Commit Graph

415 Commits

Author SHA1 Message Date
CrazyMax
cf96b86294 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
build(deps): bump tmp from 0.2.6 to 0.2.7
2026-06-29 18:11:13 +02:00
github-actions[bot]
f0ba643f78 [dependabot skip] chore: update generated content 2026-06-29 15:56:57 +00:00
dependabot[bot]
7b74f01457 build(deps): bump tmp from 0.2.6 to 0.2.7
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 15:56:09 +00:00
CrazyMax
1c94bea2c5 Merge pull request #312 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1
build(deps): bump @sigstore/core from 3.1.0 to 3.2.1
2026-06-29 17:55:27 +02:00
CrazyMax
9b6bc35ac8 Merge pull request #307 from docker/dependabot/npm_and_yarn/vite-7.3.5
build(deps): bump vite from 7.3.2 to 7.3.6
2026-06-29 17:54:03 +02:00
CrazyMax
e34b63c328 Merge pull request #305 from docker/dependabot/github_actions/actions/checkout-7.0.0
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
2026-06-29 17:45:09 +02:00
CrazyMax
f3b16f51e5 Merge pull request #300 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
2026-06-29 17:44:50 +02:00
CrazyMax
87ec61cda1 Merge pull request #302 from docker/dependabot/github_actions/github/codeql-action-4.36.2
build(deps): bump github/codeql-action from 4.36.0 to 4.36.2
2026-06-29 17:34:48 +02:00
CrazyMax
a7fcc86fd0 Merge pull request #301 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-29 17:34:27 +02:00
CrazyMax
e5ee6deb4c Merge pull request #313 from crazy-max/dependabot-skip-update-dist
dependabot: skip for update-dist commits
2026-06-29 17:33:57 +02:00
CrazyMax
c94769e2eb dependabot: skip for update-dist commits
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-29 16:21:42 +02:00
dependabot[bot]
bb9c2b4ecd build(deps): bump vite from 7.3.2 to 7.3.6
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 7.3.6.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.6/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 14:17:13 +00:00
CrazyMax
1203872df4 Merge pull request #310 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
build(deps): bump js-yaml from 4.1.1 to 4.2.0
2026-06-29 16:16:16 +02:00
dependabot[bot]
891159a0b8 build(deps): bump @sigstore/core from 3.1.0 to 3.2.1
Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) from 3.1.0 to 3.2.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...@sigstore/core@3.2.1)

---
updated-dependencies:
- dependency-name: "@sigstore/core"
  dependency-version: 3.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 14:15:46 +00:00
CrazyMax
0a38f1f6d4 Merge pull request #311 from crazy-max/fix-esbuild-keep-names
preserve names in esbuild bundle
2026-06-29 16:14:06 +02:00
CrazyMax
9e0aa76c8f preserve names in esbuild bundle
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-29 14:38:58 +02:00
github-actions[bot]
5c488c3a3c chore: update generated content 2026-06-28 21:03:31 +00:00
dependabot[bot]
c0d2462d36 build(deps): bump js-yaml from 4.1.1 to 4.2.0
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.2.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-28 21:02:45 +00:00
dependabot[bot]
94cf93cae1 build(deps): bump actions/checkout from 6.0.2 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](de0fac2e45...9c091bb21b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-19 06:12:28 +00:00
dependabot[bot]
3ea562b8cb build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](9ba6e6f945...46267a6e61)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](9ba6e6f945...46267a6e61)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-15 06:30:37 +00:00
temenuzhka-thede
eaefd20f59 Merge pull request #303 from docker/sec-cli/npm-ci-20260612-184924
fix: replace npm install with npm ci (20260612-184924)
2026-06-12 14:08:05 -05:00
securityeng-bot[bot]
d1e45353ee fix: use lockfile-aware install commands 2026-06-12 18:49:25 +00:00
dependabot[bot]
41ebc4e0f5 build(deps): bump github/codeql-action from 4.36.0 to 4.36.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](7211b7c807...8aad20d150)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 06:19:59 +00:00
dependabot[bot]
15567984d6 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](e79a6962e0...fb8b3582c8)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 06:18:44 +00:00
CrazyMax
259a565a6f Merge pull request #297 from crazy-max/yarn-update
update yarn to 4.15.0
2026-05-28 18:45:24 +02:00
CrazyMax
ed4e33e0a6 update yarn to 4.15.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 15:14:00 +02:00
CrazyMax
1a577caf9f Merge pull request #295 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
build(deps): bump @actions/core from 3.0.0 to 3.0.1
2026-05-28 10:24:19 +02:00
CrazyMax
95b57d86c4 Merge pull request #293 from docker/dependabot/github_actions/actions/create-github-app-token-3.2.0
build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
2026-05-28 10:23:54 +02:00
CrazyMax
5841650303 Merge pull request #294 from docker/dependabot/github_actions/codecov/codecov-action-6.0.1
build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
2026-05-28 10:23:33 +02:00
CrazyMax
468c4616f9 Merge pull request #296 from docker/dependabot/github_actions/github/codeql-action-4.36.0
build(deps): bump github/codeql-action from 4.35.2 to 4.36.0
2026-05-28 10:23:12 +02:00
CrazyMax
db6b4cfde3 Merge pull request #292 from docker/sec-cli/ignore-scripts-fix-20260527-193437
ci: add ignore-scripts to Node package manager config (20260527-193437)
2026-05-28 10:01:41 +02:00
dependabot[bot]
44cc945d98 build(deps): bump github/codeql-action from 4.35.2 to 4.36.0
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](95e58e9a2c...7211b7c807)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 06:23:45 +00:00
github-actions[bot]
a42c0c12dd chore: update generated content 2026-05-28 06:23:40 +00:00
dependabot[bot]
c3e57563e9 build(deps): bump @actions/core from 3.0.0 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 3.0.0 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 06:22:51 +00:00
dependabot[bot]
e02729e804 build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](57e3a136b7...e79a6962e0)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 06:22:15 +00:00
dependabot[bot]
bb5d7babc7 build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](1b10c78c78...bcd2ba4921)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 06:22:02 +00:00
securityeng-bot[bot]
8864a83d99 ci: enforce ignore-scripts policy for Node package managers 2026-05-27 20:05:13 +00:00
CrazyMax
06116385d9 Merge pull request #21 from crazy-max/uninst
uninstall current emulators
v4 v4.1.0
2026-05-27 18:06:51 +02:00
CrazyMax
ce59c818a5 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-27 17:33:46 +02:00
CrazyMax
2ddad4401e uninstall current emulators
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-27 17:33:46 +02:00
CrazyMax
8c37cd6f34 Merge pull request #250 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.81.0
build(deps): bump @docker/actions-toolkit from 0.79.0 to 0.91.0
2026-05-27 17:04:11 +02:00
github-actions[bot]
d1a0ff34af chore: update generated content 2026-05-27 14:58:54 +00:00
dependabot[bot]
0a8f3dc125 build(deps): bump @docker/actions-toolkit from 0.79.0 to 0.91.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.91.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.79.0...v0.91.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-27 14:57:58 +00:00
CrazyMax
9430f61a76 Merge pull request #291 from docker/dependabot/npm_and_yarn/tmp-0.2.6
build(deps): bump tmp from 0.2.5 to 0.2.6
2026-05-27 16:55:40 +02:00
github-actions[bot]
978bd7796c chore: update generated content 2026-05-27 14:51:58 +00:00
dependabot[bot]
3479febc62 build(deps): bump tmp from 0.2.5 to 0.2.6
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.6.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.6)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-27 14:51:06 +00:00
CrazyMax
b113c26414 Merge pull request #255 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.5.7
build(deps): bump fast-xml-parser from 5.4.2 to 5.8.0
2026-05-27 16:48:38 +02:00
github-actions[bot]
0d62f46692 chore: update generated content 2026-05-27 14:44:23 +00:00
dependabot[bot]
18b22fb6dd build(deps): bump fast-xml-parser from 5.4.2 to 5.8.0
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.4.2 to 5.8.0.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.4.2...v5.8.0)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-27 14:43:32 +00:00
CrazyMax
307ba5d25d Merge pull request #262 from docker/dependabot/npm_and_yarn/handlebars-4.7.9
build(deps): bump handlebars from 4.7.8 to 4.7.9
2026-05-27 16:41:13 +02:00