741 Commits

This Branch

This Branch

All Branches

• Merge pull request #1022 from crazy-max/fix-esbuild

  preserve names in esbuild bundle

  CrazyMaxandGitHub 2026-06-29 16:14:30 +02:00
  17f7c1809f
• preserve names in esbuild bundle

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-29 14:56:24 +02:00
  a2447fe0f6
• Merge pull request #1018 from docker/sec-cli/npm-ci-20260612-182458

  fix: replace npm install with npm ci (20260612-182458)

  temenuzhka-thedeandGitHub 2026-06-12 14:10:03 -05:00
  3864d6aed8
• fix: use lockfile-aware install commands
  securityeng-bot[bot]andGitHub 2026-06-12 18:24:59 +00:00
  64b25388de
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3

  Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
  - [Release notes](https://github.com/actions/checkout/releases)
  - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)
  
  ---
  updated-dependencies:
  - dependency-name: actions/checkout
    dependency-version: 6.0.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-06-11 21:24:12 +00:00
  17162ab65f
• Merge pull request #1016 from docker/ci-ecr-oidc

  ci: test AWS ECR with OIDC

  CrazyMaxandGitHub 2026-06-11 23:22:05 +02:00
  37a9a4b333
• ci: test AWS ECR with OIDC

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-10 14:32:23 +02:00
  eb1946f59c
• Merge pull request #1007 from crazy-max/ci-creds-update

  ci: update registry auth credentials

  CrazyMaxandGitHub 2026-06-09 10:45:03 +02:00
  946f94de75
• build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0

  Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
  - [Release notes](https://github.com/codecov/codecov-action/releases)
  - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f)
  
  ---
  updated-dependencies:
  - dependency-name: codecov/codecov-action
    dependency-version: 7.0.0
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-06-09 05:53:38 +00:00
  c07548e8a6
• build(deps): bump github/codeql-action from 4.36.0 to 4.36.2

  Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)
  
  ---
  updated-dependencies:
  - dependency-name: github/codeql-action
    dependency-version: 4.36.2
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-06-08 05:53:38 +00:00
  20036e466f
• ci: update registry to auth to gar

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-04 16:19:19 +02:00
  f50e5f80f8
• ci: update registry to auth to acr

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-04 16:19:18 +02:00
  c5e5fd0017
• ci: update registry to auth to ecr

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-04 16:19:18 +02:00
  60e5331f1c
• ci: update secrets to auth to docker hub

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-04 16:19:18 +02:00
  6a848e5a16
• Merge pull request #1008 from crazy-max/ci-ghcr-dind-test-image

  ci: replace GHCR PAT in DinD test

  CrazyMaxandGitHub 2026-06-04 16:12:23 +02:00
  0267638d8a
• ci: replace GHCR PAT in DinD test

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-06-02 14:16:24 +02:00
  250c56f969
• Merge pull request #1005 from crazy-max/yarn-update

  update yarn to 4.15.0

  CrazyMaxandGitHub 2026-05-28 18:43:24 +02:00
  3999a1f436
• update yarn to 4.15.0

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-05-28 15:13:23 +02:00
  0c083d7a7a
• Merge pull request #1004 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.91.0

  build(deps): bump @docker/actions-toolkit from 0.90.0 to 0.91.0

  CrazyMaxandGitHub 2026-05-28 12:15:32 +02:00
  d74126fafb
• chore: update generated content
  github-actions[bot] 2026-05-28 08:20:36 +00:00
  008abcd773
• build(deps): bump @docker/actions-toolkit from 0.90.0 to 0.91.0

  Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.91.0.
  - [Release notes](https://github.com/docker/actions-toolkit/releases)
  - [Commits](https://github.com/docker/actions-toolkit/compare/v0.90.0...v0.91.0)
  
  ---
  updated-dependencies:
  - dependency-name: "@docker/actions-toolkit"
    dependency-version: 0.91.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-28 08:19:41 +00:00
  b3d0cb50ae
• Merge pull request #1003 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.1.2

  build(deps): bump aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2

  CrazyMaxandGitHub 2026-05-28 10:18:22 +02:00
  d1f19df6c2
• Merge pull request #1002 from docker/dependabot/npm_and_yarn/tmp-0.2.7

  build(deps): bump tmp from 0.2.5 to 0.2.7

  CrazyMaxandGitHub 2026-05-28 10:17:21 +02:00
  f9a14677ff
• Merge pull request #1001 from docker/sec-cli/ignore-scripts-fix-20260527-193038

  ci: add ignore-scripts to Node package manager config (20260527-193038)

  CrazyMaxandGitHub 2026-05-28 09:53:26 +02:00
  72b845d964
• build(deps): bump aws-actions/configure-aws-credentials

  Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 6.1.1 to 6.1.2.
  - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
  - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/d979d5b3a71173a29b74b5b88418bfda9437d885...acca2b1b2070338fb9fd1ca27ecee81d687e58e5)
  
  ---
  updated-dependencies:
  - dependency-name: aws-actions/configure-aws-credentials
    dependency-version: 6.1.2
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-28 05:52:36 +00:00
  22319e3a05
• chore: update generated content
  github-actions[bot] 2026-05-28 03:24:42 +00:00
  9ff664c6c9
• build(deps): bump tmp from 0.2.5 to 0.2.7

  Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.7.
  - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7)
  
  ---
  updated-dependencies:
  - dependency-name: tmp
    dependency-version: 0.2.7
    dependency-type: indirect
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-28 03:23:48 +00:00
  394f625bb6
• ci: enforce ignore-scripts policy for Node package managers
  securityeng-bot[bot]andAlexandre Vallières-Lagacé 2026-05-27 20:04:14 +00:00
  42471eb9ff
• Merge pull request #996 from crazy-max/azure-oidc

  document ACR OIDC login with Azure Login

  CrazyMaxandGitHub 2026-05-27 13:37:45 +02:00
  04bf81902c
• Merge pull request #997 from docker/dependabot/github_actions/github/codeql-action-4.36.0

  build(deps): bump github/codeql-action from 4.35.5 to 4.36.0

  CrazyMaxandGitHub 2026-05-26 17:24:21 +02:00
  5dbe09f08d
• build(deps): bump github/codeql-action from 4.35.5 to 4.36.0

  Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0.
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)
  
  ---
  updated-dependencies:
  - dependency-name: github/codeql-action
    dependency-version: 4.36.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-26 07:53:28 +00:00
  652059025f
• Merge pull request #998 from docker/dependabot/github_actions/docker/bake-action-7.2.0

  build(deps): bump docker/bake-action from 7.1.0 to 7.2.0

  CrazyMaxandGitHub 2026-05-26 09:50:52 +02:00
  2ff7bc63ff
• build(deps): bump docker/bake-action from 7.1.0 to 7.2.0

  Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.1.0 to 7.2.0.
  - [Release notes](https://github.com/docker/bake-action/releases)
  - [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584)
  
  ---
  updated-dependencies:
  - dependency-name: docker/bake-action
    dependency-version: 7.2.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-25 07:44:22 +00:00
  8f60ab8910
• update action versions in README examples

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-05-22 16:20:00 +02:00
  401fdfb10a
• use GitHub alerts for README notes

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-05-22 16:20:00 +02:00
  9720944471
• document ACR OIDC login with Azure Login

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-05-22 16:19:59 +02:00
  b04cd7ece0
• Merge pull request #960 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-6bb1d9fb1e

  build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates

  CrazyMaxandGitHub 2026-05-22 12:25:59 +02:00
  v4.2.0 650006c6eb
• chore: update generated content
  github-actions[bot] 2026-05-22 09:49:50 +00:00
  99df1a3f6d
• build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates

  Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public).
  
  
  Updates `@aws-sdk/client-ecr` from 3.1022.0 to 3.1050.0
  - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
  - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md)
  - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1050.0/clients/client-ecr)
  
  Updates `@aws-sdk/client-ecr-public` from 3.1022.0 to 3.1050.0
  - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
  - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md)
  - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1050.0/clients/client-ecr-public)
  
  ---
  updated-dependencies:
  - dependency-name: "@aws-sdk/client-ecr"
    dependency-version: 3.1024.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: aws-sdk-dependencies
  - dependency-name: "@aws-sdk/client-ecr-public"
    dependency-version: 3.1024.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: aws-sdk-dependencies
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-22 09:48:59 +00:00
  3ab375f324
• Merge pull request #970 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.88.0

  build(deps): bump @docker/actions-toolkit from 0.86.0 to 0.90.0

  CrazyMaxandGitHub 2026-05-22 11:45:39 +02:00
  39d85804ae
• chore: update generated content
  github-actions[bot] 2026-05-22 09:41:22 +00:00
  4eefcd33ca
• build(deps): bump @docker/actions-toolkit from 0.86.0 to 0.90.0

  Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.86.0 to 0.90.0.
  - [Release notes](https://github.com/docker/actions-toolkit/releases)
  - [Commits](https://github.com/docker/actions-toolkit/compare/v0.86.0...v0.90.0)
  
  ---
  updated-dependencies:
  - dependency-name: "@docker/actions-toolkit"
    dependency-version: 0.88.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-22 09:40:31 +00:00
  56d092c8b3
• Merge pull request #976 from docker/dependabot/npm_and_yarn/actions/core-3.0.1

  build(deps): bump @actions/core from 3.0.0 to 3.0.1

  CrazyMaxandGitHub 2026-05-22 11:38:00 +02:00
  e2e31ca870
• chore: update generated content
  github-actions[bot] 2026-05-22 09:35:14 +00:00
  0bced941e8
• build(deps): bump @actions/core from 3.0.0 to 3.0.1

  Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 3.0.0 to 3.0.1.
  - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
  - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)
  
  ---
  updated-dependencies:
  - dependency-name: "@actions/core"
    dependency-version: 3.0.1
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-22 09:34:21 +00:00
  3e75a0f266
• Merge pull request #984 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.1.1

  build(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1

  CrazyMaxandGitHub 2026-05-22 09:46:36 +02:00
  365bebd9d6
• Merge pull request #963 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.5.8

  build(deps): bump fast-xml-parser from 5.3.6 to 5.8.0

  CrazyMaxandGitHub 2026-05-22 09:46:01 +02:00
  e7f6f8a91a
• chore: update generated content
  github-actions[bot] 2026-05-21 17:23:50 +00:00
  05480f2a7d
• build(deps): bump fast-xml-parser from 5.3.6 to 5.8.0

  Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.6 to 5.8.0.
  - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
  - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.8.0)
  
  ---
  updated-dependencies:
  - dependency-name: fast-xml-parser
    dependency-version: 5.5.8
    dependency-type: indirect
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-05-21 17:22:57 +00:00
  31f21c3443
• Merge pull request #979 from docker/dependabot/npm_and_yarn/postcss-8.5.10

  build(deps): bump postcss from 8.5.6 to 8.5.10

  CrazyMaxandGitHub 2026-05-21 19:20:51 +02:00
  4f5a161ff1