CrazyMax
3c2e2d1743
ci: use Docker Hub OIDC for dockerfile-upstream image
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-05 17:56:46 +02:00
CrazyMax
e19f177d12
Merge pull request #7004 from moby/dependabot/github_actions/docker/login-action-4.6.0
...
build(deps): bump docker/login-action from 4.5.2 to 4.6.0
2026-08-04 14:49:51 +02:00
dependabot[bot]
0822974aaa
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.3 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e4fba868fa...f205ea1c33 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-03 00:25:52 +00:00
dependabot[bot]
bac2261326
build(deps): bump docker/login-action from 4.5.2 to 4.6.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](371161bbe7...dbcb813823 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-31 00:23:51 +00:00
CrazyMax
df0761886a
Merge pull request #6993 from moby/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.15.0
...
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.14.0 to 1.15.0
2026-07-30 10:11:05 +02:00
dependabot[bot]
f5e13f9171
build(deps): bump docker/login-action from 4.5.1 to 4.5.2
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](abd2ef45e7...371161bbe7 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 00:24:39 +00:00
dependabot[bot]
38d29ee428
build(deps): bump docker/github-builder/.github/workflows/bake.yml
...
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](3415a188ca...27ade872c1 )
---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.15.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-28 00:25:25 +00:00
CrazyMax
7a9ce8f99a
Merge pull request #6983 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.3
...
build(deps): bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.3
2026-07-27 15:31:27 +02:00
dependabot[bot]
dc7e2b1054
build(deps): bump docker/login-action from 4.4.0 to 4.5.1
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.4.0 to 4.5.1.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](af1e73f918...abd2ef45e7 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.5.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-27 00:25:17 +00:00
dependabot[bot]
f1ee6114b2
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.2 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fa )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 00:25:17 +00:00
dependabot[bot]
055bb02512
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](7188fc3636...e0647621c2 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-23 00:24:58 +00:00
CrazyMax
8bf5dae630
Merge pull request #6971 from moby/dependabot/github_actions/actions/checkout-7.0.1
...
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
2026-07-22 11:29:38 +02:00
dependabot[bot]
df7a9f3db4
build(deps): bump actions/labeler from 6.2.0 to 7.0.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](b8dd2d9be0...bf12e9b00b )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-22 00:23:34 +00:00
dependabot[bot]
bc313d0f95
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](9c091bb21b...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-21 00:25:18 +00:00
dependabot[bot]
73d7a2192f
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.0 to 4.37.1.
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](99df26d4f1...7188fc3636 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-20 00:27:14 +00:00
dependabot[bot]
43486daba0
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](924ae3a1cd...b7ad1dad31 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-17 00:23:34 +00:00
dependabot[bot]
5473f5f1b9
build(deps): bump docker/github-builder/.github/workflows/bake.yml
...
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](c4a1b216d9...3415a188ca )
---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-16 00:23:57 +00:00
dependabot[bot]
5a168f064b
build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](718ea10b13...3d0d9888cb )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-15 00:25:20 +00:00
CrazyMax
5049a9db0c
Merge pull request #6947 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.0
...
build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0
2026-07-10 16:15:40 +02:00
CrazyMax
6582dd90ba
Merge pull request #6946 from moby/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.13.0
...
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.12.0 to 1.13.0
2026-07-10 16:14:50 +02:00
dependabot[bot]
d808992e68
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.3 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](54f647b7e1...99df26d4f1 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 00:25:35 +00:00
dependabot[bot]
a41c4abcfa
build(deps): bump docker/github-builder/.github/workflows/bake.yml
...
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](5f637c833a...c4a1b216d9 )
---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 00:24:05 +00:00
dependabot[bot]
8d00e7668e
build(deps): bump actions/labeler from 6.1.0 to 6.2.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](f27b608878...b8dd2d9be0 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 00:23:58 +00:00
Tõnis Tiigi
8b948e0bcf
Merge pull request #6853 from thaJeztah/bump_containerd_runc
...
Dockerfile: containerd v2.3.2, runc v1.4.3
2026-07-06 11:49:03 -07:00
CrazyMax
cf8493e8b7
Merge pull request #6929 from moby/dependabot/github_actions/docker/setup-buildx-action-4.2.0
...
build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
2026-07-06 10:34:05 +02:00
CrazyMax
e8008ef124
Merge pull request #6928 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.3
...
build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
2026-07-06 10:33:53 +02:00
dependabot[bot]
fe18ebdb90
build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](d7f5e7f509...bb05f3f551 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-06 00:26:00 +00:00
dependabot[bot]
34bfea50e6
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...54f647b7e1 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-06 00:25:21 +00:00
dependabot[bot]
826e7fe652
build(deps): bump docker/login-action from 4.2.0 to 4.4.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](650006c6eb...af1e73f918 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-06 00:24:01 +00:00
CrazyMax
ca5552d9fe
Merge pull request #6922 from moby/dependabot/github_actions/docker/bake-action/subaction/matrix-7.3.0
...
build(deps): bump docker/bake-action/subaction/matrix from 7.2.0 to 7.3.0
2026-07-03 16:25:12 +02:00
CrazyMax
d8ac204807
Merge pull request #6921 from moby/dependabot/github_actions/docker/setup-qemu-action-4.2.0
...
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-07-03 16:24:50 +02:00
dependabot[bot]
f39e82e962
build(deps): bump docker/bake-action/subaction/matrix
...
Bumps [docker/bake-action/subaction/matrix](https://github.com/docker/bake-action ) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](6614cfa25e...d3418bd7d0 )
---
updated-dependencies:
- dependency-name: docker/bake-action/subaction/matrix
dependency-version: 7.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-03 13:51:03 +00:00
dependabot[bot]
39f2f6203f
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](06116385d9...96fe6ef7f3 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-03 13:50:36 +00:00
CrazyMax
2197e6aa6b
Merge pull request #6923 from moby/dependabot/github_actions/docker/bake-action-7.3.0
...
build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
2026-07-03 15:50:22 +02:00
CrazyMax
42c9b3079b
Merge pull request #6920 from moby/dependabot/github_actions/docker/build-push-action-7.3.0
...
build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0
2026-07-03 15:49:34 +02:00
CrazyMax
719caf38b7
ci: remove vagrant dependency workaround
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-03 10:54:33 +02:00
dependabot[bot]
5579588d06
build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](6614cfa25e...d3418bd7d0 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-03 00:25:34 +00:00
dependabot[bot]
b548d9db91
build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](f9f3042f7e...53b7df96c9 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 7.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-03 00:23:38 +00:00
Sebastiaan van Stijn
d42880744d
Dockerfile: containerd v2.3.2, runc v1.4.3
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-30 16:50:08 +02:00
dependabot[bot]
d21eb8002b
build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](716fd1c51a...46267a6e61 )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](716fd1c51a...46267a6e61 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.10.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.10.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 08:55:36 +00:00
CrazyMax
e6a21b77af
Merge pull request #6906 from moby/dependabot/github_actions/actions/cache-6.1.0
...
build(deps): bump actions/cache from 5.0.5 to 6.1.0
2026-06-29 10:54:09 +02:00
CrazyMax
9c621b23b4
Merge pull request #6899 from moby/dependabot/github_actions/actions/setup-go-6.5.0
...
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
2026-06-29 10:53:39 +02:00
CrazyMax
03052c08fd
Merge pull request #6889 from moby/dependabot/github_actions/softprops/action-gh-release-3.0.1
...
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
2026-06-29 10:53:17 +02:00
CrazyMax
67b860f2cc
Merge pull request #6873 from moby/dependabot/github_actions/crazy-max/dot-github-1.10.1
...
build(deps): bump crazy-max/.github from 1.10.0 to 1.10.1
2026-06-29 10:52:51 +02:00
dependabot[bot]
549c2e14cd
build(deps): bump actions/cache from 5.0.5 to 6.1.0
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](27d5ce7f10...55cc834586 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 00:23:08 +00:00
dependabot[bot]
2f147a7d3b
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4a3601121d...924ae3a1cd )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-25 00:24:08 +00:00
Akihiro Suda
33278a31c2
Dockerfile: allow cross-compilation without binfmt helper
...
Fix issue 6890
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2026-06-25 04:21:22 +09:00
Tonis Tiigi
2fa373c18a
ci: pin js-yaml install
...
Use an explicit js-yaml version in the reusable test workflow so CI does
not silently pick up parser behavior changes from future npm releases.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-22 17:13:36 -07:00
Tonis Tiigi
eda3820bc4
ci: tolerate empty test matrix includes
...
The reusable test workflow installs js-yaml dynamically during CI. After
js-yaml 5.0.0 was released on 2026-06-20, load("") started throwing
instead of returning undefined.
Callers such as frontend.yml omit the optional includes input, so GitHub
Actions passes an empty string. Guard that value before parsing so omitted
or explicitly empty includes produce an empty JSON matrix while valid YAML
includes continue to work.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-22 17:10:11 -07:00
dependabot[bot]
026ad8b295
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](b430933298...718ea10b13 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 00:23:10 +00:00