Visitar URL original
chore(deps): Bump glob from 10.3.15 to 10.5.0 by dependabot[bot] · Pull Request #621 · docker/metadata-action · GitHub
Skip to content

chore(deps): Bump glob from 10.3.15 to 10.5.0 - #621

Merged
crazy-max merged 1 commit into
masterfrom
dependabot/npm_and_yarn/glob-10.5.0
Apr 27, 2026
Merged

crazy-max merged 1 commit into
masterfrom
dependabot/npm_and_yarn/glob-10.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps glob from 10.3.15 to 10.5.0.

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [glob](https://github.com/isaacs/node-glob) from 10.3.15 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.3.15...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@crazy-max
crazy-max merged commit aa5e42b into master Apr 27, 2026
39 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/glob-10.5.0 branch April 27, 2026 07:42
hoodnoah added a commit to hoodnoah/certmanager-porkbun-webhook that referenced this pull request Jun 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/metadata-action](https://github.com/docker/metadata-action) | action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>

### [`v6.1.0`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

[Compare Source](docker/metadata-action@v6...v6.1.0)

- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#&#8203;613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#&#8203;658](docker/metadata-action#658) [#&#8203;630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#&#8203;617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#&#8203;620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#&#8203;623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#&#8203;621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#&#8203;629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#&#8203;639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#&#8203;619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#&#8203;626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#&#8203;649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#&#8203;657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#&#8203;614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#&#8203;637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

### [`v6.0.0`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

[Compare Source](docker/metadata-action@v6...v6)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#&#8203;588](docker/metadata-action#588)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;599](docker/metadata-action#599)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#&#8203;597](docker/metadata-action#597)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#&#8203;604](docker/metadata-action#604)
- Bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#&#8203;600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#&#8203;603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

### [`v6`](docker/metadata-action@v5.10.0...v6)

[Compare Source](docker/metadata-action@v5.10.0...v6)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTcuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIxNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: hoodn <hood.noah@gmail.com>
Reviewed-on: https://gitea.k3s.noah-hood.io/hoodn/certmanager-porkbun-webhook/pulls/10
Co-authored-by: renovate-bot <renovate-bot@example.local>
Co-committed-by: renovate-bot <renovate-bot@example.local>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 11, 2026
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6.0.0)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 18, 2026
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jul 2, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jul 12, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jul 20, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jul 24, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Aug 11, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Aug 26, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Sep 3, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Sep 8, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
chocolatemoo53 pushed a commit to chocolatemoo53/ytproxy-go that referenced this pull request Sep 9, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/metadata-action](https://github.com/docker/metadata-action) | action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>

### [`v6.2.0`](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

[Compare Source](docker/metadata-action@v6.1.0...v6.2.0)

- Preserve names in esbuild bundle by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;689](docker/metadata-action#689)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#&#8203;663](docker/metadata-action#663)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#&#8203;666](docker/metadata-action#666)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#&#8203;672](docker/metadata-action#672) [#&#8203;696](docker/metadata-action#696)
- Bump [@&#8203;sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#&#8203;690](docker/metadata-action#690)
- Bump [@&#8203;sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#&#8203;693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#&#8203;683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#&#8203;688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#&#8203;664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#&#8203;665](docker/metadata-action#665) [#&#8203;695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#&#8203;694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#&#8203;673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#&#8203;686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#&#8203;685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>

### [`v6.1.0`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

[Compare Source](docker/metadata-action@v6...v6.1.0)

- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#&#8203;613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#&#8203;658](docker/metadata-action#658) [#&#8203;630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#&#8203;617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#&#8203;620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#&#8203;623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#&#8203;621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#&#8203;629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#&#8203;639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#&#8203;619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#&#8203;626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#&#8203;649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#&#8203;657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#&#8203;614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#&#8203;637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

### [`v6.0.0`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

[Compare Source](docker/metadata-action@v6...v6)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#&#8203;588](docker/metadata-action#588)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;599](docker/metadata-action#599)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#&#8203;597](docker/metadata-action#597)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#&#8203;604](docker/metadata-action#604)
- Bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#&#8203;600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#&#8203;603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

### [`v6`](docker/metadata-action@v5.10.0...v6)

[Compare Source](docker/metadata-action@v5.10.0...v6)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zOS4zIiwidXBkYXRlZEluVmVyIjoiNDQuMzkuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

Reviewed-on: https://git.nadeko.net/Fijxu/ytproxy-go/pulls/186
marcocot pushed a commit to marcocot/vinted-search-mcp that referenced this pull request Sep 21, 2026
…to v6 (#8)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://github.com/docker/metadata-action](https://github.com/docker/metadata-action) | action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>docker/metadata-action (https://github.com/docker/metadata-action)</summary>

### [`v6.2.0`](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

[Compare Source](docker/metadata-action@v6.1.0...v6.2.0)

- Preserve names in esbuild bundle by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;689](docker/metadata-action#689)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#&#8203;663](docker/metadata-action#663)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#&#8203;666](docker/metadata-action#666)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#&#8203;672](docker/metadata-action#672) [#&#8203;696](docker/metadata-action#696)
- Bump [@&#8203;sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#&#8203;690](docker/metadata-action#690)
- Bump [@&#8203;sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#&#8203;693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#&#8203;683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#&#8203;688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#&#8203;664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#&#8203;665](docker/metadata-action#665) [#&#8203;695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#&#8203;694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#&#8203;673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#&#8203;686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#&#8203;685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>

### [`v6.1.0`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

[Compare Source](docker/metadata-action@v6.0.0...v6.1.0)

- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#&#8203;613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#&#8203;658](docker/metadata-action#658) [#&#8203;630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#&#8203;617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#&#8203;620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#&#8203;623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#&#8203;621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#&#8203;629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#&#8203;639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#&#8203;619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#&#8203;626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#&#8203;649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#&#8203;657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#&#8203;614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#&#8203;637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

### [`v6.0.0`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

[Compare Source](docker/metadata-action@v5.10.0...v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#&#8203;588](docker/metadata-action#588)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;599](docker/metadata-action#599)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#&#8203;597](docker/metadata-action#597)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#&#8203;604](docker/metadata-action#604)
- Bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#&#8203;600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#&#8203;603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Rome)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMDMuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjEwMy4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaG9yZSIsImRlcHMiLCJtYWpvciJdfQ==-->

Reviewed-on: https://git.homelab.devncode.it/marco/vinted-search-mcp/pulls/8
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Oct 1, 2026
##### [\`v6.2.0\`](docker/metadata-action@v6.1.0...v6.2.0)


---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Oct 13, 2026
##### [\`v6.2.0\`](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#689](docker/metadata-action#689)
- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#663](docker/metadata-action#663)
- Bump [@actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#666](docker/metadata-action#666)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#672](docker/metadata-action#672) [#696](docker/metadata-action#696)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#690](docker/metadata-action#690)
- Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#665](docker/metadata-action#665) [#695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>

---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Oct 20, 2026
##### [\`v6.2.0\`](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#689](docker/metadata-action#689)
- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#663](docker/metadata-action#663)
- Bump [@actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#666](docker/metadata-action#666)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#672](docker/metadata-action#672) [#696](docker/metadata-action#696)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#690](docker/metadata-action#690)
- Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#665](docker/metadata-action#665) [#695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>

---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
renovate Bot added a commit to cigaleapp/infrastructure that referenced this pull request Oct 27, 2026
##### [vv6.2.0](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#689](docker/metadata-action#689)
- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#663](docker/metadata-action#663)
- Bump [@actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#666](docker/metadata-action#666)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#672](docker/metadata-action#672) [#696](docker/metadata-action#696)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#690](docker/metadata-action#690)
- Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#665](docker/metadata-action#665) [#695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>
##### [vv6.1.0](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>
##### [vv6.0.0](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
##### [vv5.10.0](https://github.com/docker/metadata-action/releases/tag/v5.10.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.66.0 to 0.68.0 in [#559](docker/metadata-action#559) [#569](docker/metadata-action#569)
- Bump js-yaml from 3.14.1 to 3.14.2 in [#564](docker/metadata-action#564)

**Full Changelog**: <docker/metadata-action@v5.9.0...v5.10.0>
##### [vv5.9.0](https://github.com/docker/metadata-action/releases/tag/v5.9.0)

- Add `tag-names` output to return tag names without image base name by [@crazy-max](https://github.com/crazy-max) in [#553](docker/metadata-action#553)
- Bump [@babel/runtime-corejs3](https://github.com/babel/runtime-corejs3) from 7.14.7 to 7.28.2 in [#539](docker/metadata-action#539)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.66.0 in [#555](docker/metadata-action#555)
- Bump brace-expansion from 1.1.11 to 1.1.12 in [#540](docker/metadata-action#540)
- Bump csv-parse from 5.6.0 to 6.1.0 in [#532](docker/metadata-action#532)
- Bump semver from 7.7.2 to 7.7.3 in in [#554](docker/metadata-action#554)
- Bump tmp from 0.2.3 to 0.2.5 in [#541](docker/metadata-action#541)

**Full Changelog**: <docker/metadata-action@v5.8.0...v5.9.0>
##### [vv5.8.0](https://github.com/docker/metadata-action/releases/tag/v5.8.0)

- New `is_not_default_branch` global expression by [@crazy-max](https://github.com/crazy-max) in [#535](docker/metadata-action#535)
- Allow to match part of the git tag or value for semver/pep440 types by [@crazy-max](https://github.com/crazy-max) in [#536](docker/metadata-action#536) [#537](docker/metadata-action#537)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.0 to 6.0.1 in [#523](docker/metadata-action#523)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.56.0 to 0.62.1 in [#526](docker/metadata-action#526)
- Bump form-data from 2.5.1 to 2.5.5 in [#533](docker/metadata-action#533)
- Bump moment-timezone from 0.5.47 to 0.6.0 in [#525](docker/metadata-action#525)
- Bump semver from 7.7.1 to 7.7.2 in [#524](docker/metadata-action#524)

**Full Changelog**: <docker/metadata-action@v5.7.0...v5.8.0>
##### [vv5.7.0](https://github.com/docker/metadata-action/releases/tag/v5.7.0)

- Global expressions support for labels and annotations by [@crazy-max](https://github.com/crazy-max) in [#489](docker/metadata-action#489)
- Support disabling outputs as environment variables by [@omus](https://github.com/omus) in [#497](docker/metadata-action#497)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.44.0 to 0.56.0 in [#507](docker/metadata-action#507) [#509](docker/metadata-action#509)
- Bump csv-parse from 5.5.6 to 5.6.0 in [#482](docker/metadata-action#482)
- Bump moment-timezone from 0.5.46 to 0.5.47 in [#501](docker/metadata-action#501)
- Bump semver from 7.6.3 to 7.7.1 in [#504](docker/metadata-action#504)

**Full Changelog**: <docker/metadata-action@v5.6.1...v5.7.0>
##### [vv5.6.1](https://github.com/docker/metadata-action/releases/tag/v5.6.1)

- Fix GitHub API request fallback for commit date by [@crazy-max](https://github.com/crazy-max) in [#478](docker/metadata-action#478)
- Revert to default commit SHA length of 7 by [@crazy-max](https://github.com/crazy-max) in [#480](docker/metadata-action#480)

**Full Changelog**: <docker/metadata-action@v5.6.0...v5.6.1>
##### [vv5.6.0](https://github.com/docker/metadata-action/releases/tag/v5.6.0)

- Add `commit_date` global expression by [@trim21](https://github.com/trim21) in [#471](docker/metadata-action#471) [#475](docker/metadata-action#475)
- Increase short commit sha length to 12 for uniqueness by [@crazy-max](https://github.com/crazy-max) in [#467](docker/metadata-action#467)
- Bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 [#460](docker/metadata-action#460)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.16.1 to 0.44.0 [#391](docker/metadata-action#391) [#399](docker/metadata-action#399) [#413](docker/metadata-action#413) [#441](docker/metadata-action#441)
- Bump braces from 3.0.2 to 3.0.3 [#424](docker/metadata-action#424)
- Bump cross-spawn from 7.0.3 to 7.0.5 [#474](docker/metadata-action#474)
- Bump csv-parse from 5.5.5 to 5.5.6 [#412](docker/metadata-action#412)
- Bump moment-timezone from 0.5.44 to 0.5.46 [#383](docker/metadata-action#383) [#470](docker/metadata-action#470) [#459](docker/metadata-action#459)
- Bump path-to-regexp from 6.2.2 to 6.3.0 [#454](docker/metadata-action#454)
- Bump semver from 7.6.0 to 7.6.3 [#400](docker/metadata-action#400) [#411](docker/metadata-action#411) [#440](docker/metadata-action#440)
- Bump undici from 5.26.3 to 5.28.4 [#386](docker/metadata-action#386) [#402](docker/metadata-action#402)

**Full Changelog**: <docker/metadata-action@v5.5.1...v5.6.0>
##### [vv5.5.1](https://github.com/docker/metadata-action/releases/tag/v5.5.1)

- Don't set `cwd://` prefix for local bake files by [@crazy-max](https://github.com/crazy-max) in [#382](docker/metadata-action#382)

**Full Changelog**: <docker/metadata-action@v5.5.0...v5.5.1>
##### [vv5.5.0](https://github.com/docker/metadata-action/releases/tag/v5.5.0)

- Set `cwd://` prefix for bake files path by [@crazy-max](https://github.com/crazy-max) in [#370](docker/metadata-action#370)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.16.0 to 0.16.1 in [#371](docker/metadata-action#371)
- Bump moment from 2.29.4 to 2.30.1 in [#373](docker/metadata-action#373)
- Bump moment-timezone from 0.5.43 to 0.5.44 in [#374](docker/metadata-action#374)

**Full Changelog**: <docker/metadata-action@v5.4.0...v5.5.0>
##### [vv5.4.0](https://github.com/docker/metadata-action/releases/tag/v5.4.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.15.0 to 0.16.0 in [#369](docker/metadata-action#369)
- Bump csv-parse from 5.5.2 to 5.5.3 in [#365](docker/metadata-action#365)

**Full Changelog**: <docker/metadata-action@v5.3.0...v5.4.0>
##### [vv5.3.0](https://github.com/docker/metadata-action/releases/tag/v5.3.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.14.0 to 0.15.0 in [#363](docker/metadata-action#363) (fixes [#362](docker/metadata-action#362))

**Full Changelog**: <docker/metadata-action@v5.2.0...v5.3.0>
##### [vv5.2.0](https://github.com/docker/metadata-action/releases/tag/v5.2.0)

- Custom annotations support by [@crazy-max](https://github.com/crazy-max) in [#361](docker/metadata-action#361)

**Full Changelog**: <docker/metadata-action@v5.1.0...v5.2.0>
##### [vv5.1.0](https://github.com/docker/metadata-action/releases/tag/v5.1.0)

- Annotations support by [@crazy-max](https://github.com/crazy-max) in [#352](docker/metadata-action#352)
- Split bake definition into two files by [@crazy-max](https://github.com/crazy-max) in [#353](docker/metadata-action#353)
- Allow images input to be empty to output bare tags by [@crazy-max](https://github.com/crazy-max) in [#358](docker/metadata-action#358)
- Bump [@actions/github](https://github.com/actions/github) from 5.1.1 to 6.0.0 in [#348](docker/metadata-action#348)
- Bump [@babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [#350](docker/metadata-action#350)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.12.0 to 0.14.0 in [#349](docker/metadata-action#349) [#357](docker/metadata-action#357)
- Bump csv-parse from 5.5.0 to 5.5.2 in [#346](docker/metadata-action#346)
- Bump semver from 7.5.3 to 7.5.4 in [#335](docker/metadata-action#335)

**Full Changelog**: <docker/metadata-action@v5.0.0...v5.1.0>
gwennlbh pushed a commit to cigaleapp/infrastructure that referenced this pull request Oct 27, 2026
##### [vv6.2.0](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#689](docker/metadata-action#689)
- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#663](docker/metadata-action#663)
- Bump [@actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#666](docker/metadata-action#666)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#672](docker/metadata-action#672) [#696](docker/metadata-action#696)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#690](docker/metadata-action#690)
- Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#665](docker/metadata-action#665) [#695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>
##### [vv6.1.0](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>
##### [vv6.0.0](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
##### [vv5.10.0](https://github.com/docker/metadata-action/releases/tag/v5.10.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.66.0 to 0.68.0 in [#559](docker/metadata-action#559) [#569](docker/metadata-action#569)
- Bump js-yaml from 3.14.1 to 3.14.2 in [#564](docker/metadata-action#564)

**Full Changelog**: <docker/metadata-action@v5.9.0...v5.10.0>
##### [vv5.9.0](https://github.com/docker/metadata-action/releases/tag/v5.9.0)

- Add `tag-names` output to return tag names without image base name by [@crazy-max](https://github.com/crazy-max) in [#553](docker/metadata-action#553)
- Bump [@babel/runtime-corejs3](https://github.com/babel/runtime-corejs3) from 7.14.7 to 7.28.2 in [#539](docker/metadata-action#539)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.66.0 in [#555](docker/metadata-action#555)
- Bump brace-expansion from 1.1.11 to 1.1.12 in [#540](docker/metadata-action#540)
- Bump csv-parse from 5.6.0 to 6.1.0 in [#532](docker/metadata-action#532)
- Bump semver from 7.7.2 to 7.7.3 in in [#554](docker/metadata-action#554)
- Bump tmp from 0.2.3 to 0.2.5 in [#541](docker/metadata-action#541)

**Full Changelog**: <docker/metadata-action@v5.8.0...v5.9.0>
##### [vv5.8.0](https://github.com/docker/metadata-action/releases/tag/v5.8.0)

- New `is_not_default_branch` global expression by [@crazy-max](https://github.com/crazy-max) in [#535](docker/metadata-action#535)
- Allow to match part of the git tag or value for semver/pep440 types by [@crazy-max](https://github.com/crazy-max) in [#536](docker/metadata-action#536) [#537](docker/metadata-action#537)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.0 to 6.0.1 in [#523](docker/metadata-action#523)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.56.0 to 0.62.1 in [#526](docker/metadata-action#526)
- Bump form-data from 2.5.1 to 2.5.5 in [#533](docker/metadata-action#533)
- Bump moment-timezone from 0.5.47 to 0.6.0 in [#525](docker/metadata-action#525)
- Bump semver from 7.7.1 to 7.7.2 in [#524](docker/metadata-action#524)

**Full Changelog**: <docker/metadata-action@v5.7.0...v5.8.0>
##### [vv5.7.0](https://github.com/docker/metadata-action/releases/tag/v5.7.0)

- Global expressions support for labels and annotations by [@crazy-max](https://github.com/crazy-max) in [#489](docker/metadata-action#489)
- Support disabling outputs as environment variables by [@omus](https://github.com/omus) in [#497](docker/metadata-action#497)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.44.0 to 0.56.0 in [#507](docker/metadata-action#507) [#509](docker/metadata-action#509)
- Bump csv-parse from 5.5.6 to 5.6.0 in [#482](docker/metadata-action#482)
- Bump moment-timezone from 0.5.46 to 0.5.47 in [#501](docker/metadata-action#501)
- Bump semver from 7.6.3 to 7.7.1 in [#504](docker/metadata-action#504)

**Full Changelog**: <docker/metadata-action@v5.6.1...v5.7.0>
##### [vv5.6.1](https://github.com/docker/metadata-action/releases/tag/v5.6.1)

- Fix GitHub API request fallback for commit date by [@crazy-max](https://github.com/crazy-max) in [#478](docker/metadata-action#478)
- Revert to default commit SHA length of 7 by [@crazy-max](https://github.com/crazy-max) in [#480](docker/metadata-action#480)

**Full Changelog**: <docker/metadata-action@v5.6.0...v5.6.1>
##### [vv5.6.0](https://github.com/docker/metadata-action/releases/tag/v5.6.0)

- Add `commit_date` global expression by [@trim21](https://github.com/trim21) in [#471](docker/metadata-action#471) [#475](docker/metadata-action#475)
- Increase short commit sha length to 12 for uniqueness by [@crazy-max](https://github.com/crazy-max) in [#467](docker/metadata-action#467)
- Bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 [#460](docker/metadata-action#460)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.16.1 to 0.44.0 [#391](docker/metadata-action#391) [#399](docker/metadata-action#399) [#413](docker/metadata-action#413) [#441](docker/metadata-action#441)
- Bump braces from 3.0.2 to 3.0.3 [#424](docker/metadata-action#424)
- Bump cross-spawn from 7.0.3 to 7.0.5 [#474](docker/metadata-action#474)
- Bump csv-parse from 5.5.5 to 5.5.6 [#412](docker/metadata-action#412)
- Bump moment-timezone from 0.5.44 to 0.5.46 [#383](docker/metadata-action#383) [#470](docker/metadata-action#470) [#459](docker/metadata-action#459)
- Bump path-to-regexp from 6.2.2 to 6.3.0 [#454](docker/metadata-action#454)
- Bump semver from 7.6.0 to 7.6.3 [#400](docker/metadata-action#400) [#411](docker/metadata-action#411) [#440](docker/metadata-action#440)
- Bump undici from 5.26.3 to 5.28.4 [#386](docker/metadata-action#386) [#402](docker/metadata-action#402)

**Full Changelog**: <docker/metadata-action@v5.5.1...v5.6.0>
##### [vv5.5.1](https://github.com/docker/metadata-action/releases/tag/v5.5.1)

- Don't set `cwd://` prefix for local bake files by [@crazy-max](https://github.com/crazy-max) in [#382](docker/metadata-action#382)

**Full Changelog**: <docker/metadata-action@v5.5.0...v5.5.1>
##### [vv5.5.0](https://github.com/docker/metadata-action/releases/tag/v5.5.0)

- Set `cwd://` prefix for bake files path by [@crazy-max](https://github.com/crazy-max) in [#370](docker/metadata-action#370)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.16.0 to 0.16.1 in [#371](docker/metadata-action#371)
- Bump moment from 2.29.4 to 2.30.1 in [#373](docker/metadata-action#373)
- Bump moment-timezone from 0.5.43 to 0.5.44 in [#374](docker/metadata-action#374)

**Full Changelog**: <docker/metadata-action@v5.4.0...v5.5.0>
##### [vv5.4.0](https://github.com/docker/metadata-action/releases/tag/v5.4.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.15.0 to 0.16.0 in [#369](docker/metadata-action#369)
- Bump csv-parse from 5.5.2 to 5.5.3 in [#365](docker/metadata-action#365)

**Full Changelog**: <docker/metadata-action@v5.3.0...v5.4.0>
##### [vv5.3.0](https://github.com/docker/metadata-action/releases/tag/v5.3.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.14.0 to 0.15.0 in [#363](docker/metadata-action#363) (fixes [#362](docker/metadata-action#362))

**Full Changelog**: <docker/metadata-action@v5.2.0...v5.3.0>
##### [vv5.2.0](https://github.com/docker/metadata-action/releases/tag/v5.2.0)

- Custom annotations support by [@crazy-max](https://github.com/crazy-max) in [#361](docker/metadata-action#361)

**Full Changelog**: <docker/metadata-action@v5.1.0...v5.2.0>
##### [vv5.1.0](https://github.com/docker/metadata-action/releases/tag/v5.1.0)

- Annotations support by [@crazy-max](https://github.com/crazy-max) in [#352](docker/metadata-action#352)
- Split bake definition into two files by [@crazy-max](https://github.com/crazy-max) in [#353](docker/metadata-action#353)
- Allow images input to be empty to output bare tags by [@crazy-max](https://github.com/crazy-max) in [#358](docker/metadata-action#358)
- Bump [@actions/github](https://github.com/actions/github) from 5.1.1 to 6.0.0 in [#348](docker/metadata-action#348)
- Bump [@babel/traverse](https://github.com/babel/traverse) from 7.17.3 to 7.23.2 in [#350](docker/metadata-action#350)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.12.0 to 0.14.0 in [#349](docker/metadata-action#349) [#357](docker/metadata-action#357)
- Bump csv-parse from 5.5.0 to 5.5.2 in [#346](docker/metadata-action#346)
- Bump semver from 7.5.3 to 7.5.4 in [#335](docker/metadata-action#335)

**Full Changelog**: <docker/metadata-action@v5.0.0...v5.1.0>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Nov 5, 2026
##### [\`v6.2.0\`](https://github.com/docker/metadata-action/releases/tag/v6.2.0)

- Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#689](docker/metadata-action#689)
- Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#663](docker/metadata-action#663)
- Bump [@actions/github](https://github.com/actions/github) from 9.0.0 to 9.1.1 in [#666](docker/metadata-action#666)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#672](docker/metadata-action#672) [#696](docker/metadata-action#696)
- Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#690](docker/metadata-action#690)
- Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#693](docker/metadata-action#693)
- Bump csv-parse from 6.2.1 to 7.0.0 in [#683](docker/metadata-action#683)
- Bump js-yaml from 4.1.1 to 4.3.0 in [#688](docker/metadata-action#688)
- Bump moment-timezone from 0.6.1 to 0.6.2 in [#664](docker/metadata-action#664)
- Bump semver from 7.7.4 to 7.8.5 in [#665](docker/metadata-action#665) [#695](docker/metadata-action#695)
- Bump sigstore from 4.1.0 to 4.1.1 in [#694](docker/metadata-action#694)
- Bump tmp from 0.2.5 to 0.2.7 in [#673](docker/metadata-action#673)
- Bump undici from 6.25.0 to 6.27.0 in [#686](docker/metadata-action#686)
- Bump vite from 7.3.2 to 7.3.6 in [#685](docker/metadata-action#685)

**Full Changelog**: <docker/metadata-action@v6.1.0...v6.2.0>

---
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>
fdio-github pushed a commit to FDio/.github that referenced this pull request Nov 11, 2026
Bumps docker/metadata-action from 6.0.0 to 6.2.0.
## Release notes

Sourced from docker/metadata-action's releases.

v6.2.0

Preserve names in esbuild bundle by @​crazy-max in docker/metadata-action#689
Bump @​actions/core from 3.0.0 to 3.0.1 in docker/metadata-action#663
Bump @​actions/github from 9.0.0 to 9.1.1 in docker/metadata-action#666
Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/metadata-action#672 docker/metadata-action#696
Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/metadata-action#690
Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/metadata-action#693
Bump csv-parse from 6.2.1 to 7.0.0 in docker/metadata-action#683
Bump js-yaml from 4.1.1 to 4.3.0 in docker/metadata-action#688
Bump moment-timezone from 0.6.1 to 0.6.2 in docker/metadata-action#664
Bump semver from 7.7.4 to 7.8.5 in docker/metadata-action#665 docker/metadata-action#695
Bump sigstore from 4.1.0 to 4.1.1 in docker/metadata-action#694
Bump tmp from 0.2.5 to 0.2.7 in docker/metadata-action#673
Bump undici from 6.25.0 to 6.27.0 in docker/metadata-action#686
Bump vite from 7.3.2 to 7.3.6 in docker/metadata-action#685

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0
v6.1.0

Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in docker/metadata-action#613
Bump brace-expansion from 1.1.12 to 5.0.6 in docker/metadata-action#658 docker/metadata-action#630
Bump csv-parse from 6.1.0 to 6.2.1 in docker/metadata-action#617
Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/metadata-action#620
Bump flatted from 3.3.3 to 3.4.2 in docker/metadata-action#623
Bump glob from 10.3.15 to 10.5.0 in docker/metadata-action#621
Bump handlebars from 4.7.8 to 4.7.9 in docker/metadata-action#629
Bump lodash from 4.17.23 to 4.18.1 in docker/metadata-action#639
Bump moment-timezone from 0.6.0 to 0.6.1 in docker/metadata-action#619
Bump picomatch from 4.0.3 to 4.0.4 in docker/metadata-action#626
Bump postcss from 8.5.6 to 8.5.10 in docker/metadata-action#649
Bump tar from 6.2.1 to 7.5.15 in docker/metadata-action#657
Bump undici from 6.23.0 to 6.25.0 in docker/metadata-action#614
Bump vite from 7.3.1 to 7.3.2 in docker/metadata-action#637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

## Commits

dc80280 Merge pull request #696 from docker/dependabot/npm_and_yarn/docker/actions-to
2b9fe83 [dependabot skip] chore: update generated content
8128ce3 chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
1d1c895 Merge pull request #695 from docker/dependabot/npm_and_yarn/semver-7.8.5
7f0c2dd Merge pull request #694 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
025f8c5 [dependabot skip] chore: update generated content
e98d63c chore(deps): Bump semver from 7.8.1 to 7.8.5
37d9379 chore(deps): Bump sigstore from 4.1.0 to 4.1.1
a1b8072 Merge pull request #690 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1
e0e3381 [dependabot skip] chore: update generated content
Additional commits viewable in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I51a8815b0e4123fbbeb40162c15cec92a31c18d7
GitHub-PR: #7
GitHub-Hash: f48376ed09776e1b
Signed-off-by: fdio.github <releng+fdio-github@linuxfoundation.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant