Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 5, 2025

Bumps @docker/actions-toolkit from 0.62.1 to 0.67.0.

Release notes

Sourced from @​docker/actions-toolkit's releases.

v0.67.0

Full Changelog: docker/actions-toolkit@v0.66.0...v0.67.0

v0.66.0

Full Changelog: docker/actions-toolkit@v0.65.0...v0.66.0

v0.65.0

Full Changelog: docker/actions-toolkit@v0.64.0...v0.65.0

v0.64.0

Full Changelog: docker/actions-toolkit@v0.63.0...v0.64.0

v0.63.0

Full Changelog: docker/actions-toolkit@v0.62.1...v0.63.0

Commits
  • 7ee6338 Merge pull request #844 from docker/dependabot/npm_and_yarn/sigstore/sign-4.0.1
  • 9c71407 build(deps): bump @​sigstore/sign from 3.1.0 to 4.0.1
  • 7cb0fac Merge pull request #840 from docker/dependabot/npm_and_yarn/sigstore/bundle-4...
  • 9b9d27d build(deps): bump @​sigstore/bundle from 3.1.0 to 4.0.0
  • a84516d Merge pull request #843 from crazy-max/rm-actions-attest
  • 85dfc7a sigstore: remove @​actions/attest dependency
  • 5c04d39 Merge pull request #842 from crazy-max/cache-failsafe
  • d8def31 cache: gracefully handle cache restore failures with warning
  • 7ab28f9 Merge pull request #841 from crazy-max/sigstore-multi-images
  • 6bd8db3 sigstore: multi image names support for signing
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.67.0 branch from ce7bada to 57b7e67 Compare November 5, 2025 13:58
@crazy-max
Copy link
Member

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.67.0 branch 2 times, most recently from 5c0323d to de21d5f Compare November 5, 2025 14:43
@crazy-max
Copy link
Member

@dependabot rebase

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.67.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](docker/actions-toolkit@v0.62.1...v0.67.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.67.0 branch from de21d5f to a5b45ed Compare November 5, 2025 14:54
@crazy-max crazy-max merged commit c7c5346 into master Nov 5, 2025
17 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/docker/actions-toolkit-0.67.0 branch November 5, 2025 15:00
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Nov 9, 2025
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.6.0 to 3.7.0.
Release notes

*Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).*

> v3.7.0
> ------
>
> * Bump `@​docker/actions-toolkit` from 0.56.0 to 0.67.0 in [docker/setup-qemu-action#217](https://redirect.github.com/docker/setup-qemu-action/pull/217) [docker/setup-qemu-action#230](https://redirect.github.com/docker/setup-qemu-action/pull/230)
> * Bump brace-expansion from 1.1.11 to 1.1.12 in [docker/setup-qemu-action#220](https://redirect.github.com/docker/setup-qemu-action/pull/220)
> * Bump form-data from 2.5.1 to 2.5.5 in [docker/setup-qemu-action#218](https://redirect.github.com/docker/setup-qemu-action/pull/218)
> * Bump tmp from 0.2.3 to 0.2.4 in [docker/setup-qemu-action#221](https://redirect.github.com/docker/setup-qemu-action/pull/221)
> * Bump undici from 5.28.4 to 5.29.0 in [docker/setup-qemu-action#219](https://redirect.github.com/docker/setup-qemu-action/pull/219)
>
> **Full Changelog**: <docker/setup-qemu-action@v3.6.0...v3.7.0>


Commits

* [`c7c5346`](docker/setup-qemu-action@c7c5346) Merge pull request [#230](https://redirect.github.com/docker/setup-qemu-action/issues/230) from docker/dependabot/npm\_and\_yarn/docker/actions-to...
* [`3a517a1`](docker/setup-qemu-action@3a517a1) chore: update generated content
* [`a5b45ed`](docker/setup-qemu-action@a5b45ed) build(deps): bump `@​docker/actions-toolkit` from 0.62.1 to 0.67.0
* [`3a64278`](docker/setup-qemu-action@3a64278) Merge pull request [#220](https://redirect.github.com/docker/setup-qemu-action/issues/220) from docker/dependabot/npm\_and\_yarn/brace-expansion-1...
* [`94906ba`](docker/setup-qemu-action@94906ba) chore: update generated content
* [`4027abf`](docker/setup-qemu-action@4027abf) build(deps): bump brace-expansion from 1.1.11 to 1.1.12
* [`bee0aaa`](docker/setup-qemu-action@bee0aaa) Merge pull request [#221](https://redirect.github.com/docker/setup-qemu-action/issues/221) from docker/dependabot/npm\_and\_yarn/tmp-0.2.4
* [`0d7e257`](docker/setup-qemu-action@0d7e257) chore: update generated content
* [`b869601`](docker/setup-qemu-action@b869601) build(deps): bump tmp from 0.2.3 to 0.2.4
* [`3a043ed`](docker/setup-qemu-action@3a043ed) Merge pull request [#219](https://redirect.github.com/docker/setup-qemu-action/issues/219) from docker/dependabot/npm\_and\_yarn/undici-5.29.0
* Additional commits viewable in [compare view](docker/setup-qemu-action@2910929...c7c5346)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=docker/setup-qemu-action&package-manager=github\_actions&previous-version=3.6.0&new-version=3.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify bot added a commit to robfrank/linklift that referenced this pull request Nov 10, 2025
Bumps the github-actions group with 3 updates: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [softprops/action-gh-release](https://github.com/softprops/action-gh-release) and [updatecli/updatecli-action](https://github.com/updatecli/updatecli-action).
Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0
Release notes

*Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).*

> v3.7.0
> ------
>
> * Bump `@​docker/actions-toolkit` from 0.56.0 to 0.67.0 in [docker/setup-qemu-action#217](https://redirect.github.com/docker/setup-qemu-action/pull/217) [docker/setup-qemu-action#230](https://redirect.github.com/docker/setup-qemu-action/pull/230)
> * Bump brace-expansion from 1.1.11 to 1.1.12 in [docker/setup-qemu-action#220](https://redirect.github.com/docker/setup-qemu-action/pull/220)
> * Bump form-data from 2.5.1 to 2.5.5 in [docker/setup-qemu-action#218](https://redirect.github.com/docker/setup-qemu-action/pull/218)
> * Bump tmp from 0.2.3 to 0.2.4 in [docker/setup-qemu-action#221](https://redirect.github.com/docker/setup-qemu-action/pull/221)
> * Bump undici from 5.28.4 to 5.29.0 in [docker/setup-qemu-action#219](https://redirect.github.com/docker/setup-qemu-action/pull/219)
>
> **Full Changelog**: <docker/setup-qemu-action@v3.6.0...v3.7.0>


Commits

* [`c7c5346`](docker/setup-qemu-action@c7c5346) Merge pull request [#230](https://redirect.github.com/docker/setup-qemu-action/issues/230) from docker/dependabot/npm\_and\_yarn/docker/actions-to...
* [`3a517a1`](docker/setup-qemu-action@3a517a1) chore: update generated content
* [`a5b45ed`](docker/setup-qemu-action@a5b45ed) build(deps): bump `@​docker/actions-toolkit` from 0.62.1 to 0.67.0
* [`3a64278`](docker/setup-qemu-action@3a64278) Merge pull request [#220](https://redirect.github.com/docker/setup-qemu-action/issues/220) from docker/dependabot/npm\_and\_yarn/brace-expansion-1...
* [`94906ba`](docker/setup-qemu-action@94906ba) chore: update generated content
* [`4027abf`](docker/setup-qemu-action@4027abf) build(deps): bump brace-expansion from 1.1.11 to 1.1.12
* [`bee0aaa`](docker/setup-qemu-action@bee0aaa) Merge pull request [#221](https://redirect.github.com/docker/setup-qemu-action/issues/221) from docker/dependabot/npm\_and\_yarn/tmp-0.2.4
* [`0d7e257`](docker/setup-qemu-action@0d7e257) chore: update generated content
* [`b869601`](docker/setup-qemu-action@b869601) build(deps): bump tmp from 0.2.3 to 0.2.4
* [`3a043ed`](docker/setup-qemu-action@3a043ed) Merge pull request [#219](https://redirect.github.com/docker/setup-qemu-action/issues/219) from docker/dependabot/npm\_and\_yarn/undici-5.29.0
* Additional commits viewable in [compare view](docker/setup-qemu-action@2910929...c7c5346)
  
Updates `softprops/action-gh-release` from 2.4.1 to 2.4.2
Release notes

*Sourced from [softprops/action-gh-release's releases](https://github.com/softprops/action-gh-release/releases).*

> v2.4.2
> ------
>
> What's Changed
> --------------
>
> ### Exciting New Features 🎉
>
> * feat: Ensure generated release notes cannot be over 125000 characters by [`@​BeryJu`](https://github.com/BeryJu) in [softprops/action-gh-release#684](https://redirect.github.com/softprops/action-gh-release/pull/684)
>
> ### Other Changes 🔄
>
> * dependency updates
>
> New Contributors
> ----------------
>
> * [`@​BeryJu`](https://github.com/BeryJu) made their first contribution in [softprops/action-gh-release#684](https://redirect.github.com/softprops/action-gh-release/pull/684)
>
> **Full Changelog**: <softprops/action-gh-release@v2.4.1...v2.4.2>


Changelog

*Sourced from [softprops/action-gh-release's changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md).*

> 2.4.2
> -----
>
> What's Changed
> --------------
>
> ### Exciting New Features 🎉
>
> * feat: Ensure generated release notes cannot be over 125000 characters by [`@​BeryJu`](https://github.com/BeryJu) in [softprops/action-gh-release#684](https://redirect.github.com/softprops/action-gh-release/pull/684)
>
> ### Other Changes 🔄
>
> * dependency updates
>
> 2.4.1
> -----
>
> What's Changed
> --------------
>
> ### Other Changes 🔄
>
> * fix(util): support brace expansion globs containing commas in parseInputFiles by [`@​Copilot`](https://github.com/Copilot) in [softprops/action-gh-release#672](https://redirect.github.com/softprops/action-gh-release/pull/672)
> * fix: gracefully fallback to body when body\_path cannot be read by [`@​Copilot`](https://github.com/Copilot) in [softprops/action-gh-release#671](https://redirect.github.com/softprops/action-gh-release/pull/671)
>
> 2.4.0
> -----
>
> What's Changed
> --------------
>
> ### Exciting New Features 🎉
>
> * feat(action): respect working\_directory for files globs by [`@​stephenway`](https://github.com/stephenway) in [softprops/action-gh-release#667](https://redirect.github.com/softprops/action-gh-release/pull/667)
>
> 2.3.4
> -----
>
> What's Changed
> --------------
>
> ### Bug fixes 🐛
>
> * fix(action): handle 422 already\_exists race condition by [`@​stephenway`](https://github.com/stephenway) in [softprops/action-gh-release#665](https://redirect.github.com/softprops/action-gh-release/pull/665)
>
> ### Other Changes 🔄
>
> * dependency updates
>
> 2.3.3
> -----
>
> What's Changed
> --------------
>
> ### Exciting New Features 🎉
>
> * feat: add input option `overwrite_files` by [`@​asfernandes`](https://github.com/asfernandes) in [softprops/action-gh-release#343](https://redirect.github.com/softprops/action-gh-release/pull/343)
>
> ### Other Changes 🔄

... (truncated)


Commits

* [`5be0e66`](softprops/action-gh-release@5be0e66) release 2.4.2
* [`af658b4`](softprops/action-gh-release@af658b4) feat: Ensure generated release notes cannot be over 125000 characters ([#684](https://redirect.github.com/softprops/action-gh-release/issues/684))
* [`237aacc`](softprops/action-gh-release@237aacc) chore: bump node to 24.11.0
* [`00362be`](softprops/action-gh-release@00362be) chore(deps): bump the npm group with 5 updates ([#687](https://redirect.github.com/softprops/action-gh-release/issues/687))
* [`0adea5a`](softprops/action-gh-release@0adea5a) chore(deps): bump the npm group with 3 updates ([#686](https://redirect.github.com/softprops/action-gh-release/issues/686))
* [`aa05f9d`](softprops/action-gh-release@aa05f9d) chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 in the github-action...
* [`bbaccb3`](softprops/action-gh-release@bbaccb3) chore(deps): bump `@​types/node` from 20.19.21 to 20.19.22 in the npm group ([#682](https://redirect.github.com/softprops/action-gh-release/issues/682))
* [`50fda3f`](softprops/action-gh-release@50fda3f) chore(deps): bump vite from 7.1.5 to 7.1.11 ([#681](https://redirect.github.com/softprops/action-gh-release/issues/681))
* [`5434409`](softprops/action-gh-release@5434409) chore(deps): bump `@​types/node` from 20.19.19 to 20.19.21 in the npm group ([#679](https://redirect.github.com/softprops/action-gh-release/issues/679))
* See full diff in [compare view](softprops/action-gh-release@6da8fa9...5be0e66)
  
Updates `updatecli/updatecli-action` from 2.94.0 to 2.95.0
Release notes

*Sourced from [updatecli/updatecli-action's releases](https://github.com/updatecli/updatecli-action/releases).*

> v2.95.0 🌈
> ---------
>
> Changes
> -------
>
> * deps: update updatecli version to v0.110.2 @[updateclibot[bot]](https://github.com/apps/updateclibot) ([#977](https://redirect.github.com/updatecli/updatecli-action/issues/977))
> * deps: update updatecli version to v0.110.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) ([#976](https://redirect.github.com/updatecli/updatecli-action/issues/976))
> * deps: update updatecli version to v0.110.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) ([#975](https://redirect.github.com/updatecli/updatecli-action/issues/975))
> * Bump "`@​types/node`" package version @[updateclibot[bot]](https://github.com/apps/updateclibot) ([#973](https://redirect.github.com/updatecli/updatecli-action/issues/973))
>
> Contributors
> ------------
>
> [`@​olblak`](https://github.com/olblak), [`@​updateclibot`](https://github.com/updateclibot)[bot] and [updateclibot[bot]](https://github.com/apps/updateclibot)


Commits

* [`9c04c99`](updatecli/updatecli-action@9c04c99) deps: update updatecli version to v0.110.2 ([#977](https://redirect.github.com/updatecli/updatecli-action/issues/977))
* [`f1c1efe`](updatecli/updatecli-action@f1c1efe) deps: update updatecli version to v0.110.1 ([#976](https://redirect.github.com/updatecli/updatecli-action/issues/976))
* [`deccdf0`](updatecli/updatecli-action@deccdf0) Update updatecli.yaml to v0.110.1
* [`8075ad1`](updatecli/updatecli-action@8075ad1) deps: update updatecli version to v0.110.0 ([#975](https://redirect.github.com/updatecli/updatecli-action/issues/975))
* [`ff76bdc`](updatecli/updatecli-action@ff76bdc) Bump "`@​types/node`" package version ([#973](https://redirect.github.com/updatecli/updatecli-action/issues/973))
* See full diff in [compare view](updatecli/updatecli-action@719e359...9c04c99)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants