Merge pull request #1496 from docker/dependabot/npm_and_yarn/picomatch-4.0.4

chore(deps): Bump picomatch from 4.0.3 to 4.0.4
Merge pull request #1497 from docker/dependabot/npm_and_yarn/handlebars-4.7.9
2026-05-06 18:22:48 +08:00 · 2026-04-01 15:17:17 +02:00 · 2026-04-01 15:17:00 +02:00 · 2026-04-01 15:07:55 +02:00 · 2026-04-01 11:04:06 +00:00 · 2026-04-01 11:02:58 +00:00
5 changed files with 33 additions and 24 deletions
@@ -15,7 +15,7 @@ on:

 jobs:
  update-dist:
-    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
+    if: github.actor == 'dependabot[bot]' && github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
    runs-on: ubuntu-latest
    steps:
      -
@@ -25,7 +25,7 @@
  "dependencies": {
    "@actions/core": "^3.0.0",
    "@docker/actions-toolkit": "0.79.0",
-    "handlebars": "^4.7.7"
+    "handlebars": "^4.7.9"
  },
  "devDependencies": {
    "@eslint/js": "^9.39.3",
@@ -1813,25 +1813,16 @@ __metadata:
  linkType: hard

 "brace-expansion@npm:^1.1.7":
-  version: 1.1.12
-  resolution: "brace-expansion@npm:1.1.12"
+  version: 1.1.13
+  resolution: "brace-expansion@npm:1.1.13"
  dependencies:
    balanced-match: "npm:^1.0.0"
    concat-map: "npm:0.0.1"
-  checksum: 10/12cb6d6310629e3048cadb003e1aca4d8c9bb5c67c3c321bafdd7e7a50155de081f78ea3e0ed92ecc75a9015e784f301efc8132383132f4f7904ad1ac529c562
+  checksum: 10/b5f4329fdbe9d2e25fa250c8f866ebd054ba946179426e99b86dcccddabdb1d481f0e40ee5430032e62a7d0a6c2837605ace6783d015aa1d65d85ca72154d936
  languageName: node
  linkType: hard

-"brace-expansion@npm:^2.0.1":
-  version: 2.0.1
-  resolution: "brace-expansion@npm:2.0.1"
-  dependencies:
-    balanced-match: "npm:^1.0.0"
-  checksum: 10/a61e7cd2e8a8505e9f0036b3b6108ba5e926b4b55089eeb5550cd04a471fe216c96d4fe7e4c7f995c728c554ae20ddfc4244cad10aef255e72b62930afd233d1
-  languageName: node
-  linkType: hard
-
-"brace-expansion@npm:^2.0.2":
+"brace-expansion@npm:^2.0.1, brace-expansion@npm:^2.0.2":
  version: 2.0.2
  resolution: "brace-expansion@npm:2.0.2"
  dependencies:
@@ -2115,7 +2106,7 @@ __metadata:
    eslint-config-prettier: "npm:^10.1.8"
    eslint-plugin-prettier: "npm:^5.5.5"
    globals: "npm:^17.3.0"
-    handlebars: "npm:^4.7.7"
+    handlebars: "npm:^4.7.9"
    prettier: "npm:^3.8.1"
    typescript: "npm:^5.9.3"
    vitest: "npm:^4.0.18"
@@ -2720,7 +2711,7 @@ __metadata:
  languageName: node
  linkType: hard

-"handlebars@npm:^4.7.7, handlebars@npm:^4.7.8":
+"handlebars@npm:^4.7.8":
  version: 4.7.8
  resolution: "handlebars@npm:4.7.8"
  dependencies:
@@ -2738,6 +2729,24 @@ __metadata:
  languageName: node
  linkType: hard

+"handlebars@npm:^4.7.9":
+  version: 4.7.9
+  resolution: "handlebars@npm:4.7.9"
+  dependencies:
+    minimist: "npm:^1.2.5"
+    neo-async: "npm:^2.6.2"
+    source-map: "npm:^0.6.1"
+    uglify-js: "npm:^3.1.4"
+    wordwrap: "npm:^1.0.0"
+  dependenciesMeta:
+    uglify-js:
+      optional: true
+  bin:
+    handlebars: bin/handlebars
+  checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
+  languageName: node
+  linkType: hard
+
 "has-flag@npm:^4.0.0":
  version: 4.0.0
  resolution: "has-flag@npm:4.0.0"
@@ -3671,9 +3680,9 @@ __metadata:
  linkType: hard

 "picomatch@npm:^4.0.3":
-  version: 4.0.3
-  resolution: "picomatch@npm:4.0.3"
-  checksum: 10/57b99055f40b16798f2802916d9c17e9744e620a0db136554af01d19598b96e45e2f00014c91d1b8b13874b80caa8c295b3d589a3f72373ec4aaf54baa5962d5
+  version: 4.0.4
+  resolution: "picomatch@npm:4.0.4"
+  checksum: 10/f6ef80a3590827ce20378ae110ac78209cc4f74d39236370f1780f957b7ee41c12acde0e4651b90f39983506fd2f5e449994716f516db2e9752924aff8de93ce
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	83bfd93ab4	Merge pull request #1496 from docker/dependabot/npm_and_yarn/picomatch-4.0.4 chore(deps): Bump picomatch from 4.0.3 to 4.0.4	2026-04-01 15:17:17 +02:00
CrazyMax	a7d4e2ac29	Merge pull request #1497 from docker/dependabot/npm_and_yarn/handlebars-4.7.9 chore(deps): Bump handlebars from 4.7.8 to 4.7.9	2026-04-01 15:17:00 +02:00
CrazyMax	00c4e32030	Merge pull request #1504 from crazy-max/fix-update-dist ci: stop update-dist reruns after generated dist pushes	2026-04-01 15:07:55 +02:00
github-actions[bot]	7144aa40aa	chore: update generated content	2026-04-01 11:04:06 +00:00
dependabot[bot]	00a2ffdccc	chore(deps): Bump handlebars from 4.7.8 to 4.7.9 Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-01 11:02:58 +00:00
CrazyMax	dab806366e	Merge pull request #1500 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.13 chore(deps): Bump brace-expansion from 1.1.12 to 1.1.13	2026-04-01 13:00:46 +02:00
CrazyMax	a691600376	ci: stop update-dist reruns after generated dist pushes Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-01 12:59:41 +02:00
github-actions[bot]	19413e5c69	chore: update generated content	2026-03-27 14:22:21 +00:00
dependabot[bot]	2cd9929dbc	chore(deps): Bump brace-expansion from 1.1.12 to 1.1.13 Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.13 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 14:21:11 +00:00
dependabot[bot]	5e0c3c443d	chore(deps): Bump picomatch from 4.0.3 to 4.0.4 Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4) --- updated-dependencies: - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-26 07:52:14 +00:00