mirrors/distribution
0
0 Fork 0
mirror of https://github.com/distribution/distribution.git synced 2026-10-28 10:15:27 +08:00
Code Activity
6,027 Commits 26 Branches 66 Tags
952d81c67be4ddd35b8fdb65b3f175ce6f569e93
Commit Graph
6027 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Milos Gajdos 952d81c67b registry/storage: do not write hash state when closing a cancelled upload (#5021) 2026-10-18 09:25:38 -07:00
YoungjuKim 54058ad724 registry/storage: do not write hash state when closing a cancelled upload 
Cancel removes the upload directory, but the handler then closes the
writer, and Close stores the hash state again. That recreates the
upload directory without a startedat file, so the upload purger can
never remove it, and Close reports "already closed". Skip storing the
hash state once the upload has been cancelled.

Signed-off-by: YoungjuKim <fjvbn2003@gmail.com>
 2026-10-17 20:10:49 +09:00
Milos Gajdos 042c3a9a51 docs(storage-drivers/gcs): document credentials, maxconcurrency and useragent (#5018) 2026-10-16 16:46:07 -07:00
ump45nose 41688c0f58 docs(storage-drivers/gcs): document credentials, maxconcurrency and useragent 
The GCS driver reads three parameters that the parameters table in
docs/content/storage-drivers/gcs.md does not list:

- `credentials`: an inline service account key, used when `keyfile` is
  not set. It already appears in the configuration.md example, but not
  in the driver page.
- `maxconcurrency`: the limit passed to base.NewRegulator. It defaults
  to 50 (defaultMaxConcurrency) and is raised to 25 (minConcurrency)
  when set lower.
- `useragent`: passed to the storage client with option.WithUserAgent.

Add a row for each.

Signed-off-by: ump45nose <52391318+ump45nose@users.noreply.github.com>
 2026-10-17 07:35:22 +08:00
Milos Gajdos 7ffd469066 docs(storage-drivers/gcs): correct the documented chunksize default (#5017) 2026-10-16 13:17:47 -07:00
yuwk 92195a0912 docs(storage-drivers/gcs): correct the documented chunksize default 
The GCS storage driver parameters table documents `chunksize` as
defaulting to 5242880 (5 MiB). The driver does not use that value:
`registry/storage/driver/gcs/gcs.go` defines

	defaultChunkSize = 16 * 1024 * 1024

and applies it when the `chunksize` parameter is absent, so the documented
default understates the actual chunk size by a factor of three and a third.

Correct the table to 16777216 (16 MiB).

Signed-off-by: yuwk <1729065730@qq.com>
 2026-10-17 02:02:13 +08:00
Milos Gajdos 315f44a925 docs: fix the YAML key name in the platforms validation section (#5015) 2026-10-15 23:14:12 -07:00
yuwk f023eaf01a docs: fix the YAML key name in the platforms validation section 
Signed-off-by: yuwk <1729065730@qq.com>
 2026-10-16 08:41:55 +08:00
Milos Gajdos f7d69d28c2 driver/filesystem: fix uploads on Windows (#5012) 2026-10-14 13:00:17 -07:00
Milos Gajdos 84baa4692d registry/storage: avoid duplicate SHA-256 in canonical full-fallback validation (#4921) 2026-10-14 10:56:17 -07:00
Milos Gajdos 1c8ef77db2 build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 (#5013) 2026-10-14 08:34:03 -07:00
dependabot[bot] 67ec221689 build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 12:06:45 +00:00
CrazyMax cf25a54ab3 ci: run unit tests on Linux and Windows 
Run make test across Ubuntu and Windows with the latest Go 1.26 and 1.27
patch releases. This includes filesystem driver tests, which the existing
coverage target excludes, and catches Windows regressions before release.

Keep coverage and the Docker-backed S3 and Azure tests in a Linux-only job,
and require both test jobs before building artifacts.

Make the file health checks portable by using temporary directories and
closing the marker file before removing it. Check removal errors so a
failed deletion is reported directly.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-10-14 12:02:35 +02:00
CrazyMax 65804bfb78 driver/filesystem: fix uploads on Windows 
Since v3.1.0, the filesystem driver has tried to rename an open temporary
file when creating an upload session, causing every blob upload on Windows
to fail with HTTP 500. Closing the file exposes a second failure when the
driver tries to sync the parent directory.

Close the temporary file before renaming it and make directory syncing a
no-op on Windows. Preserve file syncing, replacement semantics, and the
existing writer lifecycle contract. Return slash-separated storage keys
from List so callers can use them on every platform.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-10-14 10:48:57 +02:00
Milos Gajdos d7da5da1ce build(deps): bump actions/labeler from 6.1.0 to 7.0.0 (#4985) 2026-10-11 20:25:41 -07:00
Milos Gajdos be78ef9417 Include filesystem rootdirectory in PathNotFound errors (#5007) 2026-10-11 17:18:39 -07:00
Milos Gajdos 036e830f80 fix(handlers): return 400 NAME_INVALID for over-long repository names (#4995) 2026-10-11 16:36:42 -07:00
yusheng.wang 89b2357009 Include filesystem rootdirectory in PathNotFound errors 
PathNotFoundError previously printed a storage-driver-relative path that callers treated as an absolute OS path. Include the filesystem driver's rootdirectory in the error message so the configured storage root is visible. Fixes #1793.

Signed-off-by: yusheng.wang <yusheng.wang@chaitin.com>
 2026-10-10 04:25:53 +08:00
Milos Gajdos bbf0a189dc build(deps): bump the codeql-actions group across 1 directory with 4 updates (#4994) 2026-10-07 21:36:25 -07:00
dependabot[bot] 9992df89b9 build(deps): bump the codeql-actions group across 1 directory with 4 updates 
Bumps the codeql-actions group with 4 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/autobuild` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-08 01:16:55 +00:00
Milos Gajdos fd9609dd58 Fix inmemory driver find traversing too deep into directory nodes (#4996) 2026-10-07 07:48:39 -07:00
Tianon Gravi 2ff9628d81 Add a regression test for inmemory race 
Signed-off-by: Tianon Gravi <admwiggin@gmail.com>
 2026-10-06 16:48:20 -07:00
Milos Gajdos 8ceb7bbf72 build: reduce binary size via improved dead‑code elimination (#4997) 2026-10-04 18:05:48 -07:00
ningmingxiao f3556cdabf build: reduce binary size via improved dead‑code elimination 
Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>
 2026-10-05 08:48:30 +08:00
Tianon Gravi f9e83ae0b7 Fix inmemory driver find traversing too deep into directory nodes 
When the final path component resolves to a directory, `q = q[i+1:]` with `i == -1` leaves `q` unchanged and recurses into the child -- going one level deeper than intended.  That is normally harmless, because the repeated lookup finds nothing and returns the directory it is already in, but it returns the wrong node when that directory has a child with the same name.

Guard with `i >= 0` so the found directory is returned directly.

Fixes an intermittent flake (~3-7% of runs) in `TestDeleteOnlyDeletesSubpaths`, which constructs `dirname/dirname` to deliberately trigger the ambiguous case.

Assisted-By: "claude my eyes right out"
Signed-off-by: Tianon Gravi <admwiggin@gmail.com>
 2026-10-02 14:54:29 -07:00
Milos Gajdos f01dfc400e docs: fix "offical" typo in Azure storage documentation (#4992) 2026-10-01 08:09:54 -07:00
Frank Yu 7a667cb13b docs: restore generated API error-code anchor 
Signed-off-by: Frank Yu <1729065730@qq.com>
 2026-10-01 04:14:05 -07:00
somaz b1b87d9550 fix(handlers): return 400 NAME_INVALID for over-long repository names 
A repository name whose path is longer than 255 characters fails
reference.WithName in the dispatcher. That branch appended a bare
distribution.ErrRepositoryNameInvalid to context.Errors, and since it
is not an errcode.ErrorCoder, errcode.ServeJSON answered 500 UNKNOWN.
Wrap it in errcode.ErrorCodeNameInvalid, as the Repository() branch
right below already does for the same error type.

Since a811c1bb moved the automatic error response into a deferred call
at the top of the dispatcher, the early returns for an invalid name, a
failed Repository() call and a failed repository middleware have each
written the error envelope twice: net/http drops the second WriteHeader
as superfluous and the body ends up with two JSON documents. Remove the
explicit ServeJSON calls and leave the response to the deferred handler.
The Repository() switch gains a default case, so an error of any other
type still gets a 500, now with an UNKNOWN entry instead of an empty
envelope.

Fixes #4699

Assisted-by: Claude Opus 5.5 (via Claude Code)
Signed-off-by: somaz <genius5711@gmail.com>
 2026-10-01 18:08:15 +09:00
Milos Gajdos 1d71a5c78e build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#4991) 2026-09-30 07:37:06 -07:00
yuwk d585764950 docs: fix "offical" typo and stale Errors anchor 
Signed-off-by: yuwk <1729065730@qq.com>
 2026-09-30 13:58:35 +08:00
dependabot[bot] 3cf5242fb6 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 01:16:55 +00:00
Milos Gajdos e0904092e2 build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#4990) 2026-09-29 07:25:03 -07:00
dependabot[bot] de6e36b066 build(deps): bump actions/checkout from 6.0.2 to 7.0.1 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-29 01:18:25 +00:00
Milos Gajdos 905f26de4b build(deps): bump the codeql-actions group across 1 directory with 4 updates (#4984) 2026-09-28 06:46:07 -07:00
João Pereira f68cd9cf7e wire validateManifestList into manifest list unmarshal (#4893) 2026-09-28 11:31:36 +01:00
dependabot[bot] 9c8ed05ae0 build(deps): bump the codeql-actions group across 1 directory with 4 updates 
Bumps the codeql-actions group with 4 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/autobuild` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/upload-sarif` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-28 01:16:29 +00:00
Milos Gajdos 923efdb825 Update containerd client link .../{master => main/core}/remotes/docker (#4902) 2026-09-26 08:50:04 -07:00
dependabot[bot] 5b70e7ecbb build(deps): bump actions/labeler from 6.1.0 to 7.0.0 
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.1.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/f27b608878404679385c85cfa523b85ccb86e213...bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-25 01:16:41 +00:00
Milos Gajdos 3220848f15 chore(release): prepare for v3.1.2 release (#4981) v3.1.2 2026-09-24 04:43:29 -07:00
Milos Gajdos 973fbf7e75 build(deps): bump the docker-actions group across 1 directory with 3 updates (#4978) 2026-09-23 18:38:52 -07:00
Milos Gajdos 30301b116a build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#4982) 2026-09-23 18:38:23 -07:00
dependabot[bot] 807a931132 build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-24 01:16:51 +00:00
dependabot[bot] fa720c9d5f build(deps): bump the docker-actions group across 1 directory with 3 updates 
Bumps the docker-actions group with 3 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/login-action](https://github.com/docker/login-action) and [docker/bake-action](https://github.com/docker/bake-action).


Updates `docker/setup-buildx-action` from 4.0.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...f87e5991a6d7451dcb8d9637bfbc97413f497069)

Updates `docker/login-action` from 4.2.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...dbcb813823bdd20940b903addbd779551569679f)

Updates `docker/bake-action` from 7.2.0 to 7.4.0
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/6614cfa25eff9a0b2b2697efb0b6159e7680d584...018cb6412ab401ebaa809aa5f85966b74628600f)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-24 01:13:23 +00:00
Milos Gajdos fd67fd4e32 chore(release): prepare for v3.1.2 release 
* Release notes added
* AUTHORS updated
* Version bump in the version package

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-23 07:52:57 -07:00
Milos Gajdos 960439b09f Merge commit from fork 
fix(client): verify manifest and blob content against requested digest (GHSA-685w-q87j-wqw3)
 2026-09-23 07:25:18 -07:00
Milos Gajdos ca9b887920 build(deps): bump the codeql-actions group with 4 updates (#4977) 2026-09-23 07:20:10 -07:00
Milos Gajdos 77aca8d1e7 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#4979) 2026-09-23 07:18:50 -07:00
dependabot[bot] 300e3a84e3 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](https://github.com/actions/deploy-pages/compare/cd2ce8fcbc39b97be8ca5fce6e763baed58fa128...368f82528645a54fb793d4d04e342629a3f51346)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-23 14:00:07 +00:00
dependabot[bot] 672bb1b382 build(deps): bump the codeql-actions group with 4 updates 
Bumps the codeql-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/autobuild` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/analyze` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-23 13:59:06 +00:00
Milos Gajdos 5e5d395b64 ci: dependabot: group CodeQL and Docker action updates (#4975) 2026-09-23 06:54:23 -07:00