Merge pull request #1519 from docker/dependabot/github_actions/actions/setup-node-6.4.0

chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0
Merge pull request #1520 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e
2026-05-07 02:32:48 +08:00 · 2026-04-24 09:48:12 +02:00 · 2026-04-24 09:46:03 +02:00 · 2026-04-22 11:52:24 +00:00 · 2026-04-21 11:52:31 +00:00
7 changed files with 15 additions and 30 deletions
@@ -30,7 +30,7 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
@@ -11,7 +11,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2 # v1.7.0
    permissions:
      contents: read
      pull-requests: write
@@ -19,7 +19,7 @@ on:

 jobs:
  zizmor:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2 # v1.7.0
    permissions:
      contents: read
      security-events: write
@@ -24,7 +24,7 @@
  "packageManager": "yarn@4.9.2",
  "dependencies": {
    "@actions/core": "^3.0.0",
-    "@docker/actions-toolkit": "0.88.0",
+    "@docker/actions-toolkit": "0.87.0",
    "handlebars": "^4.7.9"
  },
  "devDependencies": {
@@ -85,21 +85,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/github@npm:^9.1.0":
-  version: 9.1.0
-  resolution: "@actions/github@npm:9.1.0"
-  dependencies:
-    "@actions/http-client": "npm:^3.0.2"
-    "@octokit/core": "npm:^7.0.6"
-    "@octokit/plugin-paginate-rest": "npm:^14.0.0"
-    "@octokit/plugin-rest-endpoint-methods": "npm:^17.0.0"
-    "@octokit/request": "npm:^10.0.7"
-    "@octokit/request-error": "npm:^7.1.0"
-    undici: "npm:^6.23.0"
-  checksum: 10/ed5b50e5e4e59d4feeb2952f8f27ea50a7abc470f4a63b319ab009104f0729ef2788e164a07cf0cccdc7dd27352bad8599923906bcc7d19ea65309321a7fac45
-  languageName: node
-  linkType: hard
-
 "@actions/glob@npm:^0.6.1":
  version: 0.6.1
  resolution: "@actions/glob@npm:0.6.1"
@@ -382,15 +367,15 @@ __metadata:
  languageName: node
  linkType: hard

-"@docker/actions-toolkit@npm:0.88.0":
-  version: 0.88.0
-  resolution: "@docker/actions-toolkit@npm:0.88.0"
+"@docker/actions-toolkit@npm:0.87.0":
+  version: 0.87.0
+  resolution: "@docker/actions-toolkit@npm:0.87.0"
  dependencies:
    "@actions/artifact": "npm:^6.2.1"
    "@actions/cache": "npm:^6.0.0"
    "@actions/core": "npm:^3.0.0"
    "@actions/exec": "npm:^3.0.0"
-    "@actions/github": "npm:^9.1.0"
+    "@actions/github": "npm:^9.0.0"
    "@actions/http-client": "npm:^4.0.0"
    "@actions/io": "npm:^3.0.2"
    "@actions/tool-cache": "npm:^4.0.0"
@@ -408,7 +393,7 @@ __metadata:
    semver: "npm:^7.7.4"
    tar-stream: "npm:^3.1.7"
    tmp: "npm:^0.2.5"
-  checksum: 10/668c9fa85f60b478e92c2678f1f2aa6c68c7f36c9f76c0b953a68f86c785d10630316ab8465ebaf6a62ee854edc441f97c626d0055851a03f38c5eff13abe188
+  checksum: 10/439d0763a394ecd0632cff10c6b88400f6f519612b9b2dedc032dc7e427e9628af59f1fc153c37b0c685a2bdef8bc2a901aa7c743080bc4ab312276e447dbf55
  languageName: node
  linkType: hard

@@ -2130,7 +2115,7 @@ __metadata:
  resolution: "docker-build-push@workspace:."
  dependencies:
    "@actions/core": "npm:^3.0.0"
-    "@docker/actions-toolkit": "npm:0.88.0"
+    "@docker/actions-toolkit": "npm:0.87.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/node": "npm:^24.11.0"
    "@typescript-eslint/eslint-plugin": "npm:^8.56.1"
Author	SHA1	Message	Date
CrazyMax	e0fea16cbf	Merge pull request #1519 from docker/dependabot/github_actions/actions/setup-node-6.4.0 chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0	2026-04-24 09:48:12 +02:00
CrazyMax	f832d4c773	Merge pull request #1520 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e chore(deps): Bump the crazy-max-dot-github group with 2 updates	2026-04-24 09:46:03 +02:00
dependabot[bot]	17a24e14ed	chore(deps): Bump the crazy-max-dot-github group with 2 updates Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-22 11:52:24 +00:00
dependabot[bot]	ad938becb9	chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-21 11:52:31 +00:00