chore(deps): update tbc templates (major)

This MR contains the following updates:

Package	Type	Update	Change
to-be-continuous/docker	repository	major	6 -> 8
to-be-continuous/node	repository	major	4 -> 5
to-be-continuous/semantic-release	repository	major	3 -> 4

---

Release Notes

to-be-continuous/docker (to-be-continuous/docker)

v8.0.1

Compare Source

Bug Fixes

• remove nested variable in rules:if (0dc62b3), closes gitlab-org/gitlab#327780 (closed)

v8.0.0

Compare Source

• Merge branch 'breaking/buildah' into 'master' (58057dc)

BREAKING CHANGES

• change default Docker build tool to Buildah

See merge request to-be-continuous/docker!175 (merged)

v7.5.0

Compare Source

Features

• cosign: add variable for annotations (fdfc96c)

7.4.2 (2025-09-08)

Bug Fixes

• cosign: quote COSIGN_PRIVATE_KEY variable to prevent word splitting (c2db525)

7.4.1 (2025-09-02)

Bug Fixes

• sbom: attest digest instead of tag (390f1f2)
• sbom: report native json and convert for digest (a46225b)

v7.4.2

Compare Source

Features

• cosign: add variable for annotations (fdfc96c)

7.4.2 (2025-09-08)

Bug Fixes

• cosign: quote COSIGN_PRIVATE_KEY variable to prevent word splitting (c2db525)

7.4.1 (2025-09-02)

Bug Fixes

• sbom: attest digest instead of tag (390f1f2)
• sbom: report native json and convert for digest (a46225b)

v7.4.1

Compare Source

Features

• cosign: add variable for annotations (fdfc96c)

7.4.2 (2025-09-08)

Bug Fixes

• cosign: quote COSIGN_PRIVATE_KEY variable to prevent word splitting (c2db525)

7.4.1 (2025-09-02)

Bug Fixes

• sbom: attest digest instead of tag (390f1f2)
• sbom: report native json and convert for digest (a46225b)

v7.4.0

Compare Source

Features

• cosign: add variable for annotations (fdfc96c)

7.4.2 (2025-09-08)

Bug Fixes

• cosign: quote COSIGN_PRIVATE_KEY variable to prevent word splitting (c2db525)

7.4.1 (2025-09-02)

Bug Fixes

• sbom: attest digest instead of tag (390f1f2)
• sbom: report native json and convert for digest (a46225b)

v7.3.1

Compare Source

Bug Fixes

• cosign: publish all multi-arch attachments (747635d)
• cosign: sign all images in multi-arch (22a3d5a)

Features

• cosign: split sign and attest opts (69950a9)

7.3.1 (2025-08-26)

Bug Fixes

• vault: avoid nested variable for id_token (4ae27cc)

v7.3.0

Compare Source

Bug Fixes

• cosign: publish all multi-arch attachments (747635d)
• cosign: sign all images in multi-arch (22a3d5a)

Features

• cosign: split sign and attest opts (69950a9)

7.3.1 (2025-08-26)

Bug Fixes

• vault: avoid nested variable for id_token (4ae27cc)

v7.2.1

Compare Source

Features

• multi-platform build with buildah manifest (25cda52)

7.2.1 (2025-08-19)

Bug Fixes

• sign: support sbom attestation with parallel matrix (821bc66)

v7.2.0

Compare Source

Features

• multi-platform build with buildah manifest (25cda52)

7.2.1 (2025-08-19)

Bug Fixes

• sign: support sbom attestation with parallel matrix (821bc66)

v7.1.2

Compare Source

Features

• trivy codequality report (c450fb9)

7.1.2 (2025-08-18)

Bug Fixes

• sign: support signing multiple images (parallel:matrix) (34e9697), closes #​129

7.1.1 (2025-08-14)

Bug Fixes

• log all configured registries (8946da0)
• skopeo: active debug when TRACE is set (4cdb0e9)

v7.1.1

Compare Source

Features

• trivy codequality report (c450fb9)

7.1.2 (2025-08-18)

Bug Fixes

• sign: support signing multiple images (parallel:matrix) (34e9697), closes #​129

7.1.1 (2025-08-14)

Bug Fixes

• log all configured registries (8946da0)
• skopeo: active debug when TRACE is set (4cdb0e9)

v7.1.0

Compare Source

Features

• trivy codequality report (c450fb9)

7.1.2 (2025-08-18)

Bug Fixes

• sign: support signing multiple images (parallel:matrix) (34e9697), closes #​129

7.1.1 (2025-08-14)

Bug Fixes

• log all configured registries (8946da0)
• skopeo: active debug when TRACE is set (4cdb0e9)

v7.0.1

Compare Source

Features

• add build cache location support for buildah (07752a1)

7.0.1 (2025-08-13)

Bug Fixes

• support preinstalled cosign (9db0014)

v7.0.0

Compare Source

Features

• add build cache location support for buildah (07752a1)

7.0.1 (2025-08-13)

Bug Fixes

• support preinstalled cosign (9db0014)

to-be-continuous/node (to-be-continuous/node)

v5.0.2

Compare Source

Bug Fixes

• vault: avoid nested variable for id_token (a3c11b5)

v5.0.1

Compare Source

Bug Fixes

• sbom: only look for lockfile with pnpm (805aaed)

v5.0.0

Compare Source

• feat(vault)!: enable certificate verification (dd42703)

BREAKING CHANGES

• self-signed certificates must be declared in your GitLab DEFAULT_CA_CERTS or with VAULT_CA_CERTS variable

to-be-continuous/semantic-release (to-be-continuous/semantic-release)

v4.0.1

Compare Source

Bug Fixes

• vault: avoid nested variable for id_token (f5e5fbf)

v4.0.0

Compare Source

• feat(vault)!: enable certificate verification (a625224)

BREAKING CHANGES

• self-signed certificates must be declared in your GitLab DEFAULT_CA_CERTS or with VAULT_CA_CERTS variable

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.