build(deps): bump the ci group across 1 directory with 12 updates

[dependabot]

Bumps the ci group with 12 updates in the / directory:

Package	From	To
actions/checkout	6.0.2	7.0.0
fluxcd/gha-workflows/.github/workflows/backport.yaml	0.9.0	0.12.0
actions/setup-go	6.4.0	6.5.0
hashicorp/setup-terraform	4.0.0	4.0.1
aws-actions/configure-aws-credentials	6.1.0	6.2.1
docker/setup-qemu-action	4.0.0	4.2.0
docker/setup-buildx-action	4.0.0	4.2.0
docker/login-action	4.1.0	4.4.0
github/codeql-action/upload-sarif	4.35.3	4.36.3
github/codeql-action/init	4.35.3	4.36.3
github/codeql-action/autobuild	4.35.3	4.36.3
github/codeql-action/analyze	4.35.3	4.36.3

Updates actions/checkout from 6.0.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

• Update changelog by @​ericsciple in actions/checkout#2357
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

• @​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462

v6.0.3

• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

... (truncated)

Commits

• 9c091bb update error wording (#2467)
• 1044a6d getting ready for checkout v7 release (#2464)
• f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
• d914b26 upgrade module to esm and update dependencies (#2463)
• 537c7ef Bump @​actions/core and @​actions/tool-cache and Remove uuid (#2459)
• 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
• 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
• 0f9f3aa Bump actions/publish-immutable-action (#2458)
• f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
• df4cb1c Update changelog for v6.0.3 (#2446)
• Additional commits viewable in compare view

Updates fluxcd/gha-workflows/.github/workflows/backport.yaml from 0.9.0 to 0.12.0

Release notes

Sourced from fluxcd/gha-workflows/.github/workflows/backport.yaml's releases.

v0.12.0

What's Changed

• Add options to setup-kubernetes by @​stealthybox in fluxcd/gha-workflows#57
• Bump the actions group across 2 directories with 3 updates by @​dependabot[bot] in fluxcd/gha-workflows#56

New Contributors

• @​stealthybox made their first contribution in fluxcd/gha-workflows#57

Full Changelog: fluxcd/gha-workflows@v0.11.0...v0.12.0

v0.11.0

What's Changed

• Bump the actions group across 2 directories with 8 updates by @​dependabot[bot] in fluxcd/gha-workflows#52
• Update kind to v0.32.0 in setup-kubernetes by @​stefanprodan in fluxcd/gha-workflows#53

Full Changelog: fluxcd/gha-workflows@v0.10.0...v0.11.0

v0.10.0

What's Changed

• Bump the actions group across 2 directories with 9 updates by @​dependabot[bot] in fluxcd/gha-workflows#36
• Bump the actions group across 2 directories with 9 updates by @​dependabot[bot] in fluxcd/gha-workflows#44
• Bump the actions group across 2 directories with 6 updates by @​dependabot[bot] in fluxcd/gha-workflows#48
• Add workflows for Flux CLI plugins by @​stefanprodan in fluxcd/gha-workflows#49

Full Changelog: fluxcd/gha-workflows@v0.9.0...v0.10.0

Commits

• 5865e5d Merge pull request #56 from fluxcd/dependabot/github_actions/actions-978047b7ac
• b10eba0 Bump the actions group across 2 directories with 3 updates
• 53908fb Merge pull request #57 from fluxcd/kind-config-passthrough
• 9f7696b setup-kubernetes: add skip-checkout and skip-tools inputs
• 07bdd72 setup-kubernetes: add cluster-name and kind-config inputs
• 526a0ab Merge pull request #53 from fluxcd/kind-v0.32.0
• 53d83eb Update kind to v0.32.0 in setup-kubernetes
• da11e8e Merge pull request #52 from fluxcd/dependabot/github_actions/actions-a9b12d6d21
• aa253a8 Bump the actions group across 2 directories with 8 updates
• 5fd6a0c Merge pull request #49 from fluxcd/cli-plugin
• Additional commits viewable in compare view

Updates actions/setup-go from 6.4.0 to 6.5.0

Release notes

Sourced from actions/setup-go's releases.

v6.5.0

What's Changed

Dependency update

• Upgrade actions dependencies by @​priyagupta108 with @​Copilot in actions/setup-go#744
• Upgrade @​types/node and typescript-eslint dependencies to resolve npm audit findings by @​HarithaVattikuti in actions/setup-go#755
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-go#758
• Upgrade version to 6.5.0 in package.json and package-lock.json by @​HarithaVattikuti in actions/setup-go#762

New Contributors

• @​priyagupta108 with @​Copilot made their first contribution in actions/setup-go#744
• @​jasongin made their first contribution in actions/setup-go#758

Full Changelog: actions/setup-go@v6...v6.5.0

Commits

• 924ae3a chore: bump version to 6.5.0 in package.json and package-lock.json (#762)
• e91cc3b Bump @​actions/cache to 5.1.0, log cache write denied (#758)
• 4a2405e chore: update @​types/node and @​typescript-eslint dependencies to latest versi...
• 78961f6 chore: update @​actions dependencies and refresh license cache (#744)
• See full diff in compare view

Updates hashicorp/setup-terraform from 4.0.0 to 4.0.1

Release notes

Sourced from hashicorp/setup-terraform's releases.

v4.0.1

BUG FIXES:

• Fix Node 24 DEP0169 url.parse() deprecation warning by updating @​hashicorp/js-releases to v1.7.7 (#549)

Changelog

Sourced from hashicorp/setup-terraform's changelog.

4.0.1 (2026-05-12)

BUG FIXES:

• Fix Node 24 DEP0169 url.parse() deprecation warning by updating @​hashicorp/js-releases to v1.7.7 (#549)

4.0.0 (2026-02-24)

BREAKING CHANGES:

• Upgrade to Node.js 24 - setup-terraform now requires Node.js 24 (#503)

3.1.2 (2024-08-19)

NOTES:

• This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

3.1.1 (2024-05-07)

BUG FIXES:

• wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)

3.1.0 (2024-04-23)

ENHANCEMENTS:

• Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 as releases for darwin/arm64 are not available (#409)

3.0.0 (2023-10-30)

NOTES:

• Updated default runtime to node20 (#346)
• The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

BUG FIXES:

• Fixed malformed stdout when wrapper is enabled (#367)

[2.0.3] (2022-11-01)

NOTES

• Reduced occurrences of GitHub Actions warnings for setting output #247

[2.0.2] (2022-10-12)

BUG FIXES

... (truncated)

Commits

• dfe3c3f Update package version
• 61e02cf Update changelog
• 36079f9 fix: update @​hashicorp/js-releases to v1.7.7 to resolve Node 24 DEP0169 warni...
• af2ccf2 update axios brace expansion flatted picomatch (#551)
• 5b1ab0e Bump follow-redirects from 1.15.11 to 1.16.0 (#542)
• ca190bf Bump miniscruff/changie-action in the github-actions group (#541)
• 30128a2 chore: update CI node version from 20 to 24 (#544)
• b0cc02d Bump undici from 6.23.0 to 6.24.1 (#539)
• 3d7cd03 Update README.md with latest versions (#536)
• fa68287 Bump actions/setup-node from 6.2.0 to 6.3.0 in the github-actions group (#537)
• Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.1.0 to 6.2.1

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

v6.2.0

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)
• support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#1778) (58e7c47)
• assumeRole failing from session tag size too large (#1808) (d6f5dc3)

v6.1.3

6.1.3 (2026-05-27)

Bug Fixes

• fix: allow kubelet token symlink in aws-actions/configure-aws-credentials#1805

v6.1.2

6.1.2 (2026-05-26)

Bug Fixes

• additional filesystem checks (#1799) (c39f282)

v6.1.1

What's Changed

• chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1722
• chore(deps-dev): bump @​types/node from 25.5.0 to 25.5.2 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1723
• chore(deps-dev): bump @​smithy/property-provider from 4.2.12 to 4.2.13 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1724
• chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1726
• chore(deps): bump @​smithy/node-http-handler from 4.5.1 to 4.5.2 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1725
• chore(deps): bump @​aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1727
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1728
• chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1729
• chore(deps-dev): bump @​types/node from 25.5.2 to 25.6.0 by @​dependabot[bot] in aws-actions/configure-aws-credentials#1730

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)
• support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#1778) (58e7c47)
• assumeRole failing from session tag size too large (#1808) (d6f5dc3)

6.1.3 (2026-05-28)

Bug Fixes

• fix: allow kubelet token symlink in #1805

6.1.2 (2026-05-26)

Bug Fixes

• additional filesystem checks (#1799) (c39f282)

6.1.1 (2026-05-05)

Miscellaneous Chores

• various dependency updates

6.1.0 (2026-04-06)

Features

... (truncated)

Commits

• 254c19b chore(main): release 6.2.1 (#1849)
• a20cf82 chore: Update dist
• 4d281fb fix: enforce allowed-account-ids on all auth paths (#1847)
• e004cdc chore(deps-dev): bump @​smithy/property-provider from 4.4.0 to 4.4.2 (#1845)
• 88aa369 chore: Update dist
• 687331b chore(deps): bump @​aws-sdk/client-sts from 3.1069.0 to 3.1075.0 (#1841)
• ea607be chore: Update dist
• 6d13606 chore(deps): bump @​smithy/node-http-handler from 4.8.0 to 4.8.2 (#1842)
• 71a32ae chore: Update dist
• b290f2c chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1844)
• Additional commits viewable in compare view

Updates docker/setup-qemu-action from 4.0.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-qemu-action#311
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-qemu-action#295
• Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0 in docker/setup-qemu-action#315
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-qemu-action#312
• Bump js-yaml from 4.1.1 to 4.2.0 in docker/setup-qemu-action#310
• Bump tmp from 0.2.6 to 0.2.7 in docker/setup-qemu-action#304
• Bump undici from 6.26.0 to 6.27.0 in docker/setup-qemu-action#308
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-qemu-action#307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

v4.1.0

• Add reset input to uninstall current emulators by @​crazy-max in docker/setup-qemu-action#21
• Bump @​docker/actions-toolkit from 0.77.0 to 0.91.0 in docker/setup-qemu-action#250 docker/setup-qemu-action#247
• Bump brace-expansion from 1.1.12 to 1.1.15 in docker/setup-qemu-action#265
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-qemu-action#286
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-qemu-action#255
• Bump flatted from 3.3.3 to 3.4.2 in docker/setup-qemu-action#257
• Bump glob from 10.3.15 to 10.5.0 in docker/setup-qemu-action#254
• Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-qemu-action#262
• Bump lodash from 4.17.23 to 4.18.1 in docker/setup-qemu-action#273
• Bump postcss from 8.5.6 to 8.5.10 in docker/setup-qemu-action#285
• Bump tar from 6.2.1 to 7.5.15 in docker/setup-qemu-action#287
• Bump tmp from 0.2.5 to 0.2.6 in docker/setup-qemu-action#291
• Bump undici from 6.23.0 to 6.26.0 in docker/setup-qemu-action#251
• Bump vite from 7.3.1 to 7.3.2 in docker/setup-qemu-action#271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

Commits

• 96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 31f08d3 [dependabot skip] chore: update generated content
• 4e7017a build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
• ea66a41 chore: allow actions-toolkit to bypass yarn age gate
• 451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 532ae00 [dependabot skip] chore: update generated content
• b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
• cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
• f0ba643 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.0.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-buildx-action#572
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-buildx-action#551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/setup-buildx-action#557 docker/setup-buildx-action#580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-buildx-action#573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-buildx-action#576
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/setup-buildx-action#562
• Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-buildx-action#577
• Bump tmp from 0.2.5 to 0.2.7 in docker/setup-buildx-action#556
• Bump undici from 6.25.0 to 6.27.0 in docker/setup-buildx-action#570
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-buildx-action#569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in docker/setup-buildx-action#489
• Bump brace-expansion from 1.1.12 to 5.0.6 in docker/setup-buildx-action#547 docker/setup-buildx-action#508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-buildx-action#540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-buildx-action#496
• Bump flatted from 3.3.3 to 3.4.2 in docker/setup-buildx-action#499
• Bump glob from 10.3.12 to 13.0.6 in docker/setup-buildx-action#495
• Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-buildx-action#504
• Bump lodash from 4.17.23 to 4.18.1 in docker/setup-buildx-action#523
• Bump picomatch from 4.0.3 to 4.0.4 in docker/setup-buildx-action#503
• Bump postcss from 8.5.6 to 8.5.10 in docker/setup-buildx-action#537
• Bump tar from 6.2.1 to 7.5.15 in docker/setup-buildx-action#545
• Bump undici from 6.23.0 to 6.25.0 in docker/setup-buildx-action#492
• Bump vite from 7.3.1 to 7.3.2 in docker/setup-buildx-action#520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

Commits

• bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 321c814 [dependabot skip] chore: update generated content
• b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 5c7b8ae [dependabot skip] chore: update generated content
• 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
• 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
• 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
• 2211273 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/login-action from 4.1.0 to 4.4.0

Release notes

Sourced from docker/login-action's releases.

v4.4.0

• Skip empty registry-auth secret mask by @​crazy-max in docker/login-action#1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/login-action#1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028
• Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031
• Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002
• Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020
• Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/login-action#976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in docker/login-action#960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in docker/login-action#970
• Bump brace-expansion from 2.0.1 to 5.0.6 in docker/login-action#993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/login-action#985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in docker/login-action#963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in docker/login-action#961
• Bump postcss from 8.5.6 to 8.5.10 in docker/login-action#979
• Bump tar from 6.2.1 to 7.5.15 in docker/login-action#991
• Bump vite from 7.3.1 to 7.3.3 in docker/login-action#986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

Commits

• af1e73f Merge pull request #1034 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• da722bd [dependabot skip] chore: update generated content
• 2916ad6 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• ca0a662 Merge pull request #1035 from crazy-max/fix-registry-auth-empty-mask
• c455755 chore: update generated content
• 4835190 skip empty registry-auth secret mask
• 992421c Merge pull request #1033 from docker/dependabot/github_actions/docker/bake-ac...
• b249b43 Merge pull request #1032 from docker/dependabot/github_actions/docker/bake-ac...
• 1b67977 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
• 9d49d6a build(deps): bump docker/bake-action/subaction/matrix
• Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.35.3 to 4.36.3

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

<...

Description has been truncated