dependabot[bot]
f32009d4a2
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
ci / validate (lint) (push) Has been cancelled
ci / validate (validate-docs) (push) Has been cancelled
ci / validate (validate-go-mod) (push) Has been cancelled
ci / validate (validate-headers) (push) Has been cancelled
ci / binary (push) Has been cancelled
ci / bin-image-test (push) Has been cancelled
ci / test (push) Has been cancelled
ci / e2e (plugin, oldstable) (push) Has been cancelled
ci / e2e (standalone, oldstable) (push) Has been cancelled
ci / e2e (plugin, stable) (push) Has been cancelled
ci / e2e (standalone, stable) (push) Has been cancelled
docs-upstream / docs-yaml (push) Has been cancelled
merge / bin-image-prepare (push) Has been cancelled
merge / module-image (push) Has been cancelled
Scorecards supply-chain security / Scorecards analysis (push) Has been cancelled
zizmor / zizmor (push) Has been cancelled
ci / binary-finalize (push) Has been cancelled
ci / coverage (push) Has been cancelled
ci / release (push) Has been cancelled
docs-upstream / validate (push) Has been cancelled
merge / bin-image (push) Has been cancelled
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...9c091bb21b
2026-07-07 11:49:14 +02:00
dependabot[bot]
f4bc599fdb
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 3.36.3 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](411c4c9a36...8aad20d150
2026-07-07 11:45:50 +02:00
dependabot[bot]
2ed5bf2b61
build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.3 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](1af58845a9...fb8b3582c8
2026-07-07 11:45:10 +02:00
dependabot[bot]
d32d8c3c76
build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24
...
Bumps [mxschmitt/action-tmate](https://github.com/mxschmitt/action-tmate ) from 3.23 to 3.24.
- [Release notes](https://github.com/mxschmitt/action-tmate/releases )
- [Changelog](https://github.com/mxschmitt/action-tmate/blob/master/RELEASE.md )
- [Commits](c0afd6f790...35b54afac2
2026-07-07 11:38:15 +02:00
dependabot[bot]
774d04dcef
build(deps): bump test-summary/action from 2.4 to 2.6
...
Bumps [test-summary/action](https://github.com/test-summary/action ) from 2.4 to 2.6.
- [Release notes](https://github.com/test-summary/action/releases )
- [Commits](31493c76ec...37b508cfee
2026-07-07 11:37:45 +02:00
dependabot[bot]
2c87234df8
build(deps): bump actions/setup-go from 6.3.0 to 6.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4b73464bb3...924ae3a1cd
2026-07-07 11:36:51 +02:00
dependabot[bot]
d00abb6f94
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 11:36:16 +02:00
dependabot[bot]
6b2e8d20c3
build(deps): bump the docker-actions group with 3 updates
...
Bumps the docker-actions group with 3 updates: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ), [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) and [docker/bake-action](https://github.com/docker/bake-action ).
Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](4d04d5d948...d7f5e7f509https://github.com/docker/github-builder/releases )
- [Commits](70313223e2...5f637c833ahttps://github.com/docker/bake-action/releases )
- [Commits](82490499d2...6614cfa25e
2026-07-07 11:34:25 +02:00
dependabot[bot]
43dc875f65
build(deps): bump actions/stale from 10.2.0 to 10.3.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](b5d41d4e1d...eb5cf3af3a
2026-07-07 11:10:54 +02:00
Sebastiaan van Stijn
0e20fb76c6
gha: dependabot: group docker/* actions updates
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-07-07 11:09:54 +02:00
Guillaume Lours
69ba683e15
ci: address review feedback on release job
...
ci / validate (lint) (push) Waiting to run
ci / validate (validate-docs) (push) Waiting to run
ci / validate (validate-go-mod) (push) Waiting to run
ci / validate (validate-headers) (push) Waiting to run
ci / binary (push) Waiting to run
ci / binary-finalize (push) Blocked by required conditions
ci / bin-image-test (push) Waiting to run
ci / test (push) Waiting to run
ci / e2e (plugin, oldstable) (push) Waiting to run
ci / e2e (standalone, oldstable) (push) Waiting to run
ci / e2e (plugin, stable) (push) Waiting to run
ci / e2e (standalone, stable) (push) Waiting to run
ci / coverage (push) Blocked by required conditions
ci / release (push) Blocked by required conditions
merge / bin-image-prepare (push) Waiting to run
merge / bin-image (push) Blocked by required conditions
merge / module-image (push) Waiting to run
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
zizmor / zizmor (push) Waiting to run
- Replace ncipollo/release-action with softprops/action-gh-release
(v3.0.1, SHA-pinned), the action used across Docker repositories;
input mapping is one-to-one.
- Duplicate the artifact listing/type checks into binary-finalize:
one copy inspects the artifact as assembled, on every push/PR (lost
when the tag guard moved to job level); the release-job copy still
inspects what was downloaded and gets attached to the release.
- Set overwrite_files: false so a job re-run never replaces assets
already uploaded to an existing release: unlike ncipollo, softprops
updates an existing release instead of failing. A re-run may still
refresh the release name/notes.
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-07-07 10:56:13 +02:00
Guillaume Lours
336f21f846
ci: harden GitHub Actions workflows
...
The pinned codeql-action/upload-sarif v2 (v2.28.1) falls in the
vulnerable range of CVE-2025-24362 and the v2 line has no patched
release, so bump to v3.36.3. Scope the release job to tag refs so its
contents:write token is only minted when a release is actually
created. In merge.yml, drop a dead conditional (workflow only triggers
on push) and pass DOCKERDESKTOP_REPO to github-script via env rather
than inline interpolation, as recommended against script injection.
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-07-07 10:56:13 +02:00
Sebastiaan van Stijn
b9d8a1a3e2
CODEOWNERS: add compose-reviewers
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-07-07 10:39:47 +02:00
CrazyMax
a666b63a3c
ci: fix docs-upstream workflow
...
ci / validate (lint) (push) Waiting to run
ci / validate (validate-docs) (push) Waiting to run
ci / validate (validate-go-mod) (push) Waiting to run
ci / validate (validate-headers) (push) Waiting to run
ci / binary (push) Waiting to run
ci / binary-finalize (push) Blocked by required conditions
ci / bin-image-test (push) Waiting to run
ci / test (push) Waiting to run
ci / e2e (plugin, oldstable) (push) Waiting to run
ci / e2e (standalone, oldstable) (push) Waiting to run
ci / e2e (plugin, stable) (push) Waiting to run
ci / e2e (standalone, stable) (push) Waiting to run
ci / coverage (push) Blocked by required conditions
ci / release (push) Blocked by required conditions
docs-upstream / docs-yaml (push) Waiting to run
docs-upstream / validate (push) Blocked by required conditions
merge / bin-image-prepare (push) Waiting to run
merge / bin-image (push) Blocked by required conditions
merge / module-image (push) Waiting to run
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
zizmor / zizmor (push) Waiting to run
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-06 17:29:12 +02:00
CrazyMax
be7b72e0ef
fix zizmor findings
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-06 17:11:24 +02:00
CrazyMax
50bd8945a1
chore: setup dependabot for github actions
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-06 17:11:24 +02:00
CrazyMax
1c9aa35c21
ci: zizmor workflow
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-06 17:11:24 +02:00
Sebastiaan van Stijn
26550b0d1f
ci: remove unused desktop-edge-test workflow
...
It's not currently used, and we can probably trigger this from the
desktop repository itself.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-07-06 11:18:38 +02:00
Derek Misler
81e420139a
ci: add concurrency group to pr-review-trigger to prevent duplicate reviews
...
Signed-off-by: Derek Misler <derek.misler@docker.com>
2026-07-06 10:25:22 +02:00
Docker Agent
a3c1c0dc2e
chore: migrate to docker-agent-action v2.0.1
...
ci / validate (lint) (push) Waiting to run
ci / validate (validate-docs) (push) Waiting to run
ci / validate (validate-go-mod) (push) Waiting to run
ci / validate (validate-headers) (push) Waiting to run
ci / binary (push) Waiting to run
ci / binary-finalize (push) Blocked by required conditions
ci / bin-image-test (push) Waiting to run
ci / test (push) Waiting to run
ci / e2e (plugin, oldstable) (push) Waiting to run
ci / e2e (standalone, oldstable) (push) Waiting to run
ci / e2e (plugin, stable) (push) Waiting to run
ci / e2e (standalone, stable) (push) Waiting to run
ci / coverage (push) Blocked by required conditions
ci / release (push) Blocked by required conditions
merge / bin-image-prepare (push) Waiting to run
merge / bin-image (push) Blocked by required conditions
merge / module-image (push) Waiting to run
merge / desktop-edge-test (push) Blocked by required conditions
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
- Bump docker-agent-action to v2.0.1 (e96a4bb)
- Add review_requested to pr-review-trigger.yml pull_request types
Signed-off-by: Docker Agent <svc-github-docker-agent@docker.com>
2026-06-24 14:51:31 +02:00
Docker Agent
899e88475a
chore: migrate cagent-action to docker-agent-action (v2.0.0)
...
ci / validate (lint) (push) Waiting to run
ci / validate (validate-docs) (push) Waiting to run
ci / validate (validate-go-mod) (push) Waiting to run
ci / validate (validate-headers) (push) Waiting to run
ci / binary (push) Waiting to run
ci / binary-finalize (push) Blocked by required conditions
ci / bin-image-test (push) Waiting to run
ci / test (push) Waiting to run
ci / e2e (plugin, oldstable) (push) Waiting to run
ci / e2e (standalone, oldstable) (push) Waiting to run
ci / e2e (plugin, stable) (push) Waiting to run
ci / e2e (standalone, stable) (push) Waiting to run
ci / coverage (push) Blocked by required conditions
ci / release (push) Blocked by required conditions
merge / bin-image-prepare (push) Waiting to run
merge / bin-image (push) Blocked by required conditions
merge / module-image (push) Waiting to run
merge / desktop-edge-test (push) Blocked by required conditions
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
Signed-off-by: Derek Misler <derek.misler@docker.com>
2026-06-23 22:42:46 +02:00
Sebastiaan van Stijn
79d63a8b84
gha: update docs-upstream to pin workflows by sha
...
ci / validate (lint) (push) Waiting to run
ci / validate (validate-docs) (push) Waiting to run
ci / validate (validate-go-mod) (push) Waiting to run
ci / validate (validate-headers) (push) Waiting to run
ci / binary (push) Waiting to run
ci / binary-finalize (push) Blocked by required conditions
ci / bin-image-test (push) Waiting to run
ci / test (push) Waiting to run
ci / e2e (plugin, oldstable) (push) Waiting to run
ci / e2e (standalone, oldstable) (push) Waiting to run
ci / e2e (plugin, stable) (push) Waiting to run
ci / e2e (standalone, stable) (push) Waiting to run
ci / coverage (push) Blocked by required conditions
ci / release (push) Blocked by required conditions
docs-upstream / docs-yaml (push) Waiting to run
docs-upstream / validate (push) Blocked by required conditions
merge / bin-image-prepare (push) Waiting to run
merge / bin-image (push) Blocked by required conditions
merge / module-image (push) Waiting to run
merge / desktop-edge-test (push) Blocked by required conditions
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
This workflow was updated in 56e2dba366464a44a6e7/.github/workflows/validate-upstream.yml00aefd5eae/.github/workflows/validate-upstream.yml
2026-06-09 17:57:47 +02:00
securityeng-bot[bot]
f3969cdc7f
ci: add Dependabot cooldown
ci / validate (lint) (push) Has been cancelled
ci / validate (validate-docs) (push) Has been cancelled
ci / validate (validate-go-mod) (push) Has been cancelled
ci / validate (validate-headers) (push) Has been cancelled
ci / binary (push) Has been cancelled
ci / bin-image-test (push) Has been cancelled
ci / test (push) Has been cancelled
ci / e2e (plugin, oldstable) (push) Has been cancelled
ci / e2e (standalone, oldstable) (push) Has been cancelled
ci / e2e (plugin, stable) (push) Has been cancelled
ci / e2e (standalone, stable) (push) Has been cancelled
merge / bin-image-prepare (push) Has been cancelled
merge / module-image (push) Has been cancelled
Scorecards supply-chain security / Scorecards analysis (push) Has been cancelled
ci / binary-finalize (push) Has been cancelled
ci / coverage (push) Has been cancelled
ci / release (push) Has been cancelled
merge / bin-image (push) Has been cancelled
merge / desktop-edge-test (push) Has been cancelled
2026-06-03 19:18:53 +02:00
derekmisler
60584e72b2
chore: update cagent-action to v1.4.4
...
Signed-off-by: Derek Misler <derek.misler@docker.com>
2026-05-05 10:43:37 +02:00
Guillaume Lours
9fd9dc7ca9
ci: remove unused e2e job from merge workflow
...
The e2e job targets desktop runners (desktop-windows, desktop-macos,
desktop-m1) that are not configured anymore for this project.
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-04-16 09:23:06 +02:00
Guillaume Lours
977a4310f9
remove 'provenance' attribute'
...
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-04-15 15:46:06 +02:00
Guillaume Lours
7a97400bea
Fix typo in SECURITY.md
...
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
2026-04-15 10:38:54 +02:00
Guillaume Lours
d518da2419
build and push Docker Desktop module image on release
...
Add workflow to build and push docker/compose-desktop-module image
to Docker Hub on version tag push, used by Docker Desktop's update
system to deliver the Compose CLI plugin.
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-04-10 16:12:09 +02:00
Guillaume Lours
7aeb90c9a3
Skip PR review workflow for Dependabot PRs
...
Dependabot PRs don't have access to the secrets required by the
cagent-action reusable workflow (CAGENT_ORG_MEMBERSHIP_TOKEN), causing
the org membership check to fail with "github-token not supplied".
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-03-31 10:58:45 +02:00
Guillaume Lours
0de456bc76
chore: bump GitHub Actions to latest versions
...
- actions/checkout v4 -> v6
- actions/upload-artifact v4/v6 -> v7
- actions/download-artifact v4/v7 -> v8
- docker/setup-buildx-action v3 -> v4
- docker/bake-action v6 -> v7
- actions/stale v9 -> v10
- actions/create-github-app-token v1 -> v3
- actions/github-script v7 -> v8
- ossf/scorecard-action v2.4.0 -> v2.4.3
- ncipollo/release-action v1.10.0 -> v1.21.0
- mxschmitt/action-tmate v3.11 -> v3.23
- codecov/codecov-action, test-summary/action, github/codeql-action: bump to latest patch
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-03-25 10:19:36 +01:00
Guillaume Lours
56e2dba366
chore: pin GitHub Actions to commit SHA, remove pr-review workflow
...
- Pin all action references to full commit SHA instead of mutable
version tags. Tag retained as inline comment for readability.
- Remove pr-review.yml workflow.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
# Conflicts:
# .github/workflows/pr-review.yml
2026-03-25 10:19:36 +01:00
Derek Misler
46d75d0bea
Update .github/workflows/pr-review.yml
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Derek Misler <derekmisler@gmail.com>
2026-03-25 09:52:29 +01:00
Derek Misler
bd351d7f96
Update .github/workflows/pr-review.yml
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Derek Misler <derekmisler@gmail.com>
2026-03-25 09:52:29 +01:00
Derek Misler
ece1886824
update cagent-action to latest (with better permissions)
...
Signed-off-by: Derek Misler <derek.misler@docker.com>
2026-03-25 09:52:29 +01:00
Guillaume Lours
2b9f60ba58
Add AI-powered PR review workflow via docker/cagent-action
...
Introduce a GitHub Actions workflow that triggers an AI-powered code
review on pull requests using docker/cagent-action's reusable workflow.
- Restrict comment-triggered runs to OWNER/MEMBER/COLLABORATOR
- Gate on github.repository to prevent execution on forks
- Filter out draft PRs and bot actors
- Only trigger on PR comments, not plain issue comments
- Serialize reviews per PR via concurrency group
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-03-23 17:38:46 +01:00
maks2134
b043368028
Update docker/github-builder to v1.4.0
...
Fixes template validation error in CI by updating to latest stable version
of docker/github-builder workflow. This resolves the JToken parsing error
in bake.yml@v1 that was causing bin-image-test to fail.
Signed-off-by: maks2134 <maks210306@yandex.by>
2026-03-18 16:23:34 +01:00
CrazyMax
af0029afe1
ci: use bin-image edge tag directly for e2e tests
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-03 15:11:49 +01:00
CrazyMax
b76feb66e1
ci: fix missing dependency on bin-image job
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-03 15:11:49 +01:00
CrazyMax
9dc7f1e70c
ci: use docker/github-builder to build, sign and push bin image
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-03 14:19:21 +01:00
CrazyMax
03205124fe
ci: use docker/github-builder to build, sign binaries
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-02-03 14:19:21 +01:00
Salman Muin Kayser Chishti
d91fc63813
Upgrade GitHub Actions to latest versions
...
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
2026-01-23 15:34:48 +01:00
Austin Vazquez
359d2f076e
ci: use .go-version file for actions/setup-go
...
Signed-off-by: Austin Vazquez <austin.vazquez@docker.com>
2025-12-09 20:33:00 +01:00
Austin Vazquez
c9e0d83e14
ci: upgrade actions/setup-go from v5 to v6
...
Signed-off-by: Austin Vazquez <austin.vazquez@docker.com>
2025-12-09 20:33:00 +01:00
Sebastiaan van Stijn
f2b14fe1aa
gha: use custom names for matrix
...
Manually enumerate the combinations ((plugin|standalone), (version))
so that we can assign a predictable name ("stable", "oldstable") and
prevent having to update the branch-protection rules for each update
to mark the tests as required.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-16 14:42:03 +01:00
Sebastiaan van Stijn
bd2257b6d1
gha: test against docker v29, v28
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-16 14:42:03 +01:00
Sebastiaan van Stijn
9ded1684cd
gha: update test-matrix: remove docker 26.x
...
- Mirantis Container Runtime (MCR) 23.0 reached EOL, and the next LTS
version of MCR is 25.x, but download.docker.com does not have 25.x
packages for the latest Ubuntu release.
- Docker 26.x reached EOL and is no longer maintained
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-09-29 14:27:41 +02:00
Nicolas De Loof
5fc2b2a71c
fix yaml indentation
...
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
2025-07-18 11:59:56 +02:00
Nicolas De Loof
b1cd40c316
swarm
...
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
2025-07-18 11:58:25 +02:00
Nicolas De Loof
ee1b1e0a93
run docker model configure
...
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
2025-06-30 19:22:35 +02:00
Nicolas De Loof
26e46d7cc8
e2e tests in CI
...
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
2025-06-30 19:22:35 +02:00
