Skip to content

Sync upstream v7 (ESM, esbuild, vitest, yarn 4) - #33

Merged
janakiram7755 merged 212 commits into
masterfrom
sync/upstream-v7
Aug 9, 2026
Merged

Sync upstream v7 (ESM, esbuild, vitest, yarn 4)#33
janakiram7755 merged 212 commits into
masterfrom
sync/upstream-v7

Conversation

@janakiram7755

Copy link
Copy Markdown

Merges docker/bake-action v7. Upstream replaced the build stack: CJS→ESM, ncc→esbuild (dist/index.cjs), jest→vitest, yarn classic→yarn 4, @actions/core 1.x→3.x, toolkit 0.68→0.92.

warpbuild.ts carries over unchanged apart from three lint fixes. It imported uuid without declaring it — that only resolved via yarn classic hoisting, so it is now a real dependency.

lint, test (19) and build all pass locally. Upstream workflow files are untouched.

crazy-max and others added 30 commits December 19, 2025 10:36
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
switch to ESM and update config/test wiring
…ash-4.17.23

chore(deps): Bump lodash from 4.17.21 to 4.17.23
Bumps @isaacs/brace-expansion from 5.0.0 to 5.0.1.

---
updated-dependencies:
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…acs/brace-expansion-5.0.1

chore(deps): Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.11.1 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…ions/core-3.0.0

chore(deps): Bump @actions/core from 1.11.1 to 3.0.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.77.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](docker/actions-toolkit@v0.68.0...v0.77.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
…ker/actions-toolkit-0.77.0

chore(deps): Bump @docker/actions-toolkit from 0.68.0 to 0.77.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.77.0 to 0.78.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](docker/actions-toolkit@v0.77.0...v0.78.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ker/actions-toolkit-0.78.0

chore(deps): Bump @docker/actions-toolkit from 0.77.0 to 0.78.0
crazy-max and others added 20 commits July 1, 2026 13:59
…ons-toolkit

chore: allow actions-toolkit to bypass yarn age gate
…ocker/setup-qemu-action-4.1.0

chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
…ithub/codeql-action-4.36.2

chore(deps): Bump github/codeql-action from 4.36.0 to 4.36.2
…odecov/codecov-action-7.0.0

chore(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0
…razy-max-dot-github-a6a0ecf511

chore(deps): Bump the crazy-max-dot-github group across 1 directory with 2 updates
…ctions/checkout-6.0.3

chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3
…e-7.3.5

chore(deps): Bump vite from 7.3.2 to 7.3.6
Bumps [undici](https://github.com/nodejs/undici) from 6.24.1 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.24.1...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…ctions/checkout-7.0.0

chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0
…ici-6.27.0

chore(deps): Bump undici from 6.24.1 to 6.27.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.91.0 to 0.92.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](docker/actions-toolkit@v0.91.0...v0.92.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ker/actions-toolkit-0.92.0

chore(deps): Bump @docker/actions-toolkit from 0.91.0 to 0.92.0
Bumps [sigstore](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…store-4.1.1

chore(deps): Bump sigstore from 4.1.0 to 4.1.1
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
…updates

chore: group codeql dependabot updates
Declares uuid, which warpbuild.ts imported but never listed, and clears
the eslint failures in that file.

jobs:
update-dist:
if: github.actor == 'dependabot[bot]' && github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
Comment thread .github/dependabot.yml
schedule:
interval: "daily"
cooldown:
default-days: 2
Comment thread .github/dependabot.yml
schedule:
interval: "daily"
cooldown:
default-days: 2
Bakes a minimal image on a WarpBuild remote builder and asserts the
buildx driver is remote, so a silent fall back to a local builder fails.
@janakiram7755
janakiram7755 marked this pull request as ready for review August 3, 2026 11:22
@janakiram7755
janakiram7755 merged commit 53fc3cd into master Aug 9, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants