Compare commits

..
16 Commits
Author SHA1 Message Date
CrazyMax c3c9e263c2 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.100.0
chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
2026-09-15 09:29:04 +02:00
github-actions[bot] 459b674183 [dependabot skip] chore: update generated content 2026-09-15 07:10:21 +00:00
dependabot[bot] 4dedcb23c9 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.99.0...v0.100.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.100.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-15 07:09:28 +00:00
CrazyMax 379bf63a97 Merge pull request #1620 from crazy-max/buildx-error-message
use the shared Buildx error summary helper
2026-09-14 14:34:29 +02:00
CrazyMax 9877975c9e chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-11 13:55:10 +02:00
CrazyMax 7ed0556ffa use the shared Buildx error summary helper
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-11 13:55:09 +02:00
CrazyMax 91670ba5a4 Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.99.0
chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
2026-09-11 13:41:48 +02:00
github-actions[bot] 80dbc8614a [dependabot skip] chore: update generated content 2026-09-11 11:38:45 +00:00
dependabot[bot] 50cac3a3b6 chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.98.0...v0.99.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-11 11:37:44 +00:00
Tõnis Tiigi 03b4d6cac0 Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
prevent workflow command injection in metadata logs
2026-09-10 18:13:15 -07:00
CrazyMax dcc3c70566 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-10 10:11:25 +02:00
CrazyMax 2145b7d858 prevent workflow command injection in metadata logs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-09-10 10:11:24 +02:00
CrazyMax 104b27ceb2 Merge pull request #1616 from docker/dependabot/github_actions/codeql-actions-f1ba23a83b
chore(deps): Bump the codeql-actions group with 2 updates
2026-09-09 15:39:13 +02:00
CrazyMax 9b2a2073c3 Merge pull request #1615 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2
chore(deps): Bump js-yaml from 4.3.1 to 4.3.2
2026-09-09 15:38:48 +02:00
dependabot[bot] 5f00bd7ece chore(deps): Bump the codeql-actions group with 2 updates
Bumps the codeql-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.6 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...cdf488f595d80d6e07e03d4674febd5ab45fa938)

Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...cdf488f595d80d6e07e03d4674febd5ab45fa938)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-09 11:54:23 +00:00
dependabot[bot] aeeb70cc49 chore(deps): Bump js-yaml from 4.3.1 to 4.3.2
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-09 10:53:55 +00:00
7 changed files with 147 additions and 147 deletions
+2 -2
View File
@@ -35,12 +35,12 @@ jobs:
node-version: ${{ env.NODE_VERSION }}
-
name: Initialize CodeQL
uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
with:
languages: javascript-typescript
build-mode: none
-
name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
with:
category: "/language:javascript-typescript"
Generated Vendored
+127 -127
View File
File diff suppressed because one or more lines are too long
Generated Vendored
+3 -3
View File
File diff suppressed because one or more lines are too long
Generated Vendored
+1 -1
View File
@@ -216,7 +216,7 @@ Apache License
The following npm package may be included in this product:
- @docker/actions-toolkit@0.98.0
- @docker/actions-toolkit@0.100.0
This package contains the following license:
+1 -1
View File
@@ -25,7 +25,7 @@
"packageManager": "yarn@4.15.0",
"dependencies": {
"@actions/core": "^3.0.1",
"@docker/actions-toolkit": "0.98.0",
"@docker/actions-toolkit": "0.100.0",
"handlebars": "^4.7.9"
},
"devDependencies": {
+5 -5
View File
@@ -110,11 +110,11 @@ actionsToolkit.run(
}).then(res => {
if (res.exitCode != 0) {
if (inputs.call && inputs.call === 'check' && res.stdout.length > 0) {
// checks warnings are printed to stdout: https://github.com/docker/buildx/pull/2647
// take the first line with the message summaryzing the warnings
// Check warnings are printed to stdout: https://github.com/docker/buildx/pull/2647
// Use the first line as the warning summary.
err = new Error(res.stdout.split('\n')[0]?.trim());
} else if (res.stderr.length > 0) {
err = new Error(`buildx failed with: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
} else {
err = new Error(`buildx failed with: ${Buildx.getErrorMessage(res.stderr)}`);
}
}
});
@@ -137,7 +137,7 @@ actionsToolkit.run(
if (metadata) {
await core.group(`Metadata`, async () => {
const metadatadt = JSON.stringify(metadata, null, 2);
core.info(metadatadt);
GitHub.printUntrusted(metadatadt);
core.setOutput('metadata', metadatadt);
});
}
+8 -8
View File
@@ -437,9 +437,9 @@ __metadata:
languageName: node
linkType: hard
"@docker/actions-toolkit@npm:0.98.0":
version: 0.98.0
resolution: "@docker/actions-toolkit@npm:0.98.0"
"@docker/actions-toolkit@npm:0.100.0":
version: 0.100.0
resolution: "@docker/actions-toolkit@npm:0.100.0"
dependencies:
"@actions/artifact": "npm:^6.2.1"
"@actions/cache": "npm:^6.2.0"
@@ -462,7 +462,7 @@ __metadata:
semver: "npm:^7.8.5"
tar-stream: "npm:^3.2.1"
tmp: "npm:^0.2.7"
checksum: 10/9b8fed1455896812d913412a816ce2834aa908eee4db347672c204180bd0955163fabdfda27fb326f2255ec79b307297961205ac00f36803a12e5d076a5b3cf2
checksum: 10/74eaa1afb1887ed2974e403870205889844d42eb527550309819fd24b80484b92ebf95ba4ee01eef607b66acd655a8457fc25a6d27ff2f81e842705ff98b1976
languageName: node
linkType: hard
@@ -2841,7 +2841,7 @@ __metadata:
resolution: "docker-build-push@workspace:."
dependencies:
"@actions/core": "npm:^3.0.1"
"@docker/actions-toolkit": "npm:0.98.0"
"@docker/actions-toolkit": "npm:0.100.0"
"@eslint/js": "npm:^9.39.3"
"@types/node": "npm:^24.11.0"
"@typescript-eslint/eslint-plugin": "npm:^8.56.1"
@@ -4002,13 +4002,13 @@ __metadata:
linkType: hard
"js-yaml@npm:^4.1.0, js-yaml@npm:^4.1.1":
version: 4.3.1
resolution: "js-yaml@npm:4.3.1"
version: 4.3.2
resolution: "js-yaml@npm:4.3.2"
dependencies:
argparse: "npm:^2.0.1"
bin:
js-yaml: bin/js-yaml.js
checksum: 10/2ce71b5d632abbd77da80447bf860e8a0264e54bffe94840984887d58b023761495b523727547904517a6107a1ef189854b361e0fc44995ee13a84f222d7bd42
checksum: 10/05c44b9c73e4901d92703b155e76518df64bf01ac62e4c036b47de4b391e19b72e32656e8954d51b436307f08cc9d0c0d4ec617d061cf2f65fffee9f3114bee7
languageName: node
linkType: hard