Skip to content

chore(deps): update dependency to-be-continuous/docker to v6 - autoclosed

Deltamirrequested to merge
renovate/to-be-continuous-docker-6.x into main

This MR contains the following updates:

Package Type Update Change
to-be-continuous/docker repository major 5.2.0 -> 6.4.0

Release Notes

to-be-continuous/docker (to-be-continuous/docker)

v6.4.0

Compare Source

Features

6.3.1 (2025-08-08)

Bug Fixes

v6.4

Compare Source

Features

6.3.1 (2025-08-08)

Bug Fixes

v6.3.1

Compare Source

Bug Fixes

v6.3.0

Compare Source

Features

6.2.2 (2025-07-05)

Bug Fixes

6.2.1 (2025-06-20)

Bug Fixes
  • buildah: use buildah specific image (0944c88)
  • skopeo: use skopeo specific image (da53ce5)

v6.3

Compare Source

Features

6.2.2 (2025-07-05)

Bug Fixes

6.2.1 (2025-06-20)

Bug Fixes
  • buildah: use buildah specific image (0944c88)
  • skopeo: use skopeo specific image (da53ce5)

v6.2.2

Compare Source

Bug Fixes

v6.2.1

Compare Source

Bug Fixes
  • buildah: use buildah specific image (0944c88)
  • skopeo: use skopeo specific image (da53ce5)

v6.2.0

Compare Source

Features
  • cosign: add support for signing images with Cosign (614838c)

6.1.11 (2025-06-20)

Bug Fixes
  • release: fix RELEASE_REF regex (ba6da72)

6.1.10 (2025-06-13)

Bug Fixes
  • replace deprecated Docker Hub registry FQDN (4205878)

6.1.9 (2025-06-12)

Bug Fixes
  • register custom ca for syft (bc7f70f)

6.1.8 (2025-06-10)

Bug Fixes
  • ignore readonly ca-certificates (863cb6c)

6.1.7 (2025-04-25)

Bug Fixes
  • install custom CA certs before awk (45b8cb3)

6.1.6 (2025-04-18)

Bug Fixes
  • allow installation of missing package awk (bb602d8)

6.1.5 (2025-04-18)

Bug Fixes
  • switch to official image with awk for buildah and skopeo (b8a065a)

6.1.4 (2025-04-11)

Bug Fixes
  • envsubst: leave lines with '# nosubst' unchanged when substituting (used to be simply dropped) (214ae5d)

6.1.3 (2025-03-11)

Bug Fixes
  • sbom: disable file catalogers for Syft SBOM (to minimize SBOM file) (c95c2d4)

6.1.2 (2025-02-01)

Bug Fixes
  • homogenize new TBC envsubst mechanism (8c6e14a)

6.1.1 (2025-01-31)

Bug Fixes
  • sbom: only generate SBOMs on prod branches, integ branches and release tags (5102c5f)

v6.2

Compare Source

Features
  • cosign: add support for signing images with Cosign (614838c)

6.1.11 (2025-06-20)

Bug Fixes
  • release: fix RELEASE_REF regex (ba6da72)

6.1.10 (2025-06-13)

Bug Fixes
  • replace deprecated Docker Hub registry FQDN (4205878)

6.1.9 (2025-06-12)

Bug Fixes
  • register custom ca for syft (bc7f70f)

6.1.8 (2025-06-10)

Bug Fixes
  • ignore readonly ca-certificates (863cb6c)

6.1.7 (2025-04-25)

Bug Fixes
  • install custom CA certs before awk (45b8cb3)

6.1.6 (2025-04-18)

Bug Fixes
  • allow installation of missing package awk (bb602d8)

6.1.5 (2025-04-18)

Bug Fixes
  • switch to official image with awk for buildah and skopeo (b8a065a)

6.1.4 (2025-04-11)

Bug Fixes
  • envsubst: leave lines with '# nosubst' unchanged when substituting (used to be simply dropped) (214ae5d)

6.1.3 (2025-03-11)

Bug Fixes
  • sbom: disable file catalogers for Syft SBOM (to minimize SBOM file) (c95c2d4)

6.1.2 (2025-02-01)

Bug Fixes
  • homogenize new TBC envsubst mechanism (8c6e14a)

6.1.1 (2025-01-31)

Bug Fixes
  • sbom: only generate SBOMs on prod branches, integ branches and release tags (5102c5f)

v6.1.11

Compare Source

Bug Fixes
  • release: fix RELEASE_REF regex (ba6da72)

v6.1.10

Compare Source

Bug Fixes
  • replace deprecated Docker Hub registry FQDN (4205878)

v6.1.9

Compare Source

Bug Fixes
  • register custom ca for syft (bc7f70f)

v6.1.8

Compare Source

Bug Fixes
  • ignore readonly ca-certificates (863cb6c)

v6.1.7

Compare Source

Bug Fixes
  • install custom CA certs before awk (45b8cb3)

v6.1.6

Compare Source

Bug Fixes
  • allow installation of missing package awk (bb602d8)

v6.1.5

Compare Source

Bug Fixes
  • switch to official image with awk for buildah and skopeo (b8a065a)

v6.1.4

Compare Source

Bug Fixes
  • envsubst: leave lines with '# nosubst' unchanged when substituting (used to be simply dropped) (214ae5d)

v6.1.3

Compare Source

Bug Fixes
  • sbom: disable file catalogers for Syft SBOM (to minimize SBOM file) (c95c2d4)

v6.1.2

Compare Source

Bug Fixes
  • homogenize new TBC envsubst mechanism (8c6e14a)

v6.1.1

Compare Source

Bug Fixes
  • release: fix RELEASE_REF regex (ba6da72)

v6.1.0

Compare Source

Features
  • disable tracking service by default (4fa3b0e)

v6.1

Compare Source

Features
  • disable tracking service by default (4fa3b0e)

v6.0.0

Compare Source

Code Refactoring
  • trivy: enforce usage of Trivy environment variables (e69ce13)
BREAKING CHANGES
  • trivy: 4 Trivy configuration params removed in favor of the native Trivy environment variables

5.14.1 (2024-11-02)

Bug Fixes
  • limit security reports access to developer role or higher (29a3173)

v6.0

Compare Source

Code Refactoring
  • trivy: enforce usage of Trivy environment variables (e69ce13)
BREAKING CHANGES
  • trivy: 4 Trivy configuration params removed in favor of the native Trivy environment variables

5.14.1 (2024-11-02)

Bug Fixes
  • limit security reports access to developer role or higher (29a3173)

v6

Compare Source

Features

6.3.1 (2025-08-08)

Bug Fixes

v5.14.1

Compare Source

Bug Fixes
  • limit security reports access to developer role or higher (29a3173)

v5.14.0

Compare Source

Features
  • mirror: add support for DOCKER_REGISTRY_MIRROR_USER/PASSWORD vars (76c9d16)

5.13.3 (2024-10-24)

Bug Fixes
  • set trivy artifact expiration (5854b42)

5.13.2 (2024-10-04)

Bug Fixes
  • trivy: use --pkg-types instead of deprecated --vuln-type option (76d0f3f)

5.13.1 (2024-09-21)

Bug Fixes
  • allow Skopeo to inherit Docker auth config (9bb198e)

v5.14

Compare Source

Features
  • mirror: add support for DOCKER_REGISTRY_MIRROR_USER/PASSWORD vars (76c9d16)

5.13.3 (2024-10-24)

Bug Fixes
  • set trivy artifact expiration (5854b42)

5.13.2 (2024-10-04)

Bug Fixes
  • trivy: use --pkg-types instead of deprecated --vuln-type option (76d0f3f)

5.13.1 (2024-09-21)

Bug Fixes
  • allow Skopeo to inherit Docker auth config (9bb198e)

v5.13.3

Compare Source

Bug Fixes
  • set trivy artifact expiration (5854b42)

v5.13.2

Compare Source

Bug Fixes
  • trivy: use --pkg-types instead of deprecated --vuln-type option (76d0f3f)

v5.13.1

Compare Source

Bug Fixes
  • allow Skopeo to inherit Docker auth config (9bb198e)

v5.13.0

Compare Source

Features
  • trivy: enable comprehensive priority (d26a665)

5.12.1 (2024-09-12)

Bug Fixes
  • wrong default value for DOCKER_TRIVY_ARGS (1b84a79)

v5.13

Compare Source

Features
  • trivy: enable comprehensive priority (d26a665)

5.12.1 (2024-09-12)

Bug Fixes
  • wrong default value for DOCKER_TRIVY_ARGS (1b84a79)

v5.12.1

Compare Source

Bug Fixes
  • wrong default value for DOCKER_TRIVY_ARGS (1b84a79)

v5.12.0

Compare Source

Features
  • introduce variable for additional docker/buildah push arguments (9de48b2)

5.11.1 (2024-08-13)

Bug Fixes
  • build: support metadata labels and build command arguments containing spaces (ac391c3)

v5.12

Compare Source

Features
  • introduce variable for additional docker/buildah push arguments (9de48b2)

5.11.1 (2024-08-13)

Bug Fixes
  • build: support metadata labels and build command arguments containing spaces (ac391c3)

v5.11.1

Compare Source

Bug Fixes
  • build: support metadata labels and build command arguments containing spaces (ac391c3)

v5.11.0

Compare Source

Features

5.10.3 (2024-07-01)

Bug Fixes
  • Trivy: Trivy 0.53.0 added the clean subcommand for semantic cache management (e3a9540)

5.10.2 (2024-05-05)

Bug Fixes
  • workflow: disable MR pipeline from prod & integ branches (6460d7b)

5.10.1 (2024-04-03)

Bug Fixes
  • variants: use service containers "latest" image tag (vault, GCP & AWS) (0f57cdd)

v5.11

Compare Source

Features

5.10.3 (2024-07-01)

Bug Fixes
  • Trivy: Trivy 0.53.0 added the clean subcommand for semantic cache management (e3a9540)

5.10.2 (2024-05-05)

Bug Fixes
  • workflow: disable MR pipeline from prod & integ branches (6460d7b)

5.10.1 (2024-04-03)

Bug Fixes
  • variants: use service containers "latest" image tag (vault, GCP & AWS) (0f57cdd)

v5.10.3

Compare Source

Bug Fixes
  • Trivy: Trivy 0.53.0 added the clean subcommand for semantic cache management (e3a9540)

v5.10.2

Compare Source

Bug Fixes
  • workflow: disable MR pipeline from prod & integ branches (6460d7b)

v5.10.1

Compare Source

Bug Fixes
  • variants: use service containers "latest" image tag (vault, GCP & AWS) (0f57cdd)

v5.10.0

Compare Source

Features
  • trivy: enable custom Trivy Java DB repository (059fda8)

5.9.1 (2024-03-29)

Bug Fixes
  • kaniko-snapshot-image-cache input no longer dependent on another input (9c51d09)

v5.10

Compare Source

Features
  • trivy: enable custom Trivy Java DB repository (059fda8)

5.9.1 (2024-03-29)

Bug Fixes
  • kaniko-snapshot-image-cache input no longer dependent on another input (9c51d09)

v5.9.1

Compare Source

Bug Fixes
  • kaniko-snapshot-image-cache input no longer dependent on another input (9c51d09)

v5.9.0

Compare Source

Features
  • trivy: add variable for setting trivy db repository path (9b2bd78)

5.8.2 (2024-03-21)

Bug Fixes
  • keep default dependencies on jobs using DOCKER_SNAPSHOT_IMAGE or DOCKER_RELEASE_IMAGE (bb974c2)

5.8.1 (2024-1-28)

Bug Fixes
  • sbom: fix default Syft options (4b03224)

v5.9

Compare Source

Features
  • trivy: add variable for setting trivy db repository path (9b2bd78)

5.8.2 (2024-03-21)

Bug Fixes
  • keep default dependencies on jobs using DOCKER_SNAPSHOT_IMAGE or DOCKER_RELEASE_IMAGE (bb974c2)

5.8.1 (2024-1-28)

Bug Fixes
  • sbom: fix default Syft options (4b03224)

v5.8.2

Compare Source

Bug Fixes
  • keep default dependencies on jobs using DOCKER_SNAPSHOT_IMAGE or DOCKER_RELEASE_IMAGE (bb974c2)

v5.8.1

Compare Source

Bug Fixes
  • sbom: fix default Syft options (4b03224)

v5.8.0

Compare Source

Features
  • migrate to GitLab CI/CD component (60f2c3f)

5.7.1 (2024-1-18)

Bug Fixes
  • Resolve "Syft packages is now deprecated" (63a9850)

v5.8

Compare Source

Features
  • migrate to GitLab CI/CD component (60f2c3f)

5.7.1 (2024-1-18)

Bug Fixes
  • Resolve "Syft packages is now deprecated" (63a9850)

v5.7.1

Compare Source

Bug Fixes
  • Resolve "Syft packages is now deprecated" (63a9850)

v5.7.0

Compare Source

Features
  • use centralized service images (gitlab.com) (d218fff)

5.6.1 (2023-12-7)

Bug Fixes
  • sbom: syft catalogers renamed (c3555e3)

v5.7

Compare Source

Features
  • use centralized service images (gitlab.com) (d218fff)

5.6.1 (2023-12-7)

Bug Fixes
  • sbom: syft catalogers renamed (c3555e3)

v5.6.1

Compare Source

Bug Fixes
  • sbom: syft catalogers renamed (c3555e3)

v5.6.0

Compare Source

Features
  • build cache can be disabled (configurable; non-default) (fe52e0e)

5.5.6 (2023-12-2)

Bug Fixes
  • envsubst when variable contains a '&' (f5781c8)

5.5.5 (2023-11-12)

Bug Fixes
  • ECR and GCP provider image variables (49cc61c)

5.5.4 (2023-11-03)

Bug Fixes
  • handle port number in docker release image uri (35e1b52)

5.5.3 (2023-10-18)

Bug Fixes
  • hadolint: Hadolint report file name derives from Dockerfile's path (MD5) instead of content (e7bbdcc)
  • sbom: sbom report's name derives from snapshot image (same as Trivy) (62341f4)

5.5.2 (2023-10-16)

Bug Fixes

5.5.1 (2023-10-06)

Bug Fixes
  • trivy: fail when scanning an image that has reached EOL (b89f06e)

v5.6

Compare Source

Features
  • build cache can be disabled (configurable; non-default) (fe52e0e)

5.5.6 (2023-12-2)

Bug Fixes
  • envsubst when variable contains a '&' (f5781c8)

5.5.5 (2023-11-12)

Bug Fixes
  • ECR and GCP provider image variables (49cc61c)

5.5.4 (2023-11-03)

Bug Fixes
  • handle port number in docker release image uri (35e1b52)

5.5.3 (2023-10-18)

Bug Fixes
  • hadolint: Hadolint report file name derives from Dockerfile's path (MD5) instead of content (e7bbdcc)
  • sbom: sbom report's name derives from snapshot image (same as Trivy) (62341f4)

5.5.2 (2023-10-16)

Bug Fixes

5.5.1 (2023-10-06)

Bug Fixes
  • trivy: fail when scanning an image that has reached EOL (b89f06e)

v5.5.6

Compare Source

Bug Fixes
  • envsubst when variable contains a '&' (f5781c8)

v5.5.5

Compare Source

Bug Fixes
  • ECR and GCP provider image variables (49cc61c)

v5.5.4

Compare Source

Bug Fixes
  • handle port number in docker release image uri (35e1b52)

v5.5.3

Compare Source

Bug Fixes
  • hadolint: Hadolint report file name derives from Dockerfile's path (MD5) instead of content (e7bbdcc)
  • sbom: sbom report's name derives from snapshot image (same as Trivy) (62341f4)

v5.5.2

Compare Source

Bug Fixes

v5.5.1

Compare Source

Bug Fixes
  • trivy: fail when scanning an image that has reached EOL (b89f06e)

v5.5.0

Compare Source

Features
  • ecr: add Amazon ECR variant (7b0b1d9)

5.4.1 (2023-09-27)

Bug Fixes
  • cache-repo: switch back to kaniko default behavior (6e15c06)

v5.5

Compare Source

Features
  • ecr: add Amazon ECR variant (7b0b1d9)

5.4.1 (2023-09-27)

Bug Fixes
  • cache-repo: switch back to kaniko default behavior (6e15c06)

v5.4.1

Compare Source

Bug Fixes
  • cache-repo: switch back to kaniko default behavior (6e15c06)

v5.4.0

Compare Source

Features
  • publish: support extra tags (b78c4e6)

5.3.1 (2023-09-19)

Bug Fixes
  • dind: wait for Docker daemon to be ready with a timeout (1 min) (ea965f6)

v5.4

Compare Source

Features
  • publish: support extra tags (b78c4e6)

5.3.1 (2023-09-19)

Bug Fixes
  • dind: wait for Docker daemon to be ready with a timeout (1 min) (ea965f6)

v5.3.1

Compare Source

Bug Fixes
  • dind: wait for Docker daemon to be ready with a timeout (1 min) (ea965f6)

v5.3.0

Compare Source

Features
  • oidc: OIDC authentication support now requires explicit configuration(see doc) (521f918)

5.2.2 (2023-07-25)

Bug Fixes
  • kaniko: Allow repositories with port numbers to be used for caching (d17e215)

5.2.1 (2023-07-12)

Bug Fixes
  • doc: update typo on documentation [skip ci] (95245ba)
  • kaniko: force '--cache-repo' option (strip tag) (7d4a194)

v5.3

Compare Source

Features
  • oidc: OIDC authentication support now requires explicit configuration(see doc) (521f918)

5.2.2 (2023-07-25)

Bug Fixes
  • kaniko: Allow repositories with port numbers to be used for caching (d17e215)

5.2.1 (2023-07-12)

Bug Fixes
  • doc: update typo on documentation [skip ci] (95245ba)
  • kaniko: force '--cache-repo' option (strip tag) (7d4a194)

v5.2.2

Compare Source

Bug Fixes
  • kaniko: Allow repositories with port numbers to be used for caching (d17e215)

v5.2.1

Compare Source

Bug Fixes
  • doc: update typo on documentation [skip ci] (95245ba)
  • kaniko: force '--cache-repo' option (strip tag) (7d4a194)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Deltamir

Merge request reports