[dependabot skip] chore: update generated content

build(deps): bump js-yaml from 5.2.2 to 5.4.1
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.2 to 5.4.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.2.2...5.4.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2026-09-30 00:35:06 +00:00 · 2026-09-29 18:08:13 +00:00 · 2026-09-29 18:07:12 +00:00 · 2026-09-16 10:57:53 +02:00 · 2026-08-25 05:54:40 +00:00
7 changed files with 136 additions and 133 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -35,12 +35,12 @@ jobs:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -29,7 +29,7 @@ jobs:
          targets: test
      -
        name: Upload coverage
-        uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
        with:
          files: ./coverage/clover.xml
          token: ${{ secrets.CODECOV_TOKEN }}
--- a/dist/index.cjs
+++ b/dist/index.cjs
--- a/dist/index.cjs.map
+++ b/dist/index.cjs.map
--- a/dist/licenses.txt
+++ b/dist/licenses.txt
@@ -2399,7 +2399,7 @@ SOFTWARE.
 The following npm packages may be included in this product:

 - js-yaml@5.2.1
- - js-yaml@5.2.2
+ - js-yaml@5.4.1

 These packages each contain the following license:

--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
    "@docker/actions-toolkit": "^0.94.0",
    "http-proxy-agent": "^9.1.0",
    "https-proxy-agent": "^9.1.0",
-    "js-yaml": "^5.2.2",
+    "js-yaml": "^5.4.1",
    "uuid": "^14.0.1"
  },
  "devDependencies": {
--- a/yarn.lock
+++ b/yarn.lock
@@ -3174,7 +3174,7 @@ __metadata:
    globals: "npm:^17.3.0"
    http-proxy-agent: "npm:^9.1.0"
    https-proxy-agent: "npm:^9.1.0"
-    js-yaml: "npm:^5.2.2"
+    js-yaml: "npm:^5.4.1"
    prettier: "npm:^3.8.1"
    typescript: "npm:^5.9.3"
    uuid: "npm:^14.0.1"
@@ -4357,14 +4357,14 @@ __metadata:
  languageName: node
  linkType: hard

-"js-yaml@npm:^5.2.2":
-  version: 5.2.2
-  resolution: "js-yaml@npm:5.2.2"
+"js-yaml@npm:^5.4.1":
+  version: 5.4.1
+  resolution: "js-yaml@npm:5.4.1"
  dependencies:
    argparse: "npm:^2.0.1"
  bin:
    js-yaml: bin/js-yaml.mjs
-  checksum: 10/2b4c2933af12c97e1c4894a4f27fe9b06dab70a64a96bb50624b4429bef6bf11008bde20d868bce52a36784473314efc30078ba6025b58cf7537961e23b1ae9c
+  checksum: 10/6fff9ee00bd59aeb7e1484b4281f5e927b117cbfbf3ffa6c0fef0c58519317eb61527e93c4aa70f417709229bc1eeed63cba773913577a64405975a72fba7180
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
github-actions[bot]	5734011492	[dependabot skip] chore: update generated content	2026-09-29 18:08:13 +00:00
dependabot[bot]	71aa93c4e0	build(deps): bump js-yaml from 5.2.2 to 5.4.1 Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.2 to 5.4.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.2.2...5.4.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-29 18:07:12 +00:00
CrazyMax	783ae9cac5	Merge pull request #1064 from docker/dependabot/github_actions/codeql-actions-ce612e0709 build(deps): bump the codeql-actions group across 1 directory with 2 updates	2026-09-16 10:57:53 +02:00
dependabot[bot]	b1725c2c93	build(deps): bump the codeql-actions group across 1 directory with 2 updates Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.37.3 to 4.37.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`e4fba868fa...db488ddef3`) Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`e4fba868fa...db488ddef3`) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions ... Signed-off-by: dependabot[bot] <support@github.com>	2026-08-25 05:54:40 +00:00