Merge pull request #491 from docker/dependabot/github_actions/codecov/codecov-action-5

build(deps): bump codecov/codecov-action from 4 to 5
Merge pull request #495 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.6
2024-11-18 16:42:10 +01:00 · 2024-11-18 16:38:48 +01:00 · 2024-11-18 16:17:16 +01:00 · 2024-11-18 15:16:48 +00:00 · 2024-11-18 16:14:54 +01:00 · 2024-11-18 15:51:00 +01:00
35 changed files with 2102 additions and 226 deletions
--- a/.github/actions/macos-setup-qemu/action.yml
+++ b/.github/actions/macos-setup-qemu/action.yml
@@ -0,0 +1,17 @@
+name: 'Setup QEMU on macOS'
+description: 'Set up QEMU on macOS runners'
+
+# FIXME: Remove this composite once QEMU issue is fixed on macOS runners
+#  https://github.com/docker/actions-toolkit/issues/455
+
+runs:
+  using: composite
+  steps:
+    - run: |
+        set -ex
+        brew uninstall --ignore-dependencies qemu || true
+        brew autoremove || true
+        curl -o /tmp/qemu.rb https://raw.githubusercontent.com/Homebrew/homebrew-core/f1a9cf104a9a51779c7a532b658c490f69974839/Formula/q/qemu.rb
+        brew install /tmp/qemu.rb
+      continue-on-error: true
+      shell: bash
--- a/.github/buildx-lab-releases.json
+++ b/.github/buildx-lab-releases.json
@@ -1,43 +1,125 @@
 {
  "latest": {
-    "id": 161492089,
-    "tag_name": "v0.15.1-desktop.1",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.15.1-desktop.1",
+    "id": 174998914,
+    "tag_name": "v0.17.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.17.1-desktop.1",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.18.0-desktop.2": {
+    "id": 183082748,
+    "tag_name": "v0.18.0-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.18.0-desktop.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/buildx-v0.18.0-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.18.0-desktop.2/checksums.txt"
+    ]
+  },
+  "v0.17.1-desktop.1": {
+    "id": 174998914,
+    "tag_name": "v0.17.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.17.1-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/buildx-v0.17.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.17.1-desktop.1/checksums.txt"
    ]
  },
  "v0.16.2-desktop.1": {
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,43 +1,371 @@
 {
  "latest": {
-    "id": 167152950,
-    "tag_name": "v0.16.2",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.2",
+    "id": 182806222,
+    "tag_name": "v0.18.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.18.0",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.16.2/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/checksums.txt"
+    ]
+  },
+  "v0.18.0": {
+    "id": 182806222,
+    "tag_name": "v0.18.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.18.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/buildx-v0.18.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0/checksums.txt"
+    ]
+  },
+  "v0.18.0-rc3": {
+    "id": 182564109,
+    "tag_name": "v0.18.0-rc3",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.18.0-rc3",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/buildx-v0.18.0-rc3.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc3/checksums.txt"
+    ]
+  },
+  "v0.18.0-rc2": {
+    "id": 182417114,
+    "tag_name": "v0.18.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.18.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/buildx-v0.18.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.18.0-rc1": {
+    "id": 179007157,
+    "tag_name": "v0.18.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.18.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/buildx-v0.18.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.18.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.17.1": {
+    "id": 174985224,
+    "tag_name": "v0.17.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.17.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/buildx-v0.17.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.1/checksums.txt"
+    ]
+  },
+  "v0.17.0": {
+    "id": 174385492,
+    "tag_name": "v0.17.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.17.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/buildx-v0.17.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0/checksums.txt"
+    ]
+  },
+  "v0.17.0-rc2": {
+    "id": 174230520,
+    "tag_name": "v0.17.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.17.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/buildx-v0.17.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.17.0-rc1": {
+    "id": 173583122,
+    "tag_name": "v0.17.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.17.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/buildx-v0.17.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.17.0-rc1/checksums.txt"
    ]
  },
  "v0.16.2": {
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,8 +1,74 @@
 {
  "latest": {
-    "id": 166797236,
-    "tag_name": "v27.1.1",
-    "html_url": "https://github.com/moby/moby/releases/tag/v27.1.1",
+    "id": 176167883,
+    "tag_name": "v27.3.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.3.1",
+    "assets": []
+  },
+  "v27.4.0-rc.1": {
+    "id": 185528936,
+    "tag_name": "v27.4.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.4.0-rc.1",
+    "assets": []
+  },
+  "v23.0.15": {
+    "id": 178729348,
+    "tag_name": "v23.0.15",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.15",
+    "assets": []
+  },
+  "v27.3.1": {
+    "id": 176167883,
+    "tag_name": "v27.3.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.3.1",
+    "assets": []
+  },
+  "v27.3.0": {
+    "id": 175978619,
+    "tag_name": "v27.3.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.3.0",
+    "assets": []
+  },
+  "v27.3.0-rc.2": {
+    "id": 175668160,
+    "tag_name": "v27.3.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.3.0-rc.2",
+    "assets": []
+  },
+  "v27.3.0-rc.1": {
+    "id": 174993113,
+    "tag_name": "v27.3.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.3.0-rc.1",
+    "assets": []
+  },
+  "v27.2.1": {
+    "id": 173107018,
+    "tag_name": "v27.2.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.2.1",
+    "assets": []
+  },
+  "v27.2.0": {
+    "id": 171953411,
+    "tag_name": "v27.2.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.2.0",
+    "assets": []
+  },
+  "v23.0.14": {
+    "id": 170923310,
+    "tag_name": "v23.0.14",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.14",
+    "assets": []
+  },
+  "v27.2.0-rc.1": {
+    "id": 170583738,
+    "tag_name": "v27.2.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.2.0-rc.1",
+    "assets": []
+  },
+  "v27.1.2": {
+    "id": 169473565,
+    "tag_name": "v27.1.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.1.2",
    "assets": []
  },
  "v25.0.6": {
--- a/.github/undock-releases.json
+++ b/.github/undock-releases.json
@@ -0,0 +1,251 @@
+{
+  "latest": {
+    "id": 162880608,
+    "tag_name": "v0.8.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.8.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_arm64.zip"
+    ]
+  },
+  "v0.8.0": {
+    "id": 162880608,
+    "tag_name": "v0.8.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.8.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_windows_arm64.zip"
+    ]
+  },
+  "v0.7.0": {
+    "id": 134823476,
+    "tag_name": "v0.7.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.7.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0/undock_0.7.0_windows_arm64.zip"
+    ]
+  },
+  "v0.7.0-rc.1": {
+    "id": 134495651,
+    "tag_name": "v0.7.0-rc.1",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.7.0-rc.1",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.7.0-rc.1/undock_0.7.0-rc.1_windows_arm64.zip"
+    ]
+  },
+  "v0.6.0": {
+    "id": 121362767,
+    "tag_name": "v0.6.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.6.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.6.0/undock_0.6.0_windows_arm64.zip"
+    ]
+  },
+  "v0.5.0": {
+    "id": 110766698,
+    "tag_name": "v0.5.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.5.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.5.0/undock_0.5.0_windows_arm64.zip"
+    ]
+  },
+  "v0.4.0": {
+    "id": 92330136,
+    "tag_name": "v0.4.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.4.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.4.0/undock_0.4.0_windows_arm64.zip"
+    ]
+  },
+  "v0.3.0": {
+    "id": 62906231,
+    "tag_name": "v0.3.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.3.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.3.0/undock_0.3.0_windows_arm64.zip"
+    ]
+  },
+  "v0.2.0": {
+    "id": 59443285,
+    "tag_name": "v0.2.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.2.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.2.0/undock_0.2.0_windows_arm64.zip"
+    ]
+  },
+  "v0.1.0": {
+    "id": 57827645,
+    "tag_name": "v0.1.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.1.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.1.0/undock_0.1.0_windows_arm64.zip"
+    ]
+  }
+}
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c  # v6.1.0
+        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f  # v7.0.5
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c  # v6.1.0
+        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f  # v7.0.5
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c  # v6.1.0
+        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f  # v7.0.5
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,8 +15,8 @@ on:

 env:
  NODE_VERSION: "20"
-  BUILDX_VERSION: "v0.16.2"
-  BUILDKIT_IMAGE: "moby/buildkit:v0.15.1"
+  BUILDX_VERSION: "v0.18.0"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.17.0"

 jobs:
  test:
@@ -43,10 +43,10 @@ jobs:
        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
        if: env.RUN_CODECOV == 'true'
        with:
-          file: ./coverage/clover.xml
+          files: ./coverage/clover.xml
          flags: unit
          token: ${{ secrets.CODECOV_TOKEN }}

@@ -98,7 +98,6 @@ jobs:
          - ubuntu-latest
          #- macos-14  # no virt: https://github.com/docker/actions-toolkit/issues/317
          - macos-13
-          - macos-12
          - windows-latest
    steps:
      -
@@ -163,9 +162,9 @@ jobs:
        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
        if: env.RUN_CODECOV == 'true'
        with:
-          file: ./coverage/clover.xml
+          files: ./coverage/clover.xml
          flags: itg
          token: ${{ secrets.CODECOV_TOKEN }}
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -0,0 +1,58 @@
+name: undock-releases-json
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 */12 * * *'
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths:
+      - '.github/workflows/undock-releases-json.yml'
+
+jobs:
+  generate:
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
+    with:
+      repository: crazy-max/undock
+      artifact_name: undock-releases-json
+      filename: undock-releases.json
+    secrets: inherit
+
+  open-pr:
+    runs-on: ubuntu-22.04
+    if: github.event_name != 'pull_request'
+    needs:
+      - generate
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Download
+        uses: actions/download-artifact@v4
+        with:
+          name: undock-releases-json
+          path: .github
+      -
+        name: Commit changes
+        run: |
+          git add -A .
+      -
+        name: Create PR
+        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f  # v7.0.5
+        with:
+          base: main
+          branch: bot/undock-releases-json
+          commit-message: "github: update .github/undock-releases.json"
+          signoff: true
+          delete-branch: true
+          title: "Update `.github/undock-releases.json`"
+          body: |
+            Update `.github/undock-releases.json` to keep in sync with [https://github.com/crazy-max/undock](https://github.com/crazy-max/undock).
+          draft: false
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -17,16 +17,17 @@ jobs:
  prepare:
    runs-on: ubuntu-20.04
    outputs:
-      targets: ${{ steps.targets.outputs.matrix }}
+      targets: ${{ steps.generate.outputs.targets }}
    steps:
      -
        name: Checkout
        uses: actions/checkout@v4
      -
-        name: Matrix
-        id: targets
-        run: |
-          echo "matrix=$(docker buildx bake validate --print | jq -cr '.group.validate.targets')" >> $GITHUB_OUTPUT
+        name: List targets
+        id: generate
+        uses: docker/bake-action/subaction/list-targets@v5
+        with:
+          target: validate

  validate:
    runs-on: ubuntu-latest
--- a/tests/buildx/install.test.itg.ts
+++ b/tests/buildx/install.test.itg.ts
@@ -24,7 +24,7 @@ const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'tr
 maybe('download', () => {
  // prettier-ignore
  test.each(['latest'])(
-    'install docker %s', async (version) => {
+    'install buildx %s', async (version) => {
      await expect((async () => {
        const install = new Install({
          standalone: true
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -14,16 +14,16 @@
 * limitations under the License.
 */

-import {jest, describe, expect, test, beforeEach, afterEach} from '@jest/globals';
+import {jest, describe, test, beforeEach, afterEach, expect} from '@jest/globals';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';

-import {Install} from '../../src/docker/install';
+import {Install, InstallSourceArchive, InstallSourceImage} from '../../src/docker/install';
 import {Docker} from '../../src/docker/docker';
 import {Exec} from '../../src/exec';

-const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'docker-install-itg-'));
+const tmpDir = () => fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'docker-install-itg-'));

 describe('install', () => {
  const originalEnv = process.env;
@@ -40,31 +40,85 @@ aarch64:https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-g
    process.env = originalEnv;
  });
  // prettier-ignore
-  test.each(['v26.1.4'])(
-    'install docker %s', async (version) => {
-      if (process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) {
-        // Remove containerd first on ubuntu runners to make sure it takes
-        // ones packaged with docker
-        await Exec.exec('sudo', ['apt-get', 'remove', '-y', 'containerd.io'], {
-          env: Object.assign({}, process.env, {
-            DEBIAN_FRONTEND: 'noninteractive'
-          }) as {
-            [key: string]: string;
-          }
-        });
-      }
-      await expect((async () => {
-        const install = new Install({
-          version: version,
-          runDir: tmpDir,
-          contextName: 'foo',
-          daemonConfig: `{"debug":true,"features":{"containerd-snapshotter":true}}`
-        });
-        await install.download();
-        await install.install();
-        await Docker.printVersion();
-        await Docker.printInfo();
-        await install.tearDown();
-      })()).resolves.not.toThrow();
-    }, 1200000);
+  test.each([
+    {type: 'image', tag: '27.3.1'} as InstallSourceImage,
+    {type: 'image', tag: 'master'} as InstallSourceImage,
+    {type: 'image', tag: 'latest'} as InstallSourceImage,
+    {type: 'archive', version: 'v26.1.4', channel: 'stable'} as InstallSourceArchive,
+    {type: 'archive', version: 'latest', channel: 'stable'} as InstallSourceArchive,
+  ])(
+    'install docker %s', async (source) => {
+      await ensureNoSystemContainerd();
+      const install = new Install({
+        source: source,
+        runDir: tmpDir(),
+        contextName: 'foo',
+        daemonConfig: `{"debug":true,"features":{"containerd-snapshotter":true}}`
+      });
+      await expect(tryInstall(install)).resolves.not.toThrow();
+    }, 30 * 60 * 1000);
 });
+
+describe('rootless', () => {
+  // prettier-ignore
+  test.each([
+    {type: 'image', tag: 'latest'} as InstallSourceImage,
+    {type: 'archive', version: 'latest', channel: 'stable'} as InstallSourceArchive,
+  ])(
+    'install %s', async (source) => {
+      // Skip on non linux
+      if (os.platform() !== 'linux') {
+        return;
+      }
+
+      await ensureNoSystemContainerd();
+      const install = new Install({
+        source: source,
+        runDir: tmpDir(),
+        contextName: 'foo',
+        daemonConfig: `{"debug":true}`,
+        rootless: true
+      });
+      await expect(
+        tryInstall(install, async () => {
+          const out = await Docker.getExecOutput(['info', '-f', '{{json .SecurityOptions}}']);
+          expect(out.exitCode).toBe(0);
+          expect(out.stderr.trim()).toBe('');
+          expect(out.stdout.trim()).toContain('rootless');
+        })
+      ).resolves.not.toThrow();
+    },
+    30 * 60 * 1000
+  );
+});
+
+async function tryInstall(install: Install, extraCheck?: () => Promise<void>): Promise<void> {
+  try {
+    await install.download();
+    await install.install();
+    await Docker.printVersion();
+    await Docker.printInfo();
+    if (extraCheck) {
+      await extraCheck();
+    }
+  } catch (error) {
+    console.error(error);
+    throw error;
+  } finally {
+    await install.tearDown();
+  }
+}
+
+async function ensureNoSystemContainerd() {
+  if (process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) {
+    // Remove containerd first on ubuntu runners to make sure it takes
+    // ones packaged with docker
+    await Exec.exec('sudo', ['apt-get', 'remove', '-y', 'containerd.io'], {
+      env: Object.assign({}, process.env, {
+        DEBIAN_FRONTEND: 'noninteractive'
+      }) as {
+        [key: string]: string;
+      }
+    });
+  }
+}
--- a/tests/docker/install.test.ts
+++ b/tests/docker/install.test.ts
@@ -21,7 +21,7 @@ import path from 'path';
 import * as rimraf from 'rimraf';
 import osm = require('os');

-import {Install} from '../../src/docker/install';
+import {Install, InstallSourceArchive, InstallSourceImage} from '../../src/docker/install';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'docker-install-'));

@@ -29,18 +29,39 @@ afterEach(function () {
  rimraf.sync(tmpDir);
 });

+const archive = (version: string, channel: string): InstallSourceArchive => {
+  return {
+    type: 'archive',
+    version: version,
+    channel: channel
+  };
+};
+
+const image = (tag: string): InstallSourceImage => {
+  return {
+    type: 'image',
+    tag: tag
+  };
+};
+
 describe('download', () => {
  // prettier-ignore
  test.each([
-    ['v19.03.14', 'linux'],
-    ['v20.10.22', 'linux'],
-    ['v20.10.22', 'darwin'],
-    ['v20.10.22', 'win32'],
+    [archive('v19.03.14', 'stable'), 'linux'],
+    [archive('v20.10.22', 'stable'), 'linux'],
+    [archive('v20.10.22', 'stable'), 'darwin'],
+    [archive('v20.10.22', 'stable'), 'win32'],
+
+    [image('master'), 'linux'],
+    [image('master'), 'win32'],
+
+    [image('27.3.1'), 'linux'],
+    [image('27.3.1'), 'win32'],
  ])(
-  'acquires %p of docker (%s)', async (version, platformOS) => {
+  'acquires %p of docker (%s)', async (source, platformOS) => {
    jest.spyOn(osm, 'platform').mockImplementation(() => platformOS as NodeJS.Platform);
    const install = new Install({
-      version: version,
+      source: source,
      runDir: tmpDir,
    });
    const toolPath = await install.download();
--- a/tests/git.test.ts
+++ b/tests/git.test.ts
@@ -279,3 +279,10 @@ describe('tag', () => {
    });
  });
 });
+
+describe('getCommitDate', () => {
+  it('head', async () => {
+    const date = await Git.commitDate('HEAD');
+    await expect(date).toBeInstanceOf(Date);
+  });
+});
--- a/tests/undock/install.test.itg.ts
+++ b/tests/undock/install.test.itg.ts
@@ -0,0 +1,38 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, test} from '@jest/globals';
+import * as fs from 'fs';
+
+import {Install} from '../../src/undock/install';
+
+describe('download', () => {
+  // prettier-ignore
+  test.each(['latest'])(
+    'install undock %s', async (version) => {
+      await expect((async () => {
+        const install = new Install();
+        const toolPath = await install.download(version);
+        if (!fs.existsSync(toolPath)) {
+          throw new Error('toolPath does not exist');
+        }
+        const binPath = await install.install(toolPath);
+        if (!fs.existsSync(binPath)) {
+          throw new Error('binPath does not exist');
+        }
+      })()).resolves.not.toThrow();
+    }, 60000);
+});
--- a/tests/undock/install.test.ts
+++ b/tests/undock/install.test.ts
@@ -0,0 +1,129 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as rimraf from 'rimraf';
+import osm = require('os');
+
+import {Install} from '../../src/undock/install';
+
+const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'undock-install-'));
+
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
+
+describe('download', () => {
+  // prettier-ignore
+  test.each([
+    ['v0.4.0'],
+    ['v0.7.0'],
+    ['latest']
+  ])(
+  'acquires %p of undock (standalone: %p)', async (version) => {
+      const install = new Install();
+      const toolPath = await install.download(version);
+      expect(fs.existsSync(toolPath)).toBe(true);
+      const undockBin = await install.install(toolPath, tmpDir);
+      expect(fs.existsSync(undockBin)).toBe(true);
+    },
+    100000
+  );
+
+  // prettier-ignore
+  test.each([
+    // following versions are already cached to htc from previous test cases
+    ['v0.4.0'],
+    ['v0.7.0'],
+  ])(
+  'acquires %p of undock with cache', async (version) => {
+    const install = new Install();
+    const toolPath = await install.download(version);
+    expect(fs.existsSync(toolPath)).toBe(true);
+  });
+
+  // prettier-ignore
+  test.each([
+    ['v0.5.0'],
+    ['v0.6.0'],
+  ])(
+  'acquires %p of undock without cache', async (version) => {
+    const install = new Install();
+    const toolPath = await install.download(version, true);
+    expect(fs.existsSync(toolPath)).toBe(true);
+  });
+
+  // TODO: add tests for arm
+  // prettier-ignore
+  test.each([
+    ['win32', 'x64'],
+    ['win32', 'arm64'],
+    ['darwin', 'x64'],
+    ['darwin', 'arm64'],
+    ['linux', 'x64'],
+    ['linux', 'arm64'],
+    ['linux', 'ppc64'],
+    ['linux', 's390x'],
+  ])(
+  'acquires undock for %s/%s', async (os, arch) => {
+      jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
+      jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+      const install = new Install();
+      const undockBin = await install.download('latest');
+      expect(fs.existsSync(undockBin)).toBe(true);
+    },
+    100000
+  );
+});
+
+describe('getDownloadVersion', () => {
+  it('returns latest download version', async () => {
+    const version = await Install.getDownloadVersion('latest');
+    expect(version.version).toEqual('latest');
+    expect(version.downloadURL).toEqual('https://github.com/crazy-max/undock/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/undock-releases.json');
+  });
+  it('returns v0.6.0 download version', async () => {
+    const version = await Install.getDownloadVersion('v0.6.0');
+    expect(version.version).toEqual('v0.6.0');
+    expect(version.downloadURL).toEqual('https://github.com/crazy-max/undock/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/undock-releases.json');
+  });
+});
+
+describe('getRelease', () => {
+  it('returns latest GitHub release', async () => {
+    const version = await Install.getDownloadVersion('latest');
+    const release = await Install.getRelease(version);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+  it('returns v0.6.0 GitHub release', async () => {
+    const version = await Install.getDownloadVersion('v0.6.0');
+    const release = await Install.getRelease(version);
+    expect(release).not.toBeNull();
+    expect(release?.id).toEqual(121362767);
+    expect(release?.tag_name).toEqual('v0.6.0');
+    expect(release?.html_url).toEqual('https://github.com/crazy-max/undock/releases/tag/v0.6.0');
+  });
+  it('unknown release', async () => {
+    const version = await Install.getDownloadVersion('foo');
+    await expect(Install.getRelease(version)).rejects.toThrow(new Error('Cannot find Undock release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/undock-releases.json'));
+  });
+});
--- a/tests/undock/undock.test.ts
+++ b/tests/undock/undock.test.ts
@@ -0,0 +1,84 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import {describe, expect, it, jest, test} from '@jest/globals';
+import * as semver from 'semver';
+
+import {Exec} from '../../src/exec';
+import {Undock} from '../../src/undock/undock';
+
+const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'undock-undock-'));
+
+describe('run', () => {
+  it('extracts moby/moby-bin:26.1.5', async () => {
+    const undock = new Undock();
+    await expect(
+      (async () => {
+        // prettier-ignore
+        await undock.run({
+          source: 'moby/moby-bin:26.1.5',
+          dist: tmpDir,
+          all: true
+        });
+      })()
+    ).resolves.not.toThrow();
+  }, 100000);
+});
+
+describe('isAvailable', () => {
+  it('checks undock is available', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const undock = new Undock();
+    await undock.isAvailable();
+    // eslint-disable-next-line jest/no-standalone-expect
+    expect(execSpy).toHaveBeenCalledWith(`undock`, [], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('printVersion', () => {
+  it('prints undock version', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    const undock = new Undock();
+    await undock.printVersion();
+    expect(execSpy).toHaveBeenCalledWith(`undock`, ['--version'], {
+      failOnStdErr: false
+    });
+  });
+});
+
+describe('version', () => {
+  it('valid', async () => {
+    const undock = new Undock();
+    expect(semver.valid(await undock.version())).not.toBeUndefined();
+  });
+});
+
+describe('versionSatisfies', () => {
+  test.each([
+    ['v0.4.1', '>=0.3.2', true],
+    ['v0.8.0', '>0.6.0', true],
+    ['v0.8.0', '<0.3.0', false]
+  ])('given %p', async (version, range, expected) => {
+    const undock = new Undock();
+    expect(await undock.versionSatisfies(range, version)).toBe(expected);
+  });
+});
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -15,8 +15,9 @@
 # limitations under the License.

 ARG NODE_VERSION=20
-ARG DOCKER_VERSION=26.0.2
-ARG BUILDX_VERSION=0.16.2
+ARG DOCKER_VERSION=27.2.1
+ARG BUILDX_VERSION=0.18.0
+ARG UNDOCK_VERSION=0.8.0

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
@@ -73,8 +74,9 @@ RUN --mount=type=bind,target=.,rw \
  --mount=type=cache,target=/src/node_modules \
  yarn run lint

-FROM docker:${DOCKER_VERSION} as docker
-FROM docker/buildx-bin:${BUILDX_VERSION} as buildx
+FROM docker:${DOCKER_VERSION} AS docker
+FROM docker/buildx-bin:${BUILDX_VERSION} AS buildx
+FROM crazymax/undock:${UNDOCK_VERSION} AS undock

 FROM deps AS test
 RUN --mount=type=bind,target=.,rw \
@@ -83,6 +85,7 @@ RUN --mount=type=bind,target=.,rw \
    --mount=type=bind,from=docker,source=/usr/local/bin/docker,target=/usr/bin/docker \
    --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
    --mount=type=bind,from=buildx,source=/buildx,target=/usr/bin/buildx \
+    --mount=type=bind,from=undock,source=/usr/local/bin/undock,target=/usr/bin/undock \
    --mount=type=secret,id=GITHUB_TOKEN \
  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test:coverage --coverageDirectory=/tmp/coverage

--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -21,7 +21,7 @@ group "pre-checkin" {
 }

 group "validate" {
-  targets = ["lint", "vendor-validate", "license-validate"]
+  targets = ["lint", "vendor-validate", "dockerfile-validate", "license-validate"]
 }

 target "build" {
@@ -54,6 +54,18 @@ target "vendor-validate" {
  output = ["type=cacheonly"]
 }

+target "dockerfile-validate" {
+  matrix = {
+    dockerfile = [
+      "dev.Dockerfile",
+      "./hack/dockerfiles/license.Dockerfile"
+    ]
+  }
+  name = "dockerfile-validate-${md5(dockerfile)}"
+  dockerfile = dockerfile
+  call = "check"
+}
+
 target "test" {
  dockerfile = "dev.Dockerfile"
  target = "test"
--- a/package.json
+++ b/package.json
@@ -45,12 +45,12 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/artifact": "^2.1.9",
-    "@actions/cache": "^3.2.4",
-    "@actions/core": "^1.10.1",
+    "@actions/artifact": "^2.1.11",
+    "@actions/cache": "^3.3.0",
+    "@actions/core": "^1.11.1",
    "@actions/exec": "^1.1.1",
    "@actions/github": "^6.0.0",
-    "@actions/http-client": "^2.2.1",
+    "@actions/http-client": "^2.2.3",
    "@actions/io": "^1.1.3",
    "@actions/tool-cache": "^2.0.1",
    "@azure/storage-blob": "^12.15.0",
--- a/src/buildx/history.ts
+++ b/src/buildx/history.ts
@@ -26,6 +26,7 @@ import {Context} from '../context';
 import {Docker} from '../docker/docker';
 import {Exec} from '../exec';
 import {GitHub} from '../github';
+import {Util} from '../util';

 import {ExportRecordOpts, ExportRecordResponse, Summaries} from '../types/buildx/history';

@@ -84,6 +85,9 @@ export class History {
    core.info(`exporting build record to ${outDir}`);
    fs.mkdirSync(outDir, {recursive: true});

+    // wait 3 seconds to ensure build records are finalized: https://github.com/moby/buildkit/pull/5109
+    await Util.sleep(3);
+
    const buildxInFifoPath = Context.tmpName({
      template: 'buildx-in-XXXXXX.fifo',
      tmpdir: Context.tmpDir()
--- a/src/context.ts
+++ b/src/context.ts
@@ -45,6 +45,8 @@ export class Context {
    }
    if (github.context.sha && !gitRef.startsWith(`refs/pull/`)) {
      gitRef = github.context.sha;
+    } else if (gitRef.startsWith(`refs/pull/`)) {
+      gitRef = gitRef.replace(/\/merge$/g, '/head');
    }
    return gitRef;
  }
--- a/src/docker/assets.ts
+++ b/src/docker/assets.ts
@@ -221,16 +221,47 @@ provision:
    EOF
    fi
    export DEBIAN_FRONTEND=noninteractive
-    curl -fsSL https://get.docker.com | sh -s -- --channel {{dockerBinChannel}} --version {{dockerBinVersion}}
+    if [ "{{srcType}}" == "archive" ]; then
+      curl -fsSL https://get.docker.com | sh -s -- --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}
+    elif [ "{{srcType}}" == "image" ]; then
+      arch=$(uname -m)
+      case $arch in
+        x86_64) arch=amd64;;
+        aarch64) arch=arm64;;
+      esac
+      url="https://github.com/crazy-max/undock/releases/download/v0.8.0/undock_0.8.0_linux_$arch.tar.gz"
+
+      wget "$url" -O /tmp/undock.tar.gz
+      tar -C /usr/local/bin -xvf /tmp/undock.tar.gz
+      undock --version
+
+      HOME=/tmp undock moby/moby-bin:{{srcImageTag}} /usr/local/bin
+
+      wget https://raw.githubusercontent.com/moby/moby/{{gitCommit}}/contrib/init/systemd/docker.service \
+        -O /etc/systemd/system/docker.service
+      wget https://raw.githubusercontent.com/moby/moby/{{gitCommit}}/contrib/init/systemd/docker.socket \
+        -O /etc/systemd/system/docker.socket
+
+      sed -i 's|^ExecStart=.*|ExecStart=/usr/local/bin/dockerd -H fd://|' /etc/systemd/system/docker.service
+      sed -i 's|containerd.service||' /etc/systemd/system/docker.service
+      if ! getent group docker; then
+        groupadd --system docker
+      fi
+      systemctl daemon-reload
+      fail=0
+      if ! systemctl enable --now docker; then
+        fail=1
+      fi
+      systemctl status docker.socket || true
+      systemctl status docker.service || true
+      exit $fail
+    fi

 probes:
 - script: |
    #!/bin/bash
    set -eux -o pipefail
-    if ! timeout 30s bash -c "until command -v docker >/dev/null 2>&1; do sleep 3; done"; then
-      echo >&2 "docker is not installed yet"
-      exit 1
-    fi
+    # Don't check for docker CLI as it's not installed in the VM (only on the host)
    if ! timeout 30s bash -c "until pgrep dockerd; do sleep 3; done"; then
      echo >&2 "dockerd is not running"
      exit 1
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -21,7 +21,6 @@ import os from 'os';
 import path from 'path';
 import retry from 'async-retry';
 import * as handlebars from 'handlebars';
-import * as util from 'util';
 import * as core from '@actions/core';
 import * as httpm from '@actions/http-client';
 import * as io from '@actions/io';
@@ -33,13 +32,30 @@ import {Exec} from '../exec';
 import {Util} from '../util';
 import {limaYamlData, dockerServiceLogsPs1, setupDockerWinPs1} from './assets';
 import {GitHubRelease} from '../types/github';
+import {HubRepository} from '../hubRepository';
+import {Image} from '../types/oci/config';
+
+export interface InstallSourceImage {
+  type: 'image';
+  tag: string;
+}
+
+export interface InstallSourceArchive {
+  type: 'archive';
+  version: string;
+  channel: string;
+}
+
+export type InstallSource = InstallSourceImage | InstallSourceArchive;

 export interface InstallOpts {
-  version?: string;
-  channel?: string;
+  source?: InstallSource;
+
+  // ...
  runDir: string;
  contextName?: string;
  daemonConfig?: string;
+  rootless?: boolean;
 }

 interface LimaImage {
@@ -49,20 +65,26 @@ interface LimaImage {
 }

 export class Install {
-  private readonly runDir: string;
-  private readonly version: string;
-  private readonly channel: string;
+  private runDir: string;
+  private readonly source: InstallSource;
  private readonly contextName: string;
  private readonly daemonConfig?: string;
  private _version: string | undefined;
  private _toolDir: string | undefined;
+  private rootless: boolean;
+
+  private gitCommit: string | undefined;

  private readonly limaInstanceName = 'docker-actions-toolkit';

  constructor(opts: InstallOpts) {
    this.runDir = opts.runDir;
-    this.version = opts.version || 'latest';
-    this.channel = opts.channel || 'stable';
+    this.rootless = opts.rootless || false;
+    this.source = opts.source || {
+      type: 'archive',
+      version: 'latest',
+      channel: 'stable'
+    };
    this.contextName = opts.contextName || 'setup-docker-action';
    this.daemonConfig = opts.daemonConfig;
  }
@@ -71,27 +93,92 @@ export class Install {
    return this._toolDir || Context.tmpDir();
  }

-  public async download(): Promise<string> {
-    const release: GitHubRelease = await Install.getRelease(this.version);
+  async downloadStaticArchive(component: 'docker' | 'docker-rootless-extras', src: InstallSourceArchive): Promise<string> {
+    const release: GitHubRelease = await Install.getRelease(src.version);
    this._version = release.tag_name.replace(/^v+|v+$/g, '');
    core.debug(`docker.Install.download version: ${this._version}`);

-    const downloadURL = this.downloadURL(this._version, this.channel);
+    const downloadURL = this.downloadURL(component, this._version, src.channel);
    core.info(`Downloading ${downloadURL}`);

    const downloadPath = await tc.downloadTool(downloadURL);
    core.debug(`docker.Install.download downloadPath: ${downloadPath}`);

-    let extractFolder: string;
+    let extractFolder;
    if (os.platform() == 'win32') {
-      extractFolder = await tc.extractZip(downloadPath);
+      extractFolder = await tc.extractZip(downloadPath, extractFolder);
    } else {
-      extractFolder = await tc.extractTar(downloadPath);
+      extractFolder = await tc.extractTar(downloadPath, extractFolder);
    }
-    if (Util.isDirectory(path.join(extractFolder, 'docker'))) {
-      extractFolder = path.join(extractFolder, 'docker');
+    if (Util.isDirectory(path.join(extractFolder, component))) {
+      extractFolder = path.join(extractFolder, component);
    }
    core.debug(`docker.Install.download extractFolder: ${extractFolder}`);
+    return extractFolder;
+  }
+
+  public async download(): Promise<string> {
+    let extractFolder: string;
+    let cacheKey: string;
+    const platform = os.platform();
+
+    switch (this.source.type) {
+      case 'image': {
+        const tag = this.source.tag;
+        this._version = tag;
+        cacheKey = `docker-image`;
+
+        core.info(`Downloading docker cli from dockereng/cli-bin:${tag}`);
+        const cli = await HubRepository.build('dockereng/cli-bin');
+        extractFolder = await cli.extractImage(tag);
+
+        const moby = await HubRepository.build('moby/moby-bin');
+        if (['win32', 'linux'].includes(platform)) {
+          core.info(`Downloading dockerd from moby/moby-bin:${tag}`);
+          await moby.extractImage(tag, extractFolder);
+        } else if (platform == 'darwin') {
+          // On macOS, the docker daemon binary will be downloaded inside the lima VM.
+          // However, we will get the exact git revision from the image config
+          // to get the matching systemd unit files.
+          core.info(`Getting git revision from moby/moby-bin:${tag}`);
+
+          // There's no macOS image for moby/moby-bin - a linux daemon is run inside lima.
+          const manifest = await moby.getPlatformManifest(tag, 'linux');
+
+          const config = await moby.getJSONBlob<Image>(manifest.config.digest);
+          core.debug(`Config ${JSON.stringify(config.config)}`);
+
+          this.gitCommit = config.config?.Labels?.['org.opencontainers.image.revision'];
+          if (!this.gitCommit) {
+            core.warning(`No git revision can be determined from the image. Will use master.`);
+            this.gitCommit = 'master';
+          }
+          core.info(`Git revision is ${this.gitCommit}`);
+        } else {
+          core.warning(`dockerd not supported on ${platform}, only the Docker cli will be available`);
+        }
+        break;
+      }
+      case 'archive': {
+        const version = this.source.version;
+        const channel = this.source.channel;
+        cacheKey = `docker-archive-${channel}`;
+        this._version = version;
+
+        core.info(`Downloading Docker ${version} from ${this.source.channel} at download.docker.com`);
+        extractFolder = await this.downloadStaticArchive('docker', this.source);
+        if (this.rootless) {
+          core.info(`Downloading Docker rootless extras ${version} from ${this.source.channel} at download.docker.com`);
+          const extrasFolder = await this.downloadStaticArchive('docker-rootless-extras', this.source);
+          fs.readdirSync(extrasFolder).forEach(file => {
+            const src = path.join(extrasFolder, file);
+            const dest = path.join(extractFolder, file);
+            fs.copyFileSync(src, dest);
+          });
+        }
+        break;
+      }
+    }

    core.info('Fixing perms');
    fs.readdir(path.join(extractFolder), function (err, files) {
@@ -104,7 +191,7 @@ export class Install {
      });
    });

-    const tooldir = await tc.cacheDir(extractFolder, `docker-${this.channel}`, this._version.replace(/(0+)([1-9]+)/, '$2'));
+    const tooldir = await tc.cacheDir(extractFolder, cacheKey, this._version.replace(/(0+)([1-9]+)/, '$2'));
    core.addPath(tooldir);
    core.info('Added Docker to PATH');

@@ -119,7 +206,13 @@ export class Install {
    if (!this.runDir) {
      throw new Error('runDir must be set');
    }
-    switch (os.platform()) {
+
+    const platform = os.platform();
+    if (this.rootless && platform != 'linux') {
+      // TODO: Support on macOS (via lima)
+      throw new Error(`rootless is only supported on linux`);
+    }
+    switch (platform) {
      case 'darwin': {
        return await this.installDarwin();
      }
@@ -136,6 +229,10 @@ export class Install {
  }

  private async installDarwin(): Promise<string> {
+    if (this.source.type == 'image' && !this.gitCommit) {
+      throw new Error('gitCommit must be set. Run download first.');
+    }
+    const src = this.source;
    const limaDir = path.join(os.homedir(), '.lima', this.limaInstanceName);
    await io.mkdirP(limaDir);
    const dockerHost = `unix://${limaDir}/docker.sock`;
@@ -166,21 +263,30 @@ export class Install {
      handlebars.registerHelper('stringify', function (obj) {
        return new handlebars.SafeString(JSON.stringify(obj));
      });
+      const srcArchive = src as InstallSourceArchive;
      const limaCfg = handlebars.compile(limaYamlData)({
        customImages: Install.limaCustomImages(),
        daemonConfig: limaDaemonConfig,
        dockerSock: `${limaDir}/docker.sock`,
-        dockerBinVersion: this._version,
-        dockerBinChannel: this.channel
+        gitCommit: this.gitCommit,
+        srcType: src.type,
+        srcArchiveVersion: this._version, // Use the resolved version (e.g. latest -> 27.4.0)
+        srcArchiveChannel: srcArchive.channel,
+        srcImageTag: (src as InstallSourceImage).tag
      });
      core.info(`Writing lima config to ${path.join(limaDir, 'lima.yaml')}`);
      fs.writeFileSync(path.join(limaDir, 'lima.yaml'), limaCfg);
      core.info(limaCfg);
    });

-    const qemuArch = await Install.qemuArch();
+    if (!(await Install.qemuInstalled())) {
+      await core.group('Installing QEMU', async () => {
+        await Exec.exec('brew', ['install', 'qemu'], {env: envs});
+      });
+    }
+    const qemuBin = await Install.qemuBin();
    await core.group('QEMU version', async () => {
-      await Exec.exec(`qemu-system-${qemuArch} --version`);
+      await Exec.exec(qemuBin, ['--version']);
    });

    // lima might already be started on the runner so env var added in download
@@ -255,21 +361,34 @@ export class Install {
    }

    const envs = Object.assign({}, process.env, {
-      PATH: `${this.toolDir}:${process.env.PATH}`
+      PATH: `${this.toolDir}:${process.env.PATH}`,
+      XDG_RUNTIME_DIR: (this.rootless && this.runDir) || undefined
    }) as {
      [key: string]: string;
    };

    await core.group('Start Docker daemon', async () => {
      const bashPath: string = await io.which('bash', true);
-      const cmd = `${this.toolDir}/dockerd --host="${dockerHost}" --config-file="${daemonConfigPath}" --exec-root="${this.runDir}/execroot" --data-root="${this.runDir}/data" --pidfile="${this.runDir}/docker.pid" --userland-proxy=false`;
+      let dockerPath = `${this.toolDir}/dockerd`;
+      if (this.rootless) {
+        dockerPath = `${this.toolDir}/dockerd-rootless.sh`;
+        if (fs.existsSync('/proc/sys/kernel/apparmor_restrict_unprivileged_userns')) {
+          await Exec.exec('sudo', ['sh', '-c', 'echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns']);
+        }
+      }
+
+      const cmd = `${dockerPath} --host="${dockerHost}" --config-file="${daemonConfigPath}" --exec-root="${this.runDir}/execroot" --data-root="${this.runDir}/data" --pidfile="${this.runDir}/docker.pid"`;
      core.info(`[command] ${cmd}`); // https://github.com/actions/toolkit/blob/3d652d3133965f63309e4b2e1c8852cdbdcb3833/packages/exec/src/toolrunner.ts#L47
+      let sudo = 'sudo';
+      if (this.rootless) {
+        sudo += ' -u \\#1001';
+      }
      const proc = await child_process.spawn(
        // We can't use Exec.exec here because we need to detach the process to
        // avoid killing it when the action finishes running. Even if detached,
        // we also need to run dockerd in a subshell and unref the process so
        // GitHub Action doesn't wait for it to finish.
-        `sudo env "PATH=$PATH" ${bashPath} << EOF
+        `${sudo} env "PATH=$PATH" ${bashPath} << EOF
 ( ${cmd} 2>&1 | tee "${this.runDir}/dockerd.log" ) &
 EOF`,
        [],
@@ -382,6 +501,13 @@ EOF`,
        throw new Error(`Unsupported platform: ${os.platform()}`);
      }
    }
+
+    await core.group(`Cleaning up toolDir`, async () => {
+      if (!this._toolDir) {
+        return;
+      }
+      fs.rmSync(this._toolDir, {recursive: true, force: true});
+    });
  }

  private async tearDownDarwin(): Promise<void> {
@@ -431,13 +557,16 @@ EOF`,
    await core.group('Removing Docker context', async () => {
      await Docker.exec(['context', 'rm', '-f', this.contextName]);
    });
+    await core.group('Stopping Docker daemon service', async () => {
+      await Exec.exec('powershell', ['-Command', `Stop-Service -Name docker -Force`]);
+    });
  }

-  private downloadURL(version: string, channel: string): string {
+  private downloadURL(component: 'docker' | 'docker-rootless-extras', version: string, channel: string): string {
    const platformOS = Install.platformOS();
    const platformArch = Install.platformArch();
    const ext = platformOS === 'win' ? '.zip' : '.tgz';
-    return util.format('https://download.docker.com/%s/static/%s/%s/docker-%s%s', platformOS, channel, platformArch, version, ext);
+    return `https://download.docker.com/${platformOS}/static/${channel}/${platformArch}/${component}-${version}${ext}`;
  }

  private static platformOS(): string {
@@ -493,29 +622,42 @@ EOF`,
    return await io
      .which('lima', true)
      .then(res => {
-        core.debug(`docker.Install.limaAvailable ok: ${res}`);
+        core.debug(`docker.Install.limaInstalled ok: ${res}`);
        return true;
      })
      .catch(error => {
-        core.debug(`docker.Install.limaAvailable error: ${error}`);
+        core.debug(`docker.Install.limaInstalled error: ${error}`);
        return false;
      });
  }

-  private static async qemuArch(): Promise<string> {
+  private static async qemuBin(): Promise<string> {
    switch (os.arch()) {
      case 'x64': {
-        return 'x86_64';
+        return `qemu-system-x86_64`;
      }
      case 'arm64': {
-        return 'aarch64';
+        return `qemu-system-aarch64`;
      }
      default: {
-        return os.arch();
+        return `qemu-system-${os.arch()}`;
      }
    }
  }

+  private static async qemuInstalled(): Promise<boolean> {
+    return await io
+      .which(await Install.qemuBin(), true)
+      .then(res => {
+        core.debug(`docker.Install.qemuInstalled ok: ${res}`);
+        return true;
+      })
+      .catch(error => {
+        core.debug(`docker.Install.qemuInstalled error: ${error}`);
+        return false;
+      });
+  }
+
  public static async getRelease(version: string): Promise<GitHubRelease> {
    const url = `https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json`;
    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
@@ -527,7 +669,10 @@ EOF`,
    }
    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
    if (!releases[version]) {
-      throw new Error(`Cannot find Docker release ${version} in ${url}`);
+      if (!releases['v' + version]) {
+        throw new Error(`Cannot find Docker release ${version} in ${url}`);
+      }
+      return releases['v' + version];
    }
    return releases[version];
  }
--- a/src/dockerhub.ts
+++ b/src/dockerhub.ts
@@ -111,17 +111,21 @@ export class DockerHub {
    const body = await resp.readBody();
    resp.message.statusCode = resp.message.statusCode || HttpCodes.InternalServerError;
    if (resp.message.statusCode < 200 || resp.message.statusCode >= 300) {
-      if (resp.message.statusCode == HttpCodes.Unauthorized) {
-        throw new Error(`Docker Hub API: operation not permitted`);
-      }
-      const errResp = <Record<string, string>>JSON.parse(body);
-      for (const k of ['message', 'detail', 'error']) {
-        if (errResp[k]) {
-          throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}: ${errResp[k]}`);
-        }
-      }
-      throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}`);
+      throw DockerHub.parseError(resp, body);
    }
    return body;
  }
+
+  public static parseError(resp: httpm.HttpClientResponse, body: string): Error {
+    if (resp.message.statusCode == HttpCodes.Unauthorized) {
+      throw new Error(`Docker Hub API: operation not permitted`);
+    }
+    const errResp = <Record<string, string>>JSON.parse(body);
+    for (const k of ['message', 'detail', 'error']) {
+      if (errResp[k]) {
+        throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}: ${errResp[k]}`);
+      }
+    }
+    throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}`);
+  }
 }
--- a/src/git.ts
+++ b/src/git.ts
@@ -163,4 +163,8 @@ export class Git {
      return res.stdout.trim();
    });
  }
+
+  public static async commitDate(ref: string): Promise<Date> {
+    return new Date(await Git.exec(['show', '-s', '--format="%ci"', ref]));
+  }
 }
--- a/src/hubRepository.ts
+++ b/src/hubRepository.ts
@@ -0,0 +1,174 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as httpm from '@actions/http-client';
+import {Index} from './types/oci';
+import os from 'os';
+import * as core from '@actions/core';
+import {Manifest} from './types/oci/manifest';
+import * as tc from '@actions/tool-cache';
+import fs from 'fs';
+import {MEDIATYPE_IMAGE_CONFIG_V1, MEDIATYPE_IMAGE_INDEX_V1, MEDIATYPE_IMAGE_MANIFEST_V1} from './types/oci/mediatype';
+import {MEDIATYPE_IMAGE_CONFIG_V1 as DOCKER_MEDIATYPE_IMAGE_CONFIG_V1, MEDIATYPE_IMAGE_MANIFEST_LIST_V2, MEDIATYPE_IMAGE_MANIFEST_V2} from './types/docker/mediatype';
+import {DockerHub} from './dockerhub';
+
+export class HubRepository {
+  private repo: string;
+  private token: string;
+  private static readonly http: httpm.HttpClient = new httpm.HttpClient('setup-docker-action');
+
+  private constructor(repository: string, token: string) {
+    this.repo = repository;
+    this.token = token;
+  }
+
+  public static async build(repository: string): Promise<HubRepository> {
+    const token = await this.getToken(repository);
+    return new HubRepository(repository, token);
+  }
+
+  public async getPlatformManifest(tagOrDigest: string, os?: string): Promise<Manifest> {
+    const index = await this.getManifest<Index>(tagOrDigest);
+    if (index.mediaType != MEDIATYPE_IMAGE_INDEX_V1 && index.mediaType != MEDIATYPE_IMAGE_MANIFEST_LIST_V2) {
+      core.error(`Unsupported image media type: ${index.mediaType}`);
+      throw new Error(`Unsupported image media type: ${index.mediaType}`);
+    }
+    const digest = HubRepository.getPlatformManifestDigest(index, os);
+    return await this.getManifest<Manifest>(digest);
+  }
+
+  // Unpacks the image layers and returns the path to the extracted image.
+  // Only OCI indexes/manifest list are supported for now.
+  public async extractImage(tag: string, destDir?: string): Promise<string> {
+    const manifest = await this.getPlatformManifest(tag);
+
+    const paths = manifest.layers.map(async layer => {
+      const url = this.blobUrl(layer.digest);
+
+      return await tc.downloadTool(url, undefined, undefined, {
+        authorization: `Bearer ${this.token}`
+      });
+    });
+
+    let files = await Promise.all(paths);
+    let extractFolder: string;
+    if (!destDir) {
+      extractFolder = await tc.extractTar(files[0]);
+      files = files.slice(1);
+    } else {
+      extractFolder = destDir;
+    }
+
+    await Promise.all(
+      files.map(async file => {
+        return await tc.extractTar(file, extractFolder);
+      })
+    );
+
+    fs.readdirSync(extractFolder).forEach(file => {
+      core.info(`extractImage(${this.repo}:${tag}) file: ${file}`);
+    });
+
+    return extractFolder;
+  }
+
+  private static async getToken(repo: string): Promise<string> {
+    const url = `https://auth.docker.io/token?service=registry.docker.io&scope=repository:${repo}:pull`;
+
+    const resp = await this.http.get(url);
+    const body = await resp.readBody();
+    const statusCode = resp.message.statusCode || 500;
+    if (statusCode != 200) {
+      throw DockerHub.parseError(resp, body);
+    }
+
+    const json = JSON.parse(body);
+    return json.token;
+  }
+
+  private blobUrl(digest: string): string {
+    return `https://registry-1.docker.io/v2/${this.repo}/blobs/${digest}`;
+  }
+
+  public async getManifest<T>(tagOrDigest: string): Promise<T> {
+    return await this.registryGet<T>(tagOrDigest, 'manifests', [MEDIATYPE_IMAGE_INDEX_V1, MEDIATYPE_IMAGE_MANIFEST_LIST_V2, MEDIATYPE_IMAGE_MANIFEST_V1, MEDIATYPE_IMAGE_MANIFEST_V2]);
+  }
+
+  public async getJSONBlob<T>(tagOrDigest: string): Promise<T> {
+    return await this.registryGet<T>(tagOrDigest, 'blobs', [MEDIATYPE_IMAGE_CONFIG_V1, DOCKER_MEDIATYPE_IMAGE_CONFIG_V1]);
+  }
+
+  private async registryGet<T>(tagOrDigest: string, endpoint: 'manifests' | 'blobs', accept: Array<string>): Promise<T> {
+    const url = `https://registry-1.docker.io/v2/${this.repo}/${endpoint}/${tagOrDigest}`;
+
+    const headers = {
+      Authorization: `Bearer ${this.token}`,
+      Accept: accept.join(', ')
+    };
+
+    const resp = await HubRepository.http.get(url, headers);
+    const body = await resp.readBody();
+    const statusCode = resp.message.statusCode || 500;
+    if (statusCode != 200) {
+      core.error(`registryGet(${this.repo}:${tagOrDigest}) failed: ${statusCode} ${body}`);
+      throw DockerHub.parseError(resp, body);
+    }
+
+    return <T>JSON.parse(body);
+  }
+
+  private static getPlatformManifestDigest(index: Index, osOverride?: string): string {
+    // This doesn't handle all possible platforms normalizations, but it's good enough for now.
+    let pos: string = osOverride || os.platform();
+    if (pos == 'win32') {
+      pos = 'windows';
+    }
+    let arch = os.arch();
+    if (arch == 'x64') {
+      arch = 'amd64';
+    }
+    let variant = '';
+    if (arch == 'arm') {
+      variant = 'v7';
+    }
+
+    const manifest = index.manifests.find(m => {
+      if (!m.platform) {
+        return false;
+      }
+      if (m.platform.os != pos) {
+        core.debug(`Skipping manifest ${m.digest} because of os: ${m.platform.os} != ${pos}`);
+        return false;
+      }
+      if (m.platform.architecture != arch) {
+        core.debug(`Skipping manifest ${m.digest} because of arch: ${m.platform.architecture} != ${arch}`);
+        return false;
+      }
+      if ((m.platform.variant || '') != variant) {
+        core.debug(`Skipping manifest ${m.digest} because of variant: ${m.platform.variant} != ${variant}`);
+        return false;
+      }
+
+      return true;
+    });
+    if (!manifest) {
+      core.error(`Cannot find manifest for ${pos}/${arch}/${variant}`);
+      throw new Error(`Cannot find manifest for ${pos}/${arch}/${variant}`);
+    }
+
+    return manifest.digest;
+  }
+}
--- a/src/toolkit.ts
+++ b/src/toolkit.ts
@@ -20,6 +20,7 @@ import {Bake as BuildxBake} from './buildx/bake';
 import {Install as BuildxInstall} from './buildx/install';
 import {Builder} from './buildx/builder';
 import {BuildKit} from './buildkit/buildkit';
+import {Undock} from './undock/undock';
 import {GitHub} from './github';

 export interface ToolkitOpts {
@@ -38,6 +39,7 @@ export class Toolkit {
  public buildxInstall: BuildxInstall;
  public builder: Builder;
  public buildkit: BuildKit;
+  public undock: Undock;

  constructor(opts: ToolkitOpts = {}) {
    this.github = new GitHub({token: opts.githubToken});
@@ -47,5 +49,6 @@ export class Toolkit {
    this.buildxInstall = new BuildxInstall();
    this.builder = new Builder({buildx: this.buildx});
    this.buildkit = new BuildKit({buildx: this.buildx});
+    this.undock = new Undock();
  }
 }
--- a/src/types/docker/mediatype.ts
+++ b/src/types/docker/mediatype.ts
@@ -0,0 +1,21 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export const MEDIATYPE_IMAGE_MANIFEST_LIST_V2 = 'application/vnd.docker.distribution.manifest.list.v2+json';
+
+export const MEDIATYPE_IMAGE_MANIFEST_V2 = 'application/vnd.docker.distribution.manifest.v2+json';
+
+export const MEDIATYPE_IMAGE_CONFIG_V1 = 'application/vnd.docker.container.image.v1+json';
--- a/src/types/oci/mediatype.ts
+++ b/src/types/oci/mediatype.ts
@@ -23,3 +23,5 @@ export const MEDIATYPE_IMAGE_INDEX_V1 = 'application/vnd.oci.image.index.v1+json
 export const MEDIATYPE_IMAGE_LAYER_V1 = 'application/vnd.oci.image.layer.v1.tar';

 export const MEDIATYPE_EMPTY_JSON_V1 = 'application/vnd.oci.empty.v1+json';
+
+export const MEDIATYPE_IMAGE_CONFIG_V1 = 'application/vnd.oci.image.config.v1+json';
--- a/src/types/undock/undock.ts
+++ b/src/types/undock/undock.ts
@@ -0,0 +1,21 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface DownloadVersion {
+  version: string;
+  downloadURL: string;
+  releasesURL: string;
+}
--- a/src/undock/install.ts
+++ b/src/undock/install.ts
@@ -0,0 +1,166 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
+import * as tc from '@actions/tool-cache';
+import * as semver from 'semver';
+import * as util from 'util';
+
+import {Cache} from '../cache';
+import {Context} from '../context';
+
+import {GitHubRelease} from '../types/github';
+import {DownloadVersion} from '../types/undock/undock';
+
+export class Install {
+  /*
+   * Download undock binary from GitHub release
+   * @param v: version semver version or latest
+   * @param ghaNoCache: disable binary caching in GitHub Actions cache backend
+   * @returns path to the undock binary
+   */
+  public async download(v: string, ghaNoCache?: boolean): Promise<string> {
+    const version: DownloadVersion = await Install.getDownloadVersion(v);
+    core.debug(`Install.download version: ${version.version}`);
+
+    const release: GitHubRelease = await Install.getRelease(version);
+    core.debug(`Install.download release tag name: ${release.tag_name}`);
+
+    const vspec = await this.vspec(release.tag_name);
+    core.debug(`Install.download vspec: ${vspec}`);
+
+    const c = semver.clean(vspec) || '';
+    if (!semver.valid(c)) {
+      throw new Error(`Invalid Undock version "${vspec}".`);
+    }
+
+    const installCache = new Cache({
+      htcName: 'undock-dl-bin',
+      htcVersion: vspec,
+      baseCacheDir: path.join(os.homedir(), '.bin'),
+      cacheFile: os.platform() == 'win32' ? 'undock.exe' : 'undock',
+      ghaNoCache: ghaNoCache
+    });
+
+    const cacheFoundPath = await installCache.find();
+    if (cacheFoundPath) {
+      core.info(`Unodck binary found in ${cacheFoundPath}`);
+      return cacheFoundPath;
+    }
+
+    const downloadURL = util.format(version.downloadURL, vspec, this.filename(vspec));
+    core.info(`Downloading ${downloadURL}`);
+
+    const htcDownloadPath = await tc.downloadTool(downloadURL);
+    core.debug(`Install.download htcDownloadPath: ${htcDownloadPath}`);
+
+    let htcExtPath: string;
+    if (os.platform() == 'win32') {
+      htcExtPath = await tc.extractZip(htcDownloadPath);
+    } else {
+      htcExtPath = await tc.extractTar(htcDownloadPath);
+    }
+    core.info(`Extracted to ${htcExtPath}`);
+
+    const exePath: string = path.join(htcExtPath, os.platform() == 'win32' ? 'undock.exe' : 'undock');
+    core.debug(`Install.download exePath: ${exePath}`);
+
+    const cacheSavePath = await installCache.save(exePath);
+    core.info(`Cached to ${cacheSavePath}`);
+    return cacheSavePath;
+  }
+
+  public async install(binPath: string, dest?: string): Promise<string> {
+    dest = dest || Context.tmpDir();
+
+    const binDir = path.join(dest, 'undock-bin');
+    if (!fs.existsSync(binDir)) {
+      fs.mkdirSync(binDir, {recursive: true});
+    }
+    const binName: string = os.platform() == 'win32' ? 'undock.exe' : 'undock';
+    const undockPath: string = path.join(binDir, binName);
+    fs.copyFileSync(binPath, undockPath);
+
+    core.info('Fixing perms');
+    fs.chmodSync(undockPath, '0755');
+
+    core.addPath(binDir);
+    core.info('Added Unodck to PATH');
+
+    core.info(`Binary path: ${undockPath}`);
+    return undockPath;
+  }
+
+  private filename(version: string): string {
+    let arch: string;
+    switch (os.arch()) {
+      case 'x64': {
+        arch = 'amd64';
+        break;
+      }
+      case 'ppc64': {
+        arch = 'ppc64le';
+        break;
+      }
+      case 'arm': {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const arm_version = (process.config.variables as any).arm_version;
+        arch = arm_version ? 'armv' + arm_version : 'arm';
+        break;
+      }
+      default: {
+        arch = os.arch();
+        break;
+      }
+    }
+    const platform: string = os.platform() == 'win32' ? 'windows' : os.platform();
+    const ext: string = os.platform() == 'win32' ? '.zip' : '.tar.gz';
+    return util.format('undock_%s_%s_%s%s', version, platform, arch, ext);
+  }
+
+  private async vspec(version: string): Promise<string> {
+    const v = version.replace(/^v+|v+$/g, '');
+    core.info(`Use ${v} version spec cache key for ${version}`);
+    return v;
+  }
+
+  public static async getDownloadVersion(v: string): Promise<DownloadVersion> {
+    return {
+      version: v,
+      downloadURL: 'https://github.com/crazy-max/undock/releases/download/v%s/%s',
+      releasesURL: 'https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/undock-releases.json'
+    };
+  }
+
+  public static async getRelease(version: DownloadVersion): Promise<GitHubRelease> {
+    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
+    const resp: httpm.HttpClientResponse = await http.get(version.releasesURL);
+    const body = await resp.readBody();
+    const statusCode = resp.message.statusCode || 500;
+    if (statusCode >= 400) {
+      throw new Error(`Failed to get Undock releases from ${version.releasesURL} with status code ${statusCode}: ${body}`);
+    }
+    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
+    if (!releases[version.version]) {
+      throw new Error(`Cannot find Undock release ${version.version} in ${version.releasesURL}`);
+    }
+    return releases[version.version];
+  }
+}
--- a/src/undock/undock.ts
+++ b/src/undock/undock.ts
@@ -0,0 +1,148 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+import * as semver from 'semver';
+
+import {Exec} from '../exec';
+
+export interface UndockOpts {
+  binPath?: string;
+}
+
+export interface UndockRunOpts {
+  source: string;
+  dist: string;
+  logLevel?: string;
+  logCaller?: boolean;
+  cacheDir?: string;
+  platform?: string;
+  all?: boolean;
+  include?: Array<string>;
+  insecure?: boolean;
+  rmDist?: boolean;
+  wrap?: boolean;
+}
+
+export class Undock {
+  private readonly binPath: string;
+  private _version: string;
+  private _versionOnce: boolean;
+
+  constructor(opts?: UndockOpts) {
+    this.binPath = opts?.binPath || 'undock';
+    this._version = '';
+    this._versionOnce = false;
+  }
+
+  public async run(opts: UndockRunOpts): Promise<void> {
+    if (!opts.source) {
+      throw new Error('source is required');
+    }
+    if (!opts.dist) {
+      throw new Error('dist is required');
+    }
+    const args: Array<string> = [];
+    if (opts.logLevel) {
+      args.push(`--log-level=${opts.logLevel}`);
+    }
+    if (opts.logCaller) {
+      args.push('--log-caller');
+    }
+    if (opts.cacheDir) {
+      args.push(`--cachedir=${opts.cacheDir}`);
+    }
+    if (opts.platform) {
+      args.push(`--platform=${opts.platform}`);
+    }
+    if (opts.all) {
+      args.push('--all');
+    }
+    if (opts.include) {
+      opts.include.forEach(i => {
+        args.push(`--include=${i}`);
+      });
+    }
+    if (opts.insecure) {
+      args.push('--insecure');
+    }
+    if (opts.rmDist) {
+      args.push('--rm-dist');
+    }
+    if (opts.wrap) {
+      args.push('--wrap');
+    }
+    args.push(opts.source, opts.dist);
+    await Exec.exec(this.binPath, args, {
+      failOnStdErr: false
+    });
+  }
+
+  public async isAvailable(): Promise<boolean> {
+    const ok: boolean = await Exec.getExecOutput(this.binPath, [], {
+      ignoreReturnCode: true,
+      silent: true
+    })
+      .then(res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.debug(`Undock.isAvailable cmd err: ${res.stderr.trim()}`);
+          return false;
+        }
+        return res.exitCode == 0;
+      })
+      .catch(error => {
+        core.debug(`Undock.isAvailable error: ${error}`);
+        return false;
+      });
+
+    core.debug(`Undock.isAvailable: ${ok}`);
+    return ok;
+  }
+
+  public async version(): Promise<string> {
+    if (this._versionOnce) {
+      return this._version;
+    }
+    this._versionOnce = true;
+    this._version = await Exec.getExecOutput(this.binPath, ['--version'], {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      return res.stdout.trim();
+    });
+    return this._version;
+  }
+
+  public async printVersion() {
+    await Exec.exec(this.binPath, ['--version'], {
+      failOnStdErr: false
+    });
+  }
+
+  public async versionSatisfies(range: string, version?: string): Promise<boolean> {
+    const ver = version ?? (await this.version());
+    if (!ver) {
+      core.debug(`Undock.versionSatisfies false: undefined version`);
+      return false;
+    }
+    const res = semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
+    core.debug(`Undock.versionSatisfies ${ver} statisfies ${range}: ${res}`);
+    return res;
+  }
+}
--- a/yarn.lock
+++ b/yarn.lock
@@ -12,9 +12,9 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/artifact@npm:^2.1.9":
-  version: 2.1.9
-  resolution: "@actions/artifact@npm:2.1.9"
+"@actions/artifact@npm:^2.1.11":
+  version: 2.1.11
+  resolution: "@actions/artifact@npm:2.1.11"
  dependencies:
    "@actions/core": ^1.10.0
    "@actions/github": ^5.1.1
@@ -26,19 +26,18 @@ __metadata:
    "@octokit/request-error": ^5.0.0
    "@protobuf-ts/plugin": ^2.2.3-alpha.1
    archiver: ^7.0.1
-    crypto: ^1.0.1
    jwt-decode: ^3.1.2
    twirp-ts: ^2.5.0
    unzip-stream: ^0.3.1
-  checksum: b01404aa6b4d47186e04a64c0002100ff68a8473eafb811a3d49275a7e1135d1981ccaf527b81c4856f6da764beabe7489fd296bb287906fd7c1964dfaeef3df
+  checksum: dbdafaad11cc573768a00f6b8a7f5109f587eb9461564ae8f15ea8fd1d6a719041df45a92ec204a43a8a1e7ce2c21d8e4229543579b89a3ca8ea30dedddf2fc9
  languageName: node
  linkType: hard

-"@actions/cache@npm:^3.2.4":
-  version: 3.2.4
-  resolution: "@actions/cache@npm:3.2.4"
+"@actions/cache@npm:^3.3.0":
+  version: 3.3.0
+  resolution: "@actions/cache@npm:3.3.0"
  dependencies:
-    "@actions/core": ^1.10.0
+    "@actions/core": ^1.11.1
    "@actions/exec": ^1.0.1
    "@actions/glob": ^0.1.0
    "@actions/http-client": ^2.1.1
@@ -47,8 +46,7 @@ __metadata:
    "@azure/ms-rest-js": ^2.6.0
    "@azure/storage-blob": ^12.13.0
    semver: ^6.3.1
-    uuid: ^3.3.3
-  checksum: 5bf5f7541bea4906b553440a9ffee5699e11dfb729365c6cb0bbd37e147a1a0993369fdad16bfa3e2b01ec7fa57dac66276278bfd4a389009246a75ea953e61d
+  checksum: f0761b1491b7706a80b44d68ed52eb48c04653fc939525a7c7b606e9d9251c40c7e4ac20846ab92ac32db6869e1a6f0f574bd6b7fec1ab9378c8e199c5acc9c9
  languageName: node
  linkType: hard

@@ -62,13 +60,13 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/core@npm:^1.10.1":
-  version: 1.10.1
-  resolution: "@actions/core@npm:1.10.1"
+"@actions/core@npm:^1.11.1":
+  version: 1.11.1
+  resolution: "@actions/core@npm:1.11.1"
  dependencies:
+    "@actions/exec": ^1.1.1
    "@actions/http-client": ^2.0.1
-    uuid: ^8.3.2
-  checksum: 96524c2725e70e3c3176b4e4d93a1358a86f3c5ca777db9a2f65eadfa672f00877db359bf60fffc416c33838ffb4743db93bcc5bf53e76199dd28bf7f7ff8e80
+  checksum: 9ac7a3e0b478bfefd862dcb4ddaa1d8c3f9076bb1931d3d280918d1749e7783480c6a009c1b009c8bf5093e2d77d9f4e023d70416145bf246f0071736d4ef839
  languageName: node
  linkType: hard

@@ -124,7 +122,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/http-client@npm:^2.1.0, @actions/http-client@npm:^2.2.1":
+"@actions/http-client@npm:^2.1.0":
  version: 2.2.1
  resolution: "@actions/http-client@npm:2.2.1"
  dependencies:
@@ -153,6 +151,16 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/http-client@npm:^2.2.3":
+  version: 2.2.3
+  resolution: "@actions/http-client@npm:2.2.3"
+  dependencies:
+    tunnel: ^0.0.6
+    undici: ^5.25.4
+  checksum: 5d395df575d30ae599efa10dd715e72944b015e753db61f0a823f737acbb0e99743d4a9f25e812b18ec8cc34f86c73565d075c449e01ffa891577b6595212dde
+  languageName: node
+  linkType: hard
+
 "@actions/io@npm:^1.0.1, @actions/io@npm:^1.1.1, @actions/io@npm:^1.1.3":
  version: 1.1.3
  resolution: "@actions/io@npm:1.1.3"
@@ -1099,12 +1107,12 @@ __metadata:
  version: 0.0.0-use.local
  resolution: "@docker/actions-toolkit@workspace:."
  dependencies:
-    "@actions/artifact": ^2.1.9
-    "@actions/cache": ^3.2.4
-    "@actions/core": ^1.10.1
+    "@actions/artifact": ^2.1.11
+    "@actions/cache": ^3.3.0
+    "@actions/core": ^1.11.1
    "@actions/exec": ^1.1.1
    "@actions/github": ^6.0.0
-    "@actions/http-client": ^2.2.1
+    "@actions/http-client": ^2.2.3
    "@actions/io": ^1.1.3
    "@actions/tool-cache": ^2.0.1
    "@azure/storage-blob": ^12.15.0
@@ -3395,20 +3403,13 @@ __metadata:
  linkType: hard

 "cross-spawn@npm:^7.0.0, cross-spawn@npm:^7.0.2, cross-spawn@npm:^7.0.3":
-  version: 7.0.3
-  resolution: "cross-spawn@npm:7.0.3"
+  version: 7.0.6
+  resolution: "cross-spawn@npm:7.0.6"
  dependencies:
    path-key: ^3.1.0
    shebang-command: ^2.0.0
    which: ^2.0.1
-  checksum: 671cc7c7288c3a8406f3c69a3ae2fc85555c04169e9d611def9a675635472614f1c0ed0ef80955d5b6d4e724f6ced67f0ad1bb006c2ea643488fcfef994d7f52
-  languageName: node
-  linkType: hard
-
-"crypto@npm:^1.0.1":
-  version: 1.0.1
-  resolution: "crypto@npm:1.0.1"
-  checksum: 087fe3165bd94c333a49e6ed66a0193911f63eac38a24f379b3001a5fe260a59c413646e53a0f67875ba13902b2686d81dc703cb2c147a4ec727dcdc04e5645e
+  checksum: 8d306efacaf6f3f60e0224c287664093fa9185680b2d195852ba9a863f85d02dcc737094c6e512175f8ee0161f9b87c73c6826034c2422e39de7d6569cf4503b
  languageName: node
  linkType: hard

@@ -6852,9 +6853,9 @@ __metadata:
  linkType: hard

 "path-to-regexp@npm:^6.2.0":
-  version: 6.2.2
-  resolution: "path-to-regexp@npm:6.2.2"
-  checksum: b7b0005c36f5099f9ed1fb20a820d2e4ed1297ffe683ea1d678f5e976eb9544f01debb281369dabdc26da82e6453901bf71acf2c7ed14b9243536c2a45286c33
+  version: 6.3.0
+  resolution: "path-to-regexp@npm:6.3.0"
+  checksum: eca78602e6434a1b6799d511d375ec044e8d7e28f5a48aa5c28d57d8152fb52f3fc62fb1cfc5dfa2198e1f041c2a82ed14043d75740a2fe60e91b5089a153250
  languageName: node
  linkType: hard

@@ -8322,12 +8323,12 @@ __metadata:
  linkType: hard

 "unzip-stream@npm:^0.3.1":
-  version: 0.3.1
-  resolution: "unzip-stream@npm:0.3.1"
+  version: 0.3.4
+  resolution: "unzip-stream@npm:0.3.4"
  dependencies:
    binary: ^0.3.0
    mkdirp: ^0.5.1
-  checksum: c206ac8e32a5a005fc654875df9ecc5562ff9e3ed36a0c651dca69d7d9a6d9c8bdcfff1a68010d6e9380e9b9315095bb00174558e4c034abb97fe51d2001a776
+  checksum: c2aef528546a26efeedb9f4d86c84ee1d2957aa2866602229d585c60ce420f3df2503a2b32014f372aa51739c06b08903d923a58622c7cc5b477dd307452f9a0
  languageName: node
  linkType: hard

@@ -8361,7 +8362,7 @@ __metadata:
  languageName: node
  linkType: hard

-"uuid@npm:^3.3.2, uuid@npm:^3.3.3":
+"uuid@npm:^3.3.2":
  version: 3.4.0
  resolution: "uuid@npm:3.4.0"
  bin: