449 Commits

Author SHA1 Message Date
CrazyMax
3c2e2d1743 ci: use Docker Hub OIDC for dockerfile-upstream image
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-05 17:56:46 +02:00
CrazyMax
e19f177d12 Merge pull request #7004 from moby/dependabot/github_actions/docker/login-action-4.6.0
build(deps): bump docker/login-action from 4.5.2 to 4.6.0
2026-08-04 14:49:51 +02:00
dependabot[bot]
0822974aaa build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.3 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e4fba868fa...f205ea1c33)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-03 00:25:52 +00:00
dependabot[bot]
bac2261326 build(deps): bump docker/login-action from 4.5.2 to 4.6.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](371161bbe7...dbcb813823)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-31 00:23:51 +00:00
CrazyMax
df0761886a Merge pull request #6993 from moby/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.15.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.14.0 to 1.15.0
2026-07-30 10:11:05 +02:00
dependabot[bot]
f5e13f9171 build(deps): bump docker/login-action from 4.5.1 to 4.5.2
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](abd2ef45e7...371161bbe7)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-29 00:24:39 +00:00
dependabot[bot]
38d29ee428 build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](3415a188ca...27ade872c1)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-28 00:25:25 +00:00
CrazyMax
7a9ce8f99a Merge pull request #6983 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.3
build(deps): bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.3
2026-07-27 15:31:27 +02:00
dependabot[bot]
dc7e2b1054 build(deps): bump docker/login-action from 4.4.0 to 4.5.1
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.4.0 to 4.5.1.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](af1e73f918...abd2ef45e7)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-27 00:25:17 +00:00
dependabot[bot]
f1ee6114b2 build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.2 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e0647621c2...e4fba868fa)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-24 00:25:17 +00:00
dependabot[bot]
055bb02512 build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](7188fc3636...e0647621c2)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-23 00:24:58 +00:00
CrazyMax
8bf5dae630 Merge pull request #6971 from moby/dependabot/github_actions/actions/checkout-7.0.1
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
2026-07-22 11:29:38 +02:00
dependabot[bot]
df7a9f3db4 build(deps): bump actions/labeler from 6.2.0 to 7.0.0
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](b8dd2d9be0...bf12e9b00b)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-22 00:23:34 +00:00
dependabot[bot]
bc313d0f95 build(deps): bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](9c091bb21b...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-21 00:25:18 +00:00
dependabot[bot]
73d7a2192f build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.0 to 4.37.1.
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](99df26d4f1...7188fc3636)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-20 00:27:14 +00:00
dependabot[bot]
43486daba0 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](924ae3a1cd...b7ad1dad31)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-17 00:23:34 +00:00
dependabot[bot]
5473f5f1b9 build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](c4a1b216d9...3415a188ca)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-16 00:23:57 +00:00
dependabot[bot]
5a168f064b build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](718ea10b13...3d0d9888cb)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-15 00:25:20 +00:00
CrazyMax
5049a9db0c Merge pull request #6947 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.0
build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0
2026-07-10 16:15:40 +02:00
CrazyMax
6582dd90ba Merge pull request #6946 from moby/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.13.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.12.0 to 1.13.0
2026-07-10 16:14:50 +02:00
dependabot[bot]
d808992e68 build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.3 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](54f647b7e1...99df26d4f1)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-10 00:25:35 +00:00
dependabot[bot]
a41c4abcfa build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](5f637c833a...c4a1b216d9)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-10 00:24:05 +00:00
dependabot[bot]
8d00e7668e build(deps): bump actions/labeler from 6.1.0 to 6.2.0
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](f27b608878...b8dd2d9be0)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-10 00:23:58 +00:00
Tõnis Tiigi
8b948e0bcf Merge pull request #6853 from thaJeztah/bump_containerd_runc
Dockerfile: containerd v2.3.2, runc v1.4.3
2026-07-06 11:49:03 -07:00
CrazyMax
cf8493e8b7 Merge pull request #6929 from moby/dependabot/github_actions/docker/setup-buildx-action-4.2.0
build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
2026-07-06 10:34:05 +02:00
CrazyMax
e8008ef124 Merge pull request #6928 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.3
build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
2026-07-06 10:33:53 +02:00
dependabot[bot]
fe18ebdb90 build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](d7f5e7f509...bb05f3f551)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-06 00:26:00 +00:00
dependabot[bot]
34bfea50e6 build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8aad20d150...54f647b7e1)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-06 00:25:21 +00:00
dependabot[bot]
826e7fe652 build(deps): bump docker/login-action from 4.2.0 to 4.4.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](650006c6eb...af1e73f918)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-06 00:24:01 +00:00
CrazyMax
ca5552d9fe Merge pull request #6922 from moby/dependabot/github_actions/docker/bake-action/subaction/matrix-7.3.0
build(deps): bump docker/bake-action/subaction/matrix from 7.2.0 to 7.3.0
2026-07-03 16:25:12 +02:00
CrazyMax
d8ac204807 Merge pull request #6921 from moby/dependabot/github_actions/docker/setup-qemu-action-4.2.0
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-07-03 16:24:50 +02:00
dependabot[bot]
f39e82e962 build(deps): bump docker/bake-action/subaction/matrix
Bumps [docker/bake-action/subaction/matrix](https://github.com/docker/bake-action) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](6614cfa25e...d3418bd7d0)

---
updated-dependencies:
- dependency-name: docker/bake-action/subaction/matrix
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-03 13:51:03 +00:00
dependabot[bot]
39f2f6203f build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](06116385d9...96fe6ef7f3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-03 13:50:36 +00:00
CrazyMax
2197e6aa6b Merge pull request #6923 from moby/dependabot/github_actions/docker/bake-action-7.3.0
build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
2026-07-03 15:50:22 +02:00
CrazyMax
42c9b3079b Merge pull request #6920 from moby/dependabot/github_actions/docker/build-push-action-7.3.0
build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0
2026-07-03 15:49:34 +02:00
CrazyMax
719caf38b7 ci: remove vagrant dependency workaround
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-03 10:54:33 +02:00
dependabot[bot]
5579588d06 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](6614cfa25e...d3418bd7d0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-03 00:25:34 +00:00
dependabot[bot]
b548d9db91 build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](f9f3042f7e...53b7df96c9)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-03 00:23:38 +00:00
Sebastiaan van Stijn
d42880744d Dockerfile: containerd v2.3.2, runc v1.4.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-06-30 16:50:08 +02:00
dependabot[bot]
d21eb8002b build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](716fd1c51a...46267a6e61)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](716fd1c51a...46267a6e61)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 08:55:36 +00:00
CrazyMax
e6a21b77af Merge pull request #6906 from moby/dependabot/github_actions/actions/cache-6.1.0
build(deps): bump actions/cache from 5.0.5 to 6.1.0
2026-06-29 10:54:09 +02:00
CrazyMax
9c621b23b4 Merge pull request #6899 from moby/dependabot/github_actions/actions/setup-go-6.5.0
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
2026-06-29 10:53:39 +02:00
CrazyMax
03052c08fd Merge pull request #6889 from moby/dependabot/github_actions/softprops/action-gh-release-3.0.1
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
2026-06-29 10:53:17 +02:00
CrazyMax
67b860f2cc Merge pull request #6873 from moby/dependabot/github_actions/crazy-max/dot-github-1.10.1
build(deps): bump crazy-max/.github from 1.10.0 to 1.10.1
2026-06-29 10:52:51 +02:00
dependabot[bot]
549c2e14cd build(deps): bump actions/cache from 5.0.5 to 6.1.0
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](27d5ce7f10...55cc834586)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 00:23:08 +00:00
dependabot[bot]
2f147a7d3b build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](4a3601121d...924ae3a1cd)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-25 00:24:08 +00:00
Akihiro Suda
33278a31c2 Dockerfile: allow cross-compilation without binfmt helper
Fix issue 6890

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2026-06-25 04:21:22 +09:00
Tonis Tiigi
2fa373c18a ci: pin js-yaml install
Use an explicit js-yaml version in the reusable test workflow so CI does
not silently pick up parser behavior changes from future npm releases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-22 17:13:36 -07:00
Tonis Tiigi
eda3820bc4 ci: tolerate empty test matrix includes
The reusable test workflow installs js-yaml dynamically during CI. After
js-yaml 5.0.0 was released on 2026-06-20, load("") started throwing
instead of returning undefined.

Callers such as frontend.yml omit the optional includes input, so GitHub
Actions passes an empty string. Guard that value before parsing so omitted
or explicitly empty includes produce an empty JSON matrix while valid YAML
includes continue to work.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-22 17:10:11 -07:00
dependabot[bot]
026ad8b295 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](b430933298...718ea10b13)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 00:23:10 +00:00