Merge pull request #1496 from docker/dependabot/npm_and_yarn/picomatch-4.0.4

chore(deps): Bump picomatch from 4.0.3 to 4.0.4
Merge pull request #1497 from docker/dependabot/npm_and_yarn/handlebars-4.7.9
2026-05-14 18:18:17 +01:00 · 2026-04-01 15:17:17 +02:00 · 2026-04-01 15:17:00 +02:00 · 2026-04-01 15:07:55 +02:00 · 2026-04-01 11:04:06 +00:00 · 2026-04-01 11:02:58 +00:00
5 changed files with 27 additions and 9 deletions
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@@ -15,7 +15,7 @@ on:

 jobs:
  update-dist:
-    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
+    if: github.actor == 'dependabot[bot]' && github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
    runs-on: ubuntu-latest
    steps:
      -
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
  "dependencies": {
    "@actions/core": "^3.0.0",
    "@docker/actions-toolkit": "0.79.0",
-    "handlebars": "^4.7.7"
+    "handlebars": "^4.7.9"
  },
  "devDependencies": {
    "@eslint/js": "^9.39.3",
--- a/yarn.lock
+++ b/yarn.lock
@@ -2106,7 +2106,7 @@ __metadata:
    eslint-config-prettier: "npm:^10.1.8"
    eslint-plugin-prettier: "npm:^5.5.5"
    globals: "npm:^17.3.0"
-    handlebars: "npm:^4.7.7"
+    handlebars: "npm:^4.7.9"
    prettier: "npm:^3.8.1"
    typescript: "npm:^5.9.3"
    vitest: "npm:^4.0.18"
@@ -2711,7 +2711,7 @@ __metadata:
  languageName: node
  linkType: hard

-"handlebars@npm:^4.7.7, handlebars@npm:^4.7.8":
+"handlebars@npm:^4.7.8":
  version: 4.7.8
  resolution: "handlebars@npm:4.7.8"
  dependencies:
@@ -2729,6 +2729,24 @@ __metadata:
  languageName: node
  linkType: hard

+"handlebars@npm:^4.7.9":
+  version: 4.7.9
+  resolution: "handlebars@npm:4.7.9"
+  dependencies:
+    minimist: "npm:^1.2.5"
+    neo-async: "npm:^2.6.2"
+    source-map: "npm:^0.6.1"
+    uglify-js: "npm:^3.1.4"
+    wordwrap: "npm:^1.0.0"
+  dependenciesMeta:
+    uglify-js:
+      optional: true
+  bin:
+    handlebars: bin/handlebars
+  checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
+  languageName: node
+  linkType: hard
+
 "has-flag@npm:^4.0.0":
  version: 4.0.0
  resolution: "has-flag@npm:4.0.0"
@@ -3662,9 +3680,9 @@ __metadata:
  linkType: hard

 "picomatch@npm:^4.0.3":
-  version: 4.0.3
-  resolution: "picomatch@npm:4.0.3"
-  checksum: 10/57b99055f40b16798f2802916d9c17e9744e620a0db136554af01d19598b96e45e2f00014c91d1b8b13874b80caa8c295b3d589a3f72373ec4aaf54baa5962d5
+  version: 4.0.4
+  resolution: "picomatch@npm:4.0.4"
+  checksum: 10/f6ef80a3590827ce20378ae110ac78209cc4f74d39236370f1780f957b7ee41c12acde0e4651b90f39983506fd2f5e449994716f516db2e9752924aff8de93ce
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	83bfd93ab4	Merge pull request #1496 from docker/dependabot/npm_and_yarn/picomatch-4.0.4 chore(deps): Bump picomatch from 4.0.3 to 4.0.4	2026-04-01 15:17:17 +02:00
CrazyMax	a7d4e2ac29	Merge pull request #1497 from docker/dependabot/npm_and_yarn/handlebars-4.7.9 chore(deps): Bump handlebars from 4.7.8 to 4.7.9	2026-04-01 15:17:00 +02:00
CrazyMax	00c4e32030	Merge pull request #1504 from crazy-max/fix-update-dist ci: stop update-dist reruns after generated dist pushes	2026-04-01 15:07:55 +02:00
github-actions[bot]	7144aa40aa	chore: update generated content	2026-04-01 11:04:06 +00:00
dependabot[bot]	00a2ffdccc	chore(deps): Bump handlebars from 4.7.8 to 4.7.9 Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-01 11:02:58 +00:00
CrazyMax	a691600376	ci: stop update-dist reruns after generated dist pushes Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-01 12:59:41 +02:00
dependabot[bot]	5e0c3c443d	chore(deps): Bump picomatch from 4.0.3 to 4.0.4 Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4) --- updated-dependencies: - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-26 07:52:14 +00:00