Merge pull request #503 from docker/dependabot/npm_and_yarn/picomatch-4.0.4

build(deps): bump picomatch from 4.0.3 to 4.0.4
Merge pull request #504 from docker/dependabot/npm_and_yarn/handlebars-4.7.9
2026-04-28 03:24:19 +08:00 · 2026-04-15 12:04:08 +02:00 · 2026-04-15 12:03:52 +02:00 · 2026-04-15 12:03:36 +02:00 · 2026-04-15 12:03:19 +02:00 · 2026-04-15 12:03:02 +02:00
7 changed files with 28 additions and 28 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -113,7 +113,7 @@ jobs:
          buildkitd-flags: --debug
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
          platforms: linux/amd64,linux/arm64,linux/ppc64le
@ -243,7 +243,7 @@ jobs:
          buildkitd-config: /tmp/buildkitd.toml
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -270,7 +270,7 @@ jobs:
              mirrors = ["mirror.gcr.io"]
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -331,7 +331,7 @@ jobs:
          EOL
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -390,7 +390,7 @@ jobs:
          EOL
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -518,7 +518,7 @@ jobs:
          EOL
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@ -26,7 +26,7 @@ jobs:
        uses: ./
      -
        name: Test
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          source: .
          targets: test
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@ -21,7 +21,7 @@ jobs:
      -
        name: GitHub auth token from GitHub App
        id: docker-read-app
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
        with:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
@ -35,7 +35,7 @@ jobs:
          token: ${{ steps.docker-read-app.outputs.token }}
      -
        name: Build
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          source: .
          targets: build
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@ -26,7 +26,7 @@ jobs:
      -
        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/matrix@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action/subaction/matrix@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          target: validate
@ -41,6 +41,6 @@ jobs:
    steps:
      -
        name: Validate
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          targets: ${{ matrix.target }}
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/yarn.lock
+++ b/yarn.lock
@ -1820,12 +1820,12 @@ __metadata:
  linkType: hard
 "brace-expansion@npm:^1.1.7":
-  version: 1.1.12
+  version: 1.1.13
-  resolution: "brace-expansion@npm:1.1.12"
+  resolution: "brace-expansion@npm:1.1.13"
  dependencies:
    balanced-match: "npm:^1.0.0"
    concat-map: "npm:0.0.1"
-  checksum: 10/12cb6d6310629e3048cadb003e1aca4d8c9bb5c67c3c321bafdd7e7a50155de081f78ea3e0ed92ecc75a9015e784f301efc8132383132f4f7904ad1ac529c562
+  checksum: 10/b5f4329fdbe9d2e25fa250c8f866ebd054ba946179426e99b86dcccddabdb1d481f0e40ee5430032e62a7d0a6c2837605ace6783d015aa1d65d85ca72154d936
  languageName: node
  linkType: hard
@ -2719,8 +2719,8 @@ __metadata:
  linkType: hard
 "handlebars@npm:^4.7.8":
-  version: 4.7.8
+  version: 4.7.9
-  resolution: "handlebars@npm:4.7.8"
+  resolution: "handlebars@npm:4.7.9"
  dependencies:
    minimist: "npm:^1.2.5"
    neo-async: "npm:^2.6.2"
@ -2732,7 +2732,7 @@ __metadata:
      optional: true
  bin:
    handlebars: bin/handlebars
-  checksum: 10/bd528f4dd150adf67f3f857118ef0fa43ff79a153b1d943fa0a770f2599e38b25a7a0dbac1a3611a4ec86970fd2325a81310fb788b5c892308c9f8743bd02e11
+  checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
  languageName: node
  linkType: hard
@ -3112,9 +3112,9 @@ __metadata:
  linkType: hard
 "lodash@npm:^4.17.15":
-  version: 4.17.23
+  version: 4.18.1
-  resolution: "lodash@npm:4.17.23"
+  resolution: "lodash@npm:4.18.1"
-  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  checksum: 10/306fea53dfd39dad1f03d45ba654a2405aebd35797b673077f401edb7df2543623dc44b9effbb98f69b32152295fff725a4cec99c684098947430600c6af0c3f
  languageName: node
  linkType: hard
@ -3644,9 +3644,9 @@ __metadata:
  linkType: hard
 "picomatch@npm:^4.0.3":
-  version: 4.0.3
+  version: 4.0.4
-  resolution: "picomatch@npm:4.0.3"
+  resolution: "picomatch@npm:4.0.4"
-  checksum: 10/57b99055f40b16798f2802916d9c17e9744e620a0db136554af01d19598b96e45e2f00014c91d1b8b13874b80caa8c295b3d589a3f72373ec4aaf54baa5962d5
+  checksum: 10/f6ef80a3590827ce20378ae110ac78209cc4f74d39236370f1780f957b7ee41c12acde0e4651b90f39983506fd2f5e449994716f516db2e9752924aff8de93ce
  languageName: node
  linkType: hard
@ -4467,8 +4467,8 @@ __metadata:
  linkType: hard
 "vite@npm:^6.0.0 || ^7.0.0":
-  version: 7.3.1
+  version: 7.3.2
-  resolution: "vite@npm:7.3.1"
+  resolution: "vite@npm:7.3.2"
  dependencies:
    esbuild: "npm:^0.27.0"
    fdir: "npm:^6.5.0"
@ -4517,7 +4517,7 @@ __metadata:
      optional: true
  bin:
    vite: bin/vite.js
-  checksum: 10/62e48ffa4283b688f0049005405a004447ad38ffc99a0efea4c3aa9b7eed739f7402b43f00668c0ee5a895b684dc953d62f0722d8a92c5b2f6c95f051bceb208
+  checksum: 10/c5f7a9a60011c41c836cedf31c8ee7624102aff9b6a7f3aab2ff47639721bba0916f81994c3a3ea6577a16c4f0dfee1e7dbd244e0da8edd5954e3c6d48daaaa2
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	549798b6d2	Merge pull request #503 from docker/dependabot/npm_and_yarn/picomatch-4.0.4 build(deps): bump picomatch from 4.0.3 to 4.0.4	2026-04-15 12:04:08 +02:00
CrazyMax	ceecdf6ce1	Merge pull request #504 from docker/dependabot/npm_and_yarn/handlebars-4.7.9 build(deps): bump handlebars from 4.7.8 to 4.7.9	2026-04-15 12:03:52 +02:00
CrazyMax	5b64848458	Merge pull request #508 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.13 build(deps): bump brace-expansion from 1.1.12 to 1.1.13	2026-04-15 12:03:36 +02:00
CrazyMax	393ed90307	Merge pull request #520 from docker/dependabot/npm_and_yarn/vite-7.3.2 build(deps): bump vite from 7.3.1 to 7.3.2	2026-04-15 12:03:19 +02:00
CrazyMax	5debd5a897	Merge pull request #523 from docker/dependabot/npm_and_yarn/lodash-4.18.1 build(deps): bump lodash from 4.17.23 to 4.18.1	2026-04-15 12:03:02 +02:00
CrazyMax	c087a89bda	Merge pull request #525 from docker/dependabot/github_actions/docker/bake-action-7.1.0 build(deps): bump docker/bake-action from 7.0.0 to 7.1.0	2026-04-15 12:02:44 +02:00
CrazyMax	24de66d3bb	Merge pull request #526 from docker/dependabot/github_actions/docker/build-push-action-7.1.0 build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0	2026-04-15 12:02:29 +02:00
CrazyMax	6078bf0b87	Merge pull request #527 from docker/dependabot/github_actions/actions/create-github-app-token-3.1.1 build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1	2026-04-15 12:02:12 +02:00
dependabot[bot]	15848ad661	build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.0.0 to 3.1.1. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](`f8d387b68d...1b10c78c78`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 04:58:27 +00:00
dependabot[bot]	09ebfbdaec	build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](`d08e5c354a...bcafcacb16`) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 04:58:23 +00:00
dependabot[bot]	94d99cf28f	build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](`82490499d2...a66e1c87e2`) --- updated-dependencies: - dependency-name: docker/bake-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 04:56:51 +00:00
dependabot[bot]	6c3774f2c2	build(deps): bump lodash from 4.17.23 to 4.18.1 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-09 08:24:44 +00:00
dependabot[bot]	6c6e9daa1f	build(deps): bump vite from 7.3.1 to 7.3.2 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 7.3.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-06 21:41:59 +00:00
github-actions[bot]	7131b598a3	chore: update generated content	2026-03-27 14:28:29 +00:00
dependabot[bot]	3a0c39cda6	build(deps): bump brace-expansion from 1.1.12 to 1.1.13 Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.13 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 14:27:27 +00:00
dependabot[bot]	ee07913914	build(deps): bump handlebars from 4.7.8 to 4.7.9 Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 00:14:08 +00:00
dependabot[bot]	3e293d1df5	build(deps): bump picomatch from 4.0.3 to 4.0.4 Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4) --- updated-dependencies: - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-26 07:10:49 +00:00