Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0

build(deps): bump undici from 6.26.0 to 6.27.0
[dependabot skip] chore: update generated content
2026-06-30 13:05:10 +00:00 · 2026-06-29 18:16:01 +02:00 · 2026-06-29 16:14:45 +00:00 · 2026-06-29 16:13:51 +00:00 · 2026-06-29 18:11:13 +02:00 · 2026-06-29 15:56:57 +00:00
15 changed files with 285 additions and 290 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -25,7 +25,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Set up QEMU
        id: qemu
@ -48,7 +48,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Set up QEMU
        id: qemu
@ -65,7 +65,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Stop docker
        run: |
@ -95,7 +95,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Set up QEMU
        id: qemu
@ -119,7 +119,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Set up QEMU
        uses: ./
@ -131,7 +131,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Install multiarch/qemu-user-static
        run: |
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@ -22,7 +22,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Enable corepack
        run: |
@ -35,12 +35,12 @@ jobs:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/pr-assign-author.yml
+++ b/.github/workflows/pr-assign-author.yml
@ -11,7 +11,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@9ba6e6f9450baf3b1237f8035c1fdc45932510bd # v1.8.0
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@46267a6e61cd56aac2fc79943df180152f4c89d6 # v1.10.1
    permissions:
      contents: read
      pull-requests: write
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@ -22,7 +22,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Publish
        uses: actions/publish-immutable-action@4bc8754ffc40f27910afb20287dbbbb675a4e978 # v0.0.4
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@ -20,7 +20,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Test
        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
@ -29,7 +29,7 @@ jobs:
          targets: test
      -
        name: Upload coverage
-        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
        with:
          files: ./coverage/clover.xml
          token: ${{ secrets.CODECOV_TOKEN }}
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@ -21,7 +21,7 @@ jobs:
      -
        name: GitHub auth token from GitHub App
        id: docker-read-app
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        with:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
@ -30,7 +30,7 @@ jobs:
          permission-contents: write
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          ref: ${{ github.event.pull_request.head.ref }}
          fetch-depth: 0
@ -50,7 +50,7 @@ jobs:
              git config user.name "github-actions[bot]"
              git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
              git add dist
-              git commit -m "chore: update generated content"
+              git commit -m "[dependabot skip] chore: update generated content"
              git push
            )
          else
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@ -22,7 +22,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      -
        name: Generate matrix
        id: generate
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@ -19,7 +19,7 @@ on:

 jobs:
  zizmor:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@9ba6e6f9450baf3b1237f8035c1fdc45932510bd # v1.8.0
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@46267a6e61cd56aac2fc79943df180152f4c89d6 # v1.10.1
    permissions:
      contents: read
      security-events: write
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@ -1,10 +1,10 @@
 # https://yarnpkg.com/configuration/yarnrc

-compressionLevel: mixed
-enableGlobalCache: false
-enableHardenedMode: true
+nodeLinker: node-modules

 logFilters:
+  - code: YN0004
+    level: discard
  - code: YN0013
    level: discard
  - code: YN0019
@ -14,6 +14,8 @@ logFilters:
  - code: YN0086
    level: discard

-nodeLinker: node-modules
-
-npmAuthToken: "${NODE_AUTH_TOKEN:-fallback}"
+compressionLevel: mixed
+enableGlobalCache: false
+enableHardenedMode: true
+enableScripts: false
+npmMinimalAgeGate: 2d
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@ -17,7 +17,7 @@ FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
-  yarn install && mkdir /vendor && cp yarn.lock /vendor
+  yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor

 FROM scratch AS vendor-update
 COPY --from=deps /vendor /
--- a/dist/index.cjs
+++ b/dist/index.cjs
--- a/dist/index.cjs.map
+++ b/dist/index.cjs.map
--- a/dist/licenses.txt
+++ b/dist/licenses.txt
@ -1794,7 +1794,7 @@ SOFTWARE.

 The following npm package may be included in this product:

- - js-yaml@4.1.1
+ - js-yaml@4.2.0

 This package contains the following license:

@ -4124,7 +4124,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI

 The following npm package may be included in this product:

- - undici@6.26.0
+ - undici@6.27.0

 This package contains the following license:

@ -4966,7 +4966,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - tmp@0.2.6
+ - tmp@0.2.7

 This package contains the following license:

--- a/package.json
+++ b/package.json
@ -4,7 +4,7 @@
  "type": "module",
  "main": "src/main.ts",
  "scripts": {
-    "build": "esbuild src/main.ts --bundle --platform=node --target=node24 --format=cjs --outfile=dist/index.cjs --sourcemap --minify && yarn run license",
+    "build": "esbuild src/main.ts --bundle --platform=node --target=node24 --format=cjs --outfile=dist/index.cjs --sourcemap --minify --keep-names && yarn run license",
    "lint": "eslint --max-warnings=0 .",
    "format": "eslint --fix .",
    "test": "vitest run",
@ -21,9 +21,9 @@
  ],
  "author": "Docker Inc.",
  "license": "Apache-2.0",
-  "packageManager": "yarn@4.9.2",
+  "packageManager": "yarn@4.15.0",
  "dependencies": {
-    "@actions/core": "^3.0.0",
+    "@actions/core": "^3.0.1",
    "@docker/actions-toolkit": "^0.91.0"
  },
  "devDependencies": {
--- a/yarn.lock
+++ b/yarn.lock
@ -2,7 +2,7 @@
 # Manual changes might be lost - proceed with caution!

 __metadata:
-  version: 8
+  version: 10
  cacheKey: 10

 "@aashutoshrathi/word-wrap@npm:^1.2.3":
@ -467,13 +467,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/aix-ppc64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/aix-ppc64@npm:0.27.3"
-  conditions: os=aix & cpu=ppc64
-  languageName: node
-  linkType: hard
-
 "@esbuild/aix-ppc64@npm:0.28.0":
  version: 0.28.0
  resolution: "@esbuild/aix-ppc64@npm:0.28.0"
@ -481,10 +474,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/android-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/android-arm64@npm:0.27.3"
-  conditions: os=android & cpu=arm64
+"@esbuild/aix-ppc64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/aix-ppc64@npm:0.28.1"
+  conditions: os=aix & cpu=ppc64
  languageName: node
  linkType: hard

@ -495,10 +488,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/android-arm@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/android-arm@npm:0.27.3"
-  conditions: os=android & cpu=arm
+"@esbuild/android-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/android-arm64@npm:0.28.1"
+  conditions: os=android & cpu=arm64
  languageName: node
  linkType: hard

@ -509,10 +502,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/android-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/android-x64@npm:0.27.3"
-  conditions: os=android & cpu=x64
+"@esbuild/android-arm@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/android-arm@npm:0.28.1"
+  conditions: os=android & cpu=arm
  languageName: node
  linkType: hard

@ -523,10 +516,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/darwin-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/darwin-arm64@npm:0.27.3"
-  conditions: os=darwin & cpu=arm64
+"@esbuild/android-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/android-x64@npm:0.28.1"
+  conditions: os=android & cpu=x64
  languageName: node
  linkType: hard

@ -537,10 +530,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/darwin-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/darwin-x64@npm:0.27.3"
-  conditions: os=darwin & cpu=x64
+"@esbuild/darwin-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/darwin-arm64@npm:0.28.1"
+  conditions: os=darwin & cpu=arm64
  languageName: node
  linkType: hard

@ -551,10 +544,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/freebsd-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/freebsd-arm64@npm:0.27.3"
-  conditions: os=freebsd & cpu=arm64
+"@esbuild/darwin-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/darwin-x64@npm:0.28.1"
+  conditions: os=darwin & cpu=x64
  languageName: node
  linkType: hard

@ -565,10 +558,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/freebsd-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/freebsd-x64@npm:0.27.3"
-  conditions: os=freebsd & cpu=x64
+"@esbuild/freebsd-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/freebsd-arm64@npm:0.28.1"
+  conditions: os=freebsd & cpu=arm64
  languageName: node
  linkType: hard

@ -579,10 +572,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-arm64@npm:0.27.3"
-  conditions: os=linux & cpu=arm64
+"@esbuild/freebsd-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/freebsd-x64@npm:0.28.1"
+  conditions: os=freebsd & cpu=x64
  languageName: node
  linkType: hard

@ -593,10 +586,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-arm@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-arm@npm:0.27.3"
-  conditions: os=linux & cpu=arm
+"@esbuild/linux-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-arm64@npm:0.28.1"
+  conditions: os=linux & cpu=arm64
  languageName: node
  linkType: hard

@ -607,10 +600,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-ia32@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-ia32@npm:0.27.3"
-  conditions: os=linux & cpu=ia32
+"@esbuild/linux-arm@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-arm@npm:0.28.1"
+  conditions: os=linux & cpu=arm
  languageName: node
  linkType: hard

@ -621,10 +614,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-loong64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-loong64@npm:0.27.3"
-  conditions: os=linux & cpu=loong64
+"@esbuild/linux-ia32@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-ia32@npm:0.28.1"
+  conditions: os=linux & cpu=ia32
  languageName: node
  linkType: hard

@ -635,10 +628,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-mips64el@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-mips64el@npm:0.27.3"
-  conditions: os=linux & cpu=mips64el
+"@esbuild/linux-loong64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-loong64@npm:0.28.1"
+  conditions: os=linux & cpu=loong64
  languageName: node
  linkType: hard

@ -649,10 +642,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-ppc64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-ppc64@npm:0.27.3"
-  conditions: os=linux & cpu=ppc64
+"@esbuild/linux-mips64el@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-mips64el@npm:0.28.1"
+  conditions: os=linux & cpu=mips64el
  languageName: node
  linkType: hard

@ -663,10 +656,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-riscv64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-riscv64@npm:0.27.3"
-  conditions: os=linux & cpu=riscv64
+"@esbuild/linux-ppc64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-ppc64@npm:0.28.1"
+  conditions: os=linux & cpu=ppc64
  languageName: node
  linkType: hard

@ -677,10 +670,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-s390x@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-s390x@npm:0.27.3"
-  conditions: os=linux & cpu=s390x
+"@esbuild/linux-riscv64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-riscv64@npm:0.28.1"
+  conditions: os=linux & cpu=riscv64
  languageName: node
  linkType: hard

@ -691,10 +684,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/linux-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/linux-x64@npm:0.27.3"
-  conditions: os=linux & cpu=x64
+"@esbuild/linux-s390x@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-s390x@npm:0.28.1"
+  conditions: os=linux & cpu=s390x
  languageName: node
  linkType: hard

@ -705,10 +698,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/netbsd-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/netbsd-arm64@npm:0.27.3"
-  conditions: os=netbsd & cpu=arm64
+"@esbuild/linux-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/linux-x64@npm:0.28.1"
+  conditions: os=linux & cpu=x64
  languageName: node
  linkType: hard

@ -719,10 +712,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/netbsd-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/netbsd-x64@npm:0.27.3"
-  conditions: os=netbsd & cpu=x64
+"@esbuild/netbsd-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/netbsd-arm64@npm:0.28.1"
+  conditions: os=netbsd & cpu=arm64
  languageName: node
  linkType: hard

@ -733,10 +726,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/openbsd-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/openbsd-arm64@npm:0.27.3"
-  conditions: os=openbsd & cpu=arm64
+"@esbuild/netbsd-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/netbsd-x64@npm:0.28.1"
+  conditions: os=netbsd & cpu=x64
  languageName: node
  linkType: hard

@ -747,10 +740,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/openbsd-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/openbsd-x64@npm:0.27.3"
-  conditions: os=openbsd & cpu=x64
+"@esbuild/openbsd-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/openbsd-arm64@npm:0.28.1"
+  conditions: os=openbsd & cpu=arm64
  languageName: node
  linkType: hard

@ -761,10 +754,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/openharmony-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/openharmony-arm64@npm:0.27.3"
-  conditions: os=openharmony & cpu=arm64
+"@esbuild/openbsd-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/openbsd-x64@npm:0.28.1"
+  conditions: os=openbsd & cpu=x64
  languageName: node
  linkType: hard

@ -775,10 +768,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/sunos-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/sunos-x64@npm:0.27.3"
-  conditions: os=sunos & cpu=x64
+"@esbuild/openharmony-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/openharmony-arm64@npm:0.28.1"
+  conditions: os=openharmony & cpu=arm64
  languageName: node
  linkType: hard

@ -789,10 +782,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/win32-arm64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/win32-arm64@npm:0.27.3"
-  conditions: os=win32 & cpu=arm64
+"@esbuild/sunos-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/sunos-x64@npm:0.28.1"
+  conditions: os=sunos & cpu=x64
  languageName: node
  linkType: hard

@ -803,10 +796,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/win32-ia32@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/win32-ia32@npm:0.27.3"
-  conditions: os=win32 & cpu=ia32
+"@esbuild/win32-arm64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/win32-arm64@npm:0.28.1"
+  conditions: os=win32 & cpu=arm64
  languageName: node
  linkType: hard

@ -817,10 +810,10 @@ __metadata:
  languageName: node
  linkType: hard

-"@esbuild/win32-x64@npm:0.27.3":
-  version: 0.27.3
-  resolution: "@esbuild/win32-x64@npm:0.27.3"
-  conditions: os=win32 & cpu=x64
+"@esbuild/win32-ia32@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/win32-ia32@npm:0.28.1"
+  conditions: os=win32 & cpu=ia32
  languageName: node
  linkType: hard

@ -831,6 +824,13 @@ __metadata:
  languageName: node
  linkType: hard

+"@esbuild/win32-x64@npm:0.28.1":
+  version: 0.28.1
+  resolution: "@esbuild/win32-x64@npm:0.28.1"
+  conditions: os=win32 & cpu=x64
+  languageName: node
+  linkType: hard
+
 "@eslint-community/eslint-utils@npm:^4.8.0, @eslint-community/eslint-utils@npm:^4.9.1":
  version: 4.9.1
  resolution: "@eslint-community/eslint-utils@npm:4.9.1"
@ -1658,14 +1658,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/core@npm:^3.1.0":
-  version: 3.1.0
-  resolution: "@sigstore/core@npm:3.1.0"
-  checksum: 10/c7a2e2d32f52494b40d9c469bc2241cc5d14d5f93fa028f099dcfe403443713f90ef3178684ee11c32e078a4b9fad79500746dfef10f10044c7fa00c909f3760
-  languageName: node
-  linkType: hard
-
-"@sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
+"@sigstore/core@npm:^3.1.0, @sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
  version: 3.2.1
  resolution: "@sigstore/core@npm:3.2.1"
  checksum: 10/2f6c1ced55f8ed3f7fc705a668eb95db9471511dfb1f054927822bf97a051dd62228ecf6a9f1932d240c2c4ae69a3b5066550789e5ad8f4257839a4370e5a120
@ -2822,7 +2815,7 @@ __metadata:
  version: 0.0.0-use.local
  resolution: "docker-setup-qemu@workspace:."
  dependencies:
-    "@actions/core": "npm:^3.0.0"
+    "@actions/core": "npm:^3.0.1"
    "@docker/actions-toolkit": "npm:^0.91.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/node": "npm:^24.11.0"
@ -2933,36 +2926,36 @@ __metadata:
  languageName: node
  linkType: hard

-"esbuild@npm:^0.27.0":
-  version: 0.27.3
-  resolution: "esbuild@npm:0.27.3"
+"esbuild@npm:^0.27.0 || ^0.28.0":
+  version: 0.28.1
+  resolution: "esbuild@npm:0.28.1"
  dependencies:
-    "@esbuild/aix-ppc64": "npm:0.27.3"
-    "@esbuild/android-arm": "npm:0.27.3"
-    "@esbuild/android-arm64": "npm:0.27.3"
-    "@esbuild/android-x64": "npm:0.27.3"
-    "@esbuild/darwin-arm64": "npm:0.27.3"
-    "@esbuild/darwin-x64": "npm:0.27.3"
-    "@esbuild/freebsd-arm64": "npm:0.27.3"
-    "@esbuild/freebsd-x64": "npm:0.27.3"
-    "@esbuild/linux-arm": "npm:0.27.3"
-    "@esbuild/linux-arm64": "npm:0.27.3"
-    "@esbuild/linux-ia32": "npm:0.27.3"
-    "@esbuild/linux-loong64": "npm:0.27.3"
-    "@esbuild/linux-mips64el": "npm:0.27.3"
-    "@esbuild/linux-ppc64": "npm:0.27.3"
-    "@esbuild/linux-riscv64": "npm:0.27.3"
-    "@esbuild/linux-s390x": "npm:0.27.3"
-    "@esbuild/linux-x64": "npm:0.27.3"
-    "@esbuild/netbsd-arm64": "npm:0.27.3"
-    "@esbuild/netbsd-x64": "npm:0.27.3"
-    "@esbuild/openbsd-arm64": "npm:0.27.3"
-    "@esbuild/openbsd-x64": "npm:0.27.3"
-    "@esbuild/openharmony-arm64": "npm:0.27.3"
-    "@esbuild/sunos-x64": "npm:0.27.3"
-    "@esbuild/win32-arm64": "npm:0.27.3"
-    "@esbuild/win32-ia32": "npm:0.27.3"
-    "@esbuild/win32-x64": "npm:0.27.3"
+    "@esbuild/aix-ppc64": "npm:0.28.1"
+    "@esbuild/android-arm": "npm:0.28.1"
+    "@esbuild/android-arm64": "npm:0.28.1"
+    "@esbuild/android-x64": "npm:0.28.1"
+    "@esbuild/darwin-arm64": "npm:0.28.1"
+    "@esbuild/darwin-x64": "npm:0.28.1"
+    "@esbuild/freebsd-arm64": "npm:0.28.1"
+    "@esbuild/freebsd-x64": "npm:0.28.1"
+    "@esbuild/linux-arm": "npm:0.28.1"
+    "@esbuild/linux-arm64": "npm:0.28.1"
+    "@esbuild/linux-ia32": "npm:0.28.1"
+    "@esbuild/linux-loong64": "npm:0.28.1"
+    "@esbuild/linux-mips64el": "npm:0.28.1"
+    "@esbuild/linux-ppc64": "npm:0.28.1"
+    "@esbuild/linux-riscv64": "npm:0.28.1"
+    "@esbuild/linux-s390x": "npm:0.28.1"
+    "@esbuild/linux-x64": "npm:0.28.1"
+    "@esbuild/netbsd-arm64": "npm:0.28.1"
+    "@esbuild/netbsd-x64": "npm:0.28.1"
+    "@esbuild/openbsd-arm64": "npm:0.28.1"
+    "@esbuild/openbsd-x64": "npm:0.28.1"
+    "@esbuild/openharmony-arm64": "npm:0.28.1"
+    "@esbuild/sunos-x64": "npm:0.28.1"
+    "@esbuild/win32-arm64": "npm:0.28.1"
+    "@esbuild/win32-ia32": "npm:0.28.1"
+    "@esbuild/win32-x64": "npm:0.28.1"
  dependenciesMeta:
    "@esbuild/aix-ppc64":
      optional: true
@ -3018,7 +3011,7 @@ __metadata:
      optional: true
  bin:
    esbuild: bin/esbuild
-  checksum: 10/aa74b8d8a3ed8e2eea4d8421737b322f4d21215244e8fa2156c6402d49b5bda01343c220196f1e3f830a7ce92b54ef653c6c723a8cc2e912bb4d17b7398b51ae
+  checksum: 10/aaa4a922644afffac45e735c99caf343f881e2d36abcc6b6fb53c230bd69940504a5bb6b0041bdd1a690e748ebc681d3308a7d178987c523d74c63c2c280bac8
  languageName: node
  linkType: hard

@ -3992,13 +3985,13 @@ __metadata:
  linkType: hard

 "js-yaml@npm:^4.1.0, js-yaml@npm:^4.1.1":
-  version: 4.1.1
-  resolution: "js-yaml@npm:4.1.1"
+  version: 4.2.0
+  resolution: "js-yaml@npm:4.2.0"
  dependencies:
    argparse: "npm:^2.0.1"
  bin:
    js-yaml: bin/js-yaml.js
-  checksum: 10/a52d0519f0f4ef5b4adc1cde466cb54c50d56e2b4a983b9d5c9c0f2f99462047007a6274d7e95617a21d3c91fde3ee6115536ed70991cd645ba8521058b78f77
+  checksum: 10/51de2067a2b44b07ba5206132e56005f8b568ff279bb4d2f645068958c56fa4827d40a6841c983234671fa0a134bf094d0b0717873c2a3d319185297af145a6d
  languageName: node
  linkType: hard

@ -5752,9 +5745,9 @@ __metadata:
  linkType: hard

 "tmp@npm:^0.2.6":
-  version: 0.2.6
-  resolution: "tmp@npm:0.2.6"
-  checksum: 10/4ba072821d65f6ec0ae680dd49261bcc66c96a5a463c80ca040747256238aaad68ad5db7aa8367dd1554d22aa77c2988bdb1c5556ecfc4df105f5b73206b7d9b
+  version: 0.2.7
+  resolution: "tmp@npm:0.2.7"
+  checksum: 10/0a3bc90beb0c6275273c3475fb57e466eaab1c9c4a101d029ff62b18146ce136e7f75d09de34863d9f2c2a492751402508f9e028bc98eb34a1416195d4b15619
  languageName: node
  linkType: hard

@ -5879,9 +5872,9 @@ __metadata:
  linkType: hard

 "undici@npm:^6.23.0, undici@npm:^6.25.0":
-  version: 6.26.0
-  resolution: "undici@npm:6.26.0"
-  checksum: 10/a1715ee4304f58fecd61e0a8c3bd7064435cfbc98b3ec1414dba5e89de97d436b7e88dd094b06ff8440428bf36b56163fc88972118890826039865edf58bdfcf
+  version: 6.27.0
+  resolution: "undici@npm:6.27.0"
+  checksum: 10/30c18cdb235edf4dd36f8aa3ace1ffaf44060289a7d62ad44c33180d2d74a224015d25574812f62ce9c625b5beb1b0b766495b650fedf356aca11eed7ce2c816
  languageName: node
  linkType: hard

@ -5962,10 +5955,10 @@ __metadata:
  linkType: hard

 "vite@npm:^6.0.0 || ^7.0.0":
-  version: 7.3.2
-  resolution: "vite@npm:7.3.2"
+  version: 7.3.6
+  resolution: "vite@npm:7.3.6"
  dependencies:
-    esbuild: "npm:^0.27.0"
+    esbuild: "npm:^0.27.0 || ^0.28.0"
    fdir: "npm:^6.5.0"
    fsevents: "npm:~2.3.3"
    picomatch: "npm:^4.0.3"
@ -6012,7 +6005,7 @@ __metadata:
      optional: true
  bin:
    vite: bin/vite.js
-  checksum: 10/c5f7a9a60011c41c836cedf31c8ee7624102aff9b6a7f3aab2ff47639721bba0916f81994c3a3ea6577a16c4f0dfee1e7dbd244e0da8edd5954e3c6d48daaaa2
+  checksum: 10/6fcbadb1a409990e1bbd4ff0ff41e763c87049228cdc407984bdca40b96ab32de0f1f70fa62fb1f3ca001a5b90accbbe22ddfad5cc436855058357b3f2141d3b
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	451542b03a	Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0 Some checks are pending ci / cache-image (true) (push) Waiting to run Details ci / version (tonistiigi/binfmt:latest) (push) Waiting to run Details ci / version (tonistiigi/binfmt:master) (push) Waiting to run Details ci / version (tonistiigi/binfmt:qemu-v7.0.0) (push) Waiting to run Details ci / reset (push) Waiting to run Details ci / main (tonistiigi/binfmt:latest, all) (push) Waiting to run Details ci / default (push) Waiting to run Details ci / main (tonistiigi/binfmt:latest, arm64,riscv64,arm) (push) Waiting to run Details ci / error (push) Waiting to run Details ci / main (tonistiigi/binfmt:master, all) (push) Waiting to run Details ci / main (tonistiigi/binfmt:master, arm64,riscv64,arm) (push) Waiting to run Details ci / cache-image (false) (push) Waiting to run Details codeql / analyze (push) Waiting to run Details test / test (push) Waiting to run Details validate / prepare (push) Waiting to run Details validate / validate (push) Blocked by required conditions Details zizmor / zizmor (push) Waiting to run Details build(deps): bump undici from 6.26.0 to 6.27.0	2026-06-29 18:16:01 +02:00
github-actions[bot]	532ae00575	[dependabot skip] chore: update generated content	2026-06-29 16:14:45 +00:00
dependabot[bot]	b6f5af659a	build(deps): bump undici from 6.26.0 to 6.27.0 Bumps [undici](https://github.com/nodejs/undici) from 6.26.0 to 6.27.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v6.26.0...v6.27.0) --- updated-dependencies: - dependency-name: undici dependency-version: 6.27.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-29 16:13:51 +00:00
CrazyMax	cf96b86294	Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7 build(deps): bump tmp from 0.2.6 to 0.2.7	2026-06-29 18:11:13 +02:00
github-actions[bot]	f0ba643f78	[dependabot skip] chore: update generated content	2026-06-29 15:56:57 +00:00
dependabot[bot]	7b74f01457	build(deps): bump tmp from 0.2.6 to 0.2.7 Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-29 15:56:09 +00:00
CrazyMax	1c94bea2c5	Merge pull request #312 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1 build(deps): bump @sigstore/core from 3.1.0 to 3.2.1	2026-06-29 17:55:27 +02:00
CrazyMax	9b6bc35ac8	Merge pull request #307 from docker/dependabot/npm_and_yarn/vite-7.3.5 build(deps): bump vite from 7.3.2 to 7.3.6	2026-06-29 17:54:03 +02:00
CrazyMax	e34b63c328	Merge pull request #305 from docker/dependabot/github_actions/actions/checkout-7.0.0 build(deps): bump actions/checkout from 6.0.2 to 7.0.0	2026-06-29 17:45:09 +02:00
CrazyMax	f3b16f51e5	Merge pull request #300 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511 build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates	2026-06-29 17:44:50 +02:00
CrazyMax	87ec61cda1	Merge pull request #302 from docker/dependabot/github_actions/github/codeql-action-4.36.2 build(deps): bump github/codeql-action from 4.36.0 to 4.36.2	2026-06-29 17:34:48 +02:00
CrazyMax	a7fcc86fd0	Merge pull request #301 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0	2026-06-29 17:34:27 +02:00
CrazyMax	e5ee6deb4c	Merge pull request #313 from crazy-max/dependabot-skip-update-dist dependabot: skip for update-dist commits	2026-06-29 17:33:57 +02:00
CrazyMax	c94769e2eb	dependabot: skip for update-dist commits Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-06-29 16:21:42 +02:00
dependabot[bot]	bb9c2b4ecd	build(deps): bump vite from 7.3.2 to 7.3.6 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 7.3.6. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.6/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.6/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-29 14:17:13 +00:00
CrazyMax	1203872df4	Merge pull request #310 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0 build(deps): bump js-yaml from 4.1.1 to 4.2.0	2026-06-29 16:16:16 +02:00
dependabot[bot]	891159a0b8	build(deps): bump @sigstore/core from 3.1.0 to 3.2.1 Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) from 3.1.0 to 3.2.1. - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...@sigstore/core@3.2.1) --- updated-dependencies: - dependency-name: "@sigstore/core" dependency-version: 3.2.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-29 14:15:46 +00:00
CrazyMax	0a38f1f6d4	Merge pull request #311 from crazy-max/fix-esbuild-keep-names preserve names in esbuild bundle	2026-06-29 16:14:06 +02:00
CrazyMax	9e0aa76c8f	preserve names in esbuild bundle Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-06-29 14:38:58 +02:00
github-actions[bot]	5c488c3a3c	chore: update generated content	2026-06-28 21:03:31 +00:00
dependabot[bot]	c0d2462d36	build(deps): bump js-yaml from 4.1.1 to 4.2.0 Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.2.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-28 21:02:45 +00:00
dependabot[bot]	94cf93cae1	build(deps): bump actions/checkout from 6.0.2 to 7.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](`de0fac2e45...9c091bb21b`) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-19 06:12:28 +00:00
dependabot[bot]	3ea562b8cb	build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`9ba6e6f945...46267a6e61`) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`9ba6e6f945...46267a6e61`) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-15 06:30:37 +00:00
temenuzhka-thede	eaefd20f59	Merge pull request #303 from docker/sec-cli/npm-ci-20260612-184924 Some checks failed ci / main (tonistiigi/binfmt:latest, all) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:latest, arm64,riscv64,arm) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:master, all) (push) Has been cancelled Details ci / error (push) Has been cancelled Details ci / cache-image (false) (push) Has been cancelled Details ci / cache-image (true) (push) Has been cancelled Details codeql / analyze (push) Has been cancelled Details ci / default (push) Has been cancelled Details ci / version (tonistiigi/binfmt:latest) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:qemu-v7.0.0) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:master) (push) Has been cancelled Details ci / reset (push) Has been cancelled Details validate / prepare (push) Has been cancelled Details ci / main (tonistiigi/binfmt:master, arm64,riscv64,arm) (push) Has been cancelled Details validate / validate (push) Has been cancelled Details test / test (push) Has been cancelled Details zizmor / zizmor (push) Has been cancelled Details fix: replace npm install with npm ci (20260612-184924)	2026-06-12 14:08:05 -05:00
securityeng-bot[bot]	d1e45353ee	fix: use lockfile-aware install commands	2026-06-12 18:49:25 +00:00
dependabot[bot]	41ebc4e0f5	build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`7211b7c807...8aad20d150`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-08 06:19:59 +00:00
dependabot[bot]	15567984d6	build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](`e79a6962e0...fb8b3582c8`) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-08 06:18:44 +00:00
CrazyMax	259a565a6f	Merge pull request #297 from crazy-max/yarn-update Some checks failed validate / prepare (push) Has been cancelled Details ci / error (push) Has been cancelled Details zizmor / zizmor (push) Has been cancelled Details validate / validate (push) Has been cancelled Details ci / default (push) Has been cancelled Details ci / main (tonistiigi/binfmt:latest, all) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:latest, arm64,riscv64,arm) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:master, all) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:latest) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:master, arm64,riscv64,arm) (push) Has been cancelled Details ci / cache-image (false) (push) Has been cancelled Details ci / cache-image (true) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:master) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:qemu-v7.0.0) (push) Has been cancelled Details ci / reset (push) Has been cancelled Details codeql / analyze (push) Has been cancelled Details test / test (push) Has been cancelled Details update yarn to 4.15.0	2026-05-28 18:45:24 +02:00
CrazyMax	ed4e33e0a6	update yarn to 4.15.0 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-05-28 15:14:00 +02:00
CrazyMax	1a577caf9f	Merge pull request #295 from docker/dependabot/npm_and_yarn/actions/core-3.0.1 Some checks are pending zizmor / zizmor (push) Waiting to run Details ci / main (tonistiigi/binfmt:master, all) (push) Waiting to run Details ci / main (tonistiigi/binfmt:master, arm64,riscv64,arm) (push) Waiting to run Details ci / default (push) Waiting to run Details ci / main (tonistiigi/binfmt:latest, all) (push) Waiting to run Details ci / main (tonistiigi/binfmt:latest, arm64,riscv64,arm) (push) Waiting to run Details ci / cache-image (true) (push) Waiting to run Details ci / version (tonistiigi/binfmt:latest) (push) Waiting to run Details ci / error (push) Waiting to run Details ci / cache-image (false) (push) Waiting to run Details ci / version (tonistiigi/binfmt:master) (push) Waiting to run Details ci / version (tonistiigi/binfmt:qemu-v7.0.0) (push) Waiting to run Details test / test (push) Waiting to run Details ci / reset (push) Waiting to run Details codeql / analyze (push) Waiting to run Details validate / prepare (push) Waiting to run Details validate / validate (push) Blocked by required conditions Details build(deps): bump @actions/core from 3.0.0 to 3.0.1	2026-05-28 10:24:19 +02:00
CrazyMax	95b57d86c4	Merge pull request #293 from docker/dependabot/github_actions/actions/create-github-app-token-3.2.0 build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0	2026-05-28 10:23:54 +02:00
CrazyMax	5841650303	Merge pull request #294 from docker/dependabot/github_actions/codecov/codecov-action-6.0.1 build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1	2026-05-28 10:23:33 +02:00
CrazyMax	468c4616f9	Merge pull request #296 from docker/dependabot/github_actions/github/codeql-action-4.36.0 build(deps): bump github/codeql-action from 4.35.2 to 4.36.0	2026-05-28 10:23:12 +02:00
CrazyMax	db6b4cfde3	Merge pull request #292 from docker/sec-cli/ignore-scripts-fix-20260527-193437 ci: add ignore-scripts to Node package manager config (20260527-193437)	2026-05-28 10:01:41 +02:00
dependabot[bot]	44cc945d98	build(deps): bump github/codeql-action from 4.35.2 to 4.36.0 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.36.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`95e58e9a2c...7211b7c807`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-28 06:23:45 +00:00
github-actions[bot]	a42c0c12dd	chore: update generated content	2026-05-28 06:23:40 +00:00
dependabot[bot]	c3e57563e9	build(deps): bump @actions/core from 3.0.0 to 3.0.1 Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 3.0.0 to 3.0.1. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-28 06:22:51 +00:00
dependabot[bot]	e02729e804	build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 6.0.1. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](`57e3a136b7...e79a6962e0`) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-28 06:22:15 +00:00
dependabot[bot]	bb5d7babc7	build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.1.1 to 3.2.0. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](`1b10c78c78...bcd2ba4921`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-28 06:22:02 +00:00
securityeng-bot[bot]	8864a83d99	ci: enforce ignore-scripts policy for Node package managers	2026-05-27 20:05:13 +00:00