Merge 51fcfa6144 into 5debd5a897

Merge pull request #523 from docker/dependabot/npm_and_yarn/lodash-4.18.1
build(deps): bump lodash from 4.17.23 to 4.18.1
2026-05-10 20:42:24 +00:00 · 2026-04-15 10:03:08 +00:00 · 2026-04-15 12:03:02 +02:00 · 2026-04-15 12:02:44 +02:00 · 2026-04-15 12:02:29 +02:00 · 2026-04-15 12:02:12 +02:00
7 changed files with 78 additions and 76 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -113,7 +113,7 @@ jobs:
          buildkitd-flags: --debug
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
          platforms: linux/amd64,linux/arm64,linux/ppc64le
@ -243,7 +243,7 @@ jobs:
          buildkitd-config: /tmp/buildkitd.toml
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -270,7 +270,7 @@ jobs:
              mirrors = ["mirror.gcr.io"]
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -331,7 +331,7 @@ jobs:
          EOL
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -390,7 +390,7 @@ jobs:
          EOL
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
@ -518,7 +518,7 @@ jobs:
          EOL
      -
        name: Build
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@ -26,7 +26,7 @@ jobs:
        uses: ./
      -
        name: Test
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          source: .
          targets: test
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@ -21,7 +21,7 @@ jobs:
      -
        name: GitHub auth token from GitHub App
        id: docker-read-app
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
        with:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
@ -35,7 +35,7 @@ jobs:
          token: ${{ steps.docker-read-app.outputs.token }}
      -
        name: Build
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          source: .
          targets: build
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@ -26,7 +26,7 @@ jobs:
      -
        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/matrix@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action/subaction/matrix@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          target: validate
@ -41,6 +41,6 @@ jobs:
    steps:
      -
        name: Validate
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          targets: ${{ matrix.target }}
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/yarn.lock
+++ b/yarn.lock
@ -1838,6 +1838,15 @@ __metadata:
  languageName: node
  linkType: hard
 "brace-expansion@npm:^2.0.2":
  version: 2.0.2
  resolution: "brace-expansion@npm:2.0.2"
  dependencies:
    balanced-match: "npm:^1.0.0"
  checksum: 10/01dff195e3646bc4b0d27b63d9bab84d2ebc06121ff5013ad6e5356daa5a9d6b60fa26cf73c74797f2dc3fbec112af13578d51f75228c1112b26c790a87b0488
  languageName: node
  linkType: hard
 "brace-expansion@npm:^5.0.2":
  version: 5.0.4
  resolution: "brace-expansion@npm:5.0.4"
@ -2517,22 +2526,25 @@ __metadata:
  languageName: node
  linkType: hard
-"fast-xml-builder@npm:^1.0.0":
+"fast-xml-builder@npm:^1.1.4":
-  version: 1.0.0
+  version: 1.1.4
-  resolution: "fast-xml-builder@npm:1.0.0"
+  resolution: "fast-xml-builder@npm:1.1.4"
-  checksum: 10/06c04d80545e5c9f4d1d6cca00567b5cc09953a92c6328fa48cfb4d7f42630313b8c2bb62e9cb81accee7bb5e1c5312fcae06c3d20dbe52d969a5938233316da
+  dependencies:
    path-expression-matcher: "npm:^1.1.3"
  checksum: 10/32937866aaf5a90e69d1f4ee6e15e875248d5b5d2afd70277e9e8323074de4980cef24575a591b8e43c29f405d5f12377b3bad3842dc412b0c5c17a3eaee4b6b
  languageName: node
  linkType: hard
 "fast-xml-parser@npm:^5.0.7":
-  version: 5.4.2
+  version: 5.5.6
-  resolution: "fast-xml-parser@npm:5.4.2"
+  resolution: "fast-xml-parser@npm:5.5.6"
  dependencies:
-    fast-xml-builder: "npm:^1.0.0"
+    fast-xml-builder: "npm:^1.1.4"
    path-expression-matcher: "npm:^1.1.3"
    strnum: "npm:^2.1.2"
  bin:
    fxparser: src/cli/cli.js
-  checksum: 10/12585d5dd77113411d01cf41818cfecbbaf8f3d9e8448b1c35f50a7eb51205408bc8db27af5733173a77f96f72d7e121d9e675674f71334569157c77845aba39
+  checksum: 10/91a42a0cf99c83b0e721ceef9c189509e96c91c1875901c6ce6017f78ad25284f646a77a541e96ee45a15c2f13b7780d090c906c3ec3f262db03e7feb1e62315
  languageName: node
  linkType: hard
@ -2640,33 +2652,19 @@ __metadata:
  languageName: node
  linkType: hard
-"glob@npm:^10.0.0":
+"glob@npm:^10.0.0, glob@npm:^10.2.2, glob@npm:^10.3.10":
-  version: 10.3.15
+  version: 10.5.0
-  resolution: "glob@npm:10.3.15"
+  resolution: "glob@npm:10.5.0"
  dependencies:
    foreground-child: "npm:^3.1.0"
-    jackspeak: "npm:^2.3.6"
+    jackspeak: "npm:^3.1.2"
-    minimatch: "npm:^9.0.1"
+    minimatch: "npm:^9.0.4"
-    minipass: "npm:^7.0.4"
+    minipass: "npm:^7.1.2"
-    path-scurry: "npm:^1.11.0"
+    package-json-from-dist: "npm:^1.0.0"
    path-scurry: "npm:^1.11.1"
  bin:
    glob: dist/esm/bin.mjs
-  checksum: 10/b2b1c74309979b34fd6010afb50418a12525def32f1d3758d5827fc75d6143fc3ee5d1f3180a43111f6386c9e297c314f208d9d09955a6c6b69f22e92ee97635
+  checksum: 10/ab3bccfefcc0afaedbd1f480cd0c4a2c0e322eb3f0aa7ceaa31b3f00b825069f17cf0f1fc8b6f256795074b903f37c0ade37ddda6a176aa57f1c2bbfe7240653
  languageName: node
  linkType: hard
 "glob@npm:^10.2.2, glob@npm:^10.3.10":
  version: 10.3.12
  resolution: "glob@npm:10.3.12"
  dependencies:
    foreground-child: "npm:^3.1.0"
    jackspeak: "npm:^2.3.6"
    minimatch: "npm:^9.0.1"
    minipass: "npm:^7.0.4"
    path-scurry: "npm:^1.10.2"
  bin:
    glob: dist/esm/bin.mjs
  checksum: 10/9e8186abc22dc824b5dd86cefd8e6b5621a72d1be7f68bacc0fd681e8c162ec5546660a6ec0553d6a74757a585e655956c7f8f1a6d24570e8d865c307323d178
  languageName: node
  linkType: hard
@ -2994,16 +2992,16 @@ __metadata:
  languageName: node
  linkType: hard
-"jackspeak@npm:^2.3.6":
+"jackspeak@npm:^3.1.2":
-  version: 2.3.6
+  version: 3.4.3
-  resolution: "jackspeak@npm:2.3.6"
+  resolution: "jackspeak@npm:3.4.3"
  dependencies:
    "@isaacs/cliui": "npm:^8.0.2"
    "@pkgjs/parseargs": "npm:^0.11.0"
  dependenciesMeta:
    "@pkgjs/parseargs":
      optional: true
-  checksum: 10/6e6490d676af8c94a7b5b29b8fd5629f21346911ebe2e32931c2a54210134408171c24cee1a109df2ec19894ad04a429402a8438cbf5cc2794585d35428ace76
+  checksum: 10/96f8786eaab98e4bf5b2a5d6d9588ea46c4d06bbc4f2eb861fdd7b6b182b16f71d8a70e79820f335d52653b16d4843b29dd9cdcf38ae80406756db9199497cf3
  languageName: node
  linkType: hard
@ -3112,9 +3110,9 @@ __metadata:
  linkType: hard
 "lodash@npm:^4.17.15":
-  version: 4.17.23
+  version: 4.18.1
-  resolution: "lodash@npm:4.17.23"
+  resolution: "lodash@npm:4.18.1"
-  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  checksum: 10/306fea53dfd39dad1f03d45ba654a2405aebd35797b673077f401edb7df2543623dc44b9effbb98f69b32152295fff725a4cec99c684098947430600c6af0c3f
  languageName: node
  linkType: hard
@ -3245,12 +3243,12 @@ __metadata:
  languageName: node
  linkType: hard
-"minimatch@npm:^9.0.1":
+"minimatch@npm:^9.0.4":
-  version: 9.0.4
+  version: 9.0.9
-  resolution: "minimatch@npm:9.0.4"
+  resolution: "minimatch@npm:9.0.9"
  dependencies:
-    brace-expansion: "npm:^2.0.1"
+    brace-expansion: "npm:^2.0.2"
-  checksum: 10/4cdc18d112b164084513e890d6323370db14c22249d536ad1854539577a895e690a27513dc346392f61a4a50afbbd8abc88f3f25558bfbbbb862cd56508b20f5
+  checksum: 10/b91fad937deaffb68a45a2cb731ff3cff1c3baf9b6469c879477ed16f15c8f4ce39d63a3f75c2455107c2fdff0f3ab597d97dc09e2e93b883aafcf926ef0c8f9
  languageName: node
  linkType: hard
@ -3352,7 +3350,7 @@ __metadata:
  languageName: node
  linkType: hard
-"minipass@npm:^5.0.0 || ^6.0.2 || ^7.0.0, minipass@npm:^7.0.2, minipass@npm:^7.0.3, minipass@npm:^7.0.4":
+"minipass@npm:^5.0.0 || ^6.0.2 || ^7.0.0, minipass@npm:^7.0.2, minipass@npm:^7.0.3":
  version: 7.1.0
  resolution: "minipass@npm:7.1.0"
  checksum: 10/0cfc1bc95bfce2a0cf69fcb5e7b92f62ee7159f2787356e66b5804dba73546e1653bbc70bf9bb32acb031e6d0d4b6249628a014644a597a7e4a14b441a510ba5
@ -3558,6 +3556,13 @@ __metadata:
  languageName: node
  linkType: hard
 "package-json-from-dist@npm:^1.0.0":
  version: 1.0.1
  resolution: "package-json-from-dist@npm:1.0.1"
  checksum: 10/58ee9538f2f762988433da00e26acc788036914d57c71c246bf0be1b60cdbd77dd60b6a3e1a30465f0b248aeb80079e0b34cb6050b1dfa18c06953bb1cbc7602
  languageName: node
  linkType: hard
 "pako@npm:~0.2.0":
  version: 0.2.9
  resolution: "pako@npm:0.2.9"
@ -3581,6 +3586,13 @@ __metadata:
  languageName: node
  linkType: hard
 "path-expression-matcher@npm:^1.1.3":
  version: 1.1.3
  resolution: "path-expression-matcher@npm:1.1.3"
  checksum: 10/9a607d0bf9807cf86b0a29fb4263f0c00285c13bedafb6ad3efc8bc87ae878da2faf657a9138ac918726cb19f147235a0ca695aec3e4ea1ee04641b6520e6c9e
  languageName: node
  linkType: hard
 "path-key@npm:^3.1.0":
  version: 3.1.1
  resolution: "path-key@npm:3.1.1"
@ -3588,17 +3600,7 @@ __metadata:
  languageName: node
  linkType: hard
-"path-scurry@npm:^1.10.2":
+"path-scurry@npm:^1.11.1":
  version: 1.10.2
  resolution: "path-scurry@npm:1.10.2"
  dependencies:
    lru-cache: "npm:^10.2.0"
    minipass: "npm:^5.0.0 || ^6.0.2 || ^7.0.0"
  checksum: 10/a2bbbe8dc284c49dd9be78ca25f3a8b89300e0acc24a77e6c74824d353ef50efbf163e64a69f4330b301afca42d0e2229be0560d6d616ac4e99d48b4062016b1
  languageName: node
  linkType: hard
 "path-scurry@npm:^1.11.0":
  version: 1.11.1
  resolution: "path-scurry@npm:1.11.1"
  dependencies:
@ -4391,9 +4393,9 @@ __metadata:
  linkType: hard
 "undici@npm:^6.23.0":
-  version: 6.23.0
+  version: 6.24.1
-  resolution: "undici@npm:6.23.0"
+  resolution: "undici@npm:6.24.1"
-  checksum: 10/56950995e7b628e62c996430445d17995ca9b70f6f2afe760a63da54205660d968bd08f0741b6f4fb008f40aa35c69cce979cd96ced399585d8c897a76a4f1d1
+  checksum: 10/4f84e6045520eef9ba8eabb96360b50c759f59905c1703b12187c2dbcc6d1584c5d7ecddeb45b0ed6cac84ca2d132b21bfd8a38f77fa30378b1ac5d2ae390fd9
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
dependabot[bot]	e1697dd64e	Merge `51fcfa6144` into `5debd5a897`	2026-04-15 10:03:08 +00:00
CrazyMax	5debd5a897	Merge pull request #523 from docker/dependabot/npm_and_yarn/lodash-4.18.1 build(deps): bump lodash from 4.17.23 to 4.18.1	2026-04-15 12:03:02 +02:00
CrazyMax	c087a89bda	Merge pull request #525 from docker/dependabot/github_actions/docker/bake-action-7.1.0 build(deps): bump docker/bake-action from 7.0.0 to 7.1.0	2026-04-15 12:02:44 +02:00
CrazyMax	24de66d3bb	Merge pull request #526 from docker/dependabot/github_actions/docker/build-push-action-7.1.0 build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0	2026-04-15 12:02:29 +02:00
CrazyMax	6078bf0b87	Merge pull request #527 from docker/dependabot/github_actions/actions/create-github-app-token-3.1.1 build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1	2026-04-15 12:02:12 +02:00
dependabot[bot]	15848ad661	build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.0.0 to 3.1.1. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](`f8d387b68d...1b10c78c78`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 04:58:27 +00:00
dependabot[bot]	09ebfbdaec	build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](`d08e5c354a...bcafcacb16`) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 04:58:23 +00:00
dependabot[bot]	94d99cf28f	build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](`82490499d2...a66e1c87e2`) --- updated-dependencies: - dependency-name: docker/bake-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 04:56:51 +00:00
dependabot[bot]	6c3774f2c2	build(deps): bump lodash from 4.17.23 to 4.18.1 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-09 08:24:44 +00:00
github-actions[bot]	51fcfa6144	chore: update generated content	2026-03-18 01:58:12 +00:00
dependabot[bot]	3697ab193f	build(deps): bump the npm_and_yarn group across 1 directory with 3 updates Bumps the npm_and_yarn group with 3 updates in the / directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [glob](https://github.com/isaacs/node-glob) and [undici](https://github.com/nodejs/undici). Updates `fast-xml-parser` from 5.4.2 to 5.5.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.4.2...v5.5.6) Updates `glob` from 10.3.12 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](https://github.com/isaacs/node-glob/compare/v10.3.12...v10.5.0) Updates `undici` from 6.23.0 to 6.24.1 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v6.23.0...v6.24.1) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 6.24.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-18 01:57:13 +00:00