Bump the ci group across 1 directory with 10 updates

[dependabot]

Bumps the ci group with 10 updates in the / directory:

Package	From	To
actions/checkout	6.0.2	7.0.0
docker/setup-docker-action	5.1.0	5.3.0
docker/login-action	4.1.0	4.4.0
docker/setup-buildx-action	4.0.0	4.2.0
docker/build-push-action	7.1.0	7.3.0
docker/scout-action	1.20.4	1.23.1
score-spec/setup-score	3.2.3	3.2.4
docker/github-builder/.github/workflows/build.yml	1.8.0	1.12.0
docker/setup-qemu-action	4.0.0	4.2.0
github/codeql-action/upload-sarif	4.35.5	4.36.3

Updates actions/checkout from 6.0.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

• Update changelog by @​ericsciple in actions/checkout#2357
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

• @​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462

v6.0.3

• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

... (truncated)

Commits

• 9c091bb update error wording (#2467)
• 1044a6d getting ready for checkout v7 release (#2464)
• f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
• d914b26 upgrade module to esm and update dependencies (#2463)
• 537c7ef Bump @​actions/core and @​actions/tool-cache and Remove uuid (#2459)
• 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
• 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
• 0f9f3aa Bump actions/publish-immutable-action (#2458)
• f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
• df4cb1c Update changelog for v6.0.3 (#2446)
• Additional commits viewable in compare view

Updates docker/setup-docker-action from 5.1.0 to 5.3.0

Release notes

Sourced from docker/setup-docker-action's releases.

v5.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-docker-action#284
• Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0 in docker/setup-docker-action#290
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-docker-action#285
• Bump js-yaml from 4.1.1 to 4.3.0 in docker/setup-docker-action#283
• Bump tmp from 0.2.6 to 0.2.7 in docker/setup-docker-action#280
• Bump undici from 6.25.0 to 6.27.0 in docker/setup-docker-action#282
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-docker-action#286

Full Changelog: docker/setup-docker-action@v5.2.0...v5.3.0

v5.2.0

• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-docker-action#255
• Bump @​docker/actions-toolkit from 0.89.0 to 0.91.0 in docker/setup-docker-action#254
• Bump @​tootallnate/once from 2.0.0 to 2.0.1 in docker/setup-docker-action#266
• Bump fast-xml-builder from 1.1.5 to 1.2.0 in docker/setup-docker-action#258
• Bump ip-address from 10.0.1 to 10.2.0 in docker/setup-docker-action#257
• Bump postcss from 8.5.6 to 8.5.15 in docker/setup-docker-action#265
• Bump tmp from 0.2.5 to 0.2.6 in docker/setup-docker-action#269

Full Changelog: docker/setup-docker-action@v5.1.0...v5.2.0

Commits

• 6d7cfa6 Merge pull request #290 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 77ac140 [dependabot skip] chore: update generated content
• b9f0330 build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 8ec1dbe Merge pull request #283 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• d85e7e7 Merge pull request #282 from docker/dependabot/npm_and_yarn/undici-6.27.0
• d79fe8d [dependabot skip] chore: update generated content
• fdb834d build(deps): bump undici from 6.25.0 to 6.27.0
• 8a78e70 Merge pull request #280 from docker/dependabot/npm_and_yarn/tmp-0.2.7
• 1089dbe Merge pull request #289 from docker/dependabot/github_actions/actions/checkou...
• a544c85 build(deps): bump actions/checkout from 6.0.3 to 7.0.0
• Additional commits viewable in compare view

Updates docker/login-action from 4.1.0 to 4.4.0

Release notes

Sourced from docker/login-action's releases.

v4.4.0

• Skip empty registry-auth secret mask by @​crazy-max in docker/login-action#1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/login-action#1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028
• Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031
• Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002
• Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020
• Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/login-action#976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in docker/login-action#960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in docker/login-action#970
• Bump brace-expansion from 2.0.1 to 5.0.6 in docker/login-action#993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/login-action#985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in docker/login-action#963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in docker/login-action#961
• Bump postcss from 8.5.6 to 8.5.10 in docker/login-action#979
• Bump tar from 6.2.1 to 7.5.15 in docker/login-action#991
• Bump vite from 7.3.1 to 7.3.3 in docker/login-action#986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

Commits

• af1e73f Merge pull request #1034 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• da722bd [dependabot skip] chore: update generated content
• 2916ad6 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• ca0a662 Merge pull request #1035 from crazy-max/fix-registry-auth-empty-mask
• c455755 chore: update generated content
• 4835190 skip empty registry-auth secret mask
• 992421c Merge pull request #1033 from docker/dependabot/github_actions/docker/bake-ac...
• b249b43 Merge pull request #1032 from docker/dependabot/github_actions/docker/bake-ac...
• 1b67977 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
• 9d49d6a build(deps): bump docker/bake-action/subaction/matrix
• Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.0.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-buildx-action#572
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-buildx-action#551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/setup-buildx-action#557 docker/setup-buildx-action#580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-buildx-action#573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-buildx-action#576
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/setup-buildx-action#562
• Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-buildx-action#577
• Bump tmp from 0.2.5 to 0.2.7 in docker/setup-buildx-action#556
• Bump undici from 6.25.0 to 6.27.0 in docker/setup-buildx-action#570
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-buildx-action#569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in docker/setup-buildx-action#489
• Bump brace-expansion from 1.1.12 to 5.0.6 in docker/setup-buildx-action#547 docker/setup-buildx-action#508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-buildx-action#540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-buildx-action#496
• Bump flatted from 3.3.3 to 3.4.2 in docker/setup-buildx-action#499
• Bump glob from 10.3.12 to 13.0.6 in docker/setup-buildx-action#495
• Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-buildx-action#504
• Bump lodash from 4.17.23 to 4.18.1 in docker/setup-buildx-action#523
• Bump picomatch from 4.0.3 to 4.0.4 in docker/setup-buildx-action#503
• Bump postcss from 8.5.6 to 8.5.10 in docker/setup-buildx-action#537
• Bump tar from 6.2.1 to 7.5.15 in docker/setup-buildx-action#545
• Bump undici from 6.23.0 to 6.25.0 in docker/setup-buildx-action#492
• Bump vite from 7.3.1 to 7.3.2 in docker/setup-buildx-action#520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

Commits

• bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 321c814 [dependabot skip] chore: update generated content
• b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 5c7b8ae [dependabot skip] chore: update generated content
• 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
• 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
• 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
• 2211273 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/build-push-action from 7.1.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/build-push-action#1567
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/build-push-action#1545 docker/build-push-action#1572
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/build-push-action#1568
• Bump js-yaml from 4.1.1 to 4.3.0 in docker/build-push-action#1566
• Bump tmp from 0.2.5 to 0.2.7 in docker/build-push-action#1547
• Bump undici from 6.24.1 to 6.27.0 in docker/build-push-action#1564
• Bump vite from 7.3.2 to 7.3.6 in docker/build-push-action#1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/build-push-action#1525
• Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0 in docker/build-push-action#1517
• Bump brace-expansion from 2.0.2 to 5.0.6 in docker/build-push-action#1534
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/build-push-action#1529
• Bump fast-xml-parser from 5.5.7 to 5.8.0 in docker/build-push-action#1521
• Bump postcss from 8.5.6 to 8.5.10 in docker/build-push-action#1526
• Bump tar from 6.2.1 to 7.5.15 in docker/build-push-action#1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

Commits

• 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 154298c [dependabot skip] chore: update generated content
• cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• 9c69730 [dependabot skip] chore: update generated content
• bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
• a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
• 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
• c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
• d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
• Additional commits viewable in compare view

Updates docker/scout-action from 1.20.4 to 1.23.1

Release notes

Sourced from docker/scout-action's releases.

v1.23.1

What's Changed

• Fixes policy evaluation when using custom Rego policies without details metadata @​whostolebenfrog

v1.23.0

What's Changed

• Prevents empty VEX documents from breaking scanning @​flyingmachine
• Rego policy sources can be served via http(s) through --policy-file @​cdupuis
• Performance improvements on SBOM fetching and policies evaluation @​cdupuis

v1.22.0

What's Changed

• Proxies Trivy's Java DB download through Docker Desktop's HTTP proxy transport @​AndreSilva1993

v1.21.0

What's Changed

• Fix local DHI-derived image handling, including inherited VEX and quickview base-image display
• Improve SBOM package qualifier handling, including DHI distro qualifiers
• Update dependencies and Go toolchain

Commits

• 2688993 Merge pull request #109 from docker/release/v1.23.1
• 7b86e1c [BOT] Update assets for v1.23.1 release
• ce97ec1 Merge pull request #108 from docker/release/v1.23.0
• 2da9adb [BOT] Update assets for v1.23.0 release
• 7520205 Merge pull request #107 from docker/release/v1.22.0
• 6b2b3b1 [BOT] Update assets for v1.22.0 release
• 3a14fc8 chore: pin GitHub Actions to commit SHA (#103)
• cd72f26 Merge pull request #104 from docker/release/v1.21.0
• b9ceaba [BOT] Update assets for v1.21.0 release
• See full diff in compare view

Updates score-spec/setup-score from 3.2.3 to 3.2.4

Release notes

Sourced from score-spec/setup-score's releases.

v3.2.4

What's Changed

• Bump jest from 30.3.0 to 30.4.1 in the ci group by @​dependabot[bot] in score-spec/setup-score#98
• Bump the ci group with 2 updates by @​dependabot[bot] in score-spec/setup-score#99
• Bump eslint from 10.4.0 to 10.4.1 in the ci group by @​dependabot[bot] in score-spec/setup-score#100
• Bump actions/checkout from 6.0.2 to 6.0.3 in the ci group by @​dependabot[bot] in score-spec/setup-score#101
• Bump the ci group with 2 updates by @​dependabot[bot] in score-spec/setup-score#102
• Bump actions/checkout from 6.0.3 to 7.0.0 in the ci group by @​dependabot[bot] in score-spec/setup-score#103
• Bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in score-spec/setup-score#104
• Bump the ci group with 2 updates by @​dependabot[bot] in score-spec/setup-score#105
• Add Harden Runner step to GitHub Actions workflow by @​mathieu-benoit in score-spec/setup-score#106

Full Changelog: score-spec/setup-score@v3.2.3...v3.2.4

Commits

• 888a7de Merge pull request #106 from score-spec/mathieu-benoit-patch-1
• 5933d32 Add Harden Runner step to GitHub Actions workflow
• 9692890 Bump the ci group with 2 updates (#105)
• eee5f67 Bump undici from 6.24.1 to 6.27.0 (#104)
• c01ab5d Bump actions/checkout from 6.0.3 to 7.0.0 in the ci group (#103)
• 3578608 Bump the ci group with 2 updates (#102)
• a31e192 Bump actions/checkout from 6.0.2 to 6.0.3 in the ci group (#101)
• 4b72262 Bump eslint from 10.4.0 to 10.4.1 in the ci group (#100)
• 107ee81 Bump the ci group with 2 updates (#99)
• 445273f Bump jest from 30.3.0 to 30.4.1 in the ci group (#98)
• See full diff in compare view

Updates docker/github-builder/.github/workflows/build.yml from 1.8.0 to 1.12.0

Release notes

Sourced from docker/github-builder/.github/workflows/build.yml's releases.

v1.12.0

• build/bake: preserve tag refs in git contexts by @​crazy-max in docker/github-builder#231
• update Binfmt image to qemu-v10.2.3-68 in docker/github-builder#228

Full Changelog: docker/github-builder@v1.11.0...v1.12.0

v1.11.0

• bake: fixed an issue where large builds could fail during image digest extraction by @​crazy-max in docker/github-builder#227

Full Changelog: docker/github-builder@v1.10.0...v1.11.0

v1.10.0

• build/bake: inline GitHub runtime handling in workflows by @​crazy-max in docker/github-builder#216
• build/bake: switch to github-builder-runtime package by @​crazy-max in docker/github-builder#218
• update docker/bake-action from 7.1.0 to 7.2.0 in docker/github-builder#211
• update docker/build-push-action from 7.1.0 to 7.2.0 in docker/github-builder#212
• update docker/login-action from 4.1.0 to 4.2.0 in docker/github-builder#215
• update docker/metadata-action from 6.0.0 to 6.1.0 in docker/github-builder#213
• update docker/setup-buildx-action from 4.0.0 to 4.1.0 in docker/github-builder#214
• update docker/setup-qemu-action from 4.0.0 to 4.1.0 in docker/github-builder#222

Full Changelog: docker/github-builder@v1.9.0...v1.10.0

v1.9.0

• build/bake: use fetch-by-commit for Git contexts on branch and pull request refs by @​crazy-max in docker/github-builder#204
• update Buildx to v0.34.1 in docker/github-builder#205 docker/github-builder#200
• update BuildKit to v0.30.0 in docker/github-builder#201
• update actions-toolkit module to 0.90.0 in docker/github-builder#195

Full Changelog: docker/github-builder@v1.8.0...v1.9.0

Commits

• 5f637c8 Merge pull request #231 from crazy-max/fix-tag-git-context-checksum
• 0d9a08d build/bake: preserve tag refs in git contexts
• 5f32361 Merge pull request #228 from docker/deps/binfmt-image
• fb769ec chore(deps): update Binfmt image to qemu-v10.2.3-68
• eac7322 Merge pull request #229 from docker/dependabot/github_actions/crazy-max-dot-g...
• c79e119 Merge pull request #230 from crazy-max/aws-ecr-to-docker-hub
• 26108c5 test: replace AWS ECR with Docker Hub in test workflows
• 2ffaff4 build(deps): Bump the crazy-max-dot-github group with 2 updates
• 04e22bc Merge pull request #224 from crazy-max/test-dockerhub-stage-rm
• 70ac3fc Merge pull request #227 from crazy-max/disable-buildx-metadata-provenance
• Additional commits viewable in compare view

Updates docker/setup-qemu-action from 4.0.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-qemu-action#311
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-qemu-action#295
• Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0 in docker/setup-qemu-action#315
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-qemu-action#312
• Bump js-yaml from 4.1.1 to 4.2.0 in docker/setup-qemu-action#310
• Bump tmp from 0.2.6 to 0.2.7 in docker/setup-qemu-action#304
• Bump undici from 6.26.0 to 6.27.0 in docker/setup-qemu-action#308
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-qemu-action#307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

v4.1.0

• Add reset input to uninstall current emulators by @​crazy-max in docker/setup-qemu-action#21
• Bump @​docker/actions-toolkit from 0.77.0 to 0.91.0 in docker/setup-qemu-action#250 docker/setup-qemu-action#247
• Bump brace-expansion from 1.1.12 to 1.1.15 in docker/setup-qemu-action#265
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-qemu-action#286
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-qemu-action#255
• Bump flatted from 3.3.3 to 3.4.2 in docker/setup-qemu-action#257
• Bump glob from 10.3.15 to 10.5.0 in docker/setup-qemu-action#254
• Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-qemu-action#262
• Bump lodash from 4.17.23 to 4.18.1 in docker/setup-qemu-action#273
• Bump postcss from 8.5.6 to 8.5.10 in docker/setup-qemu-action#285
• Bump tar from 6.2.1 to 7.5.15 in docker/setup-qemu-action#287
• Bump tmp from 0.2.5 to 0.2.6 in docker/setup-qemu-action#291
• Bump undici from 6.23.0 to 6.26.0 in docker/setup-qemu-action#251
• Bump vite from 7.3.1 to 7.3.2 in docker/setup-qemu-action#271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

Commits

• 96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 31f08d3 [dependabot skip] chore: update generated content
• 4e7017a build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
• ea66a41 chore: allow actions-toolkit to bypass yarn age gate
• 451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 532ae00 [dependabot skip] chore: update generated content
• b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
• cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
• f0ba643 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.35.5 to 4.36.3

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.36.3

No user facing changes.

v4.36.2

• Cache CodeQL CLI version information across Actions steps. #3943
• Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
• Update default CodeQL bundle version to 2.25.6. #3948

v4.36.1

No user facing changes.

v4.36.0

• Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894
• Add support for SHA-256 Git object IDs. #3893
• Update default CodeQL bundle version to 2.25.5. #3926

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.36.3 ...

Description has been truncated

[github-actions]

Outdated

Overview

Image reference	backstage:latest	backstage:latest
- digest	d97a6291b6b8	f34cba83511d
- tag	latest	latest
- provenance	0d81841	6e1777b
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	228 MB	228 MB
- packages	1372	1372

Policies (0 improved, 0 worsened)

Policy Name	backstage:latest	backstage:latest	Change	Standing
Default non-root user	✅	✅		No Change
No copyleft licenses	⚠️ 31	⚠️ 31		No Change
No fixable critical or high vulnerabilities	⚠️ 46	⚠️ 46		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	⚠️	⚠️		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change

[github-actions]

Overview

Image reference	frontend:latest	frontend:latest
- digest	2a9a79f58c82	50c4f582ca9f
- tag	latest	latest
- provenance	0d81841	6e1777b
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	32 MB	32 MB (-763 B)
- packages	20	20

Policies (0 improved, 0 worsened)

Policy Name	frontend:latest	frontend:latest	Change	Standing
Default non-root user	✅	✅		No Change
No copyleft licenses	⚠️ 12	⚠️ 12		No Change
No fixable critical or high vulnerabilities	⚠️ 9	⚠️ 9		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	⚠️	⚠️		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change