CrazyMax
d3b9cdfa58
Merge pull request #1089 from crazy-max/fix-registry-auth-ecr-false
...
preserve explicit ECR settings in registry-auth
2026-10-16 20:24:38 +02:00
CrazyMax
a27b71b09c
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
CrazyMax
2c873c3656
test: simplify registry-auth ECR regression coverage
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-10-05 14:23:04 +02:00
breken-ai
b4bb2a4ec0
keep registry-auth ecr: false instead of falling back to auto
...
registry-auth is parsed as YAML, so `ecr: false` (unquoted) is the
boolean false, and `auth.ecr || 'auto'` turned it into 'auto'. For an
ECR registry this runs the AWS SDK login with the given username and
password as AWS access keys, instead of the plain docker login the user
asked for. Only the quoted string "false" worked.
Convert the value to a string and only default to 'auto' when it is
missing or empty.
Assisted-By: Claude
Signed-off-by: breken-ai <312387581+breken-ai@users.noreply.github.com >
2026-10-05 14:21:32 +02:00
CrazyMax
783ae9cac5
Merge pull request #1064 from docker/dependabot/github_actions/codeql-actions-ce612e0709
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-09-16 10:57:53 +02:00
dependabot[bot]
b1725c2c93
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-25 05:54:40 +00:00
CrazyMax
0a596b2e7a
Merge pull request #1073 from quentin-laplanche-docker/ci/remove-docker-notation
...
ci: replace registry container action reference
2026-08-24 15:27:36 +02:00
Quentin Laplanche and Codex
5d1ee94869
ci: replace registry container action reference
...
Use a local Docker container action so the runner still exercises its container-action mounts and environment without a docker:// workflow reference.
Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com >
Co-authored-by: Codex <noreply@openai.com >
2026-08-24 15:15:07 +02:00
Tõnis Tiigi
af63523ba5
Merge pull request #1061 from docker/dockerhub-oidc-logs
...
log Docker Hub OIDC token exchange progress
2026-08-11 11:56:25 +03:00
CrazyMax
72edfa6c2e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:52:13 +02:00
CrazyMax
2b7517a3b4
log Docker Hub OIDC token exchange progress
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 16:51:47 +02:00
CrazyMax
eed2509203
Merge pull request #1068 from crazy-max/dockerhub-oidc-increase-expire-in
...
raise Docker Hub OIDC max expiry to 6 hours
2026-08-06 12:07:08 +02:00
CrazyMax
07573e7c18
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:54:13 +02:00
CrazyMax
99ffd0f38a
raise Docker Hub OIDC max expiry to 6 hours
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-08-06 11:53:57 +02:00
CrazyMax
dbcb813823
Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-46cc3261cb
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
v4.6.0
v4
2026-07-29 13:33:29 +02:00
github-actions[bot]
5bcb015ee6
[dependabot skip] chore: update generated content
2026-07-29 10:44:53 +00:00
dependabot[bot]
b30b2f2d31
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1091.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1092.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:43:57 +00:00
CrazyMax
9087f1e6d6
Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
...
build(deps): bump js-yaml from 5.2.1 to 5.2.2
2026-07-29 12:40:51 +02:00
github-actions[bot]
0009830ea1
[dependabot skip] chore: update generated content
2026-07-29 10:32:28 +00:00
dependabot[bot]
23255232d3
build(deps): bump js-yaml from 5.2.1 to 5.2.2
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 10:31:34 +00:00
CrazyMax
4ec1d4a769
Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
...
build(deps): bump postcss from 8.5.10 to 8.5.22
2026-07-29 12:28:53 +02:00
CrazyMax
5fc99ba47b
Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/configure-aws-credentials-6.2.3
...
build(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3
2026-07-29 12:28:12 +02:00
CrazyMax
e512bd59d1
Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions-73adf09e94
...
build(deps): bump the codeql-actions group across 1 directory with 2 updates
2026-07-29 12:26:59 +02:00
CrazyMax
a146c91b8f
Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
...
harden buildx scoped config path handling
2026-07-29 10:50:27 +02:00
CrazyMax
8ffd80ffa5
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 09:57:41 +02:00
CrazyMax
8305724bcf
harden buildx scoped config path handling
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 09:57:00 +02:00
dependabot[bot]
91264757e1
build(deps): bump the codeql-actions group across 1 directory with 2 updates
...
Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
Updates `github/codeql-action/analyze` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-28 05:54:42 +00:00
CrazyMax
371161bbe7
Merge pull request #1058 from crazy-max/fix-dockerhub-oidc-error-handling
...
surface Docker Hub OIDC error responses
v4.5.2
2026-07-27 18:30:08 +02:00
CrazyMax
5dc73df38e
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-27 17:15:04 +02:00
CrazyMax
2aa1edee0b
surface Docker Hub OIDC error responses
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-27 17:14:54 +02:00
dependabot[bot]
b472f5b276
build(deps): bump postcss from 8.5.10 to 8.5.22
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.10 to 8.5.22.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.22 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.22
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 12:24:30 +00:00
CrazyMax
abd2ef45e7
Merge pull request #1055 from crazy-max/test-registry-auth-oidc
...
test: cover Docker Hub OIDC with registry-auth
v4.5.1
2026-07-24 14:22:47 +02:00
CrazyMax
d49d3a9839
Merge pull request #1054 from crazy-max/oidc-missing-dhi
...
support dhi.io as Docker Hub OIDC registry
2026-07-24 14:22:20 +02:00
CrazyMax
b58b17c30b
test: cover Docker Hub OIDC with registry-auth
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-24 10:37:01 +02:00
CrazyMax
be646c21ce
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-24 10:33:14 +02:00
CrazyMax
d77c059cb9
support dhi.io as Docker Hub OIDC registry
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-24 10:26:38 +02:00
dependabot[bot]
9d876d6c33
build(deps): bump aws-actions/configure-aws-credentials
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 6.2.2 to 6.2.3.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/517a711dbcd0e402f90c77e7e2f81e849156e31d...e6de054238d6b7531b4efff3b6587d9aade6a06c )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 05:54:30 +00:00
CrazyMax
06fb636fac
Merge pull request #1037 from docker/dependabot/npm_and_yarn/aws-sdk-dependencies-001763bcc2
...
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
v4.5.0
2026-07-23 13:48:53 +02:00
github-actions[bot]
a8bc953911
[dependabot skip] chore: update generated content
2026-07-23 11:45:23 +00:00
dependabot[bot]
f54b9019bf
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 updates
...
Bumps the aws-sdk-dependencies group with 2 updates in the / directory: [@aws-sdk/client-ecr](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr ) and [@aws-sdk/client-ecr-public](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecr-public ).
Updates `@aws-sdk/client-ecr` from 3.1077.0 to 3.1091.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-ecr )
Updates `@aws-sdk/client-ecr-public` from 3.1077.0 to 3.1091.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecr-public/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-ecr-public )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ecr"
dependency-version: 3.1079.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
- dependency-name: "@aws-sdk/client-ecr-public"
dependency-version: 3.1079.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: aws-sdk-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-23 11:44:24 +00:00
CrazyMax
77f18f6713
Merge pull request #1049 from docker/dependabot/github_actions/codeql-actions-6a53124c02
...
build(deps): bump the codeql-actions group with 2 updates
2026-07-23 13:41:05 +02:00
CrazyMax
ec0bf287fb
Merge pull request #1050 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.94.0
...
build(deps): bump @docker/actions-toolkit from 0.93.0 to 0.94.0
2026-07-23 13:40:40 +02:00
github-actions[bot]
e37171e542
[dependabot skip] chore: update generated content
2026-07-23 11:36:42 +00:00
dependabot[bot]
1d3a7174ca
build(deps): bump @docker/actions-toolkit from 0.93.0 to 0.94.0
...
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit ) from 0.93.0 to 0.94.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases )
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.93.0...v0.94.0 )
---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
dependency-version: 0.94.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-23 11:35:46 +00:00
CrazyMax
a5e9150fe2
Merge pull request #1048 from docker/dockerhub-oidc-support
...
Docker Hub OIDC login support
2026-07-23 13:24:10 +02:00
dependabot[bot]
a482ba4366
build(deps): bump the codeql-actions group with 2 updates
...
Bumps the codeql-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.36.3 to 4.37.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...e0647621c2984b5ed2f768cb892365bf2a616ad1 )
Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...e0647621c2984b5ed2f768cb892365bf2a616ad1 )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-23 05:54:58 +00:00
CrazyMax
9e3d36ea10
chore: update generated content
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-22 13:01:47 +02:00
CrazyMax
14d6a7934e
docker hub oidc support
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-22 13:01:46 +02:00
CrazyMax
03c851098f
Merge pull request #1044 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.93.0
...
build(deps): bump @docker/actions-toolkit from 0.92.0 to 0.93.0
2026-07-22 08:53:04 +02:00
CrazyMax
ad8a81f098
Merge pull request #1046 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.16
...
build(deps): bump brace-expansion from 1.1.13 to 1.1.16
2026-07-22 08:51:57 +02:00