Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.
v4 represents a move from the universal uploader to the Codecov CLI. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.
Breaking Changes
No current support for aarch64 and alpine architectures.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the github-actions group with 6 updates:
2
4
2
3
2
3
2
3
4
5
2
3
Updates
actions/checkout
from 2 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
b4ffde6
Link to release page from what's new section (#1514)8530928
Correct link to GitHub Docs (#1511)7cdaf2f
Update CODEOWNERS to Launch team (#1510)8ade135
Prepare 4.1.0 release (#1496)c533a0a
Add support for partial checkout filters (#1396)72f2cec
Update README.md for V4 (#1452)3df4ab1
Release 4.0.0 (#1447)8b5e8b7
Support fetching without the --progress option (#1067)97a652b
Update default runtime to node20 (#1436)f43a0e5
Release 3.6.0 (#1437)Updates
docker/setup-qemu-action
from 2 to 3Release notes
Sourced from docker/setup-qemu-action's releases.
Commits
6882732
Merge pull request #103 from docker/dependabot/npm_and_yarn/actions/core-1.10.1183f4af
chore: update generated contentf174935
build(deps): bump@actions/core
from 1.10.0 to 1.10.12e423eb
Merge pull request #89 from docker/dependabot/npm_and_yarn/semver-6.3.1ecc406a
Bump semver from 6.3.0 to 6.3.112dec5e
Merge pull request #102 from crazy-max/update-node20c29b312
chore: node 20 as default runtime34ae628
chore: update generated content1f3d2e1
chore: fix author in package.json277dbe8
vendor: bump@docker/actions-toolkit
from 0.3.0 to 0.12.0Updates
docker/setup-buildx-action
from 2 to 3Release notes
Sourced from docker/setup-buildx-action's releases.
... (truncated)
Commits
f95db51
Merge pull request #267 from docker/dependabot/npm_and_yarn/actions/core-1.10.1998a87c
chore: update generated content28bae59
build(deps): bump@actions/core
from 1.10.0 to 1.10.1c215341
Merge pull request #264 from crazy-max/update-node2002e9319
chore: node 20 as default runtime5c9160e
chore: update generated content1283140
chore: fix author in package.jsonc6afe06
vendor: bump@docker/actions-toolkit
from 0.10.0 to 0.12.0f35e0d5
chore: update dev dependenciesbaeb468
dev: remove unneeded binariesUpdates
docker/login-action
from 2 to 3Release notes
Sourced from docker/login-action's releases.
Commits
343f7c4
Merge pull request #599 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...aad0f97
chore: update generated content2e0cd39
build(deps): bump the aws-sdk-dependencies group with 2 updates203bc9c
Merge pull request #588 from docker/dependabot/npm_and_yarn/proxy-agent-depen...2199648
chore: update generated contentb489376
build(deps): bump the proxy-agent-dependencies group with 1 update7c309e7
Merge pull request #598 from docker/dependabot/npm_and_yarn/actions/core-1.10.10ccf222
chore: update generated content56d703e
Merge pull request #597 from docker/dependabot/github_actions/aws-actions/con...24d3b35
build(deps): bump@actions/core
from 1.10.0 to 1.10.1Updates
docker/build-push-action
from 4 to 5Release notes
Sourced from docker/build-push-action's releases.
Commits
4a13e50
Merge pull request #1006 from docker/dependabot/npm_and_yarn/docker/actions-t...7416668
chore: update generated contentb4f76a5
chore(deps): Bump@docker/actions-toolkit
from 0.13.0 to 0.14.0b7feb76
Merge pull request #1005 from crazy-max/ci-inspectfae8018
ci: inspect sbom and provenanceb625868
Merge pull request #1004 from crazy-max/ci-update-buildx5193ef1
ci: update buildx to latestd3afd77
Merge pull request #991 from docker/dependabot/npm_and_yarn/babel/traverse-7....7a786bb
Merge pull request #992 from crazy-max/annotationsc66ae3a
chore: update generated contentUpdates
codecov/codecov-action
from 2 to 3Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
eaaf4be
release: 3.1.4 (#983)c2ab9ab
build(deps-dev): bump@types/node
from 20.1.2 to 20.1.4 (#981)49c20db
build(deps-dev): bump@types/node
from 20.1.0 to 20.1.2 (#979)cf8e3e4
build(deps-dev): bump@types/node
from 18.16.3 to 20.1.0 (#975)1c34415
fix: CLI option names for uploader (#969)b4dfea7
fix: add back in working dir (#971)5bf2504
Fix typo in README.md (#967)1dd0ce3
build(deps-dev): bump@types/node
from 18.15.12 to 18.16.3 (#970)894ff02
chore(release): bump to 3.1.3 (#961)f539f97
fix: allow for aarch64 build (#960)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show