8a2735a79e
Merge pull request #1082 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.3.0
...
build(deps): bump aws-actions/configure-aws-credentials from 6.2.3 to 6.3.0
2026-10-23 16:56:59 +02:00
e040eb9d1e
Merge pull request #1091 from docker/dependabot/npm_and_yarn/handlebars-4.7.10
...
build(deps): bump handlebars from 4.7.9 to 4.7.10
2026-10-23 16:56:31 +02:00
13f533fe85
[dependabot skip] chore: update generated content
2026-10-23 14:47:57 +00:00
e40f22430b
build(deps): bump handlebars from 4.7.9 to 4.7.10
...
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js ) from 4.7.9 to 4.7.10.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases )
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md )
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10 )
---
updated-dependencies:
- dependency-name: handlebars
dependency-version: 4.7.10
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-23 14:47:03 +00:00
97538692f6
Merge pull request #1085 from docker/dependabot/npm_and_yarn/undici-6.29.0
...
build(deps): bump undici from 6.27.0 to 6.29.1
2026-10-23 16:44:52 +02:00
cf0eabde3d
[dependabot skip] chore: update generated content
2026-10-23 14:34:09 +00:00
4c7d088f4b
build(deps): bump undici from 6.27.0 to 6.29.1
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.27.0 to 6.29.1.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.27.0...v6.29.1 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-23 14:33:15 +00:00
98a3fb834a
Merge pull request #1078 from docker/dependabot/npm_and_yarn/csv-parse-7.0.2
...
build(deps): bump csv-parse from 7.0.1 to 7.0.3
2026-10-23 16:31:00 +02:00
f101fa5d88
[dependabot skip] chore: update generated content
2026-10-23 14:28:03 +00:00
f2aae0c0ee
build(deps): bump csv-parse from 7.0.1 to 7.0.3
...
Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse ) from 7.0.1 to 7.0.3.
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md )
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.3/packages/csv-parse )
---
updated-dependencies:
- dependency-name: csv-parse
dependency-version: 7.0.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-23 14:26:38 +00:00
133c6ab6fa
Merge pull request #1066 from docker/dependabot/npm_and_yarn/js-yaml-5.2.3
...
build(deps): bump js-yaml from 5.2.2 to 5.5.0
2026-10-23 16:24:28 +02:00
0a3084cdc5
[dependabot skip] chore: update generated content
2026-10-23 14:14:52 +00:00
1e7c55a39d
build(deps): bump js-yaml from 5.2.2 to 5.5.0
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 5.2.2 to 5.5.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.2...5.5.0 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-23 14:13:53 +00:00
a358cc1e42
Merge pull request #1092 from docker/dependabot/npm_and_yarn/postcss-selector-parser-7.1.6
...
build(deps): bump postcss-selector-parser from 7.1.1 to 7.1.6
2026-10-23 16:11:34 +02:00
5ad95e8c58
Merge pull request #1090 from docker/dependabot/npm_and_yarn/source-map-js-1.2.2
...
build(deps): bump source-map-js from 1.2.1 to 1.2.2
2026-10-23 16:11:08 +02:00
a5f1c9995c
Merge pull request #1081 from docker/dependabot/github_actions/docker/bake-action-7.4.0
...
build(deps): bump docker/bake-action from 7.3.0 to 7.4.0
2026-10-23 16:10:15 +02:00
b098de5f1b
Merge pull request #1079 from docker/dependabot/github_actions/codecov/codecov-action-7.1.0
...
build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0
2026-10-23 16:10:04 +02:00
50d805b48a
Merge pull request #1080 from docker/dependabot/github_actions/codeql-actions-03ad6eec6c
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-10-23 16:09:53 +02:00
834ffb646a
Merge pull request #1071 from docker/dependabot/npm_and_yarn/postcss-8.5.26
...
build(deps): bump postcss from 8.5.22 to 8.5.26
2026-10-23 16:09:28 +02:00
2fea3b2c5c
Merge pull request #1072 from docker/dependabot/github_actions/crazy-max-dot-github-6f52f8ed50
...
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
2026-10-23 16:09:15 +02:00
f3f25ba560
Merge pull request #1077 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
...
build(deps): bump @humanfs/node from 0.16.7 to 0.16.8
2026-10-23 16:09:02 +02:00
0b08f36d38
Merge pull request #1088 from crazy-max/fix-scoped-registry-url
...
use registry hosts for scoped credentials
2026-10-23 16:08:12 +02:00
8fa2c064e3
build(deps): bump postcss-selector-parser from 7.1.1 to 7.1.6
...
Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser ) from 7.1.1 to 7.1.6.
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases )
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/v7.1.1...7.1.6 )
---
updated-dependencies:
- dependency-name: postcss-selector-parser
dependency-version: 7.1.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 20:06:24 +00:00
375309eeb7
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.8 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee )
Updates `github/codeql-action/analyze` from 4.37.8 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 05:54:19 +00:00
5d33b362eb
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222 )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 05:52:13 +00:00
0feb529243
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-17 12:25:27 +02:00
4e12eabf92
use registry hosts for scoped credentials
...
Parse registry URLs so scoped ECR credentials use the same config directory
for login, logout, and Buildx lookup. Preserve explicit default ports.
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-17 12:24:46 +02:00
d3b9cdfa58
Merge pull request #1089 from crazy-max/fix-registry-auth-ecr-false
...
test / test (push) Failing after 16s
codeql / analyze (push) Failing after 16s
zizmor / zizmor (push) Failing after 0s
validate / prepare (push) Failing after 1s
validate / validate (push) Has been skipped
preserve explicit ECR settings in registry-auth
2026-10-16 20:24:38 +02:00
b773301bab
build(deps): bump source-map-js from 1.2.1 to 1.2.2
...
Bumps [source-map-js](https://github.com/7rulnik/source-map-js ) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases )
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2 )
---
updated-dependencies:
- dependency-name: source-map-js
dependency-version: 1.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-16 13:44:31 +00:00
a27b71b09c
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
2c873c3656
test: simplify registry-auth ECR regression coverage
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
b4bb2a4ec0
keep registry-auth ecr: false instead of falling back to auto
...
registry-auth is parsed as YAML, so `ecr: false` (unquoted) is the
boolean false, and `auth.ecr || 'auto'` turned it into 'auto'. For an
ECR registry this runs the AWS SDK login with the given username and
password as AWS access keys, instead of the plain docker login the user
asked for. Only the quoted string "false" worked.
Convert the value to a string and only default to 'auto' when it is
missing or empty.
Assisted-By: Claude
Signed-off-by: breken-ai <312387581+breken-ai@users.noreply.github.com >
2026-10-05 14:21:32 +02:00
1f3cb3efe9
build(deps): bump aws-actions/configure-aws-credentials
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 6.2.3 to 6.3.0.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e6de054238d6b7531b4efff3b6587d9aade6a06c...e1253824e5c10ff9df46874f81ed3ec929e19cfd )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-17 05:54:51 +00:00
e800f1e754
build(deps): bump docker/bake-action from 7.3.0 to 7.4.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b...018cb6412ab401ebaa809aa5f85966b74628600f )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-17 05:54:36 +00:00
783ae9cac5
Merge pull request #1064 from docker/dependabot/github_actions/codeql-actions-ce612e0709
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-09-16 10:57:53 +02:00
67ccbdd142
build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...0b35c9ecc4f0529d0eb674914510c22f85b196b4 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 05:52:38 +00:00
96df24572b
build(deps): bump @humanfs/node from 0.16.7 to 0.16.8
...
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node ) from 0.16.7 to 0.16.8.
- [Release notes](https://github.com/humanwhocodes/humanfs/releases )
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md )
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node )
---
updated-dependencies:
- dependency-name: "@humanfs/node"
dependency-version: 0.16.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 12:23:51 +00:00
b1725c2c93
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-25 05:54:40 +00:00
0a596b2e7a
Merge pull request #1073 from quentin-laplanche-docker/ci/remove-docker-notation
...
ci: replace registry container action reference
2026-08-24 15:27:36 +02:00
5d1ee94869
ci: replace registry container action reference
...
Use a local Docker container action so the runner still exercises its container-action mounts and environment without a docker:// workflow reference.
Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com >
Co-authored-by: Codex <noreply@openai.com >
2026-08-24 15:15:07 +02:00
8febd2275e
build(deps): bump postcss from 8.5.22 to 8.5.26
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.22 to 8.5.26.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.22...8.5.26 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.26
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-12 05:02:09 +00:00
af63523ba5
Merge pull request #1061 from docker/dockerhub-oidc-logs
...
log Docker Hub OIDC token exchange progress
2026-08-11 11:56:25 +03:00
72edfa6c2e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:52:13 +02:00
2b7517a3b4
log Docker Hub OIDC token exchange progress
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:51:47 +02:00
eed2509203
Merge pull request #1068 from crazy-max/dockerhub-oidc-increase-expire-in
...
raise Docker Hub OIDC max expiry to 6 hours
2026-08-06 12:07:08 +02:00
07573e7c18
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:54:13 +02:00
99ffd0f38a
raise Docker Hub OIDC max expiry to 6 hours
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:53:57 +02:00
dbcb813823
Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-46cc3261cb
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
2026-07-29 13:33:29 +02:00
5bcb015ee6
[dependabot skip] chore: update generated content
2026-07-29 10:44:53 +00:00
b30b2f2d31
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:43:57 +00:00
CrazyMax