preserve names in esbuild bundle by crazy-max · Pull Request #311 · docker/setup-qemu-action

crazy-max · 2026-06-29T12:40:43Z

fixes #306

This change preserves function and class names during esbuild minification so bundled cache error handling keeps the names it relies on at runtime.

The bundled @actions/cache code compares custom error names such as ReserveCacheError.name when deciding whether a cache reservation race should be logged as info or warning. Without preserved names, esbuild can minify the class name while the thrown error still has this.name = "ReserveCacheError", which makes the comparison fail and turns expected cache reservation races into warnings.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

thaJeztah

LGTM

…updates [skip ci] Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `5.0.4` | `5.0.5` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.159` | `1.0.165` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` | Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 5.0.4 to 5.0.5 Release notes *Sourced from [zgosalvez/github-actions-ensure-sha-pinned-actions's releases](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases).* > v5.0.5 > ------ > > What's Changed > -------------- > > * Bump undici from 6.24.1 to 6.27.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#317](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/317) > * Bump actions/checkout from 6.0.2 to 6.0.3 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#316](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/316) > * Bump jest from 30.3.0 to 30.4.2 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#315](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/315) > * Bump eslint from 10.1.0 to 10.3.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#314](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/314) > * Bump yaml from 2.8.3 to 2.8.4 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#313](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/313) > * Bump actions/setup-node from 6.2.0 to 6.4.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#312](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/312) > * Bump actions/cache from 5.0.3 to 5.0.5 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#311](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/311) > * Bump `@actions/core` from 3.0.0 to 3.0.1 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#310](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/310) > * Bump `@actions/glob` from 0.6.1 to 0.7.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#309](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/309) > * Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.25 to 3.0.1 by [`@dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#305](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/305) > * Fix dependabot security alert 59 by [`@zgosalvez`](https://github.com/zgosalvez) in [zgosalvez/github-actions-ensure-sha-pinned-actions#318](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/318) > * Hotfix/security60 by [`@zgosalvez`](https://github.com/zgosalvez) in [zgosalvez/github-actions-ensure-sha-pinned-actions#319](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/319) > * Fix js-yaml dependency issue by [`@zgosalvez`](https://github.com/zgosalvez) in [zgosalvez/github-actions-ensure-sha-pinned-actions#320](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/320) > > **Full Changelog**: <zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.5> Commits * [`3db98c0`](zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0) Fix js-yaml dependency issue ([#320](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/320)) * [`6fd9901`](zgosalvez/github-actions-ensure-sha-pinned-actions@6fd9901) Hotfix/security60 ([#319](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/319)) * [`dcb5236`](zgosalvez/github-actions-ensure-sha-pinned-actions@dcb5236) Fix dependabot security alert 59 ([#318](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/318)) * [`afa7540`](zgosalvez/github-actions-ensure-sha-pinned-actions@afa7540) Bump zgosalvez/github-actions-get-action-runs-using-version ([#305](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/305)) * [`10d4404`](zgosalvez/github-actions-ensure-sha-pinned-actions@10d4404) Bump `@actions/glob` from 0.6.1 to 0.7.0 ([#309](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/309)) * [`28363be`](zgosalvez/github-actions-ensure-sha-pinned-actions@28363be) Bump `@actions/core` from 3.0.0 to 3.0.1 ([#310](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/310)) * [`0085b7f`](zgosalvez/github-actions-ensure-sha-pinned-actions@0085b7f) Bump actions/cache from 5.0.3 to 5.0.5 ([#311](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/311)) * [`4083b6a`](zgosalvez/github-actions-ensure-sha-pinned-actions@4083b6a) Bump actions/setup-node from 6.2.0 to 6.4.0 ([#312](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/312)) * [`c2d39dd`](zgosalvez/github-actions-ensure-sha-pinned-actions@c2d39dd) Bump yaml from 2.8.3 to 2.8.4 ([#313](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/313)) * [`13e30ef`](zgosalvez/github-actions-ensure-sha-pinned-actions@13e30ef) Bump eslint from 10.1.0 to 10.3.0 ([#314](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/314)) * Additional commits viewable in [compare view](zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236...3db98c0) Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@crazy-max`](https://github.com/crazy-max) in [docker/setup-qemu-action#311](https://redirect.github.com/docker/setup-qemu-action/pull/311) > * Bump `@actions/core` from 3.0.0 to 3.0.1 in [docker/setup-qemu-action#295](https://redirect.github.com/docker/setup-qemu-action/pull/295) > * Bump `@docker/actions-toolkit` from 0.91.0 to 0.92.0 in [docker/setup-qemu-action#315](https://redirect.github.com/docker/setup-qemu-action/pull/315) > * Bump `@sigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-qemu-action#312](https://redirect.github.com/docker/setup-qemu-action/pull/312) > * Bump js-yaml from 4.1.1 to 4.2.0 in [docker/setup-qemu-action#310](https://redirect.github.com/docker/setup-qemu-action/pull/310) > * Bump tmp from 0.2.6 to 0.2.7 in [docker/setup-qemu-action#304](https://redirect.github.com/docker/setup-qemu-action/pull/304) > * Bump undici from 6.26.0 to 6.27.0 in [docker/setup-qemu-action#308](https://redirect.github.com/docker/setup-qemu-action/pull/308) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-qemu-action#307](https://redirect.github.com/docker/setup-qemu-action/pull/307) > > **Full Changelog**: <docker/setup-qemu-action@v4.1.0...v4.2.0> Commits * [`96fe6ef`](docker/setup-qemu-action@96fe6ef) Merge pull request [#315](https://redirect.github.com/docker/setup-qemu-action/issues/315) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`31f08d3`](docker/setup-qemu-action@31f08d3) [dependabot skip] chore: update generated content * [`4e7017a`](docker/setup-qemu-action@4e7017a) build(deps): bump `@docker/actions-toolkit` from 0.91.0 to 0.92.0 * [`0eca235`](docker/setup-qemu-action@0eca235) Merge pull request [#314](https://redirect.github.com/docker/setup-qemu-action/issues/314) from crazy-max/fix-yarn-preapprove-actions-toolkit * [`ea66a41`](docker/setup-qemu-action@ea66a41) chore: allow actions-toolkit to bypass yarn age gate * [`451542b`](docker/setup-qemu-action@451542b) Merge pull request [#308](https://redirect.github.com/docker/setup-qemu-action/issues/308) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`532ae00`](docker/setup-qemu-action@532ae00) [dependabot skip] chore: update generated content * [`b6f5af6`](docker/setup-qemu-action@b6f5af6) build(deps): bump undici from 6.26.0 to 6.27.0 * [`cf96b86`](docker/setup-qemu-action@cf96b86) Merge pull request [#304](https://redirect.github.com/docker/setup-qemu-action/issues/304) from docker/dependabot/npm\_and\_yarn/tmp-0.2.7 * [`f0ba643`](docker/setup-qemu-action@f0ba643) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](docker/setup-qemu-action@0611638...96fe6ef) Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-buildx-action's releases](https://github.com/docker/setup-buildx-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@crazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#572](https://redirect.github.com/docker/setup-buildx-action/pull/572) > * Bump `@actions/core` from 3.0.0 to 3.0.1 in [docker/setup-buildx-action#551](https://redirect.github.com/docker/setup-buildx-action/pull/551) > * Bump `@docker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/setup-buildx-action#557](https://redirect.github.com/docker/setup-buildx-action/pull/557) [docker/setup-buildx-action#580](https://redirect.github.com/docker/setup-buildx-action/pull/580) > * Bump `@sigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-buildx-action#573](https://redirect.github.com/docker/setup-buildx-action/pull/573) > * Bump `@sigstore/verify` from 3.1.0 to 3.1.1 in [docker/setup-buildx-action#576](https://redirect.github.com/docker/setup-buildx-action/pull/576) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/setup-buildx-action#562](https://redirect.github.com/docker/setup-buildx-action/pull/562) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/setup-buildx-action#577](https://redirect.github.com/docker/setup-buildx-action/pull/577) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/setup-buildx-action#556](https://redirect.github.com/docker/setup-buildx-action/pull/556) > * Bump undici from 6.25.0 to 6.27.0 in [docker/setup-buildx-action#570](https://redirect.github.com/docker/setup-buildx-action/pull/570) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-buildx-action#569](https://redirect.github.com/docker/setup-buildx-action/pull/569) > > **Full Changelog**: <docker/setup-buildx-action@v4.1.0...v4.2.0> Commits * [`bb05f3f`](docker/setup-buildx-action@bb05f3f) Merge pull request [#580](https://redirect.github.com/docker/setup-buildx-action/issues/580) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`321c814`](docker/setup-buildx-action@321c814) [dependabot skip] chore: update generated content * [`b9a36ef`](docker/setup-buildx-action@b9a36ef) build(deps): bump `@docker/actions-toolkit` from 0.91.0 to 0.92.0 * [`ebeab24`](docker/setup-buildx-action@ebeab24) Merge pull request [#570](https://redirect.github.com/docker/setup-buildx-action/issues/570) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`5c7b8ae`](docker/setup-buildx-action@5c7b8ae) [dependabot skip] chore: update generated content * [`037e618`](docker/setup-buildx-action@037e618) build(deps): bump undici from 6.25.0 to 6.27.0 * [`66080e5`](docker/setup-buildx-action@66080e5) Merge pull request [#577](https://redirect.github.com/docker/setup-buildx-action/issues/577) from docker/dependabot/npm\_and\_yarn/sigstore-4.1.1 * [`409aef0`](docker/setup-buildx-action@409aef0) Merge pull request [#562](https://redirect.github.com/docker/setup-buildx-action/issues/562) from docker/dependabot/npm\_and\_yarn/js-yaml-4.2.0 * [`49c6e42`](docker/setup-buildx-action@49c6e42) build(deps): bump sigstore from 4.1.0 to 4.1.1 * [`2211273`](docker/setup-buildx-action@2211273) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](docker/setup-buildx-action@d7f5e7f...bb05f3f) Updates `anthropics/claude-code-action` from 1.0.159 to 1.0.165 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.165 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.165> > > v1.0.164 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.164> > > v1.0.163 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.163> > > v1.0.162 > -------- > > What's Changed > -------------- > > * Add agent-approval-check composite action by [`@km-anthropic`](https://github.com/km-anthropic) in [anthropics/claude-code-action#1429](https://redirect.github.com/anthropics/claude-code-action/pull/1429) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.162> > > v1.0.161 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.161> > > v1.0.160 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.160> Commits * [`558b1d6`](anthropics/claude-code-action@558b1d6) chore: bump Claude Code to 2.1.201 and Agent SDK to 0.3.201 * [`01872cc`](anthropics/claude-code-action@01872cc) chore: bump Claude Code to 2.1.200 and Agent SDK to 0.3.200 * [`769e3bd`](anthropics/claude-code-action@769e3bd) chore: bump Claude Code to 2.1.199 and Agent SDK to 0.3.199 * [`6c0083b`](anthropics/claude-code-action@6c0083b) chore: bump Claude Code to 2.1.198 and Agent SDK to 0.3.198 * [`846d5d8`](anthropics/claude-code-action@846d5d8) Add agent-approval-check composite action ([#1429](https://redirect.github.com/anthropics/claude-code-action/issues/1429)) * [`fad22eb`](anthropics/claude-code-action@fad22eb) chore: bump Claude Code to 2.1.197 and Agent SDK to 0.3.197 * [`4633baf`](anthropics/claude-code-action@4633baf) chore: bump Claude Code to 2.1.196 and Agent SDK to 0.3.196 * See full diff in [compare view](anthropics/claude-code-action@a92e7c7...558b1d6) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.36.3 Release notes *Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).* > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) ... (truncated) Commits * [`54f647b`](github/codeql-action@54f647b) Merge pull request [#3984](https://redirect.github.com/github/codeql-action/issues/3984) from github/update-v4.36.3-1f34ec164 * [`e78819e`](github/codeql-action@e78819e) Trigger checks * [`2c9d3d6`](github/codeql-action@2c9d3d6) Update changelog for v4.36.3 * [`1f34ec1`](github/codeql-action@1f34ec1) Merge pull request [#3983](https://redirect.github.com/github/codeql-action/issues/3983) from github/mbg/repo-props/ff-for-config-file-prop * [`d5f0145`](github/codeql-action@d5f0145) Log when repository property has a value but is ignored * [`f27f563`](github/codeql-action@f27f563) Add test for when the FF is off * [`0025d0f`](github/codeql-action@0025d0f) Use FF * [`f7fa18f`](github/codeql-action@f7fa18f) Add FF for config file repo property * [`628fc3f`](github/codeql-action@628fc3f) Merge pull request [#3979](https://redirect.github.com/github/codeql-action/issues/3979) from github/henrymercer/overlay-db-cleanup-size-tele... * [`9cfb67b`](github/codeql-action@9cfb67b) Add clarifying comments * Additional commits viewable in [compare view](github/codeql-action@8aad20d...54f647b) Updates `docker/login-action` from 4.2.0 to 4.4.0 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.4.0 > ------ > > * Skip empty `registry-auth` secret mask by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1035](https://redirect.github.com/docker/login-action/pull/1035) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1077.0 [docker/login-action#1034](https://redirect.github.com/docker/login-action/pull/1034) > > **Full Changelog**: <docker/login-action@v4.3.0...v4.4.0> > > v4.3.0 > ------ > > * Preserve names in esbuild bundle by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1022](https://redirect.github.com/docker/login-action/pull/1022) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1076.0 [docker/login-action#999](https://redirect.github.com/docker/login-action/pull/999) [docker/login-action#1030](https://redirect.github.com/docker/login-action/pull/1030) > * Bump `@docker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/login-action#1004](https://redirect.github.com/docker/login-action/pull/1004) [docker/login-action#1027](https://redirect.github.com/docker/login-action/pull/1027) > * Bump `@sigstore/core` from 3.1.0 to 3.2.1 in [docker/login-action#1023](https://redirect.github.com/docker/login-action/pull/1023) > * Bump `@sigstore/verify` from 3.1.0 to 3.1.1 in [docker/login-action#1029](https://redirect.github.com/docker/login-action/pull/1029) > * Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [docker/login-action#1017](https://redirect.github.com/docker/login-action/pull/1017) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/login-action#1028](https://redirect.github.com/docker/login-action/pull/1028) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/login-action#1031](https://redirect.github.com/docker/login-action/pull/1031) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/login-action#1002](https://redirect.github.com/docker/login-action/pull/1002) > * Bump undici from 6.24.1 to 6.27.0 in [docker/login-action#1020](https://redirect.github.com/docker/login-action/pull/1020) > * Bump vite from 7.3.3 to 7.3.6 in [docker/login-action#1019](https://redirect.github.com/docker/login-action/pull/1019) > > **Full Changelog**: <docker/login-action@v4.2.0...v4.3.0> Commits * [`af1e73f`](docker/login-action@af1e73f) Merge pull request [#1034](https://redirect.github.com/docker/login-action/issues/1034) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen... * [`da722bd`](docker/login-action@da722bd) [dependabot skip] chore: update generated content * [`2916ad6`](docker/login-action@2916ad6) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`ca0a662`](docker/login-action@ca0a662) Merge pull request [#1035](https://redirect.github.com/docker/login-action/issues/1035) from crazy-max/fix-registry-auth-empty-mask * [`c455755`](docker/login-action@c455755) chore: update generated content * [`4835190`](docker/login-action@4835190) skip empty registry-auth secret mask * [`992421c`](docker/login-action@992421c) Merge pull request [#1033](https://redirect.github.com/docker/login-action/issues/1033) from docker/dependabot/github\_actions/docker/bake-ac... * [`b249b43`](docker/login-action@b249b43) Merge pull request [#1032](https://redirect.github.com/docker/login-action/issues/1032) from docker/dependabot/github\_actions/docker/bake-ac... * [`1b67977`](docker/login-action@1b67977) build(deps): bump docker/bake-action from 7.2.0 to 7.3.0 * [`9d49d6a`](docker/login-action@9d49d6a) build(deps): bump docker/bake-action/subaction/matrix * Additional commits viewable in [compare view](docker/login-action@650006c...af1e73f) Updates `github/codeql-action/init` from 4.36.2 to 4.36.3 Release notes *Sourced from [github/codeql-action/init's releases](https://github.com/github/codeql-action/releases).* > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/init's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) ... (truncated) Commits * [`54f647b`](github/codeql-action@54f647b) Merge pull request [#3984](https://redirect.github.com/github/codeql-action/issues/3984) from github/update-v4.36.3-1f34ec164 * [`e78819e`](github/codeql-action@e78819e) Trigger checks * [`2c9d3d6`](github/codeql-action@2c9d3d6) Update changelog for v4.36.3 * [`1f34ec1`](github/codeql-action@1f34ec1) Merge pull request [#3983](https://redirect.github.com/github/codeql-action/issues/3983) from github/mbg/repo-props/ff-for-config-file-prop * [`d5f0145`](github/codeql-action@d5f0145) Log when repository property has a value but is ignored * [`f27f563`](github/codeql-action@f27f563) Add test for when the FF is off * [`0025d0f`](github/codeql-action@0025d0f) Use FF * [`f7fa18f`](github/codeql-action@f7fa18f) Add FF for config file repo property * [`628fc3f`](github/codeql-action@628fc3f) Merge pull request [#3979](https://redirect.github.com/github/codeql-action/issues/3979) from github/henrymercer/overlay-db-cleanup-size-tele... * [`9cfb67b`](github/codeql-action@9cfb67b) Add clarifying comments * Additional commits viewable in [compare view](github/codeql-action@8aad20d...54f647b) Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3 Release notes *Sourced from [github/codeql-action/analyze's releases](https://github.com/github/codeql-action/releases).* > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/analyze's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) ... (truncated) Commits * [`54f647b`](github/codeql-action@54f647b) Merge pull request [#3984](https://redirect.github.com/github/codeql-action/issues/3984) from github/update-v4.36.3-1f34ec164 * [`e78819e`](github/codeql-action@e78819e) Trigger checks * [`2c9d3d6`](github/codeql-action@2c9d3d6) Update changelog for v4.36.3 * [`1f34ec1`](github/codeql-action@1f34ec1) Merge pull request [#3983](https://redirect.github.com/github/codeql-action/issues/3983) from github/mbg/repo-props/ff-for-config-file-prop * [`d5f0145`](github/codeql-action@d5f0145) Log when repository property has a value but is ignored * [`f27f563`](github/codeql-action@f27f563) Add test for when the FF is off * [`0025d0f`](github/codeql-action@0025d0f) Use FF * [`f7fa18f`](github/codeql-action@f7fa18f) Add FF for config file repo property * [`628fc3f`](github/codeql-action@628fc3f) Merge pull request [#3979](https://redirect.github.com/github/codeql-action/issues/3979) from github/henrymercer/overlay-db-cleanup-size-tele... * [`9cfb67b`](github/codeql-action@9cfb67b) Add clarifying comments * Additional commits viewable in [compare view](github/codeql-action@8aad20d...54f647b)

… updates [skip ci] Bumps the github-actions group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.3.0` | `5.5.0` | | [graalvm/setup-graalvm](https://github.com/graalvm/setup-graalvm) | `1.5.6` | `1.6.3` | | [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) | `6.2.2` | `6.2.3` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.151` | `1.0.175` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.313.0` | `1.319.0` | | [updatecli/updatecli-action](https://github.com/updatecli/updatecli-action) | `3.3.0` | `3.4.0` | | [robfrank/kamal-accessories-updater](https://github.com/robfrank/kamal-accessories-updater) | `26.4.0` | `26.7.0` | Updates `actions/setup-python` from 6.2.0 to 6.3.0 Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.3.0 > ------ > > What's Changed > -------------- > > ### Enhancement > > * Add RHEL support and include Linux distro in cache keys by [`@priyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1323](https://redirect.github.com/actions/setup-python/pull/1323) > * Fix pip cache error handling on Windows by [`@priyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1040](https://redirect.github.com/actions/setup-python/pull/1040) > > ### Dependency update > > * Upgrade minimatch from 3.1.2 to 3.1.5 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1281](https://redirect.github.com/actions/setup-python/pull/1281) > * Upgrade actions dependencies by [`@gowridurgad`](https://github.com/gowridurgad) with [`@Copilot`](https://github.com/Copilot) in [actions/setup-python#1303](https://redirect.github.com/actions/setup-python/pull/1303) > * Upgrade `@actions/cache` to 5.1.0, log cache write denied by [`@jasongin`](https://github.com/jasongin) in [actions/setup-python#1324](https://redirect.github.com/actions/setup-python/pull/1324) > * Upgrade dependency versions and test workflow configuration by [`@HarithaVattikuti`](https://github.com/HarithaVattikuti) in [actions/setup-python#1322](https://redirect.github.com/actions/setup-python/pull/1322) > > ### Documentation > > * Update advanced-usage.md by [`@Dunky-Z`](https://github.com/Dunky-Z) in [actions/setup-python#811](https://redirect.github.com/actions/setup-python/pull/811) > > New Contributors > ---------------- > > * [`@gowridurgad`](https://github.com/gowridurgad) with [`@Copilot`](https://github.com/Copilot) made their first contribution in [actions/setup-python#1303](https://redirect.github.com/actions/setup-python/pull/1303) > * [`@jasongin`](https://github.com/jasongin) made their first contribution in [actions/setup-python#1324](https://redirect.github.com/actions/setup-python/pull/1324) > * [`@Dunky-Z`](https://github.com/Dunky-Z) made their first contribution in [actions/setup-python#811](https://redirect.github.com/actions/setup-python/pull/811) > > **Full Changelog**: <https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0> Commits * [`ece7cb0`](https://github.com/actions/setup-python/commit/ece7cb06caefa5fff74198d8649806c4678c61a1) Fix pip cache error handling on Windows. ([#1040](https://redirect.github.com/actions/setup-python/issues/1040)) * [`1d18d7a`](https://github.com/actions/setup-python/commit/1d18d7af5f767c1259ede05a0a5bcc30f3dcf1cf) Update advanced-usage.md ([#811](https://redirect.github.com/actions/setup-python/issues/811)) * [`d2b357a`](https://github.com/actions/setup-python/commit/d2b357a6a3a3687dd6781a416c0d24fcfd68660e) Update dependency versions and test workflow configuration ([#1322](https://redirect.github.com/actions/setup-python/issues/1322)) * [`8f639b1`](https://github.com/actions/setup-python/commit/8f639b1e75c1048640734b2bb46e22cecf136982) Merge pull request [#1324](https://redirect.github.com/actions/setup-python/issues/1324) from jasongin/update-actions-cache-5.1.0 * [`6731c2b`](https://github.com/actions/setup-python/commit/6731c2ba87f530c26324d128c8fdd53499a4d4b0) Resolve high-severity audit issues * [`0cb1a84`](https://github.com/actions/setup-python/commit/0cb1a84326b90186fcd211036c65b42819794c87) Add RHEL support and include Linux distro in cache keys ([#1323](https://redirect.github.com/actions/setup-python/issues/1323)) * [`dc6eab6`](https://github.com/actions/setup-python/commit/dc6eab6194394e0119523369788b507096f923e2) Update dist * [`6f4b74b`](https://github.com/actions/setup-python/commit/6f4b74bfa2f520a380a620de3615c0dac427f4d3) Strict equality * [`fa8bde1`](https://github.com/actions/setup-python/commit/fa8bde1a9cc6347d06948d66bcd68c598b79eaea) Bump `@actions/cache` to 5.1.0, log cache write denied * [`c8813ba`](https://github.com/actions/setup-python/commit/c8813ba1bc76ebf779b911ad8ffccbf2e449cb48) Upgrade [`@actions`](https://github.com/actions) dependencies and update licenses ([#1303](https://redirect.github.com/actions/setup-python/issues/1303)) * Additional commits viewable in [compare view](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1) Updates `docker/login-action` from 4.2.0 to 4.4.0 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.4.0 > ------ > > * Skip empty `registry-auth` secret mask by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1035](https://redirect.github.com/docker/login-action/pull/1035) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1077.0 [docker/login-action#1034](https://redirect.github.com/docker/login-action/pull/1034) > > **Full Changelog**: <https://github.com/docker/login-action/compare/v4.3.0...v4.4.0> > > v4.3.0 > ------ > > * Preserve names in esbuild bundle by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1022](https://redirect.github.com/docker/login-action/pull/1022) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1076.0 [docker/login-action#999](https://redirect.github.com/docker/login-action/pull/999) [docker/login-action#1030](https://redirect.github.com/docker/login-action/pull/1030) > * Bump `@docker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/login-action#1004](https://redirect.github.com/docker/login-action/pull/1004) [docker/login-action#1027](https://redirect.github.com/docker/login-action/pull/1027) > * Bump `@sigstore/core` from 3.1.0 to 3.2.1 in [docker/login-action#1023](https://redirect.github.com/docker/login-action/pull/1023) > * Bump `@sigstore/verify` from 3.1.0 to 3.1.1 in [docker/login-action#1029](https://redirect.github.com/docker/login-action/pull/1029) > * Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [docker/login-action#1017](https://redirect.github.com/docker/login-action/pull/1017) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/login-action#1028](https://redirect.github.com/docker/login-action/pull/1028) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/login-action#1031](https://redirect.github.com/docker/login-action/pull/1031) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/login-action#1002](https://redirect.github.com/docker/login-action/pull/1002) > * Bump undici from 6.24.1 to 6.27.0 in [docker/login-action#1020](https://redirect.github.com/docker/login-action/pull/1020) > * Bump vite from 7.3.3 to 7.3.6 in [docker/login-action#1019](https://redirect.github.com/docker/login-action/pull/1019) > > **Full Changelog**: <https://github.com/docker/login-action/compare/v4.2.0...v4.3.0> Commits * [`af1e73f`](https://github.com/docker/login-action/commit/af1e73f918a031802d376d3c8bbc3fe56130a9b0) Merge pull request [#1034](https://redirect.github.com/docker/login-action/issues/1034) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen... * [`da722bd`](https://github.com/docker/login-action/commit/da722bde43bacb027adfc67d42dbaa4c0f9e550b) [dependabot skip] chore: update generated content * [`2916ad6`](https://github.com/docker/login-action/commit/2916ad60bd5cb72f07aa54c69fdcc61749c09b7a) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`ca0a662`](https://github.com/docker/login-action/commit/ca0a662f786e4cfddce972005bd68f3dafc3a903) Merge pull request [#1035](https://redirect.github.com/docker/login-action/issues/1035) from crazy-max/fix-registry-auth-empty-mask * [`c455755`](https://github.com/docker/login-action/commit/c455755a579833bf0d2e4e54e3beb413ef10cc80) chore: update generated content * [`4835190`](https://github.com/docker/login-action/commit/48351901f89581a7c12870c787d3f06d1f498438) skip empty registry-auth secret mask * [`992421c`](https://github.com/docker/login-action/commit/992421c6e6806a7f6df609d1bfff374f9eca3004) Merge pull request [#1033](https://redirect.github.com/docker/login-action/issues/1033) from docker/dependabot/github\_actions/docker/bake-ac... * [`b249b43`](https://github.com/docker/login-action/commit/b249b43765525dd7951068267a34cf63f22ab4f0) Merge pull request [#1032](https://redirect.github.com/docker/login-action/issues/1032) from docker/dependabot/github\_actions/docker/bake-ac... * [`1b67977`](https://github.com/docker/login-action/commit/1b67977736863551a88ff218642a2d7628b10520) build(deps): bump docker/bake-action from 7.2.0 to 7.3.0 * [`9d49d6a`](https://github.com/docker/login-action/commit/9d49d6a3234c78daa10c3c12183ef7b6caa8e69e) build(deps): bump docker/bake-action/subaction/matrix * Additional commits viewable in [compare view](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0) Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@crazy-max`](https://github.com/crazy-max) in [docker/setup-qemu-action#311](https://redirect.github.com/docker/setup-qemu-action/pull/311) > * Bump `@actions/core` from 3.0.0 to 3.0.1 in [docker/setup-qemu-action#295](https://redirect.github.com/docker/setup-qemu-action/pull/295) > * Bump `@docker/actions-toolkit` from 0.91.0 to 0.92.0 in [docker/setup-qemu-action#315](https://redirect.github.com/docker/setup-qemu-action/pull/315) > * Bump `@sigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-qemu-action#312](https://redirect.github.com/docker/setup-qemu-action/pull/312) > * Bump js-yaml from 4.1.1 to 4.2.0 in [docker/setup-qemu-action#310](https://redirect.github.com/docker/setup-qemu-action/pull/310) > * Bump tmp from 0.2.6 to 0.2.7 in [docker/setup-qemu-action#304](https://redirect.github.com/docker/setup-qemu-action/pull/304) > * Bump undici from 6.26.0 to 6.27.0 in [docker/setup-qemu-action#308](https://redirect.github.com/docker/setup-qemu-action/pull/308) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-qemu-action#307](https://redirect.github.com/docker/setup-qemu-action/pull/307) > > **Full Changelog**: <https://github.com/docker/setup-qemu-action/compare/v4.1.0...v4.2.0> Commits * [`96fe6ef`](https://github.com/docker/setup-qemu-action/commit/96fe6ef7f33517b61c61be40b68a1882f3264fb8) Merge pull request [#315](https://redirect.github.com/docker/setup-qemu-action/issues/315) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`31f08d3`](https://github.com/docker/setup-qemu-action/commit/31f08d3fc9186dbe4b4550696f2e32e9aa7f9465) [dependabot skip] chore: update generated content * [`4e7017a`](https://github.com/docker/setup-qemu-action/commit/4e7017a474d2cf3912bb0437f7fafec6d5fb6c52) build(deps): bump `@docker/actions-toolkit` from 0.91.0 to 0.92.0 * [`0eca235`](https://github.com/docker/setup-qemu-action/commit/0eca235293ca1939b58c082f69bdc981ccce8c94) Merge pull request [#314](https://redirect.github.com/docker/setup-qemu-action/issues/314) from crazy-max/fix-yarn-preapprove-actions-toolkit * [`ea66a41`](https://github.com/docker/setup-qemu-action/commit/ea66a4130b037e7961e14a0e5b155836e797cced) chore: allow actions-toolkit to bypass yarn age gate * [`451542b`](https://github.com/docker/setup-qemu-action/commit/451542b03ae7946b7082a398b11c8c315a0e4e80) Merge pull request [#308](https://redirect.github.com/docker/setup-qemu-action/issues/308) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`532ae00`](https://github.com/docker/setup-qemu-action/commit/532ae0057542ec2102e2d19e9feccf85f1f69013) [dependabot skip] chore: update generated content * [`b6f5af6`](https://github.com/docker/setup-qemu-action/commit/b6f5af659afad3f9931b782668dee4595ae7e841) build(deps): bump undici from 6.26.0 to 6.27.0 * [`cf96b86`](https://github.com/docker/setup-qemu-action/commit/cf96b86294b57480ac6d330bd177fca87eac95bc) Merge pull request [#304](https://redirect.github.com/docker/setup-qemu-action/issues/304) from docker/dependabot/npm\_and\_yarn/tmp-0.2.7 * [`f0ba643`](https://github.com/docker/setup-qemu-action/commit/f0ba643f78dc96bc931fb83e5dadc39628e10047) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be40b68a1882f3264fb8) Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-buildx-action's releases](https://github.com/docker/setup-buildx-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@crazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#572](https://redirect.github.com/docker/setup-buildx-action/pull/572) > * Bump `@actions/core` from 3.0.0 to 3.0.1 in [docker/setup-buildx-action#551](https://redirect.github.com/docker/setup-buildx-action/pull/551) > * Bump `@docker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/setup-buildx-action#557](https://redirect.github.com/docker/setup-buildx-action/pull/557) [docker/setup-buildx-action#580](https://redirect.github.com/docker/setup-buildx-action/pull/580) > * Bump `@sigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-buildx-action#573](https://redirect.github.com/docker/setup-buildx-action/pull/573) > * Bump `@sigstore/verify` from 3.1.0 to 3.1.1 in [docker/setup-buildx-action#576](https://redirect.github.com/docker/setup-buildx-action/pull/576) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/setup-buildx-action#562](https://redirect.github.com/docker/setup-buildx-action/pull/562) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/setup-buildx-action#577](https://redirect.github.com/docker/setup-buildx-action/pull/577) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/setup-buildx-action#556](https://redirect.github.com/docker/setup-buildx-action/pull/556) > * Bump undici from 6.25.0 to 6.27.0 in [docker/setup-buildx-action#570](https://redirect.github.com/docker/setup-buildx-action/pull/570) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-buildx-action#569](https://redirect.github.com/docker/setup-buildx-action/pull/569) > > **Full Changelog**: <https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0> Commits * [`bb05f3f`](https://github.com/docker/setup-buildx-action/commit/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Merge pull request [#580](https://redirect.github.com/docker/setup-buildx-action/issues/580) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`321c814`](https://github.com/docker/setup-buildx-action/commit/321c814cb51fbe4af8eca00249525cc0973ea66f) [dependabot skip] chore: update generated content * [`b9a36ef`](https://github.com/docker/setup-buildx-action/commit/b9a36ef79ba42cfc611885a1e8c388fbf8b8cb3f) build(deps): bump `@docker/actions-toolkit` from 0.91.0 to 0.92.0 * [`ebeab24`](https://github.com/docker/setup-buildx-action/commit/ebeab241289497cd564ac98b3cfc9e64607bb276) Merge pull request [#570](https://redirect.github.com/docker/setup-buildx-action/issues/570) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`5c7b8ae`](https://github.com/docker/setup-buildx-action/commit/5c7b8ae78cec97a3215d4d86679b1d072eaa80cb) [dependabot skip] chore: update generated content * [`037e618`](https://github.com/docker/setup-buildx-action/commit/037e618cd98e95e81525b15ff0e9c96f507e6a0e) build(deps): bump undici from 6.25.0 to 6.27.0 * [`66080e5`](https://github.com/docker/setup-buildx-action/commit/66080e5802281ec2e72b7f3108915643e702db85) Merge pull request [#577](https://redirect.github.com/docker/setup-buildx-action/issues/577) from docker/dependabot/npm\_and\_yarn/sigstore-4.1.1 * [`409aef0`](https://github.com/docker/setup-buildx-action/commit/409aef0aa3f48f0a742e7dec4e0e04ab19afe93c) Merge pull request [#562](https://redirect.github.com/docker/setup-buildx-action/issues/562) from docker/dependabot/npm\_and\_yarn/js-yaml-4.2.0 * [`49c6e42`](https://github.com/docker/setup-buildx-action/commit/49c6e42949280fa0d70fb327633591be54efbfb6) build(deps): bump sigstore from 4.1.0 to 4.1.1 * [`2211273`](https://github.com/docker/setup-buildx-action/commit/2211273e8121ecf9ecb7d6c7c0fcd55526d530c7) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Updates `actions/setup-java` from 5.3.0 to 5.5.0 Release notes *Sourced from [actions/setup-java's releases](https://github.com/actions/setup-java/releases).* > v5.5.0 > ------ > > What's Changed > -------------- > > * chore: enforce pre-PR validation (aggregate scripts, git hooks, PR checklist) by [`@brunoborges`](https://github.com/brunoborges) in [actions/setup-java#1061](https://redirect.github.com/actions/setup-java/pull/1061) > * Bump github/codeql-action from 3 to 4 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1069](https://redirect.github.com/actions/setup-java/pull/1069) > * Bump actions/checkout from 6 to 7 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1068](https://redirect.github.com/actions/setup-java/pull/1068) > * Bump actions/setup-python from 5 to 6 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1067](https://redirect.github.com/actions/setup-java/pull/1067) > * Bump `@typescript-eslint/parser` from 8.61.1 to 8.62.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1062](https://redirect.github.com/actions/setup-java/pull/1062) > * feat: Add verify-signature plumbing and Temurin+Microsoft verification support by [`@johnoliver`](https://github.com/johnoliver) in [actions/setup-java#1060](https://redirect.github.com/actions/setup-java/pull/1060) > * Updated jetbrains test: https.request() now catches errors. This fixes leaking tests as well by [`@jmjaffe37`](https://github.com/jmjaffe37) in [actions/setup-java#1070](https://redirect.github.com/actions/setup-java/pull/1070) > * Fix arm64 e2e workflow tests mislabeled as x64 by [`@brunoborges`](https://github.com/brunoborges) with [`@Copilot`](https://github.com/Copilot) in [actions/setup-java#1073](https://redirect.github.com/actions/setup-java/pull/1073) > * feat: suppress Maven transfer progress via MAVEN\_ARGS by default (add show-download-progress input) by [`@brunoborges`](https://github.com/brunoborges) in [actions/setup-java#1053](https://redirect.github.com/actions/setup-java/pull/1053) > * feat: Disable interactiveMode in generated Maven settings.xml by [`@brunoborges`](https://github.com/brunoborges) with [`@Copilot`](https://github.com/Copilot) in [actions/setup-java#1052](https://redirect.github.com/actions/setup-java/pull/1052) > * Bump prettier from 3.6.2 to 3.9.1 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1066](https://redirect.github.com/actions/setup-java/pull/1066) > * chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1074](https://redirect.github.com/actions/setup-java/pull/1074) > * fix: Maven Toolchains grows unexpectedly by [`@Okeanos`](https://github.com/Okeanos) in [actions/setup-java#534](https://redirect.github.com/actions/setup-java/pull/534) > * dist: Support Tencent Kona JDK by [`@johnshajiang`](https://github.com/johnshajiang) in [actions/setup-java#672](https://redirect.github.com/actions/setup-java/pull/672) > * feat: Add set-default option by [`@gsmet`](https://github.com/gsmet) in [actions/setup-java#1017](https://redirect.github.com/actions/setup-java/pull/1017) > * docs: document problem matcher (and how to disable it), Maven Wrapper caching, and generated interactiveMode by [`@brunoborges`](https://github.com/brunoborges) in [actions/setup-java#1075](https://redirect.github.com/actions/setup-java/pull/1075) > * feat: Add distribution detection support to .sdkmanrc file by [`@lukaszgyg`](https://github.com/lukaszgyg) in [actions/setup-java#975](https://redirect.github.com/actions/setup-java/pull/975) > > New Contributors > ---------------- > > * [`@jmjaffe37`](https://github.com/jmjaffe37) made their first contribution in [actions/setup-java#1070](https://redirect.github.com/actions/setup-java/pull/1070) > * [`@gsmet`](https://github.com/gsmet) made their first contribution in [actions/setup-java#1017](https://redirect.github.com/actions/setup-java/pull/1017) > * [`@lukaszgyg`](https://github.com/lukaszgyg) made their first contribution in [actions/setup-java#975](https://redirect.github.com/actions/setup-java/pull/975) > > **Full Changelog**: <https://github.com/actions/setup-java/compare/v5...v5.5.0> > > v5.4.0 > ------ > > What's Changed > -------------- > > * Bump `@typescript-eslint/parser` from 8.48.0 to 8.61.1 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1021](https://redirect.github.com/actions/setup-java/pull/1021) > * Fix codeql workflow permissions by [`@jsoref`](https://github.com/jsoref) in [actions/setup-java#993](https://redirect.github.com/actions/setup-java/pull/993) > * fix CodeQL permissions by [`@gdams`](https://github.com/gdams) in [actions/setup-java#1025](https://redirect.github.com/actions/setup-java/pull/1025) > * fix: reject non-semver candidate versions in isVersionSatisfies by [`@sproctor`](https://github.com/sproctor) in [actions/setup-java#1009](https://redirect.github.com/actions/setup-java/pull/1009) > * Bump `@actions/cache` to 5.1.0, handle cache write denied by [`@jasongin`](https://github.com/jasongin) in [actions/setup-java#1026](https://redirect.github.com/actions/setup-java/pull/1026) > * Add Maven Wrapper cache feature by [`@mahabaleshwars`](https://github.com/mahabaleshwars) in [actions/setup-java#1027](https://redirect.github.com/actions/setup-java/pull/1027) > * Spelling by [`@jsoref`](https://github.com/jsoref) in [actions/setup-java#713](https://redirect.github.com/actions/setup-java/pull/713) > * add link to advanced configuration for JetBrains by [`@robstoll`](https://github.com/robstoll) in [actions/setup-java#850](https://redirect.github.com/actions/setup-java/pull/850) > * docs(action): fix missing required or default fields by [`@kranthipoturaju`](https://github.com/kranthipoturaju) in [actions/setup-java#1007](https://redirect.github.com/actions/setup-java/pull/1007) > * feat: add microsoft openjdk 17.0.18 by [`@al-kau`](https://github.com/al-kau) in [actions/setup-java#1002](https://redirect.github.com/actions/setup-java/pull/1002) > * Update README.md - use "alert syntax for Markdown" for notes by [`@mhoffrog`](https://github.com/mhoffrog) in [actions/setup-java#924](https://redirect.github.com/actions/setup-java/pull/924) > * Bump undici from 6.24.1 to 6.27.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1033](https://redirect.github.com/actions/setup-java/pull/1033) > * Update contributor guide with emoji for clarity by [`@brunoborges`](https://github.com/brunoborges) in [actions/setup-java#1028](https://redirect.github.com/actions/setup-java/pull/1028) > * add javac problem matcher by [`@Trass3r`](https://github.com/Trass3r) in [actions/setup-java#562](https://redirect.github.com/actions/setup-java/pull/562) > * Clarify README version syntax and migration guidance by [`@brunoborges`](https://github.com/brunoborges) with [`@Copilot`](https://github.com/Copilot) in [actions/setup-java#1038](https://redirect.github.com/actions/setup-java/pull/1038) > * Update undici artifacts to 6.27.0 (license cache + dist) by [`@brunoborges`](https://github.com/brunoborges) in [actions/setup-java#1040](https://redirect.github.com/actions/setup-java/pull/1040) > * docs: enhance custom jdk file installation by [`@stephanabel`](https://github.com/stephanabel) in [actions/setup-java#996](https://redirect.github.com/actions/setup-java/pull/996) > * Templates for new Java distributions by [`@panticmilos`](https://github.com/panticmilos) in [actions/setup-java#429](https://redirect.github.com/actions/setup-java/pull/429) > * Bump actions/checkout from 6 to 7 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1032](https://redirect.github.com/actions/setup-java/pull/1032) > * Bump `@types/node` from 25.9.3 to 26.0.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1031](https://redirect.github.com/actions/setup-java/pull/1031) > * docs: replace non-existent HelloWorldApp references with java --version by [`@brunoborges`](https://github.com/brunoborges) with [`@Copilot`](https://github.com/Copilot) in [actions/setup-java#1043](https://redirect.github.com/actions/setup-java/pull/1043) ... (truncated) Commits * [`0f481fc`](https://github.com/actions/setup-java/commit/0f481fcb613427c0f801b606911222b5b6f3083a) feat: Add distribution detection support to .sdkmanrc file ([#975](https://redirect.github.com/actions/setup-java/issues/975)) * [`c4922bf`](https://github.com/actions/setup-java/commit/c4922bf8099a153c2ad2fa6c869b9e6fa8d21017) docs: document problem matcher (and how to disable it), Maven Wrapper caching... * [`6657b99`](https://github.com/actions/setup-java/commit/6657b993409da921e0c021d82aa9c159601e7a27) feat: Add set-default option ([#1017](https://redirect.github.com/actions/setup-java/issues/1017)) * [`a50fdcc`](https://github.com/actions/setup-java/commit/a50fdccef19f861401a6f00b7caa2abf98504acb) dist: Support Tencent Kona JDK ([#672](https://redirect.github.com/actions/setup-java/issues/672)) * [`77ee41d`](https://github.com/actions/setup-java/commit/77ee41d00e246422933200d520a0334a299f26e4) fix: Maven Toolchains grows unexpectedly ([#534](https://redirect.github.com/actions/setup-java/issues/534)) * [`0765b15`](https://github.com/actions/setup-java/commit/0765b158bfd14bd15c56facab447d138e1161193) chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 ([#1074](https://redirect.github.com/actions/setup-java/issues/1074)) * [`c712b2f`](https://github.com/actions/setup-java/commit/c712b2fb55a8deb2d59f204bd7aa86ac6f938c98) Bump prettier from 3.6.2 to 3.9.1 ([#1066](https://redirect.github.com/actions/setup-java/issues/1066)) * [`733efae`](https://github.com/actions/setup-java/commit/733efaeaca653493004ffb895a11b2c6c316558e) feat: Disable interactiveMode in generated Maven settings.xml ([#1052](https://redirect.github.com/actions/setup-java/issues/1052)) * [`6c4d4a5`](https://github.com/actions/setup-java/commit/6c4d4a5025dca6ad7cc86c839fadbcb66762ed3b) feat: suppress Maven transfer progress via MAVEN\_ARGS by default (add show-do... * [`324b333`](https://github.com/actions/setup-java/commit/324b33387d37f5aa8878ea44bd7144864a316dee) Fix arm64 e2e workflow tests mislabeled as x64 ([#1073](https://redirect.github.com/actions/setup-java/issues/1073)) * Additional commits viewable in [compare view](https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...0f481fcb613427c0f801b606911222b5b6f3083a) Updates `graalvm/setup-graalvm` from 1.5.6 to 1.6.3 Release notes *Sourced from [graalvm/setup-graalvm's releases](https://github.com/graalvm/setup-graalvm/releases).* > v1.6.1 > ------ > > What's Changed > -------------- > > * Fix incorrect warning and `sortBy` parameter. by [`@fniephaus`](https://github.com/fniephaus) in [graalvm/setup-graalvm#225](https://redirect.github.com/graalvm/setup-graalvm/pull/225) > > **Full Changelog**: <https://github.com/graalvm/setup-graalvm/compare/v1.6.0...v1.6.1> > > v1.6.0 > ------ > > What's Changed > -------------- > > * Bump the "all" group with 2 updates across multiple ecosystems by [`@dependabot`](https://github.com/dependabot)[bot] in [graalvm/setup-graalvm#222](https://redirect.github.com/graalvm/setup-graalvm/pull/222) > * Add support for GraalVM innovation releases by [`@fniephaus`](https://github.com/fniephaus) in [graalvm/setup-graalvm#223](https://redirect.github.com/graalvm/setup-graalvm/pull/223) > > **Full Changelog**: <https://github.com/graalvm/setup-graalvm/compare/v1.5.6...v1.6.0> Commits * [`0def53c`](https://github.com/graalvm/setup-graalvm/commit/0def53c0fd8534bc13416c9469f5be45265824fd) Bump version to `1.6.3`. * [`709c6ec`](https://github.com/graalvm/setup-graalvm/commit/709c6ec64e55ce2483599b95b4ae414ca728d994) Refactor GDS integration. * [`6ceeefe`](https://github.com/graalvm/setup-graalvm/commit/6ceeefe947dedd393c9a1669609b6a3a545ad01e) Downgrade MSVC setup failure to warning for JDK 17+ * [`e5ed908`](https://github.com/graalvm/setup-graalvm/commit/e5ed908b985e23625beed1cf536c5b71c38bc29a) Use `vswhere.exe` to detect Visual Studio installations. * [`186d049`](https://github.com/graalvm/setup-graalvm/commit/186d0493a2df5eb62df5ecc498883d18fd58c303) Bump version to `1.6.2`. * [`f9f3f4d`](https://github.com/graalvm/setup-graalvm/commit/f9f3f4d5b9d843e248f00c0478e8606983c0731d) Set `responseFields=metadata` explicitly. * [`8c5543b`](https://github.com/graalvm/setup-graalvm/commit/8c5543b71f44568342e106336639979e94a8f6de) Bump version to `1.6.1`. * [`2a0c462`](https://github.com/graalvm/setup-graalvm/commit/2a0c4623e9f95af70850179e9fac992c1313117e) Fix sortBy GDS parameter for Oracle GraalVM. * [`29adb79`](https://github.com/graalvm/setup-graalvm/commit/29adb79afe1ce4fa5b0f25d5adbccab4e6fb0bc0) Fix incorrect warning. * [`fee0be0`](https://github.com/graalvm/setup-graalvm/commit/fee0be0e138bd93ed181d063832ecfedd2032219) Improve testing * Additional commits viewable in [compare view](https://github.com/graalvm/setup-graalvm/compare/6f3fa030c4b8f77c1f554a860f593a654538fa38...0def53c0fd8534bc13416c9469f5be45265824fd) Updates `mikepenz/release-changelog-builder-action` from 6.2.2 to 6.2.3 Release notes *Sourced from [mikepenz/release-changelog-builder-action's releases](https://github.com/mikepenz/release-changelog-builder-action/releases).* > v6.2.3 > ------ > > 📦 Dependencies > -------------- > > * chore(deps): update node devdependency non-major updates > + PR: [#1592](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1592) > * chore(deps): update dependency brace-expansion to v5.0.6 > + PR: [#1591](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1591) > * fix(deps): update dependency semver to v7.8.0 > + PR: [#1594](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1594) > * chore(deps): update dependency undici to v8.2.0 > + PR: [#1593](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1593) > * chore(deps): lock file maintenance > + PR: [#1600](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1600) > * chore(deps): update node devdependency non-major updates > + PR: [#1599](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1599) > * chore(deps): update dependency vite to v8.0.14 > + PR: [#1596](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1596) > * chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to dc1a0af > + PR: [#1595](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1595) > * chore(deps): update dependency undici to v8.3.0 > + PR: [#1598](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1598) > * fix(deps): update dependency semver to v7.8.1 > + PR: [#1597](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1597) > * chore(deps): lock file maintenance > + PR: [#1602](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1602) > * chore(deps): update node devdependency non-major updates > + PR: [#1601](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1601) > * chore(deps): lock file maintenance > + PR: [#1607](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1607) > * chore(deps): update dependency vite to v8.0.16 > + PR: [#1603](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1603) > * chore(deps): update node devdependency non-major updates > + PR: [#1604](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1604) > * chore(deps): update dependency undici to v8.4.1 > + PR: [#1606](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1606) > * fix(deps): update dependency semver to v7.8.3 > + PR: [#1605](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1605) > * chore(deps): update dependency undici to v8.5.0 [security] > + PR: [#1608](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1608) > > Contributors: > ------------- > > * [`@renovate-mike`](https://github.com/renovate-mike)[bot], [`@mikepenz`](https://github.com/mikepenz) Commits * [`c9bcd82`](https://github.com/mikepenz/release-changelog-builder-action/commit/c9bcd8238b6f41e05561348339429d360b1c0247) Merge pull request [#1609](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1609) from mikepenz/develop * [`f6500fb`](https://github.com/mikepenz/release-changelog-builder-action/commit/f6500fbc8ce792922eedc32f67b55b4e4213ba45) Merge pull request [#1608](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1608) from mikepenz/renovate/npm-undici-vulnerability * [`0a4154d`](https://github.com/mikepenz/release-changelog-builder-action/commit/0a4154db9c06069889bb9923dbe1c91b88d6df57) chore: rebuild dist for renovate * [`41a4fa9`](https://github.com/mikepenz/release-changelog-builder-action/commit/41a4fa95ba9f4c6dc004256a6f345783a0ee6357) chore(deps): update dependency undici to v8.5.0 [security] * [`758bbd0`](https://github.com/mikepenz/release-changelog-builder-action/commit/758bbd0fac1552b706ec93542b52f832e67179d0) Merge pull request [#1605](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1605) from mikepenz/renovate/semver-7.x * [`5fa71a4`](https://github.com/mikepenz/release-changelog-builder-action/commit/5fa71a40fbc596ca8021a8b2e53e633b53464f4f) fix(deps): update dependency semver to v7.8.3 * [`df49c93`](https://github.com/mikepenz/release-changelog-builder-action/commit/df49c939fb2cfca1638127b39baa06c45e035620) Merge pull request [#1606](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1606) from mikepenz/renovate/undici-8.x * [`6dc5e2b`](https://github.com/mikepenz/release-changelog-builder-action/commit/6dc5e2bf81297766c7156afa8aba0f22fd029462) chore(deps): update node devdependency non-major updates ([#1604](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1604)) * [`f442d03`](https://github.com/mikepenz/release-changelog-builder-action/commit/f442d03d7aa428c35a2d15e98a72b2ad19546fd4) chore: rebuild dist for renovate * [`e917ee5`](https://github.com/mikepenz/release-changelog-builder-action/commit/e917ee5adca9158a8ca60c71383e4ec8fef4d1fd) chore(deps): update dependency undici to v8.4.1 * Additional commits viewable in [compare view](https://github.com/mikepenz/release-changelog-builder-action/compare/348e88fab4c37338b1e803ceb2d4a7a5db6c0833...c9bcd8238b6f41e05561348339429d360b1c0247) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.2 Release notes *Sourced from [softprops/action-gh-release's releases](https://github.com/softprops/action-gh-release/releases).* > v3.0.2 > ------ > > `3.0.2` is a patch release focused on release reliability and compatibility. It > reuses existing draft releases when publishing prereleases, supports replacing > release assets on Gitea, hardens streamed asset uploads, and provides clearer > release-creation diagnostics. It also includes TypeScript, coverage, and tooling > maintenance merged since `3.0.1`. > > This release fixes [#795](https://redirect.github.com/softprops/action-gh-release/issues/795), [#438](https://redirect.github.com/softprops/action-gh-release/issues/438), and [#803](https://redirect.github.com/softprops/action-gh-release/issues/803). The upload transport hardening covers the > historical failure reported in [#790](https://redirect.github.com/softprops/action-gh-release/issues/790), although current hosted Node 24 runners did > not reproduce it naturally. The diagnostics work is related to [#786](https://redirect.github.com/softprops/action-gh-release/issues/786) and does not > claim a reproducible release-creation fix. > > What's Changed > -------------- > > ### Exciting New Features 🎉 > > * feat: improve release error reporting and test coverage by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#813](https://redirect.github.com/softprops/action-gh-release/pull/813) > > ### Bug fixes 🐛 > > * fix: publish existing draft releases as prereleases by [`@godfengliang`](https://github.com/godfengliang) in [softprops/action-gh-release#801](https://redirect.github.com/softprops/action-gh-release/pull/801) > * fix: upload small checksum assets reliably by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#815](https://redirect.github.com/softprops/action-gh-release/pull/815) > * fix: replace existing release assets on Gitea by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#816](https://redirect.github.com/softprops/action-gh-release/pull/816) > * fix: clarify release creation 404 errors by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#817](https://redirect.github.com/softprops/action-gh-release/pull/817) > > ### Other Changes 🔄 > > * chore(deps): upgrade TypeScript to 7 by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#812](https://redirect.github.com/softprops/action-gh-release/pull/812) > * chore(deps): remove unused TypeScript tooling by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#814](https://redirect.github.com/softprops/action-gh-release/pull/814) > * dependency, Node 24 pin, and CI maintenance merged since `3.0.1` > > v3.0.1 > ------ > > 3.0.1 > ----- > > * maintenance release with updated dependencies Changelog *Sourced from [softprops/action-gh-release's changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md).* > 3.0.2 > ----- > > `3.0.2` is a patch release focused on release reliability and compatibility. It > reuses existing draft releases when publishing prereleases, supports replacing > release assets on Gitea, hardens streamed asset uploads, and provides clearer > release-creation diagnostics. It also includes TypeScript, coverage, and tooling > maintenance merged since `3.0.1`. > > This release fixes [#795](https://redirect.github.com/softprops/action-gh-release/issues/795), [#438](https://redirect.github.com/softprops/action-gh-release/issues/438), and [#803](https://redirect.github.com/softprops/action-gh-release/issues/803). The upload transport hardening covers the > historical failure reported in [#790](https://redirect.github.com/softprops/action-gh-release/issues/790), although current hosted Node 24 runners did > not reproduce it naturally. The diagnostics work is related to [#786](https://redirect.github.com/softprops/action-gh-release/issues/786) and does not > claim a reproducible release-creation fix. > > What's Changed > -------------- > > ### Exciting New Features 🎉 > > * feat: improve release error reporting and test coverage by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#813](https://redirect.github.com/softprops/action-gh-release/pull/813) > > ### Bug fixes 🐛 > > * fix: publish existing draft releases as prereleases by [`@godfengliang`](https://github.com/godfengliang) in [softprops/action-gh-release#801](https://redirect.github.com/softprops/action-gh-release/pull/801) > * fix: upload small checksum assets reliably by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#815](https://redirect.github.com/softprops/action-gh-release/pull/815) > * fix: replace existing release assets on Gitea by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#816](https://redirect.github.com/softprops/action-gh-release/pull/816) > * fix: clarify release creation 404 errors by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#817](https://redirect.github.com/softprops/action-gh-release/pull/817) > > ### Other Changes 🔄 > > * chore(deps): upgrade TypeScript to 7 by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#812](https://redirect.github.com/softprops/action-gh-release/pull/812) > * chore(deps): remove unused TypeScript tooling by [`@chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#814](https://redirect.github.com/softprops/action-gh-release/pull/814) > * dependency, Node 24 pin, and CI maintenance merged since `3.0.1` > > 3.0.1 > ----- > > * maintenance release with updated dependencies > > 3.0.0 > ----- > > `3.0.0` is a major release that moves the action runtime from Node 20 to Node 24. > Use `v3` on GitHub-hosted runners and self-hosted fleets that already support the > Node 24 Actions runtime. `v2.6.2` was the final Node 20-compatible release and is > no longer maintained or supported. > > What's Changed > -------------- > > ### Other Changes 🔄 > > * Move the action runtime and bundle target to Node 24 > * Update `@types/node` to the Node 24 line and allow future Dependabot updates > * Keep the floating major tag on `v3`; freeze `v2` at the final `v2.6.2` release ... (truncated) Commits * [`3d0d988`](https://github.com/softprops/action-gh-release/commit/3d0d9888cb7fd7b750713d6e236d1fcb99157228) release 3.0.2 ([#818](https://redirect.github.com/softprops/action-gh-release/issues/818)) * [`7e13ed4`](https://github.com/softprops/action-gh-release/commit/7e13ed4ac596a4adf801d3812be5a089356949aa) fix: clarify release creation 404 errors ([#817](https://redirect.github.com/softprops/action-gh-release/issues/817)) * [`e6c70a5`](https://github.com/softprops/action-gh-release/commit/e6c70a53cf67373fbff7eeebca7782b4fe8f106c) fix: replace existing release assets on Gitea ([#816](https://redirect.github.com/softprops/action-gh-release/issues/816)) * [`f345337`](https://github.com/softprops/action-gh-release/commit/f3453378888d5ef6208e2788af1c5ba50d8a898d) fix: publish existing draft releases as prereleases ([#801](https://redirect.github.com/softprops/action-gh-release/issues/801)) * [`d8a89a2`](https://github.com/softprops/action-gh-release/commit/d8a89a206684ded8435bf16d6f698bf04ab05164) fix: upload small checksum assets reliably ([#815](https://redirect.github.com/softprops/action-gh-release/issues/815)) * [`45ece40`](https://github.com/softprops/action-gh-release/commit/45ece40c3178522904ac6c51c21d8a4e3565f3c8) chore(deps): remove unused TypeScript tooling ([#814](https://redirect.github.com/softprops/action-gh-release/issues/814)) * [`f6b913c`](https://github.com/softprops/action-gh-release/commit/f6b913c3f95302d88e8ef7cb2859c2e7656aa01e) feat: improve release error reporting and test coverage ([#813](https://redirect.github.com/softprops/action-gh-release/issues/813)) * [`15f193d`](https://github.com/softprops/action-gh-release/commit/15f193d7d8aa9623b5181913a31fafceb4e8cef9) chore(deps): upgrade TypeScript to 7 ([#812](https://redirect.github.com/softprops/action-gh-release/issues/812)) * [`cc8268d`](https://github.com/softprops/action-gh-release/commit/cc8268d46a81d57ec9b061f27b0dd68ebd7fb17f) chore(deps): bump actions/checkout in the github-actions group ([#810](https://redirect.github.com/softprops/action-gh-release/issues/810)) * [`fd0ed1e`](https://github.com/softprops/action-gh-release/commit/fd0ed1e85b6730f87f5c67d7355751c46ad513d6) chore(deps): bump the npm group with 3 updates ([#811](https://redirect.github.com/softprops/action-gh-release/issues/811)) * Additional commits viewable in [compare view](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.0 Release notes *Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).* > v4.37.0 > ------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956) > * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019) > > 4.37.0 - 08 Jul 2026 > -------------------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) ... (truncated) Commits * [`99df26d`](https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9) Merge pull request [#3996](https://redirect.github.com/github/codeql-action/issues/3996) from github/update-v4.37.0-c7c896d71 * [`31c2707`](https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0) Add changenote for [#3973](https://redirect.github.com/github/codeql-action/issues/3973) * [`72df218`](https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6) Update changelog for v4.37.0 * [`c7c896d`](https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91) Merge pull request [#3995](https://redirect.github.com/github/codeql-action/issues/3995) from github/update-bundle/codeql-bundle-v2.26.0 * [`3f34ff0`](https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146) Add changelog note * [`43bec09`](https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1) Update default bundle to codeql-bundle-v2.26.0 * [`f58f0d1`](https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46) Merge pull request [#3973](https://redirect.github.com/github/codeql-action/issues/3973) from github/mbg/repo-props/config-file-shorthands * [`7dc37cb`](https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8) Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh... * [`8e22350`](https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f) Thread `ActionState` to `initConfig` * [`69c9e8c`](https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b) Mark some `status-report` imports as `type`-only to avoid circular dependencies * Additional commit... \_Description has been truncated\_

preserve names in esbuild bundle

9e0aa76

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

crazy-max requested review from thaJeztah and tonistiigi June 29, 2026 12:40

github-actions Bot assigned crazy-max Jun 29, 2026

vvoland approved these changes Jun 29, 2026

View reviewed changes

thaJeztah approved these changes Jun 29, 2026

View reviewed changes

crazy-max merged commit 0a38f1f into docker:master Jun 29, 2026
24 checks passed

crazy-max deleted the fix-esbuild-keep-names branch June 29, 2026 14:14

github-actions Bot mentioned this pull request Jul 6, 2026

Update docker/setup-qemu-action action to v4.2.0 claytono/go-unifi-mcp#118

Merged

1 task

Navigation Menu

Uh oh!

preserve names in esbuild bundle - #311

preserve names in esbuild bundle#311
crazy-max merged 1 commit into
docker:masterfrom
crazy-max:fix-esbuild-keep-names

crazy-max commented Jun 29, 2026

thaJeztah left a comment

Uh oh!

Labels

3 participants

Uh oh!

Conversation

crazy-max commented Jun 29, 2026

thaJeztah left a comment

Choose a reason for hiding this comment

Uh oh!

Labels

3 participants