from 6.23.0 to 6.26.0 dependabot[bot] 2026-05-27 09:14:12 +00:00
  • 86497b0f6e
    Merge pull request #78 from docker/dependabot/npm_and_yarn/lodash-4.18.1 CrazyMax 2026-05-27 11:11:35 +02:00
  • 922ce947c6
    Merge pull request #87 from docker/dependabot/npm_and_yarn/fast-xml-builder-1.2.0 CrazyMax 2026-05-27 11:10:13 +02:00
  • fc4bd5bc55
    Merge pull request #85 from docker/dependabot/npm_and_yarn/postcss-8.5.10 CrazyMax 2026-05-27 11:09:41 +02:00
  • fd97342878
    Merge pull request #88 from docker/dependabot/npm_and_yarn/vite-7.3.3 CrazyMax 2026-05-27 11:09:19 +02:00
  • ad7956dbb8
    Merge pull request #92 from docker/dependabot/npm_and_yarn/tar-7.5.15 CrazyMax 2026-05-27 11:08:55 +02:00
  • 54fd38c96f
    Merge pull request #90 from docker/dependabot/github_actions/crazy-max-dot-github-6667ecc476 CrazyMax 2026-05-27 11:08:23 +02:00
  • 16485492ea
    Merge pull request #91 from docker/dependabot/github_actions/actions/create-github-app-token-3.2.0 CrazyMax 2026-05-27 11:07:55 +02:00
  • c974e252c5
    Merge pull request #97 from docker/dependabot/github_actions/github/codeql-action-4.36.0 CrazyMax 2026-05-27 11:07:31 +02:00
  • a01da174a1
    Merge pull request #94 from docker/dependabot/github_actions/codecov/codecov-action-6.0.1 CrazyMax 2026-05-27 11:07:08 +02:00
  • 3881a24562
    Merge pull request #96 from docker/dependabot/github_actions/docker/bake-action-7.2.0 CrazyMax 2026-05-27 11:06:45 +02:00
  • fd65bef184
    chore(deps): bump github/codeql-action from 4.35.2 to 4.36.0 dependabot[bot] 2026-05-25 01:53:11 +00:00
  • b8bd8f86bb
    chore(deps): bump docker/bake-action from 7.1.0 to 7.2.0 dependabot[bot] 2026-05-25 01:51:48 +00:00
  • f815318c2d
    chore(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates dependabot[bot] 2026-05-22 01:34:10 +00:00
  • 07dc16a4fe
    Merge pull request #95 from crazy-max/zizmor-fixes CrazyMax 2026-05-21 14:58:21 +02:00
  • b9f7ddb40f
    ci: restrict update-dist GitHub App token scope CrazyMax 2026-05-21 14:28:52 +02:00
  • 5cd45e7d7d
    chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 dependabot[bot] 2026-05-20 06:27:13 +00:00
  • c8cd2800e2
    chore(deps): bump github/codeql-action from 4.35.2 to 4.35.5 dependabot[bot] 2026-05-18 01:57:39 +00:00
  • bbe7dae148
    chore(deps): bump tar from 6.2.1 to 7.5.15 dependabot[bot] 2026-05-15 00:40:03 +00:00
  • d6f08c62d4
    chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 dependabot[bot] 2026-05-14 01:35:17 +00:00
  • bfed326e07
    chore(deps): bump github/codeql-action from 4.35.2 to 4.35.4 dependabot[bot] 2026-05-11 01:39:08 +00:00
  • 330126fa08
    chore(deps): bump vite from 7.3.1 to 7.3.3 dependabot[bot] 2026-05-10 00:38:49 +00:00
  • 38c4ecefee chore: update generated content github-actions[bot] 2026-05-08 20:25:07 +00:00