Merge pull request #1107 from crazy-max/ci-codecov-oidc

ci: use OIDC for Codecov uploads
2026-11-06 14:49:20 +00:00 · 2026-11-05 17:24:30 +01:00 · 2026-11-05 17:09:25 +01:00 · 2026-11-05 13:54:17 +01:00 · 2026-11-05 12:52:56 +00:00 · 2026-11-05 12:52:07 +00:00
10 changed files with 369 additions and 332 deletions
@@ -30,17 +30,17 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+        uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+        uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
        with:
          category: "/language:javascript-typescript"
@@ -17,6 +17,9 @@ on:
 jobs:
  test:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write # for Codecov authentication
    steps:
      -
        name: Checkout
@@ -32,4 +35,4 @@ jobs:
        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
        with:
          files: ./coverage/clover.xml
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true
@@ -760,7 +760,7 @@ The following environment variables can be set as `step.env` keys:
 | Name                          | Type   | Default | Description                                                                                        |
 |-------------------------------|--------|---------|----------------------------------------------------------------------------------------------------|
 | `DOCKERHUB_OIDC_CONNECTIONID` | String |         | Docker Hub OIDC connection ID. Required for Docker Hub OIDC login                                  |
-| `DOCKERHUB_OIDC_EXPIREIN`     | Number | `300`   | Docker Hub OIDC token lifetime in seconds. Must be between `300` (5 minutes) and `21600` (6 hours) |
+| `DOCKERHUB_OIDC_EXPIREIN`     | Number | `3600`  | Docker Hub OIDC token lifetime in seconds. Must be between `300` (5 minutes) and `21600` (6 hours) |
 ## Contributing
@@ -82,14 +82,14 @@ describe('getOIDCToken', () => {
    expect(body.get('subject_token_type')).toBe('urn:ietf:params:oauth:token-type:id_token');
    expect(body.get('subject_token')).toBe('github-id-token');
    expect(body.get('connection_id')).toBe(validConnectionID);
-    expect(body.get('expires_in')).toBe('300');
+    expect(body.get('expires_in')).toBe('3600');
    expect(setSecretMock).toHaveBeenCalledWith('hub-token');
    expect(core.info).toHaveBeenCalledWith('Docker Hub OIDC detected for docker.io');
    expect(core.info).toHaveBeenCalledWith('Retrieving GitHub OIDC token for Docker Hub');
    expect(core.info).toHaveBeenCalledWith('Exchanging GitHub OIDC token for Docker Hub token');
    expect(core.info).toHaveBeenCalledWith('Docker Hub OIDC token exchange succeeded');
    expect(core.debug).toHaveBeenCalledWith('Docker Hub OIDC token audience: https://identity.docker.com');
-    expect(core.debug).toHaveBeenCalledWith('Docker Hub OIDC token expiration: 300s');
+    expect(core.debug).toHaveBeenCalledWith('Docker Hub OIDC token expiration: 3600s');
    expect(core.debug).toHaveBeenCalledWith('Sending Docker Hub OIDC token request to https://identity.docker.com/oauth/token');
    expect(core.debug).toHaveBeenCalledWith('Docker Hub OIDC token request returned status code 200');
    expect(core.debug).toHaveBeenCalledWith('Docker Hub OIDC token response status code: 200');
@@ -399,7 +399,7 @@ Apache License
 The following npm package may be included in this product:
- - @docker/actions-toolkit@0.107.0
+ - @docker/actions-toolkit@0.109.0
 This package contains the following license:
@@ -1909,8 +1909,8 @@ Apache License
 The following npm packages may be included in this product:
- - @aws-sdk/client-ecr-public@3.1154.0
+ - @aws-sdk/client-ecr-public@3.1161.0
- - @aws-sdk/client-ecr@3.1154.0
+ - @aws-sdk/client-ecr@3.1161.0
 These packages each contain the following license:
@@ -2120,8 +2120,9 @@ Apache License
 The following npm packages may be included in this product:
- - @aws-sdk/signature-v4-multi-region@3.996.48
+ - @aws-sdk/signature-v4-multi-region@3.996.51
 - @smithy/core@3.36.1
 - @smithy/core@3.38.1
 - @smithy/types@4.19.0
 These packages each contain the following license:
@@ -2940,7 +2941,7 @@ software or this license, under any kind of legal claim.***
 The following npm package may be included in this product:
- - @aws-sdk/core@3.978.4
+ - @aws-sdk/core@3.979.1
 This package contains the following license:
@@ -3150,16 +3151,16 @@ Apache License
 The following npm packages may be included in this product:
- - @aws-sdk/credential-provider-env@3.972.75
+ - @aws-sdk/credential-provider-env@3.972.80
- - @aws-sdk/credential-provider-ini@3.973.20
+ - @aws-sdk/credential-provider-ini@3.973.25
- - @aws-sdk/credential-provider-node@3.972.87
+ - @aws-sdk/credential-provider-node@3.972.92
- - @aws-sdk/token-providers@3.1153.0
+ - @aws-sdk/token-providers@3.1161.0
- - @aws-sdk/types@3.974.6
+ - @aws-sdk/types@3.975.0
- - @aws-sdk/xml-builder@3.972.41
+ - @aws-sdk/xml-builder@3.972.42
 - @smithy/credential-provider-imds@4.5.2
 - @smithy/fetch-http-handler@5.8.0
- - @smithy/node-http-handler@4.12.1
+ - @smithy/node-http-handler@4.14.1
- - @smithy/signature-v4@5.7.4
+ - @smithy/signature-v4@5.7.5
 These packages each contain the following license:
@@ -3369,9 +3370,9 @@ Apache License
 The following npm packages may be included in this product:
- - @aws-sdk/credential-provider-process@3.972.75
+ - @aws-sdk/credential-provider-process@3.972.80
- - @aws-sdk/credential-provider-sso@3.973.19
+ - @aws-sdk/credential-provider-sso@3.973.24
- - @aws-sdk/credential-provider-web-identity@3.972.81
+ - @aws-sdk/credential-provider-web-identity@3.972.86
 These packages each contain the following license:
@@ -3581,9 +3582,9 @@ Apache License
 The following npm packages may be included in this product:
- - @aws-sdk/credential-provider-http@3.972.77
+ - @aws-sdk/credential-provider-http@3.972.82
- - @aws-sdk/credential-provider-login@3.972.82
+ - @aws-sdk/credential-provider-login@3.972.87
- - @aws-sdk/nested-clients@3.997.49
+ - @aws-sdk/nested-clients@3.997.54
 - @sigstore/verify@4.1.2
 These packages each contain the following license:
@@ -5205,6 +5206,7 @@ The following npm packages may be included in this product:
 - once@1.4.0
 - semver@7.7.3
 - semver@7.8.5
 - semver@7.8.6
 - which@2.0.2
 - wrappy@1.0.2
@@ -5323,11 +5325,12 @@ THE SOFTWARE.
 -----------
-The following npm package may be included in this product:
+The following npm packages may be included in this product:
 - csv-parse@7.0.3
 - csv-stringify@6.9.0
-This package contains the following license:
+These packages each contain the following license:
 The MIT License (MIT)
@@ -25,9 +25,9 @@
  "dependencies": {
    "@actions/core": "^3.0.1",
    "@actions/http-client": "^4.0.1",
-    "@aws-sdk/client-ecr": "^3.1154.0",
+    "@aws-sdk/client-ecr": "^3.1161.0",
-    "@aws-sdk/client-ecr-public": "^3.1154.0",
+    "@aws-sdk/client-ecr-public": "^3.1161.0",
-    "@docker/actions-toolkit": "^0.107.0",
+    "@docker/actions-toolkit": "^0.109.0",
    "http-proxy-agent": "^9.1.0",
    "https-proxy-agent": "^9.1.0",
    "js-yaml": "^5.5.0",
@@ -13,7 +13,7 @@ interface OIDCTokenResponse {
 }
 const registries = new Set(['', 'docker.io', 'registry-1.docker.io', 'registry-1-stage.docker.io', 'dhi.io']);
-const defaultExpiresIn = 300;
+const defaultExpiresIn = 3600;
 const minExpiresIn = 300;
 const maxExpiresIn = 21600;
 const maxRetries = 5;
@@ -155,237 +155,237 @@ __metadata:
  languageName: node
  linkType: hard
-"@aws-sdk/client-ecr-public@npm:^3.1154.0":
+"@aws-sdk/client-ecr-public@npm:^3.1161.0":
-  version: 3.1154.0
+  version: 3.1161.0
-  resolution: "@aws-sdk/client-ecr-public@npm:3.1154.0"
+  resolution: "@aws-sdk/client-ecr-public@npm:3.1161.0"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/credential-provider-node": "npm:^3.972.87"
+    "@aws-sdk/credential-provider-node": "npm:^3.972.92"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@smithy/core": "npm:^3.38.0"
    "@smithy/fetch-http-handler": "npm:^5.8.0"
-    "@smithy/node-http-handler": "npm:^4.12.1"
+    "@smithy/node-http-handler": "npm:^4.14.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/76a9f5d9dea2aa4e105c51fcdd69dd42f4d82867fc1b1759f22403fb74191f9c0fe5ad960f12b1db87e4b61e2752edd98d103bd063fa9761164c6ba950de1678
+  checksum: 10/c605d402a79622b8ba2c0fc50f3b04b76aa62f242c7b0c7face03dbb75a3cf615ab8a6dd050aa77900c9b94d1fdfbdaebbabe8ff151ab8531ed1f10bd5469add
  languageName: node
  linkType: hard
-"@aws-sdk/client-ecr@npm:^3.1154.0":
+"@aws-sdk/client-ecr@npm:^3.1161.0":
-  version: 3.1154.0
+  version: 3.1161.0
-  resolution: "@aws-sdk/client-ecr@npm:3.1154.0"
+  resolution: "@aws-sdk/client-ecr@npm:3.1161.0"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/credential-provider-node": "npm:^3.972.87"
+    "@aws-sdk/credential-provider-node": "npm:^3.972.92"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@smithy/core": "npm:^3.38.0"
    "@smithy/fetch-http-handler": "npm:^5.8.0"
-    "@smithy/node-http-handler": "npm:^4.12.1"
+    "@smithy/node-http-handler": "npm:^4.14.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/512257c9cab547c3211cbbf7d0c35c2d3358edeee5e59a34b7261f3a12dc6d7771bf71c69aa7fd43956fc264da4d8d6b889156424aeb39f894078997fbbfdcad
+  checksum: 10/867ff3e6222559e7c2fd237e97395b4fa38e043c4bd9df62706f1662a5c2b62be1c36bdcd2b69640ccfbb874bc7cef9ca2d9ab33d6702c0b019e8f6d156b4c32
  languageName: node
  linkType: hard
-"@aws-sdk/core@npm:^3.978.4":
+"@aws-sdk/core@npm:^3.979.1":
-  version: 3.978.4
+  version: 3.979.1
-  resolution: "@aws-sdk/core@npm:3.978.4"
+  resolution: "@aws-sdk/core@npm:3.979.1"
  dependencies:
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@aws-sdk/xml-builder": "npm:^3.972.41"
+    "@aws-sdk/xml-builder": "npm:^3.972.42"
    "@aws/lambda-invoke-store": "npm:^0.3.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@smithy/core": "npm:^3.38.0"
-    "@smithy/signature-v4": "npm:^5.7.4"
+    "@smithy/signature-v4": "npm:^5.7.5"
    "@smithy/types": "npm:^4.19.0"
    bowser: "npm:^2.11.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/f0596a5167aed56d9db90e4e47a099f9f5cd336020fcc8766b9fa0bf43beac5de9503a8d0185b727962028e692d16c448d847c2acb1cad04091a94b562c7f6dc
+  checksum: 10/910a1b56603ac6fe87d8388a49bac9ccdec9958a17a12f2bc34c25e5d74ec0f785f43a9ef722e2bfd71022b6888aa9cd4d469f057b5b947ea7c7aba837afc60a
  languageName: node
  linkType: hard
-"@aws-sdk/credential-provider-env@npm:^3.972.75":
+"@aws-sdk/credential-provider-env@npm:^3.972.80":
-  version: 3.972.75
+  version: 3.972.80
-  resolution: "@aws-sdk/credential-provider-env@npm:3.972.75"
+  resolution: "@aws-sdk/credential-provider-env@npm:3.972.80"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@smithy/core": "npm:^3.38.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/802b1b78b11b87e9ce39ec5a85ac1c1d0eef90186bf65d43fb5e05e2361f2308ae283b8fa061550eaab5f880ca8229f32a26ab0dcd38e67b81baa85f730f9778
+  checksum: 10/1dacc56c7b7cb57bf059108b4ad771f82967a5878c47a965f5d1e30bcdbaab2c9727c439d6adfaf38aaa6c874f5c75c22f8c127a455787b3ba8d9f75d62203e7
  languageName: node
  linkType: hard
-"@aws-sdk/credential-provider-http@npm:^3.972.77":
+"@aws-sdk/credential-provider-http@npm:^3.972.82":
  version: 3.972.77
  resolution: "@aws-sdk/credential-provider-http@npm:3.972.77"
  dependencies:
    "@aws-sdk/core": "npm:^3.978.4"
    "@aws-sdk/types": "npm:^3.974.6"
    "@smithy/core": "npm:^3.36.0"
    "@smithy/fetch-http-handler": "npm:^5.8.0"
    "@smithy/node-http-handler": "npm:^4.12.1"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
  checksum: 10/197fd328e3183ad7de03a6754e1a9f8205f3aa3afaf9bfc820885438c45db2a1b5a52b1320500dbec82e8dadab74b0d822ffdd1eae1f94c52fd7b217e44c42a8
  languageName: node
  linkType: hard
 "@aws-sdk/credential-provider-ini@npm:^3.973.20":
  version: 3.973.20
  resolution: "@aws-sdk/credential-provider-ini@npm:3.973.20"
  dependencies:
    "@aws-sdk/core": "npm:^3.978.4"
    "@aws-sdk/credential-provider-env": "npm:^3.972.75"
    "@aws-sdk/credential-provider-http": "npm:^3.972.77"
    "@aws-sdk/credential-provider-login": "npm:^3.972.82"
    "@aws-sdk/credential-provider-process": "npm:^3.972.75"
    "@aws-sdk/credential-provider-sso": "npm:^3.973.19"
    "@aws-sdk/credential-provider-web-identity": "npm:^3.972.81"
    "@aws-sdk/nested-clients": "npm:^3.997.49"
    "@aws-sdk/types": "npm:^3.974.6"
    "@smithy/core": "npm:^3.36.0"
    "@smithy/credential-provider-imds": "npm:^4.5.2"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
  checksum: 10/7dfe470333fe3c1ef214c144c099a906ed74a0c05c40abc80253409fb26e839482d2364f96cf4db079d4b19b415c523a033cc3d8bce346868142d95ea1cff78d
  languageName: node
  linkType: hard
 "@aws-sdk/credential-provider-login@npm:^3.972.82":
  version: 3.972.82
-  resolution: "@aws-sdk/credential-provider-login@npm:3.972.82"
+  resolution: "@aws-sdk/credential-provider-http@npm:3.972.82"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/nested-clients": "npm:^3.997.49"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@smithy/core": "npm:^3.38.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@smithy/fetch-http-handler": "npm:^5.8.0"
    "@smithy/node-http-handler": "npm:^4.14.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/6e7aeda233eaea2c85b16b91f0b852c61d598dd6ce2df85958c8cb82d04f8355825ff59c66fc7fb0dfb09db0b68d9e4b80d61a86d5c2e16069caf9180babfd03
+  checksum: 10/5694f320e3768984d8d517376c868494c2711913850bd9b3f9db68ec53484627eed6a2f1dfd75c57b7c7bd2e509dbf3a8cec2947c47312dc3e2c303615ed32ad
  languageName: node
  linkType: hard
-"@aws-sdk/credential-provider-node@npm:^3.972.87":
+"@aws-sdk/credential-provider-ini@npm:^3.973.25":
-  version: 3.972.87
+  version: 3.973.25
-  resolution: "@aws-sdk/credential-provider-node@npm:3.972.87"
+  resolution: "@aws-sdk/credential-provider-ini@npm:3.973.25"
  dependencies:
-    "@aws-sdk/credential-provider-env": "npm:^3.972.75"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/credential-provider-http": "npm:^3.972.77"
+    "@aws-sdk/credential-provider-env": "npm:^3.972.80"
-    "@aws-sdk/credential-provider-ini": "npm:^3.973.20"
+    "@aws-sdk/credential-provider-http": "npm:^3.972.82"
-    "@aws-sdk/credential-provider-process": "npm:^3.972.75"
+    "@aws-sdk/credential-provider-login": "npm:^3.972.87"
-    "@aws-sdk/credential-provider-sso": "npm:^3.973.19"
+    "@aws-sdk/credential-provider-process": "npm:^3.972.80"
-    "@aws-sdk/credential-provider-web-identity": "npm:^3.972.81"
+    "@aws-sdk/credential-provider-sso": "npm:^3.973.24"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/credential-provider-web-identity": "npm:^3.972.86"
-    "@smithy/core": "npm:^3.36.0"
+    "@aws-sdk/nested-clients": "npm:^3.997.54"
    "@aws-sdk/types": "npm:^3.975.0"
    "@smithy/core": "npm:^3.38.0"
    "@smithy/credential-provider-imds": "npm:^4.5.2"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/33ec2018f3412ab7b8c0fde58734a5c858e74a86b5e78f598acef467cf8dfeadf935f9b7f5d24291af619fbabff2cd141cca6c13f44abffcc92faefba8150ff3
+  checksum: 10/d4eadc573381a62852915c91fd1a9a044f2cd203ccf1ea90a5fd166f284547ea49638d3bcf243a5fe73187162468e82df4e1a68541f55a1a82661404834fd729
  languageName: node
  linkType: hard
-"@aws-sdk/credential-provider-process@npm:^3.972.75":
+"@aws-sdk/credential-provider-login@npm:^3.972.87":
-  version: 3.972.75
+  version: 3.972.87
-  resolution: "@aws-sdk/credential-provider-process@npm:3.972.75"
+  resolution: "@aws-sdk/credential-provider-login@npm:3.972.87"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/nested-clients": "npm:^3.997.54"
-    "@smithy/core": "npm:^3.36.0"
+    "@aws-sdk/types": "npm:^3.975.0"
    "@smithy/core": "npm:^3.38.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/3ec48991dc80cfe748d5e34b1e6e37ee5664f53091b200fb56655665fd219cdb075058f22fa7ead17db7650d1bf043b9491d3d902e58c5aa54a21ee9223cae68
+  checksum: 10/f9e2fcdba78712e9604048a8eacffda554cfa7dbcea6c0de071cd047491ff27f6af57fca59acf26210e2f40c0fa4aaafdd6ad631065d19d4d8cad6d4f44ec0e1
  languageName: node
  linkType: hard
-"@aws-sdk/credential-provider-sso@npm:^3.973.19":
+"@aws-sdk/credential-provider-node@npm:^3.972.92":
-  version: 3.973.19
+  version: 3.972.92
-  resolution: "@aws-sdk/credential-provider-sso@npm:3.973.19"
+  resolution: "@aws-sdk/credential-provider-node@npm:3.972.92"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/credential-provider-env": "npm:^3.972.80"
-    "@aws-sdk/nested-clients": "npm:^3.997.49"
+    "@aws-sdk/credential-provider-http": "npm:^3.972.82"
-    "@aws-sdk/token-providers": "npm:3.1153.0"
+    "@aws-sdk/credential-provider-ini": "npm:^3.973.25"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/credential-provider-process": "npm:^3.972.80"
-    "@smithy/core": "npm:^3.36.0"
+    "@aws-sdk/credential-provider-sso": "npm:^3.973.24"
    "@aws-sdk/credential-provider-web-identity": "npm:^3.972.86"
    "@aws-sdk/types": "npm:^3.975.0"
    "@smithy/core": "npm:^3.38.0"
    "@smithy/credential-provider-imds": "npm:^4.5.2"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/d297a988a084f35ba143f7d6ea3aa2c5c0bbbc3e1438540d3d8b20a87c9597c583af80b42dc59f78108352cc3145edab7061a59e42b03fffe194dd2fc5a67f70
+  checksum: 10/b4cae72953e9f9b34f3ca9e8e8f0cbf5e3a662cd6a171c11678fc12691df0442eb44dd399ab739f84b9296b41950fa0cea9612bf3665625888e6d8710d7b8f9f
  languageName: node
  linkType: hard
-"@aws-sdk/credential-provider-web-identity@npm:^3.972.81":
+"@aws-sdk/credential-provider-process@npm:^3.972.80":
-  version: 3.972.81
+  version: 3.972.80
-  resolution: "@aws-sdk/credential-provider-web-identity@npm:3.972.81"
+  resolution: "@aws-sdk/credential-provider-process@npm:3.972.80"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/nested-clients": "npm:^3.997.49"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@smithy/core": "npm:^3.38.0"
    "@smithy/core": "npm:^3.36.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/6a9f7cdcf7fcb49670ba882ae01923798fd15c0f8f4d21c8dccf0b55385e2aca7e614ea6b74af9efaa21e393d527c421d1b456f67954264e4e614e2e1fba4682
+  checksum: 10/aa29726fcce498b8e830ea5e22271becaa912c245edcdc664c80aac1c147b09fdb1b30cf28cc047358dced0346cc4edf3272516766c496b9b096f17f0cfdc52f
  languageName: node
  linkType: hard
-"@aws-sdk/nested-clients@npm:^3.997.49":
+"@aws-sdk/credential-provider-sso@npm:^3.973.24":
-  version: 3.997.49
+  version: 3.973.24
-  resolution: "@aws-sdk/nested-clients@npm:3.997.49"
+  resolution: "@aws-sdk/credential-provider-sso@npm:3.973.24"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/signature-v4-multi-region": "npm:^3.996.48"
+    "@aws-sdk/nested-clients": "npm:^3.997.54"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/token-providers": "npm:3.1161.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@aws-sdk/types": "npm:^3.975.0"
    "@smithy/core": "npm:^3.38.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
  checksum: 10/73cededef9d31bce8964dd1a522ef1406bd5e845604b08db8924c695ba46c8ed2f2ee9291405d9cd38fc3980108945e63558b570a2e5ed6d073c1369acc86187
  languageName: node
  linkType: hard
 "@aws-sdk/credential-provider-web-identity@npm:^3.972.86":
  version: 3.972.86
  resolution: "@aws-sdk/credential-provider-web-identity@npm:3.972.86"
  dependencies:
    "@aws-sdk/core": "npm:^3.979.1"
    "@aws-sdk/nested-clients": "npm:^3.997.54"
    "@aws-sdk/types": "npm:^3.975.0"
    "@smithy/core": "npm:^3.38.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
  checksum: 10/97bde4089548f09634ea0b8a83c8840eed7a6fe4c37d79eb9cef2a1a781e67201cce088119d15d5c96825817895a139ed05ce524321942bfc8e51e7085434105
  languageName: node
  linkType: hard
 "@aws-sdk/nested-clients@npm:^3.997.54":
  version: 3.997.54
  resolution: "@aws-sdk/nested-clients@npm:3.997.54"
  dependencies:
    "@aws-sdk/core": "npm:^3.979.1"
    "@aws-sdk/signature-v4-multi-region": "npm:^3.996.51"
    "@aws-sdk/types": "npm:^3.975.0"
    "@smithy/core": "npm:^3.38.0"
    "@smithy/fetch-http-handler": "npm:^5.8.0"
-    "@smithy/node-http-handler": "npm:^4.12.1"
+    "@smithy/node-http-handler": "npm:^4.14.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/5c754d2ac958cbe5b806ed848c6c2095c0ddec46a20f0a63a57260846e8b80660a40791457a73dd1f9e08adaa9fcbf45e8d61cfa2a745a81ff150de641fc003d
+  checksum: 10/098486eeaec2ecbb2bf78e543229848de8dce33937f8e7cd94a354cc8ef2bb1499d8745b07fd77849aef677b2a618be2848308e2c832b2e6796e09be4c325700
  languageName: node
  linkType: hard
-"@aws-sdk/signature-v4-multi-region@npm:^3.996.48":
+"@aws-sdk/signature-v4-multi-region@npm:^3.996.51":
-  version: 3.996.48
+  version: 3.996.51
-  resolution: "@aws-sdk/signature-v4-multi-region@npm:3.996.48"
+  resolution: "@aws-sdk/signature-v4-multi-region@npm:3.996.51"
  dependencies:
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@smithy/signature-v4": "npm:^5.7.4"
+    "@smithy/signature-v4": "npm:^5.7.5"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/249b4a164e9cd234bf50c3956a7f696278695679fcf9c9173bac98db83d2b5ef629cbc60c83edbfc027c08fdb1243ab2d51d4f838f58dbffdbc0e8210dc90deb
+  checksum: 10/66ec5538930f40eb49947d7ec11d4126bec9c56249d52b5307811ce21922438d30699ba01cebb45008ce5ec403ae8051cbcca89a7d0b2755fbd0fec75cee8e21
  languageName: node
  linkType: hard
-"@aws-sdk/token-providers@npm:3.1153.0":
+"@aws-sdk/token-providers@npm:3.1161.0":
-  version: 3.1153.0
+  version: 3.1161.0
-  resolution: "@aws-sdk/token-providers@npm:3.1153.0"
+  resolution: "@aws-sdk/token-providers@npm:3.1161.0"
  dependencies:
-    "@aws-sdk/core": "npm:^3.978.4"
+    "@aws-sdk/core": "npm:^3.979.1"
-    "@aws-sdk/nested-clients": "npm:^3.997.49"
+    "@aws-sdk/nested-clients": "npm:^3.997.54"
-    "@aws-sdk/types": "npm:^3.974.6"
+    "@aws-sdk/types": "npm:^3.975.0"
-    "@smithy/core": "npm:^3.36.0"
+    "@smithy/core": "npm:^3.38.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/0a20bd498987e00ac8f23bcff1b458a03f81ef16859cd1cdbd62393fffe3d137747ecd1d1bb4e2da02d46ff5d91e34d69c3a67abf5916b95cba3c06544d4af68
+  checksum: 10/c85ae391a9dbc9b85ad468262a6d22e485045bfcb78d7241a0d11029d800eca0f1ce8b99ed2c51e72a7bf2504277c906f71747cb8231d90e1078886e86885873
  languageName: node
  linkType: hard
-"@aws-sdk/types@npm:^3.974.6":
+"@aws-sdk/types@npm:^3.975.0":
-  version: 3.974.6
+  version: 3.975.0
-  resolution: "@aws-sdk/types@npm:3.974.6"
+  resolution: "@aws-sdk/types@npm:3.975.0"
  dependencies:
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/74c3d3e0c1c025f92fb559a958a1affb0a7c852df13e1fc8a65648fa2553572f0d53002569649469e44ea87d2d90c1261415226a03409d5e9894529902099fe9
+  checksum: 10/1d6d2d4a8b73fa395e1d6189f76dc386327eebdf9017b854991b2b28bb0ac76bfda254253cc162b83d371005e760026f13ba984c2c862602cd905e9273f4a087
  languageName: node
  linkType: hard
-"@aws-sdk/xml-builder@npm:^3.972.41":
+"@aws-sdk/xml-builder@npm:^3.972.42":
-  version: 3.972.41
+  version: 3.972.42
-  resolution: "@aws-sdk/xml-builder@npm:3.972.41"
+  resolution: "@aws-sdk/xml-builder@npm:3.972.42"
  dependencies:
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/71050bf41f4f1402dd86cf07bb038ebaf8d86c6b4c66616e0ffc4b40e7b8ced9fb5c396026e8599b431a959f8045d976786b837a72d0a6709abec049beb13c9b
+  checksum: 10/0b0acd1403fa28a7a64120eebed8dec7722d936a751f8b2a985a63b029594be6298eb93a4e27cc4df6ca4d88c5fef61a53d4568a2eaada74404c7718bda3f29b
  languageName: node
  linkType: hard
@@ -662,9 +662,9 @@ __metadata:
  languageName: node
  linkType: hard
-"@docker/actions-toolkit@npm:^0.107.0":
+"@docker/actions-toolkit@npm:^0.109.0":
-  version: 0.107.0
+  version: 0.109.0
-  resolution: "@docker/actions-toolkit@npm:0.107.0"
+  resolution: "@docker/actions-toolkit@npm:0.109.0"
  dependencies:
    "@actions/artifact": "npm:^6.3.1"
    "@actions/cache": "npm:^6.3.0"
@@ -679,15 +679,16 @@ __metadata:
    "@sigstore/verify": "npm:^4.1.2"
    async-retry: "npm:^1.3.3"
    csv-parse: "npm:^7.0.3"
    csv-stringify: "npm:^6.9.0"
    gunzip-maybe: "npm:^1.4.2"
    handlebars: "npm:^4.7.10"
    he: "npm:^2.0.0"
    js-yaml: "npm:^5.5.0"
    jwt-decode: "npm:^4.0.0"
-    semver: "npm:^7.8.5"
+    semver: "npm:^7.8.6"
    tar-stream: "npm:^3.2.2"
    tmp: "npm:^0.2.7"
-  checksum: 10/bb43d11ece07be4b07613ea3e4a308233a7daa789cb3f54cf3d399f08ae7f1ad9756bb72457ea5e28408b838787fed0221921be4ed9ae135e55608f66b250b4f
+  checksum: 10/55a4c83878e7f729b186542fb84267b3fe667977c2efb9e336b913d9d9e57fa4af2e6642b35a4befeb12a9bfc87ed72c30927483a8b78d77534c9ff2920f3b89
  languageName: node
  linkType: hard
@@ -1965,7 +1966,7 @@ __metadata:
  languageName: node
  linkType: hard
-"@smithy/core@npm:^3.33.2, @smithy/core@npm:^3.33.3, @smithy/core@npm:^3.35.0, @smithy/core@npm:^3.36.0":
+"@smithy/core@npm:^3.33.2, @smithy/core@npm:^3.33.3":
  version: 3.36.1
  resolution: "@smithy/core@npm:3.36.1"
  dependencies:
@@ -1975,6 +1976,16 @@ __metadata:
  languageName: node
  linkType: hard
 "@smithy/core@npm:^3.38.0, @smithy/core@npm:^3.38.1":
  version: 3.38.1
  resolution: "@smithy/core@npm:3.38.1"
  dependencies:
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
  checksum: 10/3d39c58b1bd7f851508353f1f5fa9593d474f35bc56855a7ed2dc0a936918dd160ee25f99ac52edd22f5f1f93222816d3b1755101f8f5ffda2702c607d6b439d
  languageName: node
  linkType: hard
 "@smithy/credential-provider-imds@npm:^4.5.2":
  version: 4.5.2
  resolution: "@smithy/credential-provider-imds@npm:4.5.2"
@@ -1997,25 +2008,25 @@ __metadata:
  languageName: node
  linkType: hard
-"@smithy/node-http-handler@npm:^4.12.1":
+"@smithy/node-http-handler@npm:^4.14.0":
-  version: 4.12.1
+  version: 4.14.1
-  resolution: "@smithy/node-http-handler@npm:4.12.1"
+  resolution: "@smithy/node-http-handler@npm:4.14.1"
  dependencies:
-    "@smithy/core": "npm:^3.33.3"
+    "@smithy/core": "npm:^3.38.1"
-    "@smithy/types": "npm:^4.18.0"
+    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/291ab9053afeefc7f6524c18dd5ade4aab42af7fddba7d5c087c23c23d4d686fc9f6674c5c28aa1af708d93db9fc2be18999cd64bbbbed8b88f2004a0aa37bbf
+  checksum: 10/7f95afb19641f3ae18687ebe6da513c422d320c6ea797764c28ce268f904635f5d88fe3bc91f5aef887751830558f8645a58339ad09ec64c7874f30b7e0345d7
  languageName: node
  linkType: hard
-"@smithy/signature-v4@npm:^5.7.4":
+"@smithy/signature-v4@npm:^5.7.5":
-  version: 5.7.4
+  version: 5.7.5
-  resolution: "@smithy/signature-v4@npm:5.7.4"
+  resolution: "@smithy/signature-v4@npm:5.7.5"
  dependencies:
-    "@smithy/core": "npm:^3.35.0"
+    "@smithy/core": "npm:^3.38.0"
    "@smithy/types": "npm:^4.19.0"
    tslib: "npm:^2.6.2"
-  checksum: 10/62c633ddbf573018108f402d62e3be65aab4f09bd21a796a0c5aa4b29bbbb31badd07dc1aef49a7d6e3110d5bc1bc9254dd21fb63ca5fd2bda512c80274f7761
+  checksum: 10/2b9a7bbc180946e490109bbaf06459e089110c6f2b6094dd2bffef6dd8bbafc66ca098eb6f112c83096066014742bfcd69ffc539ec6438a86504038b6a64a90f
  languageName: node
  linkType: hard
@@ -3154,6 +3165,13 @@ __metadata:
  languageName: node
  linkType: hard
 "csv-stringify@npm:^6.9.0":
  version: 6.9.0
  resolution: "csv-stringify@npm:6.9.0"
  checksum: 10/af8bb8999ee023183fcec2b95693cb7fda90466e1961509936eda55886963e4e01ce9109fce7e22da4c2c42ebdaf8bcddf178974c5508e8e2ea12fe42670e524
  languageName: node
  linkType: hard
 "debug@npm:4, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.4":
  version: 4.3.4
  resolution: "debug@npm:4.3.4"
@@ -3200,9 +3218,9 @@ __metadata:
  dependencies:
    "@actions/core": "npm:^3.0.1"
    "@actions/http-client": "npm:^4.0.1"
-    "@aws-sdk/client-ecr": "npm:^3.1154.0"
+    "@aws-sdk/client-ecr": "npm:^3.1161.0"
-    "@aws-sdk/client-ecr-public": "npm:^3.1154.0"
+    "@aws-sdk/client-ecr-public": "npm:^3.1161.0"
-    "@docker/actions-toolkit": "npm:^0.107.0"
+    "@docker/actions-toolkit": "npm:^0.109.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/js-yaml": "npm:^4.0.9"
    "@types/node": "npm:^24.11.0"
@@ -5733,6 +5751,15 @@ __metadata:
  languageName: node
  linkType: hard
 "semver@npm:^7.8.6":
  version: 7.8.6
  resolution: "semver@npm:7.8.6"
  bin:
    semver: bin/semver.js
  checksum: 10/76fd62a781a9c58464e4d4b1b9c99c404063d8133fff8a0753e66b1bd826bfb720d843664e7ab1268c0fb7134d04df9f3b8788eb2f1000c509648e0eeac03921
  languageName: node
  linkType: hard
 "shebang-command@npm:^2.0.0":
  version: 2.0.0
  resolution: "shebang-command@npm:2.0.0"
@@ -6361,8 +6388,8 @@ __metadata:
  linkType: hard
 "vite@npm:^6.0.0 || ^7.0.0":
-  version: 7.3.6
+  version: 7.3.7
-  resolution: "vite@npm:7.3.6"
+  resolution: "vite@npm:7.3.7"
  dependencies:
    esbuild: "npm:^0.27.0 || ^0.28.0"
    fdir: "npm:^6.5.0"
@@ -6411,7 +6438,7 @@ __metadata:
      optional: true
  bin:
    vite: bin/vite.js
-  checksum: 10/6fcbadb1a409990e1bbd4ff0ff41e763c87049228cdc407984bdca40b96ab32de0f1f70fa62fb1f3ca001a5b90accbbe22ddfad5cc436855058357b3f2141d3b
+  checksum: 10/a4ff9858afbb83a882cd79809d32cc0dda26d442fd2c6b230f73db988d770a6269b78b8d7327a79464c424589dc9c511af4223e8eba3189d115a925ad2585b16
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMaxandGitHub	d0b8297dd5	Merge pull request #1107 from crazy-max/ci-codecov-oidc ci: use OIDC for Codecov uploads	2026-11-05 17:24:30 +01:00
CrazyMax	736162f27b	ci: use OIDC for Codecov uploads Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-11-05 17:09:25 +01:00
CrazyMaxandGitHub	8aa5831fb8	Merge pull request #1105 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.108.0 build(deps): bump @docker/actions-toolkit from 0.107.0 to 0.109.0	2026-11-05 13:54:17 +01:00
github-actions[bot]	043f81d4e0	[dependabot skip] chore: update generated content	2026-11-05 12:52:56 +00:00
dependabot[bot]andGitHub	3ff6998ba6	build(deps): bump @docker/actions-toolkit from 0.107.0 to 0.109.0 Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.107.0 to 0.109.0. - [Release notes](https://github.com/docker/actions-toolkit/releases) - [Commits](https://github.com/docker/actions-toolkit/compare/v0.107.0...v0.109.0) --- updated-dependencies: - dependency-name: "@docker/actions-toolkit" dependency-version: 0.108.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-11-05 12:52:07 +00:00
CrazyMaxandGitHub	694ef6a96b	Merge pull request #1103 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-d92cb63d91 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates	2026-11-05 13:49:47 +01:00
github-actions[bot]	7c6e412a10	[dependabot skip] chore: update generated content	2026-11-05 12:17:52 +00:00
dependabot[bot]andGitHub	aa2441f70f	build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public). Updates `@aws-sdk/client-ecr` from 3.1154.0 to 3.1161.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/clients/client-ecr) Updates `@aws-sdk/client-ecr-public` from 3.1154.0 to 3.1161.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/clients/client-ecr-public) --- updated-dependencies: - dependency-name: "@aws-sdk/client-ecr" dependency-version: 3.1156.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk-dependencies - dependency-name: "@aws-sdk/client-ecr-public" dependency-version: 3.1156.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>	2026-11-05 12:16:58 +00:00
CrazyMaxandGitHub	d6c10b0849	Merge pull request #1106 from docker/dependabot/github_actions/codeql-actions-54bdb232ba build(deps): bump the codeql-actions group with 2 updates	2026-11-05 13:14:45 +01:00
CrazyMaxandGitHub	319f1ee2c2	Merge pull request #1104 from docker/dependabot/github_actions/actions/setup-node-7.1.0 build(deps): bump actions/setup-node from 7.0.0 to 7.1.0	2026-11-05 13:14:24 +01:00
CrazyMaxandGitHub	b483b7fe94	Merge pull request #1101 from docker/dependabot/npm_and_yarn/vite-7.3.7 build(deps): bump vite from 7.3.6 to 7.3.7	2026-11-05 13:13:42 +01:00
CrazyMaxandGitHub	dc7d67cbf2	Merge pull request #1070 from crazy-max/increase-oidc-default-expiry set Docker Hub OIDC token lifetime default to 1 hour	2026-11-05 12:32:15 +01:00
CrazyMax	98b667573a	chore: update generated content Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-11-05 11:51:32 +01:00
dependabot[bot]andGitHub	f28b5e1647	build(deps): bump the codeql-actions group with 2 updates Bumps the codeql-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.39.1 to 4.39.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...1fc58d04a4d4374f921bdac573c3811c240f9c26) Updates `github/codeql-action/analyze` from 4.39.1 to 4.39.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...1fc58d04a4d4374f921bdac573c3811c240f9c26) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions ... Signed-off-by: dependabot[bot] <support@github.com>	2026-11-05 05:54:33 +00:00
CrazyMax	475278bf9c	set Docker Hub OIDC token lifetime default to 1 hour Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-11-04 21:47:52 +01:00
dependabot[bot]andGitHub	9b798b1a27	build(deps): bump actions/setup-node from 7.0.0 to 7.1.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-10-26 06:03:26 +00:00
dependabot[bot]andGitHub	0d47106d05	build(deps): bump vite from 7.3.6 to 7.3.7 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.6 to 7.3.7. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.7/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-10-23 16:35:15 +00:00