Merge pull request #622 from crazy-max/codeql

ci: enable SAST scanning with CodeQL
2026-03-25 17:38:18 +00:00 · 2026-03-20 16:57:23 +01:00 · 2026-03-20 11:51:51 +01:00 · 2026-03-18 23:06:56 +01:00 · 2026-03-18 19:24:41 +00:00 · 2026-03-18 19:23:34 +00:00
17 changed files with 474 additions and 715 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,7 +46,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -83,7 +83,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -119,7 +119,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -153,7 +153,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -184,7 +184,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -207,7 +207,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -228,7 +228,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -258,7 +258,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -288,7 +288,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -323,7 +323,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver-opts: network=host
@@ -345,7 +345,7 @@ jobs:
            type=sha
      -
        name: Build and push to local registry
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          context: ./test
          file: ./test/Dockerfile
@@ -371,7 +371,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
      -
@@ -393,7 +393,7 @@ jobs:
            type=sha
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          files: |
            ./test/docker-bake.hcl
@@ -416,7 +416,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -444,7 +444,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -462,7 +462,7 @@ jobs:
            maintainer=Foo
      -
        name: Build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          context: ./test
          file: ./test/output.Dockerfile
@@ -507,7 +507,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
      -
@@ -531,7 +531,7 @@ jobs:
          DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          files: |
            ./test/docker-bake.hcl
@@ -548,7 +548,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -574,7 +574,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: latest
      -
@@ -583,7 +583,7 @@ jobs:
        uses: ./
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          source: .
          files: |
@@ -607,7 +607,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,45 @@
+name: codeql
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'releases/v*'
+  pull_request:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  NODE_VERSION: "24"
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: javascript-typescript
+          build-mode: none
+      -
+        name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:javascript-typescript"
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -20,7 +20,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Test
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          source: .
          targets: test
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@@ -28,7 +28,7 @@ jobs:
          token: ${{ steps.docker-read-app.outputs.token || github.token }}
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          source: .
          targets: build
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -15,15 +15,15 @@ jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
-      targets: ${{ steps.generate.outputs.targets }}
+      matrix: ${{ steps.generate.outputs.matrix }}
    steps:
      -
        name: Checkout
        uses: actions/checkout@v6
      -
-        name: List targets
+        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/list-targets@v6
+        uses: docker/bake-action/subaction/matrix@v7
        with:
          target: validate

@@ -34,10 +34,10 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        target: ${{ fromJson(needs.prepare.outputs.targets) }}
+        include: ${{ fromJson(needs.prepare.outputs.matrix) }}
    steps:
      -
        name: Validate
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          targets: ${{ matrix.target }}
--- a/README.md
+++ b/README.md
@@ -75,27 +75,23 @@ jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v6
      -
        name: Docker meta
        id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: name/app
      -
        name: Login to DockerHub
        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
-          context: .
          push: ${{ github.event_name != 'pull_request' }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
@@ -129,13 +125,10 @@ jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v6
      -
        name: Docker meta
        id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: |
            name/app
@@ -147,15 +140,14 @@ jobs:
      -
        name: Login to DockerHub
        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
-          context: .
          push: ${{ github.event_name != 'pull_request' }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
@@ -210,7 +202,7 @@ jobs:
      -
        name: Docker meta
        id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: |
            name/app
@@ -222,7 +214,7 @@ jobs:
            type=sha
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          files: |
            ./docker-bake.hcl
@@ -269,7 +261,7 @@ similar to the previous one:
 ```yaml
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          files: |
            ./docker-bake.hcl
@@ -336,7 +328,7 @@ Alternatively, each output is also exported as an environment variable when `DOC
 So it can be used with our [Docker Build Push action](https://github.com/docker/build-push-action/):

 ```yaml
- uses: docker/build-push-action@v6
+- uses: docker/build-push-action@v7
  with:
    build-args: |
      DOCKER_METADATA_OUTPUT_JSON
@@ -728,7 +720,7 @@ increase this length for larger repositories by setting the
      -
        name: Docker meta
        id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: |
            name/app
@@ -939,13 +931,13 @@ that you can reuse them further in your workflow using the [`fromJSON` function]
 ```yaml
      -
        name: Docker meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        id: meta
        with:
          images: name/app
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
@@ -965,7 +957,7 @@ this:
      -
        name: Docker meta
        id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: name/app
          labels: |
@@ -987,12 +979,12 @@ of the `metadata-action`:
 ```yaml
      -
        name: Docker meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: name/app
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          tags: ${{ steps.meta.outputs.tags }}
          annotations: ${{ steps.meta.outputs.annotations }}
@@ -1003,12 +995,12 @@ The same can be done with the [`bake-action`](https://github.com/docker/bake-act
 ```yaml
      -
        name: Docker meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: name/app
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          files: |
            ./docker-bake.hcl
@@ -1032,14 +1024,14 @@ Please consult the documentation of your registry.
 ```yaml
      -
        name: Docker meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
        with:
          images: name/app
        env:
          DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          tags: ${{ steps.meta.outputs.tags }}
          annotations: ${{ steps.meta.outputs.annotations }}
--- a/tests/context.test.ts
+++ b/tests/context.test.ts
@@ -1,5 +1,4 @@
 import {beforeEach, describe, expect, test, it, vi} from 'vitest';
-import {Context} from '@actions/github/lib/context.js';
 import {Git} from '@docker/actions-toolkit/lib/git.js';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit.js';

@@ -80,6 +79,67 @@ describe('getInputs', () => {
        tags: [],
      }
    ],
+    [
+      3,
+      new Map<string, string>([
+        ['labels', 'mylabel=foo#bar\n#comment\nanother=bar'],
+      ]),
+      {
+        context: context.ContextSource.workflow,
+        bakeTarget: 'docker-metadata-action',
+        flavor: [],
+        githubToken: '',
+        images: [],
+        labels: ['mylabel=foo#bar', 'another=bar'],
+        annotations: [],
+        sepLabels: '\n',
+        sepTags: '\n',
+        sepAnnotations: '\n',
+        tags: [],
+      }
+    ],
+    [
+      4,
+      new Map<string, string>([
+        ['annotations', 'org.opencontainers.image.url=https://example.com/path#readme\n#comment\norg.opencontainers.image.source=https://github.com/docker/metadata-action'],
+      ]),
+      {
+        context: context.ContextSource.workflow,
+        bakeTarget: 'docker-metadata-action',
+        flavor: [],
+        githubToken: '',
+        images: [],
+        labels: [],
+        annotations: [
+          'org.opencontainers.image.url=https://example.com/path#readme',
+          'org.opencontainers.image.source=https://github.com/docker/metadata-action'
+        ],
+        sepLabels: '\n',
+        sepTags: '\n',
+        sepAnnotations: '\n',
+        tags: [],
+      }
+    ],
+    [
+      5,
+      new Map<string, string>([
+        ['tags', 'type=raw,value=foo#bar\n#comment'],
+        ['flavor', 'prefix=v#1\n#comment'],
+      ]),
+      {
+        context: context.ContextSource.workflow,
+        bakeTarget: 'docker-metadata-action',
+        flavor: ['prefix=v#1'],
+        githubToken: '',
+        images: [],
+        labels: [],
+        annotations: [],
+        sepLabels: '\n',
+        sepTags: '\n',
+        sepAnnotations: '\n',
+        tags: ['type=raw,value=foo#bar'],
+      }
+    ],
  ];
  test.each(cases)('[%d] given %o as inputs, returns %o', async (num: number, inputs: Map<string, string>, expected: context.Inputs) => {
    inputs.forEach((value: string, name: string) => {
@@ -98,11 +158,11 @@ describe('getContext', () => {
    expect(ctx.commitDate).toEqual(new Date('2024-11-13T13:42:28.000Z'));
  });
  it('git', async () => {
-    vi.spyOn(Git, 'context').mockImplementation((): Promise<Context> => {
+    vi.spyOn(Git, 'context').mockImplementation((): Promise<context.Context> => {
      return Promise.resolve({
        ref: 'refs/heads/git-test',
        sha: 'git-test-sha'
-      } as Context);
+      } as context.Context);
    });
    vi.spyOn(Git, 'commitDate').mockImplementation(async (): Promise<Date> => {
      return new Date('2023-01-01T13:42:28.000Z');
--- a/tests/meta.test.ts
+++ b/tests/meta.test.ts
@@ -3,12 +3,12 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as dotenv from 'dotenv';

-import {Context} from '@actions/github/lib/context.js';
-import {GitHub} from '@docker/actions-toolkit/lib/github.js';
+import {GitHub} from '@docker/actions-toolkit/lib/github/github.js';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit.js';
-import {GitHubRepo} from '@docker/actions-toolkit/lib/types/github.js';
+import {GitHubRepo} from '@docker/actions-toolkit/lib/types/github/github.js';

 import {ContextSource, getContext, getInputs, Inputs} from '../src/context.js';
+import type {Context as MetadataContext} from '../src/context.js';
 import {Meta, Version} from '../src/meta.js';

 import repoFixture from './fixtures/repo.json' with {type: 'json'};
@@ -38,16 +38,28 @@ beforeEach(() => {
      delete process.env[key];
    }
  });
-
-  vi.spyOn(GitHub, 'context', 'get').mockImplementation((): Context => {
-    //@ts-expect-error partial info
+  vi.spyOn(GitHub, 'context', 'get').mockImplementation((): MetadataContext => {
+    const repository = process.env.GITHUB_REPOSITORY || 'docker/repo';
+    const [owner, repo] = repository.includes('/') ? repository.split('/', 2) : ['docker', 'repo'];
+    const eventPath = process.env.GITHUB_EVENT_PATH;
+    const payload = eventPath && fs.existsSync(eventPath) ? JSON.parse(fs.readFileSync(eventPath, 'utf8')) : {};
    return {
-      ...new Context(),
-      repo: {
-        owner: 'docker',
-        repo: 'repo'
-      }
-    };
+      payload,
+      eventName: process.env.GITHUB_EVENT_NAME || '',
+      sha: process.env.GITHUB_SHA || '',
+      ref: process.env.GITHUB_REF || '',
+      workflow: process.env.GITHUB_WORKFLOW || '',
+      action: process.env.GITHUB_ACTION || '',
+      actor: process.env.GITHUB_ACTOR || '',
+      job: process.env.GITHUB_JOB || '',
+      runAttempt: +(process.env.GITHUB_RUN_ATTEMPT || 1),
+      runNumber: +(process.env.GITHUB_RUN_NUMBER || 0),
+      runId: +(process.env.GITHUB_RUN_ID || 0),
+      apiUrl: process.env.GITHUB_API_URL || 'https://api.github.com',
+      serverUrl: process.env.GITHUB_SERVER_URL || 'https://github.com',
+      graphqlUrl: process.env.GITHUB_GRAPHQL_URL || 'https://api.github.com/graphql',
+      repo: {owner, repo}
+    } as MetadataContext;
  });
 });

--- a/tests/setup.unit.ts
+++ b/tests/setup.unit.ts
@@ -1,259 +1,252 @@
 import fs from 'node:fs';
-import {createRequire} from 'node:module';
 import os from 'node:os';
 import path from 'node:path';
 import {vi} from 'vitest';

 const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-metadata-action-'));

+const githubPayload = {
+  after: '860c1904a1ce19322e91ac35af1ab07466440c37',
+  base_ref: null,
+  before: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
+  commits: [
+    {
+      author: {
+        email: 'crazy-max@users.noreply.github.com',
+        name: 'CrazyMax',
+        username: 'crazy-max'
+      },
+      committer: {
+        email: 'crazy-max@users.noreply.github.com',
+        name: 'CrazyMax',
+        username: 'crazy-max'
+      },
+      distinct: true,
+      id: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
+      message: 'hello dev',
+      timestamp: '2024-11-13T13:42:28Z',
+      tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
+      url: 'https://github.com/docker/test-docker-action/commit/5f3331d7f7044c18ca9f12c77d961c4d7cf3276a'
+    }
+  ],
+  compare: 'https://github.com/docker/test-docker-action/compare/5f3331d7f704...860c1904a1ce',
+  created: false,
+  deleted: false,
+  forced: false,
+  head_commit: {
+    author: {
+      email: 'crazy-max@users.noreply.github.com',
+      name: 'CrazyMax',
+      username: 'crazy-max'
+    },
+    committer: {
+      email: 'crazy-max@users.noreply.github.com',
+      name: 'CrazyMax',
+      username: 'crazy-max'
+    },
+    distinct: true,
+    id: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
+    message: 'hello dev',
+    timestamp: '2024-11-13T13:42:28Z',
+    tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
+    url: 'https://github.com/docker/test-docker-action/commit/5f3331d7f7044c18ca9f12c77d961c4d7cf3276a'
+  },
+  organization: {
+    avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
+    description: 'Docker helps developers bring their ideas to life by conquering the complexity of app development.',
+    events_url: 'https://api.github.com/orgs/docker/events',
+    hooks_url: 'https://api.github.com/orgs/docker/hooks',
+    id: 5429470,
+    issues_url: 'https://api.github.com/orgs/docker/issues',
+    login: 'docker',
+    members_url: 'https://api.github.com/orgs/docker/members{/member}',
+    node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
+    public_members_url: 'https://api.github.com/orgs/docker/public_members{/member}',
+    repos_url: 'https://api.github.com/orgs/docker/repos',
+    url: 'https://api.github.com/orgs/docker'
+  },
+  pusher: {
+    email: 'github@crazymax.dev',
+    name: 'crazy-max'
+  },
+  ref: 'refs/heads/dev',
+  repository: {
+    allow_forking: true,
+    archive_url: 'https://api.github.com/repos/docker/test-docker-action/{archive_format}{/ref}',
+    archived: false,
+    assignees_url: 'https://api.github.com/repos/docker/test-docker-action/assignees{/user}',
+    blobs_url: 'https://api.github.com/repos/docker/test-docker-action/git/blobs{/sha}',
+    branches_url: 'https://api.github.com/repos/docker/test-docker-action/branches{/branch}',
+    clone_url: 'https://github.com/docker/test-docker-action.git',
+    collaborators_url: 'https://api.github.com/repos/docker/test-docker-action/collaborators{/collaborator}',
+    comments_url: 'https://api.github.com/repos/docker/test-docker-action/comments{/number}',
+    commits_url: 'https://api.github.com/repos/docker/test-docker-action/commits{/sha}',
+    compare_url: 'https://api.github.com/repos/docker/test-docker-action/compare/{base}...{head}',
+    contents_url: 'https://api.github.com/repos/docker/test-docker-action/contents/{+path}',
+    contributors_url: 'https://api.github.com/repos/docker/test-docker-action/contributors',
+    created_at: 1596792180,
+    default_branch: 'master',
+    deployments_url: 'https://api.github.com/repos/docker/test-docker-action/deployments',
+    description: 'Test "Docker" Actions',
+    disabled: false,
+    downloads_url: 'https://api.github.com/repos/docker/test-docker-action/downloads',
+    events_url: 'https://api.github.com/repos/docker/test-docker-action/events',
+    fork: false,
+    forks: 1,
+    forks_count: 1,
+    forks_url: 'https://api.github.com/repos/docker/test-docker-action/forks',
+    full_name: 'docker/test-docker-action',
+    git_commits_url: 'https://api.github.com/repos/docker/test-docker-action/git/commits{/sha}',
+    git_refs_url: 'https://api.github.com/repos/docker/test-docker-action/git/refs{/sha}',
+    git_tags_url: 'https://api.github.com/repos/docker/test-docker-action/git/tags{/sha}',
+    git_url: 'git://github.com/docker/test-docker-action.git',
+    has_downloads: true,
+    has_issues: true,
+    has_pages: false,
+    has_projects: true,
+    has_wiki: true,
+    homepage: '',
+    hooks_url: 'https://api.github.com/repos/docker/test-docker-action/hooks',
+    html_url: 'https://github.com/docker/test-docker-action',
+    id: 285789493,
+    is_template: false,
+    issue_comment_url: 'https://api.github.com/repos/docker/test-docker-action/issues/comments{/number}',
+    issue_events_url: 'https://api.github.com/repos/docker/test-docker-action/issues/events{/number}',
+    issues_url: 'https://api.github.com/repos/docker/test-docker-action/issues{/number}',
+    keys_url: 'https://api.github.com/repos/docker/test-docker-action/keys{/key_id}',
+    labels_url: 'https://api.github.com/repos/docker/test-docker-action/labels{/name}',
+    language: 'JavaScript',
+    languages_url: 'https://api.github.com/repos/docker/test-docker-action/languages',
+    license: {
+      key: 'mit',
+      name: 'MIT License',
+      node_id: 'MDc6TGljZW5zZTEz',
+      spdx_id: 'MIT',
+      url: 'https://api.github.com/licenses/mit'
+    },
+    master_branch: 'master',
+    merges_url: 'https://api.github.com/repos/docker/test-docker-action/merges',
+    milestones_url: 'https://api.github.com/repos/docker/test-docker-action/milestones{/number}',
+    mirror_url: null,
+    name: 'test-docker-action',
+    node_id: 'MDEwOlJlcG9zaXRvcnkyODU3ODk0OTM=',
+    notifications_url: 'https://api.github.com/repos/docker/test-docker-action/notifications{?since,all,participating}',
+    open_issues: 6,
+    open_issues_count: 6,
+    organization: 'docker',
+    owner: {
+      avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
+      email: 'info@docker.com',
+      events_url: 'https://api.github.com/users/docker/events{/privacy}',
+      followers_url: 'https://api.github.com/users/docker/followers',
+      following_url: 'https://api.github.com/users/docker/following{/other_user}',
+      gists_url: 'https://api.github.com/users/docker/gists{/gist_id}',
+      gravatar_id: '',
+      html_url: 'https://github.com/docker',
+      id: 5429470,
+      login: 'docker',
+      name: 'docker',
+      node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
+      organizations_url: 'https://api.github.com/users/docker/orgs',
+      received_events_url: 'https://api.github.com/users/docker/received_events',
+      repos_url: 'https://api.github.com/users/docker/repos',
+      site_admin: false,
+      starred_url: 'https://api.github.com/users/docker/starred{/owner}{/repo}',
+      subscriptions_url: 'https://api.github.com/users/docker/subscriptions',
+      type: 'Organization',
+      url: 'https://api.github.com/users/docker'
+    },
+    private: true,
+    pulls_url: 'https://api.github.com/repos/docker/test-docker-action/pulls{/number}',
+    pushed_at: 1650360446,
+    releases_url: 'https://api.github.com/repos/docker/test-docker-action/releases{/id}',
+    size: 796,
+    ssh_url: 'git@github.com:docker/test-docker-action.git',
+    stargazers: 0,
+    stargazers_count: 0,
+    stargazers_url: 'https://api.github.com/repos/docker/test-docker-action/stargazers',
+    statuses_url: 'https://api.github.com/repos/docker/test-docker-action/statuses/{sha}',
+    subscribers_url: 'https://api.github.com/repos/docker/test-docker-action/subscribers',
+    subscription_url: 'https://api.github.com/repos/docker/test-docker-action/subscription',
+    svn_url: 'https://github.com/docker/test-docker-action',
+    tags_url: 'https://api.github.com/repos/docker/test-docker-action/tags',
+    teams_url: 'https://api.github.com/repos/docker/test-docker-action/teams',
+    topics: [],
+    trees_url: 'https://api.github.com/repos/docker/test-docker-action/git/trees{/sha}',
+    updated_at: '2022-04-19T09:05:09Z',
+    url: 'https://github.com/docker/test-docker-action',
+    visibility: 'private',
+    watchers: 0,
+    watchers_count: 0
+  },
+  sender: {
+    avatar_url: 'https://avatars.githubusercontent.com/u/1951866?v=4',
+    events_url: 'https://api.github.com/users/crazy-max/events{/privacy}',
+    followers_url: 'https://api.github.com/users/crazy-max/followers',
+    following_url: 'https://api.github.com/users/crazy-max/following{/other_user}',
+    gists_url: 'https://api.github.com/users/crazy-max/gists{/gist_id}',
+    gravatar_id: '',
+    html_url: 'https://github.com/crazy-max',
+    id: 1951866,
+    login: 'crazy-max',
+    node_id: 'MDQ6VXNlcjE5NTE4NjY=',
+    organizations_url: 'https://api.github.com/users/crazy-max/orgs',
+    received_events_url: 'https://api.github.com/users/crazy-max/received_events',
+    repos_url: 'https://api.github.com/users/crazy-max/repos',
+    site_admin: false,
+    starred_url: 'https://api.github.com/users/crazy-max/starred{/owner}{/repo}',
+    subscriptions_url: 'https://api.github.com/users/crazy-max/subscriptions',
+    type: 'User',
+    url: 'https://api.github.com/users/crazy-max'
+  }
+};
+
+const githubEventPath = path.join(tmpDir, 'github-event.json');
+fs.writeFileSync(githubEventPath, JSON.stringify(githubPayload));
+
 process.env = Object.assign({}, process.env, {
  TEMP: tmpDir,
  GITHUB_REPOSITORY: 'docker/metadata-action',
+  GITHUB_REF: 'refs/heads/dev',
+  GITHUB_RUN_ID: '2188748038',
+  GITHUB_RUN_ATTEMPT: '1',
+  GITHUB_RUN_NUMBER: '15',
+  GITHUB_SHA: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
+  GITHUB_EVENT_PATH: githubEventPath,
  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
 });

-const require = createRequire(import.meta.url);
-type RequireCacheEntry = NonNullable<(typeof require.cache)[string]>;
-
-const githubMock = {
-  context: {
-    repo: {
-      owner: 'docker',
-      repo: 'actions-toolkit'
-    },
-    ref: 'refs/heads/dev',
-    sha: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
-    runId: 2188748038,
-    runNumber: 15,
-    payload: {
-      after: '860c1904a1ce19322e91ac35af1ab07466440c37',
-      base_ref: null,
-      before: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
-      commits: [
-        {
-          author: {
-            email: 'crazy-max@users.noreply.github.com',
-            name: 'CrazyMax',
-            username: 'crazy-max'
-          },
-          committer: {
-            email: 'crazy-max@users.noreply.github.com',
-            name: 'CrazyMax',
-            username: 'crazy-max'
-          },
-          distinct: true,
-          id: '860c1904a1ce19322e91ac35af1ab07466440c37',
-          message: 'hello dev',
-          timestamp: '2022-04-19T11:27:24+02:00',
-          tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
-          url: 'https://github.com/docker/test-docker-action/commit/860c1904a1ce19322e91ac35af1ab07466440c37'
-        }
-      ],
-      compare: 'https://github.com/docker/test-docker-action/compare/5f3331d7f704...860c1904a1ce',
-      created: false,
-      deleted: false,
-      forced: false,
-      head_commit: {
-        author: {
-          email: 'crazy-max@users.noreply.github.com',
-          name: 'CrazyMax',
-          username: 'crazy-max'
-        },
+const getCommitMock = vi.hoisted(() =>
+  vi.fn(async () => ({
+    data: {
+      commit: {
        committer: {
-          email: 'crazy-max@users.noreply.github.com',
-          name: 'CrazyMax',
-          username: 'crazy-max'
-        },
-        distinct: true,
-        id: '860c1904a1ce19322e91ac35af1ab07466440c37',
-        message: 'hello dev',
-        timestamp: '2022-04-19T11:27:24+02:00',
-        tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
-        url: 'https://github.com/docker/test-docker-action/commit/860c1904a1ce19322e91ac35af1ab07466440c37'
-      },
-      organization: {
-        avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
-        description: 'Docker helps developers bring their ideas to life by conquering the complexity of app development.',
-        events_url: 'https://api.github.com/orgs/docker/events',
-        hooks_url: 'https://api.github.com/orgs/docker/hooks',
-        id: 5429470,
-        issues_url: 'https://api.github.com/orgs/docker/issues',
-        login: 'docker',
-        members_url: 'https://api.github.com/orgs/docker/members{/member}',
-        node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
-        public_members_url: 'https://api.github.com/orgs/docker/public_members{/member}',
-        repos_url: 'https://api.github.com/orgs/docker/repos',
-        url: 'https://api.github.com/orgs/docker'
-      },
-      pusher: {
-        email: 'github@crazymax.dev',
-        name: 'crazy-max'
-      },
-      ref: 'refs/heads/dev',
-      repository: {
-        allow_forking: true,
-        archive_url: 'https://api.github.com/repos/docker/test-docker-action/{archive_format}{/ref}',
-        archived: false,
-        assignees_url: 'https://api.github.com/repos/docker/test-docker-action/assignees{/user}',
-        blobs_url: 'https://api.github.com/repos/docker/test-docker-action/git/blobs{/sha}',
-        branches_url: 'https://api.github.com/repos/docker/test-docker-action/branches{/branch}',
-        clone_url: 'https://github.com/docker/test-docker-action.git',
-        collaborators_url: 'https://api.github.com/repos/docker/test-docker-action/collaborators{/collaborator}',
-        comments_url: 'https://api.github.com/repos/docker/test-docker-action/comments{/number}',
-        commits_url: 'https://api.github.com/repos/docker/test-docker-action/commits{/sha}',
-        compare_url: 'https://api.github.com/repos/docker/test-docker-action/compare/{base}...{head}',
-        contents_url: 'https://api.github.com/repos/docker/test-docker-action/contents/{+path}',
-        contributors_url: 'https://api.github.com/repos/docker/test-docker-action/contributors',
-        created_at: 1596792180,
-        default_branch: 'master',
-        deployments_url: 'https://api.github.com/repos/docker/test-docker-action/deployments',
-        description: 'Test "Docker" Actions',
-        disabled: false,
-        downloads_url: 'https://api.github.com/repos/docker/test-docker-action/downloads',
-        events_url: 'https://api.github.com/repos/docker/test-docker-action/events',
-        fork: false,
-        forks: 1,
-        forks_count: 1,
-        forks_url: 'https://api.github.com/repos/docker/test-docker-action/forks',
-        full_name: 'docker/test-docker-action',
-        git_commits_url: 'https://api.github.com/repos/docker/test-docker-action/git/commits{/sha}',
-        git_refs_url: 'https://api.github.com/repos/docker/test-docker-action/git/refs{/sha}',
-        git_tags_url: 'https://api.github.com/repos/docker/test-docker-action/git/tags{/sha}',
-        git_url: 'git://github.com/docker/test-docker-action.git',
-        has_downloads: true,
-        has_issues: true,
-        has_pages: false,
-        has_projects: true,
-        has_wiki: true,
-        homepage: '',
-        hooks_url: 'https://api.github.com/repos/docker/test-docker-action/hooks',
-        html_url: 'https://github.com/docker/test-docker-action',
-        id: 285789493,
-        is_template: false,
-        issue_comment_url: 'https://api.github.com/repos/docker/test-docker-action/issues/comments{/number}',
-        issue_events_url: 'https://api.github.com/repos/docker/test-docker-action/issues/events{/number}',
-        issues_url: 'https://api.github.com/repos/docker/test-docker-action/issues{/number}',
-        keys_url: 'https://api.github.com/repos/docker/test-docker-action/keys{/key_id}',
-        labels_url: 'https://api.github.com/repos/docker/test-docker-action/labels{/name}',
-        language: 'JavaScript',
-        languages_url: 'https://api.github.com/repos/docker/test-docker-action/languages',
-        license: {
-          key: 'mit',
-          name: 'MIT License',
-          node_id: 'MDc6TGljZW5zZTEz',
-          spdx_id: 'MIT',
-          url: 'https://api.github.com/licenses/mit'
-        },
-        master_branch: 'master',
-        merges_url: 'https://api.github.com/repos/docker/test-docker-action/merges',
-        milestones_url: 'https://api.github.com/repos/docker/test-docker-action/milestones{/number}',
-        mirror_url: null,
-        name: 'test-docker-action',
-        node_id: 'MDEwOlJlcG9zaXRvcnkyODU3ODk0OTM=',
-        notifications_url: 'https://api.github.com/repos/docker/test-docker-action/notifications{?since,all,participating}',
-        open_issues: 6,
-        open_issues_count: 6,
-        organization: 'docker',
-        owner: {
-          avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
-          email: 'info@docker.com',
-          events_url: 'https://api.github.com/users/docker/events{/privacy}',
-          followers_url: 'https://api.github.com/users/docker/followers',
-          following_url: 'https://api.github.com/users/docker/following{/other_user}',
-          gists_url: 'https://api.github.com/users/docker/gists{/gist_id}',
-          gravatar_id: '',
-          html_url: 'https://github.com/docker',
-          id: 5429470,
-          login: 'docker',
-          name: 'docker',
-          node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
-          organizations_url: 'https://api.github.com/users/docker/orgs',
-          received_events_url: 'https://api.github.com/users/docker/received_events',
-          repos_url: 'https://api.github.com/users/docker/repos',
-          site_admin: false,
-          starred_url: 'https://api.github.com/users/docker/starred{/owner}{/repo}',
-          subscriptions_url: 'https://api.github.com/users/docker/subscriptions',
-          type: 'Organization',
-          url: 'https://api.github.com/users/docker'
-        },
-        private: true,
-        pulls_url: 'https://api.github.com/repos/docker/test-docker-action/pulls{/number}',
-        pushed_at: 1650360446,
-        releases_url: 'https://api.github.com/repos/docker/test-docker-action/releases{/id}',
-        size: 796,
-        ssh_url: 'git@github.com:docker/test-docker-action.git',
-        stargazers: 0,
-        stargazers_count: 0,
-        stargazers_url: 'https://api.github.com/repos/docker/test-docker-action/stargazers',
-        statuses_url: 'https://api.github.com/repos/docker/test-docker-action/statuses/{sha}',
-        subscribers_url: 'https://api.github.com/repos/docker/test-docker-action/subscribers',
-        subscription_url: 'https://api.github.com/repos/docker/test-docker-action/subscription',
-        svn_url: 'https://github.com/docker/test-docker-action',
-        tags_url: 'https://api.github.com/repos/docker/test-docker-action/tags',
-        teams_url: 'https://api.github.com/repos/docker/test-docker-action/teams',
-        topics: [],
-        trees_url: 'https://api.github.com/repos/docker/test-docker-action/git/trees{/sha}',
-        updated_at: '2022-04-19T09:05:09Z',
-        url: 'https://github.com/docker/test-docker-action',
-        visibility: 'private',
-        watchers: 0,
-        watchers_count: 0
-      },
-      sender: {
-        avatar_url: 'https://avatars.githubusercontent.com/u/1951866?v=4',
-        events_url: 'https://api.github.com/users/crazy-max/events{/privacy}',
-        followers_url: 'https://api.github.com/users/crazy-max/followers',
-        following_url: 'https://api.github.com/users/crazy-max/following{/other_user}',
-        gists_url: 'https://api.github.com/users/crazy-max/gists{/gist_id}',
-        gravatar_id: '',
-        html_url: 'https://github.com/crazy-max',
-        id: 1951866,
-        login: 'crazy-max',
-        node_id: 'MDQ6VXNlcjE5NTE4NjY=',
-        organizations_url: 'https://api.github.com/users/crazy-max/orgs',
-        received_events_url: 'https://api.github.com/users/crazy-max/received_events',
-        repos_url: 'https://api.github.com/users/crazy-max/repos',
-        site_admin: false,
-        starred_url: 'https://api.github.com/users/crazy-max/starred{/owner}{/repo}',
-        subscriptions_url: 'https://api.github.com/users/crazy-max/subscriptions',
-        type: 'User',
-        url: 'https://api.github.com/users/crazy-max'
+          date: '2024-11-13T13:42:28Z'
+        }
      }
    }
-  },
-  getOctokit: () => ({
+  }))
+);
+
+const getOctokitMock = vi.hoisted(() =>
+  vi.fn(() => ({
    rest: {
      repos: {
-        getCommit: async () => ({
-          data: {
-            commit: {
-              committer: {
-                date: '2024-11-13T13:42:28Z'
-              }
-            }
-          }
-        })
+        getCommit: getCommitMock
      }
    }
-  })
-};
+  }))
+);

-vi.mock('@actions/github', () => githubMock);
-
-for (const mod of ['@actions/github', '@docker/actions-toolkit/node_modules/@actions/github']) {
-  try {
-    const resolved = require.resolve(mod);
-    vi.doMock(resolved, () => githubMock);
-    require.cache[resolved] = {
-      id: resolved,
-      filename: resolved,
-      loaded: true,
-      exports: githubMock,
-      children: [],
-      paths: []
-    } as RequireCacheEntry;
-  } catch {
-    // Ignore unresolved optional paths; vi.mock handles module-level mocking.
-  }
-}
+vi.mock('@actions/github', async importOriginal => {
+  const actual = await importOriginal<typeof import('@actions/github')>();
+  return {
+    ...actual,
+    context: {
+      ...actual.context,
+      payload: githubPayload
+    },
+    getOctokit: getOctokitMock
+  };
+});
--- a/action.yml
+++ b/action.yml
@@ -66,5 +66,5 @@ outputs:
    description: 'Bake definition file with tags and labels'

 runs:
-  using: 'node20'
+  using: 'node24'
  main: 'dist/index.js'
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1

-ARG NODE_VERSION=20
+ARG NODE_VERSION=24

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git rsync
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/package.json
+++ b/package.json
@@ -25,18 +25,18 @@
  "packageManager": "yarn@4.9.2",
  "dependencies": {
    "@actions/core": "^3.0.0",
-    "@actions/github": "^6.0.1",
-    "@docker/actions-toolkit": "^0.77.0",
+    "@actions/github": "^9.0.0",
+    "@docker/actions-toolkit": "^0.79.0",
    "@renovate/pep440": "^1.0.0",
    "csv-parse": "^6.1.0",
    "handlebars": "^4.7.8",
    "moment": "^2.30.1",
-    "moment-timezone": "^0.6.0",
-    "semver": "^7.7.3"
+    "moment-timezone": "^0.6.1",
+    "semver": "^7.7.4"
  },
  "devDependencies": {
    "@eslint/js": "^9.39.3",
-    "@types/node": "^20.19.35",
+    "@types/node": "^24.11.0",
    "@types/semver": "^7.7.1",
    "@typescript-eslint/eslint-plugin": "^8.56.1",
    "@typescript-eslint/parser": "^8.56.1",
--- a/src/context.ts
+++ b/src/context.ts
@@ -1,11 +1,12 @@
 import * as core from '@actions/core';

-import {Context as GithubContext} from '@actions/github/lib/context.js';
 import {Util} from '@docker/actions-toolkit/lib/util.js';
 import {Git} from '@docker/actions-toolkit/lib/git.js';
-import {GitHub} from '@docker/actions-toolkit/lib/github.js';
+import {GitHub} from '@docker/actions-toolkit/lib/github/github.js';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit.js';

+type GithubContext = typeof GitHub.context;
+
 export interface Context extends GithubContext {
  commitDate: Date;
 }
@@ -27,11 +28,11 @@ export interface Inputs {
 export function getInputs(): Inputs {
  return {
    context: (core.getInput('context') || ContextSource.workflow) as ContextSource,
-    images: Util.getInputList('images', {ignoreComma: true, comment: '#'}),
-    tags: Util.getInputList('tags', {ignoreComma: true, comment: '#'}),
-    flavor: Util.getInputList('flavor', {ignoreComma: true, comment: '#'}),
-    labels: Util.getInputList('labels', {ignoreComma: true, comment: '#'}),
-    annotations: Util.getInputList('annotations', {ignoreComma: true, comment: '#'}),
+    images: Util.getInputList('images', {ignoreComma: true, comment: '#', commentNoInfix: true}),
+    tags: Util.getInputList('tags', {ignoreComma: true, comment: '#', commentNoInfix: true}),
+    flavor: Util.getInputList('flavor', {ignoreComma: true, comment: '#', commentNoInfix: true}),
+    labels: Util.getInputList('labels', {ignoreComma: true, comment: '#', commentNoInfix: true}),
+    annotations: Util.getInputList('annotations', {ignoreComma: true, comment: '#', commentNoInfix: true}),
    sepTags: core.getInput('sep-tags', {trimWhitespace: false}) || `\n`,
    sepLabels: core.getInput('sep-labels', {trimWhitespace: false}) || `\n`,
    sepAnnotations: core.getInput('sep-annotations', {trimWhitespace: false}) || `\n`,
--- a/src/meta.ts
+++ b/src/meta.ts
@@ -6,7 +6,7 @@ import * as pep440 from '@renovate/pep440';
 import * as semver from 'semver';
 import * as core from '@actions/core';
 import {Context as ToolkitContext} from '@docker/actions-toolkit/lib/context.js';
-import {GitHubRepo} from '@docker/actions-toolkit/lib/types/github.js';
+import {GitHubRepo} from '@docker/actions-toolkit/lib/types/github/github.js';

 import {Inputs, Context} from './context.js';
 import * as icl from './image.js';
--- a/yarn.lock
+++ b/yarn.lock
@@ -70,21 +70,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/github@npm:^6.0.1":
-  version: 6.0.1
-  resolution: "@actions/github@npm:6.0.1"
-  dependencies:
-    "@actions/http-client": "npm:^2.2.0"
-    "@octokit/core": "npm:^5.0.1"
-    "@octokit/plugin-paginate-rest": "npm:^9.2.2"
-    "@octokit/plugin-rest-endpoint-methods": "npm:^10.4.0"
-    "@octokit/request": "npm:^8.4.1"
-    "@octokit/request-error": "npm:^5.1.1"
-    undici: "npm:^5.28.5"
-  checksum: 10/ba6a162a5727dea2f3f3fc450e02c5b336ceb65a0e26ba9ad9c62b20f4f5b2625ca347a9311a4905ef3c92378ca022caba841a283cb7f2e4175d79e3d1ecaf12
-  languageName: node
-  linkType: hard
-
 "@actions/github@npm:^9.0.0":
  version: 9.0.0
  resolution: "@actions/github@npm:9.0.0"
@@ -110,16 +95,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/http-client@npm:^2.2.0":
-  version: 2.2.1
-  resolution: "@actions/http-client@npm:2.2.1"
-  dependencies:
-    tunnel: "npm:^0.0.6"
-    undici: "npm:^5.25.4"
-  checksum: 10/b7338f13461eeca945acc9ccdd20a46e545624dc872bc12869eca7d9a58536ee3e1ecc0d1a1d4c16e8610c2b783e7108e12148b6db5d7fb8bf8b950b8a002d66
-  languageName: node
-  linkType: hard
-
 "@actions/http-client@npm:^3.0.2":
  version: 3.0.2
  resolution: "@actions/http-client@npm:3.0.2"
@@ -401,9 +376,9 @@ __metadata:
  languageName: node
  linkType: hard

-"@docker/actions-toolkit@npm:^0.77.0":
-  version: 0.77.0
-  resolution: "@docker/actions-toolkit@npm:0.77.0"
+"@docker/actions-toolkit@npm:^0.79.0":
+  version: 0.79.0
+  resolution: "@docker/actions-toolkit@npm:0.79.0"
  dependencies:
    "@actions/artifact": "npm:^6.2.0"
    "@actions/cache": "npm:^6.0.0"
@@ -427,7 +402,7 @@ __metadata:
    semver: "npm:^7.7.4"
    tar-stream: "npm:^3.1.7"
    tmp: "npm:^0.2.5"
-  checksum: 10/f3ae817a5a6827efc63d1a1730e918801a8fa33867cda72bd7a1f78309631c45d91de60bc57985c7520fae168e96daed0fcab0003b5fab9b50bdd7aa355d651b
+  checksum: 10/d64849ba49b2b59e2e93237a70be03fd7c43b1f7f01bac3f7557616ba5f59be785cb12a273bbb6a71c1e0d959f1bc6c673111b587c57bd2d6da105dcc500921a
  languageName: node
  linkType: hard

@@ -701,13 +676,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@fastify/busboy@npm:^2.0.0":
-  version: 2.0.0
-  resolution: "@fastify/busboy@npm:2.0.0"
-  checksum: 10/6a2366d06b82aac1069b8323792f76f7a8fca02533cb3745fcd218d8f0f953dc4dbef057287237414658cd43f8dede0846ef33398999e3dbe54ddaeefec71c0a
-  languageName: node
-  linkType: hard
-
 "@gar/promise-retry@npm:^1.0.0":
  version: 1.0.2
  resolution: "@gar/promise-retry@npm:1.0.2"
@@ -853,13 +821,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/auth-token@npm:^4.0.0":
-  version: 4.0.0
-  resolution: "@octokit/auth-token@npm:4.0.0"
-  checksum: 10/60e42701e341d700f73c518c7a35675d36d79fa9d5e838cc3ade96d147e49f5ba74db2e07b2337c2b95aaa540aa42088116df2122daa25633f9e70a2c8785c44
-  languageName: node
-  linkType: hard
-
 "@octokit/auth-token@npm:^6.0.0":
  version: 6.0.0
  resolution: "@octokit/auth-token@npm:6.0.0"
@@ -867,21 +828,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/core@npm:^5.0.1":
-  version: 5.1.0
-  resolution: "@octokit/core@npm:5.1.0"
-  dependencies:
-    "@octokit/auth-token": "npm:^4.0.0"
-    "@octokit/graphql": "npm:^7.0.0"
-    "@octokit/request": "npm:^8.0.2"
-    "@octokit/request-error": "npm:^5.0.0"
-    "@octokit/types": "npm:^12.0.0"
-    before-after-hook: "npm:^2.2.0"
-    universal-user-agent: "npm:^6.0.0"
-  checksum: 10/8062e86a3088f24a691b36d2c3e9f33e864cefcb5f544b0633650358bce280708b111551cbe855ecf6a5190d6fc4fec1220117c329a2c27525940dd97b868614
-  languageName: node
-  linkType: hard
-
 "@octokit/core@npm:^7.0.6":
  version: 7.0.6
  resolution: "@octokit/core@npm:7.0.6"
@@ -907,38 +853,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/endpoint@npm:^9.0.0":
-  version: 9.0.1
-  resolution: "@octokit/endpoint@npm:9.0.1"
-  dependencies:
-    "@octokit/types": "npm:^12.0.0"
-    is-plain-object: "npm:^5.0.0"
-    universal-user-agent: "npm:^6.0.0"
-  checksum: 10/8d1e6540cab8686afd977d0a256528b748aba0910530c903c032676c701073f5b90786b8ba74b573f2dc5de41befdb59d3ddb83b1d22e5ab54fb32b3d0abb6c5
-  languageName: node
-  linkType: hard
-
-"@octokit/endpoint@npm:^9.0.6":
-  version: 9.0.6
-  resolution: "@octokit/endpoint@npm:9.0.6"
-  dependencies:
-    "@octokit/types": "npm:^13.1.0"
-    universal-user-agent: "npm:^6.0.0"
-  checksum: 10/2bf776423365ee926bf3f722a664e52f1070758eff4a176279fb132103fd0c76e3541f83ace49bbad9a64f9c9b8de453be565ca8d6136989e9514dea65380ecf
-  languageName: node
-  linkType: hard
-
-"@octokit/graphql@npm:^7.0.0":
-  version: 7.0.2
-  resolution: "@octokit/graphql@npm:7.0.2"
-  dependencies:
-    "@octokit/request": "npm:^8.0.1"
-    "@octokit/types": "npm:^12.0.0"
-    universal-user-agent: "npm:^6.0.0"
-  checksum: 10/f5dcc51fed5304f65dab83fcea4c2a569107d3b71e8d084199dc44f0d0cfc852c9e1f341b06ae66601f9da4af3aad416b0c62dcd0567ac7568f072d8d90d502e
-  languageName: node
-  linkType: hard
-
 "@octokit/graphql@npm:^9.0.3":
  version: 9.0.3
  resolution: "@octokit/graphql@npm:9.0.3"
@@ -950,27 +864,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/openapi-types@npm:^19.0.0":
-  version: 19.0.0
-  resolution: "@octokit/openapi-types@npm:19.0.0"
-  checksum: 10/87962fee2e9981d3e81c6786a6c0663095cde1cf7e5ef7d3fa5f6fa89f9b625f70cdf99d3dedcb0755b66926c3521a9e4c8ac9ece4fcf29a04820adba7325099
-  languageName: node
-  linkType: hard
-
-"@octokit/openapi-types@npm:^20.0.0":
-  version: 20.0.0
-  resolution: "@octokit/openapi-types@npm:20.0.0"
-  checksum: 10/9f60572af1201dd92626c412253d83d986b8ab1956250b95f417013ee8e7baf25870eeb801d16672cabc2c420544bc9c2f0a979e07603ff5997eff038c71a8c3
-  languageName: node
-  linkType: hard
-
-"@octokit/openapi-types@npm:^24.2.0":
-  version: 24.2.0
-  resolution: "@octokit/openapi-types@npm:24.2.0"
-  checksum: 10/000897ebc6e247c2591049d6081e95eb5636f73798dadd695ee6048496772b58065df88823e74a760201828545a7ac601dd3c1bcd2e00079a62a9ee9d389409c
-  languageName: node
-  linkType: hard
-
 "@octokit/openapi-types@npm:^27.0.0":
  version: 27.0.0
  resolution: "@octokit/openapi-types@npm:27.0.0"
@@ -989,17 +882,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/plugin-paginate-rest@npm:^9.2.2":
-  version: 9.2.2
-  resolution: "@octokit/plugin-paginate-rest@npm:9.2.2"
-  dependencies:
-    "@octokit/types": "npm:^12.6.0"
-  peerDependencies:
-    "@octokit/core": 5
-  checksum: 10/9afdd61d24a276ed7c2a8e436f735066d1b71601177deb97afa204a1f224257ca9c02681bc94dcda921d37c288a342124f7dfdd88393817306fe0b1ad1f0690f
-  languageName: node
-  linkType: hard
-
 "@octokit/plugin-request-log@npm:^6.0.0":
  version: 6.0.0
  resolution: "@octokit/plugin-request-log@npm:6.0.0"
@@ -1009,17 +891,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/plugin-rest-endpoint-methods@npm:^10.4.0":
-  version: 10.4.0
-  resolution: "@octokit/plugin-rest-endpoint-methods@npm:10.4.0"
-  dependencies:
-    "@octokit/types": "npm:^12.6.0"
-  peerDependencies:
-    "@octokit/core": ">=5"
-  checksum: 10/2b4de869fd9ef0b443ff26ed76d4ba8a5c0b0b097a3bca0672d9d5efc9026d936736b14b608a3b1a5f9cb264e52b08d9721d5ab4c79640cdaafdc5387b97e03c
-  languageName: node
-  linkType: hard
-
 "@octokit/plugin-rest-endpoint-methods@npm:^17.0.0":
  version: 17.0.0
  resolution: "@octokit/plugin-rest-endpoint-methods@npm:17.0.0"
@@ -1044,28 +915,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/request-error@npm:^5.0.0":
-  version: 5.0.1
-  resolution: "@octokit/request-error@npm:5.0.1"
-  dependencies:
-    "@octokit/types": "npm:^12.0.0"
-    deprecation: "npm:^2.0.0"
-    once: "npm:^1.4.0"
-  checksum: 10/a21a4614c46cb173e4ba73fa048576204f1ddc541dee3e7c938ef36088566e3b25e04ca1f96f375ec2e3cc29b7ba970b3b078a89a20bc50cdcdbed879db94573
-  languageName: node
-  linkType: hard
-
-"@octokit/request-error@npm:^5.1.1":
-  version: 5.1.1
-  resolution: "@octokit/request-error@npm:5.1.1"
-  dependencies:
-    "@octokit/types": "npm:^13.1.0"
-    deprecation: "npm:^2.0.0"
-    once: "npm:^1.4.0"
-  checksum: 10/6ad98626407ba57bb33fa197611be74bee1dd9abc8d5d845648d6a2a04aa6840c0eb7f4be341d55dfcab5bc19181ad5fd25194869a7aaac6245f74b3a14d9662
-  languageName: node
-  linkType: hard
-
 "@octokit/request-error@npm:^7.0.2, @octokit/request-error@npm:^7.1.0":
  version: 7.1.0
  resolution: "@octokit/request-error@npm:7.1.0"
@@ -1089,58 +938,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@octokit/request@npm:^8.0.1, @octokit/request@npm:^8.0.2":
-  version: 8.1.4
-  resolution: "@octokit/request@npm:8.1.4"
-  dependencies:
-    "@octokit/endpoint": "npm:^9.0.0"
-    "@octokit/request-error": "npm:^5.0.0"
-    "@octokit/types": "npm:^12.0.0"
-    is-plain-object: "npm:^5.0.0"
-    universal-user-agent: "npm:^6.0.0"
-  checksum: 10/a51470f47009b078a29e80be62e522083a82a0eae0e0a1f2fd85e220b84274d6c44f3c43d594fc29d5901b0597873dc95222d38c8697574314bd0dfcad9915f6
-  languageName: node
-  linkType: hard
-
-"@octokit/request@npm:^8.4.1":
-  version: 8.4.1
-  resolution: "@octokit/request@npm:8.4.1"
-  dependencies:
-    "@octokit/endpoint": "npm:^9.0.6"
-    "@octokit/request-error": "npm:^5.1.1"
-    "@octokit/types": "npm:^13.1.0"
-    universal-user-agent: "npm:^6.0.0"
-  checksum: 10/2b2c9131cc9b608baeeef8ce2943768cc9db5fbe36a665f734a099bd921561c760e4391fbdf39d5aefb725db26742db1488c65624940ef7cec522e10863caa5e
-  languageName: node
-  linkType: hard
-
-"@octokit/types@npm:^12.0.0":
-  version: 12.0.0
-  resolution: "@octokit/types@npm:12.0.0"
-  dependencies:
-    "@octokit/openapi-types": "npm:^19.0.0"
-  checksum: 10/68faa94efaa132d96a4f0d68a82f74c0d6cda2bb644007d9fa5c6d3a5a724981dd72e82ce0d7631df1b04502c470fce311b39becb170e03382521a31ad2aecfa
-  languageName: node
-  linkType: hard
-
-"@octokit/types@npm:^12.6.0":
-  version: 12.6.0
-  resolution: "@octokit/types@npm:12.6.0"
-  dependencies:
-    "@octokit/openapi-types": "npm:^20.0.0"
-  checksum: 10/19b77a8d25af2a5df4561f8750f807edfc9fca5b07cfa9fb21dce4665e1b188c966688f5ed5e08089404428100dfe44ad353f8d8532f1d30fe47e61c5faa1440
-  languageName: node
-  linkType: hard
-
-"@octokit/types@npm:^13.1.0":
-  version: 13.10.0
-  resolution: "@octokit/types@npm:13.10.0"
-  dependencies:
-    "@octokit/openapi-types": "npm:^24.2.0"
-  checksum: 10/32f8f5010d7faae128b0cdd0c221f0ca8c3781fe44483ecd87162b3da507db667f7369acda81340f6e2c9c374d9a938803409c6085c2c01d98210b6c58efb99a
-  languageName: node
-  linkType: hard
-
 "@octokit/types@npm:^16.0.0":
  version: 16.0.0
  resolution: "@octokit/types@npm:16.0.0"
@@ -1528,12 +1325,12 @@ __metadata:
  languageName: node
  linkType: hard

-"@types/node@npm:^20.19.35":
-  version: 20.19.35
-  resolution: "@types/node@npm:20.19.35"
+"@types/node@npm:^24.11.0":
+  version: 24.11.0
+  resolution: "@types/node@npm:24.11.0"
  dependencies:
-    undici-types: "npm:~6.21.0"
-  checksum: 10/f14fa74f9ae4d1109d8a8e3ec31b6518122b3d31c28fd5725cb3eef8ff64d7cf6f8da9c84c78b512e2968006ec325c82a413cc2062da7b3c3230c882e88babba
+    undici-types: "npm:~7.16.0"
+  checksum: 10/d2f4f898c6a0f14980e55c697904fb58681729fc46b4e264d5f64dc391b23da73c9b422cfffbca28c045e6e8eca72dab5f28ed633faa95398ef1528af5398382
  languageName: node
  linkType: hard

@@ -2032,13 +1829,6 @@ __metadata:
  languageName: node
  linkType: hard

-"before-after-hook@npm:^2.2.0":
-  version: 2.2.1
-  resolution: "before-after-hook@npm:2.2.1"
-  checksum: 10/3a05a6392647286aae05cd583e3cccd8a98f2d3284429cb251e4b86ea2dbd52e6db17d7f4f64e8b7a60b418cd48fd62729771b91a447f39143cb858de2d241b1
-  languageName: node
-  linkType: hard
-
 "before-after-hook@npm:^4.0.0":
  version: 4.0.0
  resolution: "before-after-hook@npm:4.0.0"
@@ -2346,23 +2136,16 @@ __metadata:
  languageName: node
  linkType: hard

-"deprecation@npm:^2.0.0":
-  version: 2.3.1
-  resolution: "deprecation@npm:2.3.1"
-  checksum: 10/f56a05e182c2c195071385455956b0c4106fe14e36245b00c689ceef8e8ab639235176a96977ba7c74afb173317fac2e0ec6ec7a1c6d1e6eaa401c586c714132
-  languageName: node
-  linkType: hard
-
 "docker-metadata-action@workspace:.":
  version: 0.0.0-use.local
  resolution: "docker-metadata-action@workspace:."
  dependencies:
    "@actions/core": "npm:^3.0.0"
-    "@actions/github": "npm:^6.0.1"
-    "@docker/actions-toolkit": "npm:^0.77.0"
+    "@actions/github": "npm:^9.0.0"
+    "@docker/actions-toolkit": "npm:^0.79.0"
    "@eslint/js": "npm:^9.39.3"
    "@renovate/pep440": "npm:^1.0.0"
-    "@types/node": "npm:^20.19.35"
+    "@types/node": "npm:^24.11.0"
    "@types/semver": "npm:^7.7.1"
    "@typescript-eslint/eslint-plugin": "npm:^8.56.1"
    "@typescript-eslint/parser": "npm:^8.56.1"
@@ -2377,9 +2160,9 @@ __metadata:
    globals: "npm:^17.3.0"
    handlebars: "npm:^4.7.8"
    moment: "npm:^2.30.1"
-    moment-timezone: "npm:^0.6.0"
+    moment-timezone: "npm:^0.6.1"
    prettier: "npm:^3.8.1"
-    semver: "npm:^7.7.3"
+    semver: "npm:^7.7.4"
    typescript: "npm:^5.9.3"
    vitest: "npm:^4.0.18"
  languageName: unknown
@@ -3218,13 +3001,6 @@ __metadata:
  languageName: node
  linkType: hard

-"is-plain-object@npm:^5.0.0":
-  version: 5.0.0
-  resolution: "is-plain-object@npm:5.0.0"
-  checksum: 10/e32d27061eef62c0847d303125440a38660517e586f2f3db7c9d179ae5b6674ab0f469d519b2e25c147a1a3bc87156d0d5f4d8821e0ce4a9ee7fe1fcf11ce45c
-  languageName: node
-  linkType: hard
-
 "is-stream@npm:^2.0.1":
  version: 2.0.1
  resolution: "is-stream@npm:2.0.1"
@@ -3735,12 +3511,12 @@ __metadata:
  languageName: node
  linkType: hard

-"moment-timezone@npm:^0.6.0":
-  version: 0.6.0
-  resolution: "moment-timezone@npm:0.6.0"
+"moment-timezone@npm:^0.6.1":
+  version: 0.6.1
+  resolution: "moment-timezone@npm:0.6.1"
  dependencies:
    moment: "npm:^2.29.4"
-  checksum: 10/324df65c9ed622c75d4e39dc5daf01dfcd8b4cb4eb63dec3270ddbfed3f5357e4d4b22a39bf3b4fe1fe2d78b21307abddfb13e7aa6a19b69b7f33bb712c8ad55
+  checksum: 10/20a80969712e35cab0ccda1cebe6fd768201bc1c9aa4528881bb8dd352bfcae2564546bf634ee7768aafd1dabb8054982964590084a1af8feab0574dd1d3ea3e
  languageName: node
  linkType: hard

@@ -4745,28 +4521,10 @@ __metadata:
  languageName: node
  linkType: hard

-"undici-types@npm:~6.21.0":
-  version: 6.21.0
-  resolution: "undici-types@npm:6.21.0"
-  checksum: 10/ec8f41aa4359d50f9b59fa61fe3efce3477cc681908c8f84354d8567bb3701fafdddf36ef6bff307024d3feb42c837cf6f670314ba37fc8145e219560e473d14
-  languageName: node
-  linkType: hard
-
-"undici@npm:^5.25.4":
-  version: 5.28.4
-  resolution: "undici@npm:5.28.4"
-  dependencies:
-    "@fastify/busboy": "npm:^2.0.0"
-  checksum: 10/a666a9f5ac4270c659fafc33d78b6b5039a0adbae3e28f934774c85dcc66ea91da907896f12b414bd6f578508b44d5dc206fa636afa0e49a4e1c9e99831ff065
-  languageName: node
-  linkType: hard
-
-"undici@npm:^5.28.5":
-  version: 5.29.0
-  resolution: "undici@npm:5.29.0"
-  dependencies:
-    "@fastify/busboy": "npm:^2.0.0"
-  checksum: 10/0ceca8924a32acdcc0cfb8dd2d368c217840970aa3f5e314fc169608474be6341c5b8e50cad7bd257dbe3b4e432bc5d0a0d000f83644b54fa11a48735ec52b93
+"undici-types@npm:~7.16.0":
+  version: 7.16.0
+  resolution: "undici-types@npm:7.16.0"
+  checksum: 10/db43439f69c2d94cc29f75cbfe9de86df87061d6b0c577ebe9bb3255f49b22c50162a7d7eb413b0458b6510b8ca299ac7cff38c3a29fbd31af9f504bcf7fbc0d
  languageName: node
  linkType: hard

@@ -4813,13 +4571,6 @@ __metadata:
  languageName: node
  linkType: hard

-"universal-user-agent@npm:^6.0.0":
-  version: 6.0.0
-  resolution: "universal-user-agent@npm:6.0.0"
-  checksum: 10/5092bbc80dd0d583cef0b62c17df0043193b74f425112ea6c1f69bc5eda21eeec7a08d8c4f793a277eb2202ffe9b44bec852fa3faff971234cd209874d1b79ef
-  languageName: node
-  linkType: hard
-
 "universal-user-agent@npm:^7.0.0, universal-user-agent@npm:^7.0.2":
  version: 7.0.3
  resolution: "universal-user-agent@npm:7.0.3"
Author	SHA1	Message	Date
CrazyMax	1107934206	Merge pull request #622 from crazy-max/codeql ci: enable SAST scanning with CodeQL	2026-03-20 16:57:23 +01:00
CrazyMax	50e32640d5	ci: enable SAST scanning with CodeQL Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-20 11:51:51 +01:00
CrazyMax	d24d429af2	Merge pull request #619 from docker/dependabot/npm_and_yarn/moment-timezone-0.6.1 chore(deps): Bump moment-timezone from 0.6.0 to 0.6.1	2026-03-18 23:06:56 +01:00
github-actions[bot]	d3cc762016	chore: update generated content	2026-03-18 19:24:41 +00:00
dependabot[bot]	e724a31677	chore(deps): Bump moment-timezone from 0.6.0 to 0.6.1 Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.6.0 to 0.6.1. - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](https://github.com/moment/moment-timezone/compare/0.6.0...0.6.1) --- updated-dependencies: - dependency-name: moment-timezone dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-18 19:23:34 +00:00
Tõnis Tiigi	dde548f160	Merge pull request #608 from crazy-max/update-readme readme: update to v6	2026-03-16 17:57:09 -07:00
Tõnis Tiigi	b13d25e5fc	Merge pull request #609 from docker/dependabot/github_actions/docker/bake-action-7 chore(deps): Bump docker/bake-action from 6 to 7	2026-03-09 12:35:19 -07:00
CrazyMax	f58488e265	Merge pull request #612 from docker/dependabot/github_actions/docker/build-push-action-7 chore(deps): Bump docker/build-push-action from 6 to 7	2026-03-09 16:25:29 +01:00
CrazyMax	414af88e96	ci: switch to matrix subaction Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-09 16:22:40 +01:00
dependabot[bot]	2c2d4fb584	chore(deps): Bump docker/build-push-action from 6 to 7 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6...v7) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-06 19:22:22 +00:00
CrazyMax	85e876bd3a	Merge pull request #610 from docker/dependabot/github_actions/docker/setup-buildx-action-4 chore(deps): Bump docker/setup-buildx-action from 3 to 4	2026-03-06 09:54:50 +01:00
CrazyMax	0b0903be56	readme: update to v6 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-05 22:25:27 +01:00
dependabot[bot]	e2d26b25bd	chore(deps): Bump docker/setup-buildx-action from 3 to 4 Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-05 19:22:33 +00:00
dependabot[bot]	a26abf68b2	chore(deps): Bump docker/bake-action from 6 to 7 Bumps [docker/bake-action](https://github.com/docker/bake-action) from 6 to 7. - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](https://github.com/docker/bake-action/compare/v6...v7) --- updated-dependencies: - dependency-name: docker/bake-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-05 19:22:30 +00:00
Tõnis Tiigi	030e881283	Merge pull request #607 from crazy-max/allow-comments preserve comments in list input values with commentNoInfix	2026-03-05 08:21:07 -08:00
CrazyMax	4b529ac4e5	chore: update generated content Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-05 17:02:53 +01:00
CrazyMax	b0082b33bc	preserve comments in list input values with commentNoInfix Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-05 17:02:53 +01:00
CrazyMax	7b19fec715	Merge pull request #604 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.77.0 chore(deps): Bump @docker/actions-toolkit from 0.68.0 to 0.79.0	2026-03-05 17:00:40 +01:00
CrazyMax	281c9b0599	chore: update generated content Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-05 09:24:56 +01:00
CrazyMax	5f43b3b4f4	test: stabilize github mock setup since ESM Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-05 09:23:56 +01:00
CrazyMax	9d53276575	github class moved since actions-toolkit v0.77.0 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-05 09:23:56 +01:00
dependabot[bot]	eaa3d3973e	chore(deps): Bump @docker/actions-toolkit from 0.68.0 to 0.77.0 Dependabot couldn't find the original pull request head commit, cdad825a9dc17122e84ab473271a55d7b8b3da06.	2026-03-05 08:21:31 +00:00
Tõnis Tiigi	6b695f7a8a	Merge pull request #605 from crazy-max/node24 node 24 as default runtime	2026-03-04 17:36:23 -08:00
CrazyMax	a1afadcb28	node 24 as default runtime Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-04 12:40:47 +01:00
CrazyMax	c769610e5c	Merge pull request #603 from docker/dependabot/npm_and_yarn/semver-7.7.4 chore(deps): Bump semver from 7.7.3 to 7.7.4	2026-03-04 10:52:19 +01:00
github-actions[bot]	f0f930b111	chore: update generated content	2026-03-04 09:19:30 +00:00
dependabot[bot]	f4771c2b1f	chore(deps): Bump semver from 7.7.3 to 7.7.4 Bumps [semver](https://github.com/npm/node-semver) from 7.7.3 to 7.7.4. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/node-semver/compare/v7.7.3...v7.7.4) --- updated-dependencies: - dependency-name: semver dependency-version: 7.7.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-04 09:18:03 +00:00
CrazyMax	538feedf47	Merge pull request #597 from docker/dependabot/npm_and_yarn/actions/github-9.0.0 chore(deps): Bump @actions/github from 6.0.1 to 9.0.0	2026-03-04 10:07:45 +01:00
CrazyMax	2c6e6d9d3b	chore: update generated content Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-03 16:00:55 +01:00
CrazyMax	8fd476a5a7	replace actions/github/lib/context deep imports with public typing Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-03 15:59:05 +01:00
dependabot[bot]	a33d385eb1	chore(deps): Bump @actions/github from 6.0.1 to 9.0.0 Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 6.0.1 to 9.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) --- updated-dependencies: - dependency-name: "@actions/github" dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-03 13:57:21 +00:00