chore(deps): Bump the codeql-actions group across 1 directory with 2 updates

Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.36.2 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](8aad20d150...d1ba80a13d) Updates `github/codeql-action/analyze` from 4.36.2 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](8aad20d150...d1ba80a13d) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions - dependency-name: github/codeql-action/init dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #1593 from crazy-max/fix-e2e-gitlab
2026-08-31 23:32:51 +08:00 · 2026-08-05 11:54:54 +00:00 · 2026-08-04 14:13:15 +02:00 · 2026-08-04 14:03:55 +02:00
2 changed files with 10 additions and 2 deletions
--- a/.github/workflows/.e2e-run.yml
+++ b/.github/workflows/.e2e-run.yml
@ -60,6 +60,14 @@ jobs:
          ID: ${{ inputs.id }}
        run: |
          cat ./.github/e2e/${ID}/env >> $GITHUB_ENV
+      -
+        # FIXME: Remove this once GitLab Registry accepts OCI artifact attestations
+        # whose subject points to a manifest pushed in the same build.
+        # https://github.com/docker/buildx/pull/3991
+        name: Set up GitLab env
+        if: inputs.provider == 'gitlab'
+        run: |
+          echo "BUILDX_NO_DEFAULT_OCI_ARTIFACT=true" >> "$GITHUB_ENV"
      -
        name: Set up BuildKit config
        env:
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@ -35,12 +35,12 @@ jobs:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+        uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+        uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
        with:
          category: "/language:javascript-typescript"
Author	SHA1	Message	Date
dependabot[bot]	518282e547	chore(deps): Bump the codeql-actions group across 1 directory with 2 updates Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.36.2 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`8aad20d150...d1ba80a13d`) Updates `github/codeql-action/analyze` from 4.36.2 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`8aad20d150...d1ba80a13d`) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions - dependency-name: github/codeql-action/init dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql-actions ... Signed-off-by: dependabot[bot] <support@github.com>	2026-08-05 11:54:54 +00:00
CrazyMax	11aabf2b92	Merge pull request #1593 from crazy-max/fix-e2e-gitlab Some checks failed ci / multi-output (push) Has been cancelled Details ci / load-and-push (push) Has been cancelled Details ci / summary-disable (push) Has been cancelled Details ci / summary-not-supported (push) Has been cancelled Details ci / record-upload-disable (push) Has been cancelled Details ci / record-retention-days (0) (push) Has been cancelled Details ci / record-retention-days (2) (push) Has been cancelled Details ci / checks (edge) (push) Has been cancelled Details ci / checks (latest) (push) Has been cancelled Details ci / checks (v0.14.1) (push) Has been cancelled Details ci / annotations-disabled (push) Has been cancelled Details ci / call-check (push) Has been cancelled Details ci / no-default-attestations (push) Has been cancelled Details codeql / analyze (push) Has been cancelled Details e2e / build (AWS ECR Public, aws, public.ecr.aws, public.ecr.aws/q3b5f1u4/test-docker-action, remote) (push) Has been cancelled Details e2e / build (AWS ECR, aws, 175142243308.dkr.ecr.us-east-2.amazonaws.com, 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action, remote) (push) Has been cancelled Details e2e / build (Artifactory, artifactory, infradock.jfrog.io, infradock.jfrog.io/test-ghaction/build-push-action, remote) (push) Has been cancelled Details e2e / build (Azure Container Registry, acr, officialgithubactions.azurecr.io, officialgithubactions.azurecr.io/test-docker-action, remote) (push) Has been cancelled Details e2e / build (Docker Hub, dockerhub, , dockereng/build-push-action-test, remote) (push) Has been cancelled Details e2e / build (GitHub, ghcr, ghcr.io, ghcr.io/docker/build-push-action-test, remote) (push) Has been cancelled Details e2e / build (GitLab, gitlab, registry.gitlab.com, registry.gitlab.com/test1716/test, remote) (push) Has been cancelled Details e2e / build (Google Artifact Registry, gar, us-east4-docker.pkg.dev, us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action, remote) (push) Has been cancelled Details e2e / build (Quay, quay, quay.io, quay.io/docker_build_team/ghactiontest, remote) (push) Has been cancelled Details e2e / build (distribution, Distribution, none, local) (push) Has been cancelled Details e2e / build (harbor, Harbor, none, local) (push) Has been cancelled Details e2e / build (nexus, Nexus, none, local) (push) Has been cancelled Details test / test (push) Has been cancelled Details validate / prepare (push) Has been cancelled Details zizmor / zizmor (push) Has been cancelled Details validate / validate (push) Has been cancelled Details ci(e2e): fix GitLab e2e push attestations	2026-08-04 14:13:15 +02:00
CrazyMax	d256265beb	ci(e2e): fix GitLab e2e push attestations Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-08-04 14:03:55 +02:00