We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.
Bumps the gh-actions-packages group with 6 updates in the /.github/actions/build directory:
2.1.03.3.00.15.10.17.83.1.23.7.02.4.13.7.14.0.06.9.03.1.24.4.3Bumps the gh-actions-packages group with 2 updates in the /.github/actions/context directory: mikefarah/yq and docker/metadata-action. Bumps the gh-actions-packages group with 3 updates in the /.github/actions/grype directory: github/codeql-action, docker/login-action and anchore/scan-action. Bumps the gh-actions-packages group with 2 updates in the /.github/actions/trivy-config directory: github/codeql-action and aquasecurity/trivy-action. Bumps the gh-actions-packages group with 3 updates in the /.github/actions/trivy-image directory: github/codeql-action, docker/login-action and aquasecurity/trivy-action.
Updates
docker/login-actionfrom 2.1.0 to 3.3.0Release notes
Sourced from docker/login-action's releases.
Commits
9780b0cMerge pull request #741 from docker/dependabot/npm_and_yarn/proxy-agent-depen...2fa130cchore: update generated content5e87b2abuild(deps): bump https-proxy-agente039495Merge pull request #754 from docker/dependabot/npm_and_yarn/docker/actions-to...9af18aachore: update generated content668190aswitch to Docker execbe5150dbuild(deps): bump@docker/actions-toolkitfrom 0.24.0 to 0.35.0e80ebcaMerge pull request #730 from docker/dependabot/npm_and_yarn/braces-3.0.375ee3eaMerge pull request #733 from docker/dependabot/github_actions/docker/bake-act...793c19cbuild(deps): bump docker/bake-action from 4 to 5Updates
anchore/sbom-actionfrom 0.15.1 to 0.17.8Release notes
Sourced from anchore/sbom-action's releases.
... (truncated)
Commits
55dc4eechore(deps): update Syft to v1.17.0 (#507)fc46e51chore(deps): update Syft to v1.16.0 (#506)251a468chore(deps): update Syft to v1.15.0 (#505)6bb446cchore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#504)1ca97d9chore(deps): update Syft to v1.14.2 (#503)8d0a650chore(deps): update Syft to v1.14.1 (#502)f5e124achore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5 (#493)eff08d0chore: configure changelog-ignore label (#499)18f9bdechore: remove snapshot tests; fix deprecation errors for outdated packages (#...2e87236add release docs (#500)Updates
sigstore/cosign-installerfrom 3.1.2 to 3.7.0Release notes
Sourced from sigstore/cosign-installer's releases.
... (truncated)
Commits
dc72c7dbump for latest cosign v2.4.1 release (#173)08bb361Bump actions/checkout from 4.1.7 to 4.2.0 (#172)4959ce0update readme for new release (#170)45ffe83bump default version to v2.4.0 release (#168)7e1d9c1pin public key used for verification (#169)cc23fe1Bump actions/setup-go from 5.0.1 to 5.0.2 (#167)b235ed9Bump actions/checkout from 4.1.6 to 4.1.7 (#166)b49ef6bBump actions/checkout from 4.1.5 to 4.1.6 (#165)7a59e5aBump actions/checkout from 4.1.4 to 4.1.5 (#164)8d927bdBump actions/setup-go from 5.0.0 to 5.0.1 (#163)Updates
docker/setup-buildx-actionfrom 2.4.1 to 3.7.1Release notes
Sourced from docker/setup-buildx-action's releases.
... (truncated)
Commits
c47758bMerge pull request #369 from crazy-max/revert-crypto8fea382chore: update generated content2874e98switch back to uuid package8026d2bMerge pull request #362 from docker/dependabot/npm_and_yarn/docker/actions-to...e51aab5chore: update generated contentfd7390ebuild(deps): bump@docker/actions-toolkitfrom 0.35.0 to 0.39.0910a304Merge pull request #366 from crazy-max/remove-uuid3623ee4chore: update generated contente0e5ecfremove uuid package and switch to crypto5334dd0Merge pull request #363 from crazy-max/set-buildkitd-flags-optinUpdates
docker/build-push-actionfrom 4.0.0 to 6.9.0Release notes
Sourced from docker/build-push-action's releases.
... (truncated)
Commits
4f58ea7Merge pull request #1234 from docker/dependabot/npm_and_yarn/docker/actions-t...49b5ea6chore: update generated content13c9fddchore(deps): Bump@docker/actions-toolkitfrom 0.38.0 to 0.39.0e44afffMerge pull request #1232 from docker/dependabot/npm_and_yarn/path-to-regexp-6...67ebad3chore(deps): Bump path-to-regexp from 6.2.2 to 6.3.032945a3Merge pull request #1230 from docker/dependabot/npm_and_yarn/docker/actions-t...e0fe9cfchore: update generated content8f1ff6bchore(deps): Bump@docker/actions-toolkitfrom 0.37.1 to 0.38.05cd11c3Merge pull request #1211 from crazy-max/summary-info-message0aba704chore: update generated contentUpdates
actions/upload-artifactfrom 3.1.2 to 4.4.3Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
b4b15b8Merge pull request #632 from actions/joshmgross/undo-dependency-changes92b01ebUndo indirect dependency updates from #6278448086Merge pull request #627 from actions/robherley/v4.4.2b1d4642add explicit relative and absolute symlinks to workflowd50e660bump versionaabe6f8build with@actions/artifactv2.1.11604373dMerge pull request #625 from actions/robherley/artifact-2.1.100150148paste right core versiona009b25update licenses9f6f6f4update@actions/coreand@actions/artifactto latest versionsUpdates
mikefarah/yqfrom 4.31.2 to 4.44.5Release notes
Sourced from mikefarah/yq's releases.
... (truncated)
Changelog
Sourced from mikefarah/yq's changelog.
... (truncated)
Commits
bc5b54cBumping version129e597Fixing release pipeline42db154Bumping versionf06c7c6Updating release notes1ae6ac1Merge branch 'gabe565-add-comment-style'b710fadRegenerating go mod6a43f17Merge branch 'add-comment-style' of github.com:gabe565/yq into gabe565-add-co...1a4b248Merge branch 'master' into add-comment-style58cc9dbUpdated release notes4af292fFixed handling of nulls with sort_by expressions #2164Updates
docker/metadata-actionfrom 4.3.0 to 5.6.1Release notes
Sourced from docker/metadata-action's releases.