CrazyMax and GitHub
5ad95e8c58
Merge pull request #1090 from docker/dependabot/npm_and_yarn/source-map-js-1.2.2
...
build(deps): bump source-map-js from 1.2.1 to 1.2.2
2026-10-23 16:11:08 +02:00
CrazyMax and GitHub
a5f1c9995c
Merge pull request #1081 from docker/dependabot/github_actions/docker/bake-action-7.4.0
...
build(deps): bump docker/bake-action from 7.3.0 to 7.4.0
2026-10-23 16:10:15 +02:00
CrazyMax and GitHub
b098de5f1b
Merge pull request #1079 from docker/dependabot/github_actions/codecov/codecov-action-7.1.0
...
build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0
2026-10-23 16:10:04 +02:00
CrazyMax and GitHub
50d805b48a
Merge pull request #1080 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-10-23 16:09:53 +02:00
CrazyMax and GitHub
834ffb646a
Merge pull request #1071 from docker/dependabot/npm_and_yarn/postcss-8.5.26
...
build(deps): bump postcss from 8.5.22 to 8.5.26
2026-10-23 16:09:28 +02:00
CrazyMax and GitHub
2fea3b2c5c
Merge pull request #1072 from docker/dependabot/github_actions/crazy-max-dot-github-6f52f8ed50
...
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
2026-10-23 16:09:15 +02:00
CrazyMax and GitHub
f3f25ba560
Merge pull request #1077 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
...
build(deps): bump @humanfs/node from 0.16.7 to 0.16.8
2026-10-23 16:09:02 +02:00
CrazyMax and GitHub
0b08f36d38
Merge pull request #1088 from crazy-max/fix-scoped-registry-url
...
use registry hosts for scoped credentials
2026-10-23 16:08:12 +02:00
dependabot[bot] and GitHub
8fa2c064e3
build(deps): bump postcss-selector-parser from 7.1.1 to 7.1.6
...
Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser ) from 7.1.1 to 7.1.6.
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases )
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/v7.1.1...7.1.6 )
---
updated-dependencies:
- dependency-name: postcss-selector-parser
dependency-version: 7.1.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 20:06:24 +00:00
dependabot[bot] and GitHub
375309eeb7
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.8 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee )
Updates `github/codeql-action/analyze` from 4.37.8 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 05:54:19 +00:00
dependabot[bot] and GitHub
5d33b362eb
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222 )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 05:52:13 +00:00
CrazyMax
0feb529243
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-17 12:25:27 +02:00
CrazyMax
4e12eabf92
use registry hosts for scoped credentials
...
Parse registry URLs so scoped ECR credentials use the same config directory
for login, logout, and Buildx lookup. Preserve explicit default ports.
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-17 12:24:46 +02:00
CrazyMax and GitHub
d3b9cdfa58
Merge pull request #1089 from crazy-max/fix-registry-auth-ecr-false
...
preserve explicit ECR settings in registry-auth
2026-10-16 20:24:38 +02:00
dependabot[bot] and GitHub
b773301bab
build(deps): bump source-map-js from 1.2.1 to 1.2.2
...
Bumps [source-map-js](https://github.com/7rulnik/source-map-js ) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases )
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2 )
---
updated-dependencies:
- dependency-name: source-map-js
dependency-version: 1.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-16 13:44:31 +00:00
CrazyMax
a27b71b09c
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
CrazyMax
2c873c3656
test: simplify registry-auth ECR regression coverage
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
breken-ai and CrazyMax
b4bb2a4ec0
keep registry-auth ecr: false instead of falling back to auto
...
registry-auth is parsed as YAML, so `ecr: false` (unquoted) is the
boolean false, and `auth.ecr || 'auto'` turned it into 'auto'. For an
ECR registry this runs the AWS SDK login with the given username and
password as AWS access keys, instead of the plain docker login the user
asked for. Only the quoted string "false" worked.
Convert the value to a string and only default to 'auto' when it is
missing or empty.
Assisted-By: Claude
Signed-off-by: breken-ai <312387581+breken-ai@users.noreply.github.com >
2026-10-05 14:21:32 +02:00
dependabot[bot] and GitHub
1f3cb3efe9
build(deps): bump aws-actions/configure-aws-credentials
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 6.2.3 to 6.3.0.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e6de054238d6b7531b4efff3b6587d9aade6a06c...e1253824e5c10ff9df46874f81ed3ec929e19cfd )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-17 05:54:51 +00:00
dependabot[bot] and GitHub
e800f1e754
build(deps): bump docker/bake-action from 7.3.0 to 7.4.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b...018cb6412ab401ebaa809aa5f85966b74628600f )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-17 05:54:36 +00:00
CrazyMax and GitHub
783ae9cac5
Merge pull request #1064 from docker/dependabot/github_actions/codeql-actions-ce612e0709
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-09-16 10:57:53 +02:00
dependabot[bot] and GitHub
67ccbdd142
build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...0b35c9ecc4f0529d0eb674914510c22f85b196b4 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 05:52:38 +00:00
dependabot[bot] and GitHub
96df24572b
build(deps): bump @humanfs/node from 0.16.7 to 0.16.8
...
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node ) from 0.16.7 to 0.16.8.
- [Release notes](https://github.com/humanwhocodes/humanfs/releases )
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md )
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node )
---
updated-dependencies:
- dependency-name: "@humanfs/node"
dependency-version: 0.16.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 12:23:51 +00:00
dependabot[bot] and GitHub
b1725c2c93
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-25 05:54:40 +00:00
CrazyMax and GitHub
0a596b2e7a
Merge pull request #1073 from quentin-laplanche-docker/ci/remove-docker-notation
...
ci: replace registry container action reference
2026-08-24 15:27:36 +02:00
Quentin Laplanche and Codex
5d1ee94869
ci: replace registry container action reference
...
Use a local Docker container action so the runner still exercises its container-action mounts and environment without a docker:// workflow reference.
Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com >
Co-authored-by: Codex <noreply@openai.com >
2026-08-24 15:15:07 +02:00
dependabot[bot] and GitHub
8febd2275e
build(deps): bump postcss from 8.5.22 to 8.5.26
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.22 to 8.5.26.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.22...8.5.26 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.26
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-12 05:02:09 +00:00
Tõnis Tiigi and GitHub
af63523ba5
Merge pull request #1061 from docker/dockerhub-oidc-logs
...
log Docker Hub OIDC token exchange progress
2026-08-11 11:56:25 +03:00
CrazyMax
72edfa6c2e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:52:13 +02:00
CrazyMax
2b7517a3b4
log Docker Hub OIDC token exchange progress
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:51:47 +02:00
CrazyMax and GitHub
eed2509203
Merge pull request #1068 from crazy-max/dockerhub-oidc-increase-expire-in
...
raise Docker Hub OIDC max expiry to 6 hours
2026-08-06 12:07:08 +02:00
CrazyMax
07573e7c18
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:54:13 +02:00
CrazyMax
99ffd0f38a
raise Docker Hub OIDC max expiry to 6 hours
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:53:57 +02:00
CrazyMax and GitHub
dbcb813823
Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-46cc3261cb
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
v4.6.0
2026-07-29 13:33:29 +02:00
github-actions[bot]
5bcb015ee6
[dependabot skip] chore: update generated content
2026-07-29 10:44:53 +00:00
dependabot[bot] and GitHub
b30b2f2d31
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:43:57 +00:00
CrazyMax and GitHub
9087f1e6d6
Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
...
build(deps): bump js-yaml from 5.2.1 to 5.2.2
2026-07-29 12:40:51 +02:00
github-actions[bot]
0009830ea1
[dependabot skip] chore: update generated content
2026-07-29 10:32:28 +00:00
dependabot[bot] and GitHub
23255232d3
build(deps): bump js-yaml from 5.2.1 to 5.2.2
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:31:34 +00:00
CrazyMax and GitHub
4ec1d4a769
Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
...
build(deps): bump postcss from 8.5.10 to 8.5.22
2026-07-29 12:28:53 +02:00
CrazyMax and GitHub
5fc99ba47b
Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.3
...
build(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3
2026-07-29 12:28:12 +02:00
CrazyMax and GitHub
e512bd59d1
Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions-73adf09e94
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-07-29 12:26:59 +02:00
CrazyMax and GitHub
a146c91b8f
Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
...
harden buildx scoped config path handling
2026-07-29 10:50:27 +02:00
CrazyMax
8ffd80ffa5
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 09:57:41 +02:00
CrazyMax
8305724bcf
harden buildx scoped config path handling
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 09:57:00 +02:00
dependabot[bot] and GitHub
91264757e1
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
Updates `github/codeql-action/analyze` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-28 05:54:42 +00:00
CrazyMax and GitHub
371161bbe7
Merge pull request #1058 from crazy-max/fix-dockerhub-oidc-error-handling
...
surface Docker Hub OIDC error responses
v4.5.2
2026-07-27 18:30:08 +02:00
CrazyMax
5dc73df38e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-27 17:15:04 +02:00
CrazyMax
2aa1edee0b
surface Docker Hub OIDC error responses
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-27 17:14:54 +02:00
dependabot[bot] and GitHub
b472f5b276
build(deps): bump postcss from 8.5.10 to 8.5.22
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.10 to 8.5.22.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.22 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.22
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 12:24:30 +00:00