50d805b48a
Merge pull request #1080 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-10-23 16:09:53 +02:00
834ffb646a
Merge pull request #1071 from docker/dependabot/npm_and_yarn/postcss-8.5.26
...
build(deps): bump postcss from 8.5.22 to 8.5.26
2026-10-23 16:09:28 +02:00
2fea3b2c5c
Merge pull request #1072 from docker/dependabot/github_actions/crazy-max-dot-github-6f52f8ed50
...
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
2026-10-23 16:09:15 +02:00
f3f25ba560
Merge pull request #1077 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
...
build(deps): bump @humanfs/node from 0.16.7 to 0.16.8
2026-10-23 16:09:02 +02:00
0b08f36d38
Merge pull request #1088 from crazy-max/fix-scoped-registry-url
...
use registry hosts for scoped credentials
2026-10-23 16:08:12 +02:00
375309eeb7
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.8 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee )
Updates `github/codeql-action/analyze` from 4.37.8 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 05:54:19 +00:00
5d33b362eb
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222 )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 05:52:13 +00:00
0feb529243
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-17 12:25:27 +02:00
4e12eabf92
use registry hosts for scoped credentials
...
Parse registry URLs so scoped ECR credentials use the same config directory
for login, logout, and Buildx lookup. Preserve explicit default ports.
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-17 12:24:46 +02:00
d3b9cdfa58
Merge pull request #1089 from crazy-max/fix-registry-auth-ecr-false
...
test / test (push) Failing after 16s
codeql / analyze (push) Failing after 16s
zizmor / zizmor (push) Failing after 0s
validate / prepare (push) Failing after 1s
validate / validate (push) Has been skipped
preserve explicit ECR settings in registry-auth
2026-10-16 20:24:38 +02:00
a27b71b09c
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
2c873c3656
test: simplify registry-auth ECR regression coverage
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
b4bb2a4ec0
keep registry-auth ecr: false instead of falling back to auto
...
registry-auth is parsed as YAML, so `ecr: false` (unquoted) is the
boolean false, and `auth.ecr || 'auto'` turned it into 'auto'. For an
ECR registry this runs the AWS SDK login with the given username and
password as AWS access keys, instead of the plain docker login the user
asked for. Only the quoted string "false" worked.
Convert the value to a string and only default to 'auto' when it is
missing or empty.
Assisted-By: Claude
Signed-off-by: breken-ai <312387581+breken-ai@users.noreply.github.com >
2026-10-05 14:21:32 +02:00
783ae9cac5
Merge pull request #1064 from docker/dependabot/github_actions/codeql-actions-ce612e0709
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-09-16 10:57:53 +02:00
96df24572b
build(deps): bump @humanfs/node from 0.16.7 to 0.16.8
...
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node ) from 0.16.7 to 0.16.8.
- [Release notes](https://github.com/humanwhocodes/humanfs/releases )
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md )
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node )
---
updated-dependencies:
- dependency-name: "@humanfs/node"
dependency-version: 0.16.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 12:23:51 +00:00
b1725c2c93
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-25 05:54:40 +00:00
0a596b2e7a
Merge pull request #1073 from quentin-laplanche-docker/ci/remove-docker-notation
...
ci: replace registry container action reference
2026-08-24 15:27:36 +02:00
5d1ee94869
ci: replace registry container action reference
...
Use a local Docker container action so the runner still exercises its container-action mounts and environment without a docker:// workflow reference.
Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com >
Co-authored-by: Codex <noreply@openai.com >
2026-08-24 15:15:07 +02:00
8febd2275e
build(deps): bump postcss from 8.5.22 to 8.5.26
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.22 to 8.5.26.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.22...8.5.26 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.26
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-12 05:02:09 +00:00
af63523ba5
Merge pull request #1061 from docker/dockerhub-oidc-logs
...
log Docker Hub OIDC token exchange progress
2026-08-11 11:56:25 +03:00
72edfa6c2e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:52:13 +02:00
2b7517a3b4
log Docker Hub OIDC token exchange progress
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:51:47 +02:00
eed2509203
Merge pull request #1068 from crazy-max/dockerhub-oidc-increase-expire-in
...
raise Docker Hub OIDC max expiry to 6 hours
2026-08-06 12:07:08 +02:00
07573e7c18
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:54:13 +02:00
99ffd0f38a
raise Docker Hub OIDC max expiry to 6 hours
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:53:57 +02:00
dbcb813823
Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-46cc3261cb
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
2026-07-29 13:33:29 +02:00
5bcb015ee6
[dependabot skip] chore: update generated content
2026-07-29 10:44:53 +00:00
b30b2f2d31
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:43:57 +00:00
9087f1e6d6
Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
...
build(deps): bump js-yaml from 5.2.1 to 5.2.2
2026-07-29 12:40:51 +02:00
0009830ea1
[dependabot skip] chore: update generated content
2026-07-29 10:32:28 +00:00
23255232d3
build(deps): bump js-yaml from 5.2.1 to 5.2.2
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:31:34 +00:00
4ec1d4a769
Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
...
build(deps): bump postcss from 8.5.10 to 8.5.22
2026-07-29 12:28:53 +02:00
5fc99ba47b
Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.3
...
build(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3
2026-07-29 12:28:12 +02:00
e512bd59d1
Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions-73adf09e94
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-07-29 12:26:59 +02:00
a146c91b8f
Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
...
harden buildx scoped config path handling
2026-07-29 10:50:27 +02:00
8ffd80ffa5
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 09:57:41 +02:00
8305724bcf
harden buildx scoped config path handling
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 09:57:00 +02:00
91264757e1
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
Updates `github/codeql-action/analyze` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-28 05:54:42 +00:00
371161bbe7
Merge pull request #1058 from crazy-max/fix-dockerhub-oidc-error-handling
...
surface Docker Hub OIDC error responses
2026-07-27 18:30:08 +02:00
5dc73df38e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-27 17:15:04 +02:00
2aa1edee0b
surface Docker Hub OIDC error responses
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-27 17:14:54 +02:00
b472f5b276
build(deps): bump postcss from 8.5.10 to 8.5.22
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.10 to 8.5.22.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.22 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.22
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 12:24:30 +00:00
abd2ef45e7
Merge pull request #1055 from crazy-max/test-registry-auth-oidc
...
test: cover Docker Hub OIDC with registry-auth
2026-07-24 14:22:47 +02:00
d49d3a9839
Merge pull request #1054 from crazy-max/oidc-missing-dhi
...
support dhi.io as Docker Hub OIDC registry
2026-07-24 14:22:20 +02:00
b58b17c30b
test: cover Docker Hub OIDC with registry-auth
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-24 10:37:01 +02:00
be646c21ce
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-24 10:33:14 +02:00
d77c059cb9
support dhi.io as Docker Hub OIDC registry
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-24 10:26:38 +02:00
9d876d6c33
build(deps): bump aws-actions/configure-aws-credentials
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 6.2.2 to 6.2.3.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/517a711dbcd0e402f90c77e7e2f81e849156e31d...e6de054238d6b7531b4efff3b6587d9aade6a06c )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 05:54:30 +00:00
06fb636fac
Merge pull request #1037 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-001763bcc2
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
2026-07-23 13:48:53 +02:00
a8bc953911
[dependabot skip] chore: update generated content
2026-07-23 11:45:23 +00:00
CrazyMax