794 Commits

This Branch

This Branch

All Branches

• Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-46cc3261cb

  build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates

  CrazyMaxandGitHub 2026-07-29 13:33:29 +02:00
  v4 v4.6.0 dbcb813823
• [dependabot skip] chore: update generated content
  github-actions[bot] 2026-07-29 10:44:53 +00:00
  5bcb015ee6
• build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates

  Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public).
  
  
  Updates `@aws-sdk/client-ecr` from 3.1091.0 to 3.1095.0
  - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
  - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md)
  - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr)
  
  Updates `@aws-sdk/client-ecr-public` from 3.1091.0 to 3.1095.0
  - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
  - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md)
  - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr-public)
  
  ---
  updated-dependencies:
  - dependency-name: "@aws-sdk/client-ecr"
    dependency-version: 3.1092.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: aws-sdk-dependencies
  - dependency-name: "@aws-sdk/client-ecr-public"
    dependency-version: 3.1092.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: aws-sdk-dependencies
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-29 10:43:57 +00:00
  b30b2f2d31
• Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2

  build(deps): bump js-yaml from 5.2.1 to 5.2.2

  CrazyMaxandGitHub 2026-07-29 12:40:51 +02:00
  9087f1e6d6
• [dependabot skip] chore: update generated content
  github-actions[bot] 2026-07-29 10:32:28 +00:00
  0009830ea1
• build(deps): bump js-yaml from 5.2.1 to 5.2.2

  Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2.
  - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2)
  
  ---
  updated-dependencies:
  - dependency-name: js-yaml
    dependency-version: 5.2.2
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-29 10:31:34 +00:00
  23255232d3
• Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22

  build(deps): bump postcss from 8.5.10 to 8.5.22

  CrazyMaxandGitHub 2026-07-29 12:28:53 +02:00
  4ec1d4a769
• Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.3

  build(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3

  CrazyMaxandGitHub 2026-07-29 12:28:12 +02:00
  5fc99ba47b
• Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions-73adf09e94

  build(deps): bump the codeql-actions group across 1 directory with 2 updates

  CrazyMaxandGitHub 2026-07-29 12:26:59 +02:00
  e512bd59d1
• Merge pull request #1059 from crazy-max/harden-buildx-scope-paths

  harden buildx scoped config path handling

  CrazyMaxandGitHub 2026-07-29 10:50:27 +02:00
  a146c91b8f
• chore: update generated content

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-29 09:57:41 +02:00
  8ffd80ffa5
• harden buildx scoped config path handling

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-29 09:57:00 +02:00
  8305724bcf
• build(deps): bump the codeql-actions group across 1 directory with 2 updates

  Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).
  
  
  Updates `github/codeql-action/init` from 4.37.2 to 4.37.3
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)
  
  Updates `github/codeql-action/analyze` from 4.37.2 to 4.37.3
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)
  
  ---
  updated-dependencies:
  - dependency-name: github/codeql-action/analyze
    dependency-version: 4.37.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
    dependency-group: codeql-actions
  - dependency-name: github/codeql-action/init
    dependency-version: 4.37.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
    dependency-group: codeql-actions
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-28 05:54:42 +00:00
  91264757e1
• Merge pull request #1058 from crazy-max/fix-dockerhub-oidc-error-handling

  surface Docker Hub OIDC error responses

  CrazyMaxandGitHub 2026-07-27 18:30:08 +02:00
  v4.5.2 371161bbe7
• chore: update generated content

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-27 17:15:04 +02:00
  5dc73df38e
• surface Docker Hub OIDC error responses

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-27 17:14:54 +02:00
  2aa1edee0b
• build(deps): bump postcss from 8.5.10 to 8.5.22

  Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.22.
  - [Release notes](https://github.com/postcss/postcss/releases)
  - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.22)
  
  ---
  updated-dependencies:
  - dependency-name: postcss
    dependency-version: 8.5.22
    dependency-type: indirect
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-24 12:24:30 +00:00
  b472f5b276
• Merge pull request #1055 from crazy-max/test-registry-auth-oidc

  test: cover Docker Hub OIDC with registry-auth

  CrazyMaxandGitHub 2026-07-24 14:22:47 +02:00
  v4.5.1 abd2ef45e7
• Merge pull request #1054 from crazy-max/oidc-missing-dhi

  support dhi.io as Docker Hub OIDC registry

  CrazyMaxandGitHub 2026-07-24 14:22:20 +02:00
  d49d3a9839
• test: cover Docker Hub OIDC with registry-auth

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-24 10:37:01 +02:00
  b58b17c30b
• chore: update generated content

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-24 10:33:14 +02:00
  be646c21ce
• support dhi.io as Docker Hub OIDC registry

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-24 10:26:38 +02:00
  d77c059cb9
• build(deps): bump aws-actions/configure-aws-credentials

  Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 6.2.2 to 6.2.3.
  - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
  - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/517a711dbcd0e402f90c77e7e2f81e849156e31d...e6de054238d6b7531b4efff3b6587d9aade6a06c)
  
  ---
  updated-dependencies:
  - dependency-name: aws-actions/configure-aws-credentials
    dependency-version: 6.2.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-24 05:54:30 +00:00
  9d876d6c33
• Merge pull request #1037 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-001763bcc2

  build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates

  CrazyMaxandGitHub 2026-07-23 13:48:53 +02:00
  v4.5.0 06fb636fac
• [dependabot skip] chore: update generated content
  github-actions[bot] 2026-07-23 11:45:23 +00:00
  a8bc953911
• build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates

  Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public).
  
  
  Updates `@aws-sdk/client-ecr` from 3.1077.0 to 3.1091.0
  - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
  - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md)
  - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-ecr)
  
  Updates `@aws-sdk/client-ecr-public` from 3.1077.0 to 3.1091.0
  - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
  - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md)
  - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-ecr-public)
  
  ---
  updated-dependencies:
  - dependency-name: "@aws-sdk/client-ecr"
    dependency-version: 3.1079.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: aws-sdk-dependencies
  - dependency-name: "@aws-sdk/client-ecr-public"
    dependency-version: 3.1079.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: aws-sdk-dependencies
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-23 11:44:24 +00:00
  f54b9019bf
• Merge pull request #1049 from docker/dependabot/github_actions/codeql-actions-6a53124c02

  build(deps): bump the codeql-actions group with 2 updates

  CrazyMaxandGitHub 2026-07-23 13:41:05 +02:00
  77f18f6713
• Merge pull request #1050 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.94.0

  build(deps): bump @docker/actions-toolkit from 0.93.0 to 0.94.0

  CrazyMaxandGitHub 2026-07-23 13:40:40 +02:00
  ec0bf287fb
• [dependabot skip] chore: update generated content
  github-actions[bot] 2026-07-23 11:36:42 +00:00
  e37171e542
• build(deps): bump @docker/actions-toolkit from 0.93.0 to 0.94.0

  Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.93.0 to 0.94.0.
  - [Release notes](https://github.com/docker/actions-toolkit/releases)
  - [Commits](https://github.com/docker/actions-toolkit/compare/v0.93.0...v0.94.0)
  
  ---
  updated-dependencies:
  - dependency-name: "@docker/actions-toolkit"
    dependency-version: 0.94.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-23 11:35:46 +00:00
  1d3a7174ca
• Merge pull request #1048 from docker/dockerhub-oidc-support

  Docker Hub OIDC login support

  CrazyMaxandGitHub 2026-07-23 13:24:10 +02:00
  a5e9150fe2
• build(deps): bump the codeql-actions group with 2 updates

  Bumps the codeql-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).
  
  
  Updates `github/codeql-action/init` from 4.36.3 to 4.37.2
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...e0647621c2984b5ed2f768cb892365bf2a616ad1)
  
  Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.2
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...e0647621c2984b5ed2f768cb892365bf2a616ad1)
  
  ---
  updated-dependencies:
  - dependency-name: github/codeql-action/init
    dependency-version: 4.37.2
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: codeql-actions
  - dependency-name: github/codeql-action/analyze
    dependency-version: 4.37.2
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: codeql-actions
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-23 05:54:58 +00:00
  a482ba4366
• chore: update generated content

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-22 13:01:47 +02:00
  9e3d36ea10
• docker hub oidc support

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-22 13:01:46 +02:00
  14d6a7934e
• Merge pull request #1044 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.93.0

  build(deps): bump @docker/actions-toolkit from 0.92.0 to 0.93.0

  CrazyMaxandGitHub 2026-07-22 08:53:04 +02:00
  03c851098f
• Merge pull request #1046 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.16

  build(deps): bump brace-expansion from 1.1.13 to 1.1.16

  CrazyMaxandGitHub 2026-07-22 08:51:57 +02:00
  ad8a81f098
• [dependabot skip] chore: update generated content
  github-actions[bot] 2026-07-22 06:51:44 +00:00
  6d219a4928
• build(deps): bump @docker/actions-toolkit from 0.92.0 to 0.93.0

  Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.93.0.
  - [Release notes](https://github.com/docker/actions-toolkit/releases)
  - [Commits](https://github.com/docker/actions-toolkit/compare/v0.92.0...v0.93.0)
  
  ---
  updated-dependencies:
  - dependency-name: "@docker/actions-toolkit"
    dependency-version: 0.93.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-22 06:50:49 +00:00
  b3200694f4
• [dependabot skip] chore: update generated content
  github-actions[bot] 2026-07-22 06:50:38 +00:00
  08d3680aa8
• Merge pull request #1042 from docker/dependabot/github_actions/codeql-actions-af2beed448

  build(deps): bump the codeql-actions group with 2 updates

  CrazyMaxandGitHub 2026-07-22 08:49:44 +02:00
  381f5a4f5e
• build(deps): bump brace-expansion from 1.1.13 to 1.1.16

  Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.13 to 1.1.16.
  - [Release notes](https://github.com/juliangruber/brace-expansion/releases)
  - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.16)
  
  ---
  updated-dependencies:
  - dependency-name: brace-expansion
    dependency-version: 1.1.16
    dependency-type: indirect
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-22 06:49:44 +00:00
  4bc69ce4fd
• Merge pull request #1043 from docker/dependabot/github_actions/actions/setup-node-7.0.0

  build(deps): bump actions/setup-node from 6.4.0 to 7.0.0

  CrazyMaxandGitHub 2026-07-22 08:49:18 +02:00
  ddf94996dc
• Merge pull request #1045 from docker/dependabot/github_actions/actions/checkout-7.0.1

  build(deps): bump actions/checkout from 7.0.0 to 7.0.1

  CrazyMaxandGitHub 2026-07-22 08:48:31 +02:00
  d870eb57d3
• Merge pull request #1038 from docker/dependabot/npm_and_yarn/js-yaml-5.2.1

  build(deps): bump js-yaml from 5.2.0 to 5.2.1

  CrazyMaxandGitHub 2026-07-22 08:47:43 +02:00
  4d7b1348c8
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1

  Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
  - [Release notes](https://github.com/actions/checkout/releases)
  - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)
  
  ---
  updated-dependencies:
  - dependency-name: actions/checkout
    dependency-version: 7.0.1
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-21 05:52:59 +00:00
  608836776e
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0

  Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
  - [Release notes](https://github.com/actions/setup-node/releases)
  - [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)
  
  ---
  updated-dependencies:
  - dependency-name: actions/setup-node
    dependency-version: 7.0.0
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-15 05:52:18 +00:00
  3bab31f360
• build(deps): bump the codeql-actions group with 2 updates

  Bumps the codeql-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).
  
  
  Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)
  
  Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)
  
  ---
  updated-dependencies:
  - dependency-name: github/codeql-action/init
    dependency-version: 4.36.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
    dependency-group: codeql-actions
  - dependency-name: github/codeql-action/analyze
    dependency-version: 4.36.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
    dependency-group: codeql-actions
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot]andGitHub 2026-07-09 12:01:00 +00:00
  dc654b7be1
• Merge pull request #1041 from crazy-max/group-codeql-dependabot-updates

  chore: group codeql dependabot updates

  CrazyMaxandGitHub 2026-07-09 13:57:49 +02:00
  c66a8fcb24
• chore: group codeql dependabot updates

  Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

  CrazyMax 2026-07-09 12:43:17 +02:00
  6d7f9d458a
• Merge pull request #1040 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.2

  build(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2

  CrazyMaxandGitHub 2026-07-09 10:17:14 +02:00
  13169716da