Compare commits

..

5 Commits

Author SHA1 Message Date
dependabot[bot] 6d1047307d build(deps): bump vite from 7.3.2 to 7.3.5
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 7.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-19 22:18:57 +00:00
temenuzhka-thede fad6f4094f Merge pull request #279 from docker/sec-cli/npm-ci-20260612-184919
fix: replace npm install with npm ci (20260612-184919)
2026-06-12 14:11:06 -05:00
securityeng-bot[bot] 1ff0cd31e1 fix: use lockfile-aware install commands 2026-06-12 18:49:20 +00:00
CrazyMax 0bda481195 Merge pull request #273 from crazy-max/yarn-update
update yarn to 4.15.0
2026-05-28 18:45:44 +02:00
CrazyMax 60d57a3e88 update yarn to 4.15.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 15:17:58 +02:00
4 changed files with 13 additions and 10 deletions
+7 -4
View File
@@ -1,10 +1,10 @@
# https://yarnpkg.com/configuration/yarnrc # https://yarnpkg.com/configuration/yarnrc
compressionLevel: mixed nodeLinker: node-modules
enableGlobalCache: false
enableHardenedMode: true
logFilters: logFilters:
- code: YN0004
level: discard
- code: YN0013 - code: YN0013
level: discard level: discard
- code: YN0019 - code: YN0019
@@ -14,5 +14,8 @@ logFilters:
- code: YN0086 - code: YN0086
level: discard level: discard
nodeLinker: node-modules compressionLevel: mixed
enableGlobalCache: false
enableHardenedMode: true
enableScripts: false enableScripts: false
npmMinimalAgeGate: 2d
+1 -1
View File
@@ -17,7 +17,7 @@ FROM base AS deps
RUN --mount=type=bind,target=.,rw \ RUN --mount=type=bind,target=.,rw \
--mount=type=cache,target=/src/.yarn/cache \ --mount=type=cache,target=/src/.yarn/cache \
--mount=type=cache,target=/src/node_modules \ --mount=type=cache,target=/src/node_modules \
yarn install && mkdir /vendor && cp yarn.lock /vendor yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor
FROM scratch AS vendor-update FROM scratch AS vendor-update
COPY --from=deps /vendor / COPY --from=deps /vendor /
+1 -1
View File
@@ -21,7 +21,7 @@
], ],
"author": "Docker Inc.", "author": "Docker Inc.",
"license": "Apache-2.0", "license": "Apache-2.0",
"packageManager": "yarn@4.9.2", "packageManager": "yarn@4.15.0",
"dependencies": { "dependencies": {
"@actions/core": "^3.0.1", "@actions/core": "^3.0.1",
"@docker/actions-toolkit": "^0.91.0" "@docker/actions-toolkit": "^0.91.0"
+4 -4
View File
@@ -2,7 +2,7 @@
# Manual changes might be lost - proceed with caution! # Manual changes might be lost - proceed with caution!
__metadata: __metadata:
version: 8 version: 10
cacheKey: 10 cacheKey: 10
"@aashutoshrathi/word-wrap@npm:^1.2.3": "@aashutoshrathi/word-wrap@npm:^1.2.3":
@@ -6189,8 +6189,8 @@ __metadata:
linkType: hard linkType: hard
"vite@npm:^6.0.0 || ^7.0.0": "vite@npm:^6.0.0 || ^7.0.0":
version: 7.3.2 version: 7.3.5
resolution: "vite@npm:7.3.2" resolution: "vite@npm:7.3.5"
dependencies: dependencies:
esbuild: "npm:^0.27.0" esbuild: "npm:^0.27.0"
fdir: "npm:^6.5.0" fdir: "npm:^6.5.0"
@@ -6239,7 +6239,7 @@ __metadata:
optional: true optional: true
bin: bin:
vite: bin/vite.js vite: bin/vite.js
checksum: 10/c5f7a9a60011c41c836cedf31c8ee7624102aff9b6a7f3aab2ff47639721bba0916f81994c3a3ea6577a16c4f0dfee1e7dbd244e0da8edd5954e3c6d48daaaa2 checksum: 10/2e1337510d6b81948b035f8b096c9be22daf1101fc52ad3d06cad9e090057ba1c1396e5e12cbaac2485f9c6cdcc854f978fe862280bdfe1a9a4149c60734c125
languageName: node languageName: node
linkType: hard linkType: hard