chore: update generated content

build(deps): bump tmp from 0.2.6 to 0.2.7
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
2026-06-15 15:00:08 -05:00 · 2026-06-15 16:42:02 +00:00 · 2026-06-15 16:41:05 +00:00 · 2026-06-12 14:11:06 -05:00 · 2026-06-12 18:49:20 +00:00 · 2026-05-28 18:45:44 +02:00
7 changed files with 19 additions and 15 deletions
@@ -1,10 +1,10 @@
 # https://yarnpkg.com/configuration/yarnrc

-compressionLevel: mixed
-enableGlobalCache: false
-enableHardenedMode: true
+nodeLinker: node-modules

 logFilters:
+  - code: YN0004
+    level: discard
  - code: YN0013
    level: discard
  - code: YN0019
@@ -14,4 +14,8 @@ logFilters:
  - code: YN0086
    level: discard

-nodeLinker: node-modules
+compressionLevel: mixed
+enableGlobalCache: false
+enableHardenedMode: true
+enableScripts: false
+npmMinimalAgeGate: 2d
@@ -17,7 +17,7 @@ FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
-  yarn install && mkdir /vendor && cp yarn.lock /vendor
+  yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor

 FROM scratch AS vendor-update
 COPY --from=deps /vendor /
@@ -4907,7 +4907,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - tmp@0.2.6
+ - tmp@0.2.7

 This package contains the following license:

@@ -21,7 +21,7 @@
  ],
  "author": "Docker Inc.",
  "license": "Apache-2.0",
-  "packageManager": "yarn@4.9.2",
+  "packageManager": "yarn@4.15.0",
  "dependencies": {
    "@actions/core": "^3.0.1",
    "@docker/actions-toolkit": "^0.91.0"
@@ -2,7 +2,7 @@
 # Manual changes might be lost - proceed with caution!

 __metadata:
-  version: 8
+  version: 10
  cacheKey: 10

 "@aashutoshrathi/word-wrap@npm:^1.2.3":
@@ -5972,9 +5972,9 @@ __metadata:
  linkType: hard

 "tmp@npm:^0.2.6":
-  version: 0.2.6
-  resolution: "tmp@npm:0.2.6"
-  checksum: 10/4ba072821d65f6ec0ae680dd49261bcc66c96a5a463c80ca040747256238aaad68ad5db7aa8367dd1554d22aa77c2988bdb1c5556ecfc4df105f5b73206b7d9b
+  version: 0.2.7
+  resolution: "tmp@npm:0.2.7"
+  checksum: 10/0a3bc90beb0c6275273c3475fb57e466eaab1c9c4a101d029ff62b18146ce136e7f75d09de34863d9f2c2a492751402508f9e028bc98eb34a1416195d4b15619
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
github-actions[bot]	ca54d52d6f	chore: update generated content	2026-06-15 16:42:02 +00:00
dependabot[bot]	e8c695881e	build(deps): bump tmp from 0.2.6 to 0.2.7 Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-15 16:41:05 +00:00
temenuzhka-thede	fad6f4094f	Merge pull request #279 from docker/sec-cli/npm-ci-20260612-184919 fix: replace npm install with npm ci (20260612-184919)	2026-06-12 14:11:06 -05:00
securityeng-bot[bot]	1ff0cd31e1	fix: use lockfile-aware install commands	2026-06-12 18:49:20 +00:00
CrazyMax	0bda481195	Merge pull request #273 from crazy-max/yarn-update update yarn to 4.15.0	2026-05-28 18:45:44 +02:00
CrazyMax	60d57a3e88	update yarn to 4.15.0 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-05-28 15:17:58 +02:00
CrazyMax	58abfcafaa	Merge pull request #271 from docker/sec-cli/ignore-scripts-fix-20260527-193429 ci: add ignore-scripts to Node package manager config (20260527-193429)	2026-05-28 10:01:16 +02:00
securityeng-bot[bot]	4e220bc4c1	ci: enforce ignore-scripts policy for Node package managers	2026-05-27 20:05:10 +00:00