Commit Graph
100 Commits
Author SHA1 Message Date
CrazyMaxandGitHub b99c92828a Merge pull request #1567 from crazy-max/fix-esbuild
preserve names in esbuild bundle
2026-06-29 16:14:40 +02:00
CrazyMax 16ce5c6012 preserve names in esbuild bundle
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-29 14:58:08 +02:00
CrazyMaxandGitHub ff26911fd3 Merge pull request #1562 from docker/sec-cli/npm-ci-20260612-145940
fix: replace npm install with npm ci (20260612-145940)
2026-06-12 17:16:13 +02:00
CrazyMaxandGitHub d2aace88c2 Merge pull request #1561 from docker/e2e-aws-ecr-oidc
ci(e2e): use OIDC for AWS ECR
2026-06-11 23:21:40 +02:00
CrazyMax ffca5157f0 ci(e2e): use OIDC for AWS ECR
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-11 21:54:33 +02:00
CrazyMaxandGitHub f72b3cf665 Merge pull request #1555 from crazy-max/e2e-dockerhub
ci(e2e): use org-owned Docker Hub credentials for e2e pushes
2026-06-08 19:08:26 +02:00
CrazyMax 405b217da0 ci(e2e): use org-owned Docker Hub credentials for e2e pushes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-04 16:03:24 +02:00
CrazyMaxandGitHub 7b93b2b85c Merge pull request #1554 from crazy-max/e2e-ghcr
ci(e2e): use GITHUB_TOKEN for GHCR e2e
2026-06-04 16:00:12 +02:00
CrazyMax f55bd083f2 ci(e2e): use GITHUB_TOKEN for GHCR e2e
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-02 14:18:39 +02:00
CrazyMaxandGitHub abf612226d Merge pull request #1551 from crazy-max/yarn-update
update yarn to 4.15.0
2026-05-28 18:41:31 +02:00
CrazyMax fe2165d9f3 update yarn to 4.15.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 15:13:15 +02:00
CrazyMax 77c0af9da9 ci(e2e): limit push-scoped login to Docker Hub
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 11:38:49 +02:00
CrazyMax 2258452e7c readme: link secret inputs to the GitHub Actions secrets guide
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 11:22:02 +02:00
CrazyMaxandGitHub c0132ad86b Merge pull request #1545 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.91.0
chore(deps): Bump @docker/actions-toolkit from 0.90.0 to 0.91.0
2026-05-28 10:27:20 +02:00
CrazyMaxandGitHub 799faff3ac Merge pull request #1547 from docker/dependabot/npm_and_yarn/tmp-0.2.7
chore(deps): Bump tmp from 0.2.5 to 0.2.7
2026-05-28 10:16:11 +02:00
CrazyMaxandGitHub 9c9a2860cb Merge pull request #1546 from docker/sec-cli/ignore-scripts-fix-20260527-192735
ci: add ignore-scripts to Node package manager config (20260527-192735)
2026-05-28 09:51:59 +02:00
CrazyMaxandGitHub a00e37fb35 Merge pull request #1540 from docker/dependabot/github_actions/docker/metadata-action-6.1.0
chore(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0
2026-05-26 17:22:51 +02:00
CrazyMaxandGitHub 43af6b15d8 Merge pull request #1541 from docker/dependabot/github_actions/github/codeql-action-4.36.0
chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0
2026-05-26 17:22:40 +02:00
CrazyMaxandGitHub 79aa6fa61a Merge pull request #1542 from docker/dependabot/github_actions/docker/setup-buildx-action-4.1.0
chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
2026-05-26 17:22:38 +02:00
CrazyMaxandGitHub d0a02127dc Merge pull request #1544 from docker/dependabot/github_actions/docker/login-action-4.2.0
chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0
2026-05-26 17:22:36 +02:00
CrazyMaxandGitHub 9e8d01178c Merge pull request #1543 from docker/dependabot/github_actions/docker/bake-action-7.2.0
chore(deps): Bump docker/bake-action from 7.1.0 to 7.2.0
2026-05-26 09:48:58 +02:00
CrazyMax 41ef05cd53 ci(e2e): scope login to push
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-22 18:15:25 +02:00
CrazyMax be165868b7 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-22 17:44:11 +02:00
CrazyMax 2d1196fa34 preserve trailing whitespace in secrets input
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-22 17:43:30 +02:00
CrazyMaxandGitHub f9f3042f7e Merge pull request #1517 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.88.0
chore(deps): Bump @docker/actions-toolkit from 0.87.0 to 0.90.0
2026-05-21 17:17:52 +02:00
CrazyMaxandGitHub c1c626eced Merge pull request #1525 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
chore(deps): Bump @actions/core from 3.0.0 to 3.0.1
2026-05-21 17:02:09 +02:00
CrazyMaxandGitHub e01deff7d9 Merge pull request #1521 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.7.1
chore(deps): Bump fast-xml-parser from 5.5.7 to 5.8.0
2026-05-21 16:56:15 +02:00
CrazyMaxandGitHub 4925ad24cd Merge pull request #1526 from docker/dependabot/npm_and_yarn/postcss-8.5.10
chore(deps): Bump postcss from 8.5.6 to 8.5.10
2026-05-21 16:50:55 +02:00
CrazyMaxandGitHub 08c59e6569 Merge pull request #1529 from docker/dependabot/npm_and_yarn/fast-xml-builder-1.2.0
chore(deps): Bump fast-xml-builder from 1.1.4 to 1.2.0
2026-05-21 16:50:28 +02:00
CrazyMaxandGitHub d7cd9d7a35 Merge pull request #1533 from docker/dependabot/npm_and_yarn/tar-7.5.15
chore(deps): Bump tar from 6.2.1 to 7.5.15
2026-05-21 16:45:18 +02:00
CrazyMaxandGitHub 157becc75e Merge pull request #1534 from docker/dependabot/npm_and_yarn/brace-expansion-5.0.6
chore(deps): Bump brace-expansion from 2.0.2 to 5.0.6
2026-05-21 16:41:57 +02:00
CrazyMaxandGitHub 5ae6a4a064 Merge pull request #1531 from docker/dependabot/github_actions/crazy-max-dot-github-6667ecc476
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-05-21 16:26:51 +02:00
CrazyMaxandGitHub 422287b25a Merge pull request #1532 from docker/dependabot/github_actions/actions/create-github-app-token-3.2.0
chore(deps): Bump actions/create-github-app-token from 3.1.1 to 3.2.0
2026-05-21 16:26:28 +02:00
CrazyMaxandGitHub af6a07f739 Merge pull request #1535 from docker/dependabot/github_actions/github/codeql-action-4.35.5
chore(deps): Bump github/codeql-action from 4.35.1 to 4.35.5
2026-05-21 16:25:59 +02:00
CrazyMaxandGitHub 3d01f53c7b Merge pull request #1536 from docker/dependabot/github_actions/codecov/codecov-action-6.0.1
chore(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
2026-05-21 16:24:51 +02:00
CrazyMaxandGitHub e46f50c06e Merge pull request #1537 from crazy-max/zizmor-fixes
ci: restrict update-dist GitHub App token scope
2026-05-21 14:57:22 +02:00
CrazyMax 69b698e993 ci: restrict update-dist GitHub App token scope
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-21 14:23:33 +02:00
CrazyMaxandGitHub 789f686580 Merge pull request #1524 from docker/dependabot/github_actions/crazy-max-dot-github-a3893cf95f
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-04-27 09:36:37 +02:00
CrazyMax d70693f4ae replace ncc with esbuild for action bundling
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-24 11:09:46 +02:00
CrazyMaxandGitHub e0fea16cbf Merge pull request #1519 from docker/dependabot/github_actions/actions/setup-node-6.4.0
chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0
2026-04-24 09:48:12 +02:00
CrazyMaxandGitHub f832d4c773 Merge pull request #1520 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-04-24 09:46:03 +02:00
CrazyMax 64fda479ac ci(zizmor): update rules
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-15 16:01:32 +02:00
CrazyMaxandGitHub c1d0c0cc42 Merge pull request #1514 from docker/dependabot/github_actions/actions/create-github-app-token-3.1.1
chore(deps): Bump actions/create-github-app-token from 3.0.0 to 3.1.1
2026-04-15 14:48:56 +02:00
CrazyMaxandGitHub d5c8665698 Merge pull request #1515 from docker/dependabot/github_actions/actions/cache-5.0.5
chore(deps): Bump actions/cache from 5.0.4 to 5.0.5
2026-04-15 14:48:40 +02:00
CrazyMaxandGitHub e6ed27f63f Merge pull request #1513 from docker/dependabot/github_actions/docker/bake-action-7.1.0
chore(deps): Bump docker/bake-action from 7.0.0 to 7.1.0
2026-04-14 10:54:30 +02:00
CrazyMaxandGitHub bcafcacb16 Merge pull request #1509 from docker/dependabot/npm_and_yarn/vite-7.3.2
chore(deps): Bump vite from 7.3.1 to 7.3.2
2026-04-09 19:49:37 +02:00
CrazyMaxandGitHub 18e62f1158 Merge pull request #1510 from docker/dependabot/npm_and_yarn/lodash-4.18.1
chore(deps): Bump lodash from 4.17.23 to 4.18.1
2026-04-09 19:48:40 +02:00
CrazyMaxandGitHub efeec9557c Merge pull request #1505 from crazy-max/refactor-git-context
refactor: use new gitContext for build context resolution
2026-04-09 19:38:17 +02:00
CrazyMaxandGitHub ddf04b08eb Merge pull request #1511 from docker/dependabot/github_actions/crazy-max-dot-github-f0991e81fd
chore(deps): Bump the crazy-max-dot-github group with 2 updates
2026-04-09 10:21:34 +02:00
CrazyMaxandGitHub ef1fb9688f Merge pull request #1508 from docker/dependabot/github_actions/docker/login-action-4.1.0
chore(deps): Bump docker/login-action from 4.0.0 to 4.1.0
2026-04-08 12:55:35 +02:00
CrazyMax 2d8f2a1a37 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:50:34 +02:00
CrazyMax 919ac7bd7d fix test since secrets are not written to temp path anymore
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:49:36 +02:00
CrazyMax c850e6994a refactor: use new gitContext for build context resolution
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:49:35 +02:00
CrazyMax 56795cf70a bump @docker/actions-toolkit from 0.79.0 to 0.87.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-08 12:49:35 +02:00
CrazyMaxandGitHub 83bfd93ab4 Merge pull request #1496 from docker/dependabot/npm_and_yarn/picomatch-4.0.4
chore(deps): Bump picomatch from 4.0.3 to 4.0.4
2026-04-01 15:17:17 +02:00
CrazyMaxandGitHub a7d4e2ac29 Merge pull request #1497 from docker/dependabot/npm_and_yarn/handlebars-4.7.9
chore(deps): Bump handlebars from 4.7.8 to 4.7.9
2026-04-01 15:17:00 +02:00
CrazyMaxandGitHub 00c4e32030 Merge pull request #1504 from crazy-max/fix-update-dist
ci: stop update-dist reruns after generated dist pushes
2026-04-01 15:07:55 +02:00
CrazyMaxandGitHub dab806366e Merge pull request #1500 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.13
chore(deps): Bump brace-expansion from 1.1.12 to 1.1.13
2026-04-01 13:00:46 +02:00
CrazyMax a691600376 ci: stop update-dist reruns after generated dist pushes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-01 12:59:41 +02:00
CrazyMaxandGitHub c5117b60bc Merge pull request #1503 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0
chore(deps): Bump codecov/codecov-action from 5.5.4 to 6.0.0
2026-03-31 09:31:46 +02:00
CrazyMax 81e9d51607 fix zizmor findings
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-30 13:40:47 +02:00
CrazyMax d61b4b1884 ci: zizmor workflow
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-30 12:10:46 +02:00
CrazyMax b859af5ad8 ci: bump crazy-max/.github to 1.1.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 12:33:47 +01:00
CrazyMaxandGitHub de30867634 Merge pull request #1490 from docker/dependabot/npm_and_yarn/glob-10.5.0
chore(deps): Bump glob from 10.3.12 to 10.5.0
2026-03-20 17:31:23 +01:00
CrazyMaxandGitHub 8ed8ece47c Merge pull request #1491 from docker/dependabot/npm_and_yarn/flatted-3.4.2
chore(deps): Bump flatted from 3.3.3 to 3.4.2
2026-03-20 17:24:48 +01:00
CrazyMaxandGitHub 2133d1712a Merge pull request #1492 from crazy-max/codeql
ci: enable SAST scanning with CodeQL
2026-03-20 16:57:08 +01:00
CrazyMax bebcd8f390 ci: enable SAST scanning with CodeQL
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-20 11:37:15 +01:00
CrazyMaxandGitHub a3f8b56eb8 Merge pull request #1486 from docker/dependabot/npm_and_yarn/undici-6.24.0
chore(deps): Bump undici from 6.23.0 to 6.24.1
2026-03-20 11:35:38 +01:00
CrazyMaxandGitHub 139e1274c0 Merge pull request #1489 from docker/dependabot/npm_and_yarn/fast-xml-parser-5.5.7
chore(deps): Bump fast-xml-parser from 5.4.2 to 5.5.7
2026-03-20 11:19:34 +01:00
CrazyMaxandGitHub 1031bc45c5 Merge pull request #1487 from docker/dependabot/github_actions/actions/create-github-app-token-3
chore(deps): Bump actions/create-github-app-token from 2 to 3
2026-03-16 14:06:41 +01:00
CrazyMax b0bdd3ad21 ci: switch to matrix subaction
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-09 16:26:49 +01:00
CrazyMaxandGitHub f64672cf50 Merge pull request #1482 from docker/dependabot/github_actions/docker/metadata-action-6
chore(deps): Bump docker/metadata-action from 5 to 6
2026-03-09 16:23:42 +01:00
CrazyMax 155e77ab84 readme: update to v7
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-05 22:21:36 +01:00
CrazyMaxandGitHub d08e5c354a Merge pull request #1479 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.79.0
chore(deps): Bump @docker/actions-toolkit from 0.78.0 to 0.79.0
2026-03-05 19:12:33 +01:00
CrazyMax 98f853d923 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-05 17:05:08 +01:00
CrazyMax cadccf6e8c remove deprecated envs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-05 17:05:07 +01:00
CrazyMaxandGitHub 03fe8775e3 Merge pull request #1478 from docker/dependabot/github_actions/docker/setup-buildx-action-4
chore(deps): Bump docker/setup-buildx-action from 3 to 4
2026-03-05 14:33:00 +01:00
CrazyMax 5b9c34fb44 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-04 14:52:07 +01:00
CrazyMax 61cac19eba remove legacy export-build tool support
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-04 14:49:59 +01:00
CrazyMaxandGitHub 9a57217389 Merge pull request #1476 from docker/dependabot/github_actions/docker/setup-qemu-action-4
chore(deps): Bump docker/setup-qemu-action from 3 to 4
2026-03-04 13:47:52 +01:00
CrazyMaxandGitHub 975aafcd3e Merge pull request #1475 from docker/dependabot/github_actions/docker/login-action-4
chore(deps): Bump docker/login-action from 3 to 4
2026-03-04 13:47:35 +01:00
CrazyMax 7c68264114 node 24 as default runtime
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-04 11:47:11 +01:00
CrazyMaxandGitHub 1d41182205 Merge pull request #1472 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.78.0
chore(deps): Bump @docker/actions-toolkit from 0.77.0 to 0.78.0
2026-03-04 11:44:05 +01:00
CrazyMax 5bc2aa100a chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-03 18:38:14 +01:00
CrazyMax f939b4c816 test: stabilize context test fixtures and github mock setup since ESM
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-03 18:38:14 +01:00
CrazyMax b4bda282d6 github summary and artifact logic moved since actions-toolkit v0.77.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-03 18:12:21 +01:00
CrazyMaxandGitHub 8913706d4e Merge pull request #1454 from docker/dependabot/npm_and_yarn/actions/core-3.0.0
chore(deps): Bump @actions/core from 1.11.1 to 3.0.0
2026-03-03 18:06:52 +01:00
CrazyMaxandGitHub 217eea940b Merge pull request #1463 from docker/dependabot/npm_and_yarn/minimatch-3.1.3
chore(deps): Bump minimatch from 3.1.2 to 3.1.5
2026-03-03 17:59:13 +01:00
CrazyMaxandGitHub d2c9f1ec18 Merge pull request #1466 from crazy-max/esm
switch to ESM and update config/test wiring
2026-03-03 16:16:49 +01:00
CrazyMax 2bd26e7129 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-02 09:36:28 +01:00
CrazyMax 4c8333398a dockerfile: fix vendoring
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-02 09:36:28 +01:00
CrazyMax ce71e4f44d update dev dependencies
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-01 11:07:00 +01:00
CrazyMax b66574c6d1 switch to ESM and update config/test wiring
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-01 11:07:00 +01:00
CrazyMax db4ff6ca90 switch from jest to vitest
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-28 16:32:47 +01:00
CrazyMaxandGitHub 10e90e3645 Merge pull request #1458 from crazy-max/git-auth-port
preserve port in GIT_AUTH_TOKEN host
2026-02-12 09:49:36 +01:00
CrazyMax 5262538458 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-12 01:26:27 +01:00
CrazyMax cd130e45cb preserve port in GIT_AUTH_TOKEN host
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-12 01:24:04 +01:00
CrazyMaxandGitHub 806c75105a Merge pull request #1452 from crazy-max/update-yarn
update yarn to 4.9.2
2026-02-11 19:59:17 +01:00
CrazyMaxandGitHub 601a80b39c Merge pull request #1456 from crazy-max/auth-token-dyn-host
derive GIT_AUTH_TOKEN host from GitHub server URL
2026-02-11 16:43:48 +01:00
CrazyMax 8f7fd7c8c7 chore: update generated content
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-11 13:59:06 +01:00