login-action (original) (raw)

Bumps @docker/actions-toolkit from 0.63.0 to 0.72.0.

Release notes

Sourced from @docker/actions-toolkit's releases.

v0.72.0

git: handle detached head error by @neilime in docker/actions-toolkit#915

update @sigstore/sign to 4.1.0 by @crazy-max in docker/actions-toolkit#917 docker/actions-toolkit#918

build(deps): bump @sigstore/tuf from 4.0.0 to 4.0.1 in docker/actions-toolkit#914

build(deps): bump @sigstore/verify from 3.0.0 to 3.1.0 in docker/actions-toolkit#913

Full Changelog: docker/actions-toolkit@v0.71.0...v0.72.0

v0.71.0

cosign(install): verify binary signature with keyless verification bundle by @crazy-max in docker/actions-toolkit#904

docker(install): unpin QEMU by @crazy-max in docker/actions-toolkit#896

build(deps): bump @actions/artifact from 4.0.0 to 5.0.1 in docker/actions-toolkit#893

build(deps): bump @actions/cache from 4.1.0 to 5.0.1 in docker/actions-toolkit#892

build(deps): bump @actions/core from 1.11.1 to 2.0.1 in docker/actions-toolkit#889

build(deps): bump @actions/exec from 1.1.1 to 2.0.0 in docker/actions-toolkit#885

update dev dependencies by @crazy-max in docker/actions-toolkit#902 docker/actions-toolkit#903

Full Changelog: docker/actions-toolkit@v0.69.0...v0.71.0

v0.70.0

[!IMPORTANT]
This release was not published to npm. Our previous npm access token was rejected following npm's classic tokens revoked, so @docker/actions-toolkit@0.70.0 is currently missing from the npm registry. Please use the latest published version on npm (or install directly from Git tags) until a subsequent release is published via Trusted Publishing.

cosign(install): verify binary signature with keyless verification bundle by @crazy-max in docker/actions-toolkit#904

docker(install): unpin QEMU by @crazy-max in docker/actions-toolkit#896

build(deps): bump @actions/artifact from 4.0.0 to 5.0.1 in docker/actions-toolkit#893

build(deps): bump @actions/cache from 4.1.0 to 5.0.1 in docker/actions-toolkit#892

build(deps): bump @actions/core from 1.11.1 to 2.0.1 in docker/actions-toolkit#889

build(deps): bump @actions/exec from 1.1.1 to 2.0.0 in docker/actions-toolkit#885

update dev dependencies by @crazy-max in docker/actions-toolkit#902 docker/actions-toolkit#903

Full Changelog: docker/actions-toolkit@v0.69.0...v0.70.0

v0.69.0

docker(install): pin QEMU to 10.1.1 by @crazy-max in docker/actions-toolkit#880

Full Changelog: docker/actions-toolkit@v0.68.0...v0.69.0

v0.68.0

buildx(bake): funcs to check attest set in bake definition by @crazy-max in docker/actions-toolkit#873

git: support getting ref in various detached HEAD contexts by @neilime in docker/actions-toolkit#856

releases: download releases JSON without token first by @crazy-max in docker/actions-toolkit#875

sigstore: remove verbose flag from persisted cosign args by @crazy-max in docker/actions-toolkit#854

build(deps): bump js-yaml from 4.1.0 to 4.1.1 in docker/actions-toolkit#860

build(deps): bump @actions/http-client from 2.2.3 to 3.0.0 in docker/actions-toolkit#831

build(deps): bump @actions/io from 1.1.3 to 2.0.0 in docker/actions-toolkit#832

Full Changelog: docker/actions-toolkit@v0.67.0...v0.68.0

... (truncated)

Commits

f2404dc Merge pull request #918 from crazy-max/isolated-modules
8bae8c9 Merge pull request #913 from docker/dependabot/npm_and_yarn/sigstore/verify-3...
c00b0d2 set isolatedModules=true to fix ts-jest TS151002 warning
f861f8d build(deps): bump @sigstore/verify from 3.0.0 to 3.1.0
7b8ae12 Merge pull request #917 from crazy-max/update-sigstore-sign
10fbe0d update @sigstore/sign to 4.1.0
8ba5f4a enable Node 16–style ESM resolution
fcb1e5a Merge pull request #914 from docker/dependabot/npm_and_yarn/sigstore/tuf-4.0.1
459eee5 Merge pull request #916 from docker/bot/undock-releases-json
9c67bc4 github: update .github/undock-releases.json
Additional commits viewable in compare view Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @docker/actions-toolkit since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)