Compare commits

..

8 Commits

Author SHA1 Message Date
github-actions[bot] f5f70cddd1 chore: update generated content 2026-06-23 19:23:27 +00:00
dependabot[bot] 68697d7966 build(deps): bump undici from 6.25.0 to 6.27.0
Bumps [undici](https://github.com/nodejs/undici) from 6.25.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.25.0...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-23 19:22:30 +00:00
temenuzhka-thede fad6f4094f Merge pull request #279 from docker/sec-cli/npm-ci-20260612-184919
fix: replace npm install with npm ci (20260612-184919)
2026-06-12 14:11:06 -05:00
securityeng-bot[bot] 1ff0cd31e1 fix: use lockfile-aware install commands 2026-06-12 18:49:20 +00:00
CrazyMax 0bda481195 Merge pull request #273 from crazy-max/yarn-update
update yarn to 4.15.0
2026-05-28 18:45:44 +02:00
CrazyMax 60d57a3e88 update yarn to 4.15.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-28 15:17:58 +02:00
CrazyMax 58abfcafaa Merge pull request #271 from docker/sec-cli/ignore-scripts-fix-20260527-193429
ci: add ignore-scripts to Node package manager config (20260527-193429)
2026-05-28 10:01:16 +02:00
securityeng-bot[bot] 4e220bc4c1 ci: enforce ignore-scripts policy for Node package managers 2026-05-27 20:05:10 +00:00
7 changed files with 101 additions and 97 deletions
+8 -4
View File
@@ -1,10 +1,10 @@
# https://yarnpkg.com/configuration/yarnrc # https://yarnpkg.com/configuration/yarnrc
compressionLevel: mixed nodeLinker: node-modules
enableGlobalCache: false
enableHardenedMode: true
logFilters: logFilters:
- code: YN0004
level: discard
- code: YN0013 - code: YN0013
level: discard level: discard
- code: YN0019 - code: YN0019
@@ -14,4 +14,8 @@ logFilters:
- code: YN0086 - code: YN0086
level: discard level: discard
nodeLinker: node-modules compressionLevel: mixed
enableGlobalCache: false
enableHardenedMode: true
enableScripts: false
npmMinimalAgeGate: 2d
+1 -1
View File
@@ -17,7 +17,7 @@ FROM base AS deps
RUN --mount=type=bind,target=.,rw \ RUN --mount=type=bind,target=.,rw \
--mount=type=cache,target=/src/.yarn/cache \ --mount=type=cache,target=/src/.yarn/cache \
--mount=type=cache,target=/src/node_modules \ --mount=type=cache,target=/src/node_modules \
yarn install && mkdir /vendor && cp yarn.lock /vendor yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor
FROM scratch AS vendor-update FROM scratch AS vendor-update
COPY --from=deps /vendor / COPY --from=deps /vendor /
Generated Vendored
+83 -83
View File
File diff suppressed because one or more lines are too long
Generated Vendored
+3 -3
View File
File diff suppressed because one or more lines are too long
Generated Vendored
+1 -1
View File
@@ -4068,7 +4068,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
The following npm package may be included in this product: The following npm package may be included in this product:
- undici@6.25.0 - undici@6.27.0
This package contains the following license: This package contains the following license:
+1 -1
View File
@@ -21,7 +21,7 @@
], ],
"author": "Docker Inc.", "author": "Docker Inc.",
"license": "Apache-2.0", "license": "Apache-2.0",
"packageManager": "yarn@4.9.2", "packageManager": "yarn@4.15.0",
"dependencies": { "dependencies": {
"@actions/core": "^3.0.1", "@actions/core": "^3.0.1",
"@docker/actions-toolkit": "^0.91.0" "@docker/actions-toolkit": "^0.91.0"
+4 -4
View File
@@ -2,7 +2,7 @@
# Manual changes might be lost - proceed with caution! # Manual changes might be lost - proceed with caution!
__metadata: __metadata:
version: 8 version: 10
cacheKey: 10 cacheKey: 10
"@aashutoshrathi/word-wrap@npm:^1.2.3": "@aashutoshrathi/word-wrap@npm:^1.2.3":
@@ -6106,9 +6106,9 @@ __metadata:
linkType: hard linkType: hard
"undici@npm:^6.23.0, undici@npm:^6.25.0": "undici@npm:^6.23.0, undici@npm:^6.25.0":
version: 6.25.0 version: 6.27.0
resolution: "undici@npm:6.25.0" resolution: "undici@npm:6.27.0"
checksum: 10/a475e45da3e1d1073283bb70531666f09a432eabff2b857bd7063d469a1ee1486192ff61dc0dadbb526673ce1120fee14d66a59b6b17d1e0bd3a4d5f0a52d0a6 checksum: 10/30c18cdb235edf4dd36f8aa3ace1ffaf44060289a7d62ad44c33180d2d74a224015d25574812f62ce9c625b5beb1b0b766495b650fedf356aca11eed7ce2c816
languageName: node languageName: node
linkType: hard linkType: hard