breken-ai
b4bb2a4ec0
keep registry-auth ecr: false instead of falling back to auto
...
registry-auth is parsed as YAML, so `ecr: false` (unquoted) is the
boolean false, and `auth.ecr || 'auto'` turned it into 'auto'. For an
ECR registry this runs the AWS SDK login with the given username and
password as AWS access keys, instead of the plain docker login the user
asked for. Only the quoted string "false" worked.
Convert the value to a string and only default to 'auto' when it is
missing or empty.
Assisted-By: Claude
Signed-off-by: breken-ai <312387581+breken-ai@users.noreply.github.com>
2026-10-05 14:21:32 +02:00
CrazyMax
783ae9cac5
Merge pull request #1064 from docker/dependabot/github_actions/codeql-actions-ce612e0709
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-09-16 10:57:53 +02:00
dependabot[bot]
b1725c2c93
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e4fba868fa...db488ddef3https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e4fba868fa...db488ddef3
2026-08-25 05:54:40 +00:00
CrazyMax
0a596b2e7a
Merge pull request #1073 from quentin-laplanche-docker/ci/remove-docker-notation
...
ci: replace registry container action reference
2026-08-24 15:27:36 +02:00
Quentin Laplanche
5d1ee94869
ci: replace registry container action reference
...
Use a local Docker container action so the runner still exercises its container-action mounts and environment without a docker:// workflow reference.
Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com>
Co-authored-by: Codex <noreply@openai.com>
2026-08-24 15:15:07 +02:00
Tõnis Tiigi
af63523ba5
Merge pull request #1061 from docker/dockerhub-oidc-logs
...
log Docker Hub OIDC token exchange progress
2026-08-11 11:56:25 +03:00
CrazyMax
72edfa6c2e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-06 16:52:13 +02:00
CrazyMax
2b7517a3b4
log Docker Hub OIDC token exchange progress
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-06 16:51:47 +02:00
CrazyMax
eed2509203
Merge pull request #1068 from crazy-max/dockerhub-oidc-increase-expire-in
...
codeql / analyze (push) Failing after 23m35s
test / test (push) Has been cancelled
validate / prepare (push) Has been cancelled
zizmor / zizmor (push) Has been cancelled
validate / validate (push) Has been cancelled
raise Docker Hub OIDC max expiry to 6 hours
2026-08-06 12:07:08 +02:00
CrazyMax
07573e7c18
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-06 11:54:13 +02:00
CrazyMax
99ffd0f38a
raise Docker Hub OIDC max expiry to 6 hours
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-08-06 11:53:57 +02:00
CrazyMax
dbcb813823
Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-46cc3261cb
...
codeql / analyze (push) Failing after 17m10s
test / test (push) Successful in 1m1s
validate / prepare (push) Successful in 13s
zizmor / zizmor (push) Failing after 1s
validate / validate (push) Successful in 32s
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
2026-07-29 13:33:29 +02:00
github-actions[bot]
5bcb015ee6
[dependabot skip] chore: update generated content
2026-07-29 10:44:53 +00:00
dependabot[bot]
b30b2f2d31
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-29 10:43:57 +00:00
CrazyMax
9087f1e6d6
Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
...
codeql / analyze (push) Waiting to run
test / test (push) Waiting to run
validate / prepare (push) Waiting to run
validate / validate (push) Blocked by required conditions
zizmor / zizmor (push) Waiting to run
build(deps): bump js-yaml from 5.2.1 to 5.2.2
2026-07-29 12:40:51 +02:00
github-actions[bot]
0009830ea1
[dependabot skip] chore: update generated content
2026-07-29 10:32:28 +00:00
dependabot[bot]
23255232d3
build(deps): bump js-yaml from 5.2.1 to 5.2.2
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-29 10:31:34 +00:00
CrazyMax
4ec1d4a769
Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
...
build(deps): bump postcss from 8.5.10 to 8.5.22
2026-07-29 12:28:53 +02:00
CrazyMax
5fc99ba47b
Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.3
...
build(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3
2026-07-29 12:28:12 +02:00
CrazyMax
e512bd59d1
Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions-73adf09e94
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-07-29 12:26:59 +02:00
CrazyMax
a146c91b8f
Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
...
harden buildx scoped config path handling
2026-07-29 10:50:27 +02:00
CrazyMax
8ffd80ffa5
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-29 09:57:41 +02:00
CrazyMax
8305724bcf
harden buildx scoped config path handling
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-29 09:57:00 +02:00
dependabot[bot]
91264757e1
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fahttps://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fa
2026-07-28 05:54:42 +00:00
CrazyMax
371161bbe7
Merge pull request #1058 from crazy-max/fix-dockerhub-oidc-error-handling
...
codeql / analyze (push) Failing after 15m42s
test / test (push) Successful in 2m32s
validate / prepare (push) Successful in 1m0s
zizmor / zizmor (push) Failing after 1s
validate / validate (push) Successful in 32s
surface Docker Hub OIDC error responses
2026-07-27 18:30:08 +02:00
CrazyMax
5dc73df38e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-27 17:15:04 +02:00
CrazyMax
2aa1edee0b
surface Docker Hub OIDC error responses
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-27 17:14:54 +02:00
dependabot[bot]
b472f5b276
build(deps): bump postcss from 8.5.10 to 8.5.22
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.10 to 8.5.22.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.22 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.22
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-24 12:24:30 +00:00
CrazyMax
abd2ef45e7
Merge pull request #1055 from crazy-max/test-registry-auth-oidc
...
test: cover Docker Hub OIDC with registry-auth
2026-07-24 14:22:47 +02:00
CrazyMax
d49d3a9839
Merge pull request #1054 from crazy-max/oidc-missing-dhi
...
support dhi.io as Docker Hub OIDC registry
2026-07-24 14:22:20 +02:00
CrazyMax
b58b17c30b
test: cover Docker Hub OIDC with registry-auth
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-24 10:37:01 +02:00
CrazyMax
be646c21ce
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-24 10:33:14 +02:00
CrazyMax
d77c059cb9
support dhi.io as Docker Hub OIDC registry
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-24 10:26:38 +02:00
dependabot[bot]
9d876d6c33
build(deps): bump aws-actions/configure-aws-credentials
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 6.2.2 to 6.2.3.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](517a711dbc...e6de054238
2026-07-24 05:54:30 +00:00
CrazyMax
06fb636fac
Merge pull request #1037 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-001763bcc2
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
2026-07-23 13:48:53 +02:00
github-actions[bot]
a8bc953911
[dependabot skip] chore: update generated content
2026-07-23 11:45:23 +00:00
dependabot[bot]
f54b9019bf
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1077.0 to 3.1091.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1077.0 to 3.1091.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1079.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1079.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-23 11:44:24 +00:00
CrazyMax
77f18f6713
Merge pull request #1049 from docker/dependabot/github_actions/codeql-actions-6a53124c02
...
build(deps): bump the codeql-actions group with 2 updates
2026-07-23 13:41:05 +02:00
CrazyMax
ec0bf287fb
Merge pull request #1050 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.94.0
...
build(deps): bump @docker/actions-toolkit from 0.93.0 to 0.94.0
2026-07-23 13:40:40 +02:00
github-actions[bot]
e37171e542
[dependabot skip] chore: update generated content
2026-07-23 11:36:42 +00:00
dependabot[bot]
1d3a7174ca
build(deps): bump @docker/actions-toolkit from 0.93.0 to 0.94.0
...
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit ) from 0.93.0 to 0.94.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases )
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.93.0...v0.94.0 )
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.94.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-23 11:35:46 +00:00
CrazyMax
a5e9150fe2
Merge pull request #1048 from docker/dockerhub-oidc-support
...
Docker Hub OIDC login support
2026-07-23 13:24:10 +02:00
dependabot[bot]
a482ba4366
build(deps): bump the codeql-actions group with 2 updates
...
Bumps the codeql-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.36.3 to 4.37.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](54f647b7e1...e0647621c2https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](54f647b7e1...e0647621c2
2026-07-23 05:54:58 +00:00
CrazyMax
9e3d36ea10
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-22 13:01:47 +02:00
CrazyMax
14d6a7934e
docker hub oidc support
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-22 13:01:46 +02:00
CrazyMax
03c851098f
Merge pull request #1044 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.93.0
...
build(deps): bump @docker/actions-toolkit from 0.92.0 to 0.93.0
2026-07-22 08:53:04 +02:00
CrazyMax
ad8a81f098
Merge pull request #1046 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.16
...
build(deps): bump brace-expansion from 1.1.13 to 1.1.16
2026-07-22 08:51:57 +02:00
github-actions[bot]
6d219a4928
[dependabot skip] chore: update generated content
2026-07-22 06:51:44 +00:00
dependabot[bot]
b3200694f4
build(deps): bump @docker/actions-toolkit from 0.92.0 to 0.93.0
...
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit ) from 0.92.0 to 0.93.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases )
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.92.0...v0.93.0 )
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.93.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-22 06:50:49 +00:00
github-actions[bot]
08d3680aa8
[dependabot skip] chore: update generated content
2026-07-22 06:50:38 +00:00
