chore: update generated content

build(deps): bump tmp from 0.2.6 to 0.2.7
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 16:03:43 +00:00 · 2026-06-15 16:42:39 +00:00 · 2026-06-15 16:41:44 +00:00 · 2026-06-12 14:08:05 -05:00 · 2026-06-12 18:49:25 +00:00
6 changed files with 10 additions and 10 deletions
@@ -29,7 +29,7 @@ jobs:
          targets: test
      -
        name: Upload coverage
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          files: ./coverage/clover.xml
          token: ${{ secrets.CODECOV_TOKEN }}
@@ -17,7 +17,7 @@ FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
-  yarn install && mkdir /vendor && cp yarn.lock /vendor
+  yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor

 FROM scratch AS vendor-update
 COPY --from=deps /vendor /
@@ -4966,7 +4966,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - tmp@0.2.6
+ - tmp@0.2.7

 This package contains the following license:

@@ -5752,9 +5752,9 @@ __metadata:
  linkType: hard

 "tmp@npm:^0.2.6":
-  version: 0.2.6
-  resolution: "tmp@npm:0.2.6"
-  checksum: 10/4ba072821d65f6ec0ae680dd49261bcc66c96a5a463c80ca040747256238aaad68ad5db7aa8367dd1554d22aa77c2988bdb1c5556ecfc4df105f5b73206b7d9b
+  version: 0.2.7
+  resolution: "tmp@npm:0.2.7"
+  checksum: 10/0a3bc90beb0c6275273c3475fb57e466eaab1c9c4a101d029ff62b18146ce136e7f75d09de34863d9f2c2a492751402508f9e028bc98eb34a1416195d4b15619
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
github-actions[bot]	73c1103e45	chore: update generated content	2026-06-15 16:42:39 +00:00
dependabot[bot]	ed8bd2c939	build(deps): bump tmp from 0.2.6 to 0.2.7 Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-15 16:41:44 +00:00
temenuzhka-thede	eaefd20f59	Merge pull request #303 from docker/sec-cli/npm-ci-20260612-184924 ci / default (push) Has been cancelled Details ci / main (tonistiigi/binfmt:latest, all) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:latest, arm64,riscv64,arm) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:master, all) (push) Has been cancelled Details ci / main (tonistiigi/binfmt:master, arm64,riscv64,arm) (push) Has been cancelled Details ci / error (push) Has been cancelled Details ci / cache-image (false) (push) Has been cancelled Details ci / cache-image (true) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:latest) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:master) (push) Has been cancelled Details ci / version (tonistiigi/binfmt:qemu-v7.0.0) (push) Has been cancelled Details ci / reset (push) Has been cancelled Details codeql / analyze (push) Has been cancelled Details test / test (push) Has been cancelled Details validate / prepare (push) Has been cancelled Details zizmor / zizmor (push) Has been cancelled Details validate / validate (push) Has been cancelled Details fix: replace npm install with npm ci (20260612-184924)	2026-06-12 14:08:05 -05:00
securityeng-bot[bot]	d1e45353ee	fix: use lockfile-aware install commands	2026-06-12 18:49:25 +00:00