chore(deps): Bump the crazy-max-dot-github group with 2 updates

Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.7.0 to 1.7.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](4a17dbaa9c...64a0bfaf6e) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.7.0 to 1.7.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](4a17dbaa9c...64a0bfaf6e) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #1519 from docker/dependabot/github_actions/actions/setup-node-6.4.0
2026-04-25 00:38:18 +08:00 · 2026-04-24 11:52:30 +00:00 · 2026-04-24 09:48:12 +02:00 · 2026-04-24 09:46:03 +02:00 · 2026-04-22 11:52:24 +00:00 · 2026-04-21 11:52:31 +00:00
6 changed files with 23 additions and 38 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
--- a/.github/workflows/pr-assign-author.yml
+++ b/.github/workflows/pr-assign-author.yml
@@ -11,7 +11,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      pull-requests: write
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -19,7 +19,7 @@ on:

 jobs:
  zizmor:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      security-events: write
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/yarn.lock
+++ b/yarn.lock
@@ -759,13 +759,6 @@ __metadata:
  languageName: node
  linkType: hard

-"@nodable/entities@npm:^2.1.0":
-  version: 2.1.0
-  resolution: "@nodable/entities@npm:2.1.0"
-  checksum: 10/355c55e82aebe45d4b962d16530951df51e19e3e63a27ea61ad3260c0807064619b270b9c83db10e8394f42760abd5b7f7c5b5117678c4246ce8364a4aafc637
-  languageName: node
-  linkType: hard
-
 "@npmcli/agent@npm:^2.0.0":
  version: 2.2.2
  resolution: "@npmcli/agent@npm:2.2.2"
@@ -2549,26 +2542,25 @@ __metadata:
  languageName: node
  linkType: hard

-"fast-xml-builder@npm:^1.1.5":
-  version: 1.1.5
-  resolution: "fast-xml-builder@npm:1.1.5"
+"fast-xml-builder@npm:^1.1.4":
+  version: 1.1.4
+  resolution: "fast-xml-builder@npm:1.1.4"
  dependencies:
    path-expression-matcher: "npm:^1.1.3"
-  checksum: 10/377c4ef816972e67192fd32757c50d2a9d4cccf352ceac48bda6681a0ee24fb0b1f1c892810f77886db760681f23fe0b8f62c7c0cc9469c0d2863c5c529ac1d2
+  checksum: 10/32937866aaf5a90e69d1f4ee6e15e875248d5b5d2afd70277e9e8323074de4980cef24575a591b8e43c29f405d5f12377b3bad3842dc412b0c5c17a3eaee4b6b
  languageName: node
  linkType: hard

 "fast-xml-parser@npm:^5.0.7":
-  version: 5.7.1
-  resolution: "fast-xml-parser@npm:5.7.1"
+  version: 5.5.7
+  resolution: "fast-xml-parser@npm:5.5.7"
  dependencies:
-    "@nodable/entities": "npm:^2.1.0"
-    fast-xml-builder: "npm:^1.1.5"
-    path-expression-matcher: "npm:^1.5.0"
-    strnum: "npm:^2.2.3"
+    fast-xml-builder: "npm:^1.1.4"
+    path-expression-matcher: "npm:^1.1.3"
+    strnum: "npm:^2.2.0"
  bin:
    fxparser: src/cli/cli.js
-  checksum: 10/ce7de013cae7707d12b9da8cb294265da3780bb8bfa36b17f98053654628a0142159d78746747b1ed38bdefca8b6817f051171183e69a527ba18e1df067e9bce
+  checksum: 10/b69e65cb1c6b43487f1702c5cdd6a67589e4760ba41c06826e56891594cb2d322a6b81cd15b4c01b88ef9bc58657c92cd7d86c6f0e078a2f94ede31533fbaf7e
  languageName: node
  linkType: hard

@@ -3658,13 +3650,6 @@ __metadata:
  languageName: node
  linkType: hard

-"path-expression-matcher@npm:^1.5.0":
-  version: 1.5.0
-  resolution: "path-expression-matcher@npm:1.5.0"
-  checksum: 10/28303bb9ee6831e6df14c10cd3f3f7b2d7c8d7f788d8bdb7440136fd696064c82a3e264999a0764d28e39f698275fc03a5493bec93c57ef4a22566280367dd64
-  languageName: node
-  linkType: hard
-
 "path-key@npm:^3.1.0":
  version: 3.1.1
  resolution: "path-key@npm:3.1.1"
@@ -4264,10 +4249,10 @@ __metadata:
  languageName: node
  linkType: hard

-"strnum@npm:^2.2.3":
-  version: 2.2.3
-  resolution: "strnum@npm:2.2.3"
-  checksum: 10/fb70206301858c319f59ed34fecedf90ac3b821692c2accd403d9d4a3384223a09df8fd92b130bbd4e885b67b7790715c003405ce5f959d9cabbf07d41d62aa8
+"strnum@npm:^2.2.0":
+  version: 2.2.1
+  resolution: "strnum@npm:2.2.1"
+  checksum: 10/c553d83e1adc223bc33c29c6e8b0c4a512d5d432ae636c6117a713c9e6d50d2bf2d3d6bc53cd8dc210c3cf27986904bee44e6d58ad8c767507a27d90400a572b
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
dependabot[bot]	3ff27d3602	chore(deps): Bump the crazy-max-dot-github group with 2 updates Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.7.0 to 1.7.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`4a17dbaa9c...64a0bfaf6e`) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.7.0 to 1.7.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`4a17dbaa9c...64a0bfaf6e`) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-24 11:52:30 +00:00
CrazyMax	e0fea16cbf	Merge pull request #1519 from docker/dependabot/github_actions/actions/setup-node-6.4.0 Some checks failed codeql / analyze (push) Failing after 10m25s Details validate / prepare (push) Successful in 33s Details zizmor / zizmor (push) Failing after 0s Details test / test (push) Successful in 3m16s Details validate / validate (push) Successful in 38s Details e2e / build (artifactory, Artifactory, infradock.jfrog.io, infradock.jfrog.io/test-ghaction/build-push-action, remote) (push) Failing after 57s Details e2e / build (aws, AWS ECR, 175142243308.dkr.ecr.us-east-2.amazonaws.com, 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action, remote) (push) Failing after 53s Details e2e / build (gar, Google Artifact Registry, us-east4-docker.pkg.dev, us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action, remote) (push) Failing after 52s Details e2e / build (gitlab, GitLab, registry.gitlab.com, registry.gitlab.com/test1716/test, remote) (push) Failing after 56s Details e2e / build (dockerhub, Docker Hub, , ghactionstest/ghactionstest, remote) (push) Failing after 1m1s Details e2e / build (aws, AWS ECR Public, public.ecr.aws, public.ecr.aws/q3b5f1u4/test-docker-action, remote) (push) Failing after 1m6s Details e2e / build (ghcr, GitHub, ghcr.io, ghcr.io/docker-ghactiontest/test, remote) (push) Failing after 1m2s Details e2e / build (acr, Azure Container Registry, officialgithubactions.azurecr.io, officialgithubactions.azurecr.io/test-docker-action, remote) (push) Failing after 1m15s Details ci / git-context-query (push) Failing after 6s Details e2e / build (none, distribution, Distribution, local) (push) Failing after 24s Details e2e / build (none, harbor, Harbor, local) (push) Failing after 28s Details e2e / build (none, nexus, Nexus, local) (push) Failing after 26s Details ci / path-context (push) Failing after 7s Details ci / error (push) Failing after 9s Details e2e / build (quay, Quay, quay.io, quay.io/docker_build_team/ghactiontest, remote) (push) Failing after 38s Details ci / example (push) Failing after 24s Details ci / error-buildx (push) Successful in 27s Details ci / docker-driver (push) Successful in 16s Details ci / export-docker (push) Successful in 15s Details ci / secret (push) Successful in 25s Details ci / secret-files (push) Successful in 27s Details ci / secret-envs (push) Successful in 27s Details ci / network (push) Successful in 25s Details ci / shm-size (push) Successful in 23s Details ci / ulimit (push) Successful in 23s Details ci / cgroup-parent (push) Successful in 24s Details ci / add-hosts (push) Successful in 24s Details ci / no-cache-filters (push) Successful in 26s Details ci / attests-compat (moby/buildkit:buildx-stable-1, v0.9.1) (push) Failing after 16s Details ci / provenance (, /tmp/buildx-build, binary) (push) Failing after 7s Details ci / attests-compat (moby/buildkit:buildx-stable-1, latest) (push) Successful in 38s Details ci / provenance (mode=max, /tmp/buildx-build, binary) (push) Failing after 7s Details ci / sbom (/tmp/buildx-build, binary) (push) Failing after 7s Details ci / attests-compat (moby/buildkit:latest, edge) (push) Successful in 36s Details ci / attests-compat (moby/buildkit:v0.10.6, latest) (push) Successful in 35s Details ci / sbom (type=image,name=localhost:5000/name/app:latest,push=true, image) (push) Failing after 6s Details ci / provenance (, type=image,name=localhost:5000/name/app:latest,push=true, image) (push) Failing after 36s Details ci / multi (multi) (push) Failing after 7s Details ci / multi (multi-sudo) (push) Failing after 7s Details ci / digest (docker, false, false) (push) Failing after 7s Details ci / provenance (mode=max, type=image,name=localhost:5000/name/app:latest,push=true, image) (push) Failing after 36s Details ci / digest (docker-container, false, false) (push) Failing after 7s Details ci / digest (docker-container, false, true) (push) Failing after 7s Details ci / digest (docker-container, true, false) (push) Failing after 6s Details ci / digest (docker, false, true) (push) Failing after 21s Details ci / digest (docker, true, false) (push) Successful in 20s Details ci / registry-cache (push) Failing after 7s Details ci / github-cache (push) Failing after 7s Details ci / named-context-container (push) Failing after 7s Details ci / standalone (push) Successful in 22s Details ci / docker-config-malformed (push) Successful in 14s Details ci / named-context-docker (push) Successful in 26s Details ci / named-context-pin (push) Successful in 32s Details ci / proxy-docker-config (push) Failing after 9s Details ci / proxy-buildkitd (push) Failing after 9s Details ci / multi-output (push) Failing after 6s Details ci / local-cache (push) Failing after 42s Details ci / load-and-push (push) Failing after 6s Details ci / annotations (push) Failing after 26s Details ci / summary-not-supported (push) Failing after 16s Details ci / minimal (push) Successful in 3m49s Details ci / checks (edge) (push) Successful in 22s Details ci / git-context (push) Failing after 4m3s Details ci / git-context-secret (push) Failing after 3m55s Details ci / checks (latest) (push) Successful in 22s Details ci / checks (v0.14.1) (push) Successful in 22s Details ci / annotations-disabled (push) Successful in 23s Details ci / call-check (push) Successful in 21s Details ci / summary-disable (push) Failing after 3m38s Details ci / record-upload-disable (push) Failing after 3m35s Details ci / record-retention-days (0) (push) Failing after 3m35s Details ci / record-retention-days (2) (push) Failing after 3m19s Details ci / no-default-attestations (push) Failing after 2m42s Details chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0	2026-04-24 09:48:12 +02:00
CrazyMax	f832d4c773	Merge pull request #1520 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e chore(deps): Bump the crazy-max-dot-github group with 2 updates	2026-04-24 09:46:03 +02:00
dependabot[bot]	17a24e14ed	chore(deps): Bump the crazy-max-dot-github group with 2 updates Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`d89fe92d80...4a17dbaa9c`) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`d89fe92d80...4a17dbaa9c`) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-22 11:52:24 +00:00
dependabot[bot]	ad938becb9	chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](`53b83947a5...48b55a011b`) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-21 11:52:31 +00:00