Merge pull request #530 from docker/dependabot/github_actions/github/codeql-action-4.35.2

build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
Merge pull request #531 from docker/dependabot/github_actions/actions/setup-node-6.4.0
2026-04-28 07:36:29 +00:00 · 2026-04-27 09:54:40 +02:00 · 2026-04-27 09:54:25 +02:00 · 2026-04-27 09:54:08 +02:00 · 2026-04-27 09:53:52 +02:00 · 2026-04-27 05:02:34 +00:00
5 changed files with 9 additions and 9 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -488,7 +488,7 @@ jobs:
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Install k3s
-        uses: crazy-max/.github/.github/actions/install-k3s@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+        uses: crazy-max/.github/.github/actions/install-k3s@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
      -
        name: Set up Docker Buildx
        id: buildx
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,17 +30,17 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/pr-assign-author.yml
+++ b/.github/workflows/pr-assign-author.yml
@@ -11,7 +11,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      pull-requests: write
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -19,7 +19,7 @@ on:

 jobs:
  zizmor:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@d89fe92d808a15e2b2ed5cdb62db7c172c31410d # v1.6.0
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      security-events: write
--- a/yarn.lock
+++ b/yarn.lock
@@ -4738,13 +4738,13 @@ __metadata:
  linkType: hard

 "postcss@npm:^8.5.6":
-  version: 8.5.10
-  resolution: "postcss@npm:8.5.10"
+  version: 8.5.6
+  resolution: "postcss@npm:8.5.6"
  dependencies:
    nanoid: "npm:^3.3.11"
    picocolors: "npm:^1.1.1"
    source-map-js: "npm:^1.2.1"
-  checksum: 10/7eac6169e535b63c8412e94d4f6047fc23efa3e9dde804b541940043c831b25f1cd867d83cd2c4371ad2450c8abcb42c208aa25668c1f0f3650d7f72faf711a8
+  checksum: 10/9e4fbe97574091e9736d0e82a591e29aa100a0bf60276a926308f8c57249698935f35c5d2f4e80de778d0cbb8dcffab4f383d85fd50c5649aca421c3df729b86
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	a0c73a10bb	Merge pull request #530 from docker/dependabot/github_actions/github/codeql-action-4.35.2 build(deps): bump github/codeql-action from 4.35.1 to 4.35.2	2026-04-27 09:54:40 +02:00
CrazyMax	1d938f51c0	Merge pull request #531 from docker/dependabot/github_actions/actions/setup-node-6.4.0 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0	2026-04-27 09:54:25 +02:00
CrazyMax	d027ca77cb	Merge pull request #532 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates	2026-04-27 09:54:08 +02:00
CrazyMax	2147210a42	Merge pull request #534 from docker/dependabot/github_actions/crazy-max/dot-github-1.7.1 build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1	2026-04-27 09:53:52 +02:00
dependabot[bot]	3f9cfbdc8c	build(deps): bump the crazy-max-dot-github group across 1 directory with 2 updates Bumps the crazy-max-dot-github group with 2 updates in the / directory: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`d89fe92d80...64a0bfaf6e`) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.1 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`d89fe92d80...64a0bfaf6e`) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-27 05:02:34 +00:00
dependabot[bot]	4c7f61605d	build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1 Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.6.0 to 1.7.1. - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`d89fe92d80...64a0bfaf6e`) --- updated-dependencies: - dependency-name: crazy-max/.github dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-23 04:42:08 +00:00
dependabot[bot]	0068a0a10e	build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](`53b83947a5...48b55a011b`) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-21 04:42:29 +00:00
dependabot[bot]	b6cec68116	build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`c10b8064de...95e58e9a2c`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-17 04:43:32 +00:00