Merge pull request #1009 from crazy-max/imagetools-create

buildx(imagetools): implement create func with metadata parsing
Merge pull request #1011 from docker/dependabot/github_actions/docker/setup-buildx-action-4
2026-03-06 09:37:07 +01:00 · 2026-03-06 09:36:29 +01:00 · 2026-03-06 09:36:05 +01:00 · 2026-03-06 09:28:21 +01:00 · 2026-03-06 09:22:38 +01:00 · 2026-03-06 00:46:27 +00:00
142 changed files with 7587 additions and 8987 deletions
--- a/.eslintignore
+++ b/.eslintignore
@@ -1,4 +0,0 @@
-/.yarn/**
-/lib/**
-/coverage/**
-/node_modules/**
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -1,36 +0,0 @@
-{
-  "env": {
-    "node": true,
-    "es6": true,
-    "mocha": true,
-    "jest": true
-  },
-  "extends": [
-    "eslint:recommended",
-    "plugin:@typescript-eslint/eslint-recommended",
-    "plugin:@typescript-eslint/recommended",
-    "plugin:import/errors",
-    "plugin:import/typescript", // this is needed to allow importing typescript files from JS
-    "plugin:import/warnings",
-    "plugin:jest/recommended",
-    "plugin:prettier/recommended"
-  ],
-  "parser": "@typescript-eslint/parser",
-  "parserOptions": {
-    "ecmaVersion": 2023,
-    "sourceType": "module"
-  },
-  "plugins": [
-    "@typescript-eslint",
-    "jest",
-    "prettier"
-  ],
-  "rules": {
-    "import/no-unresolved": [
-      "error", {
-        "ignore": ["csv-parse/sync", "@octokit/openapi-types"]
-      }
-    ],
-    "jest/no-disabled-tests": 0
-  }
-}
--- a/.github/actions/macos-setup-qemu/action.yml
+++ b/.github/actions/macos-setup-qemu/action.yml
@@ -1,17 +0,0 @@
-name: 'Setup QEMU on macOS'
-description: 'Set up QEMU on macOS runners'
-
-# FIXME: Remove this composite once QEMU issue is fixed on macOS runners
-#  https://github.com/docker/actions-toolkit/issues/455
-
-runs:
-  using: composite
-  steps:
-    - run: |
-        set -ex
-        brew uninstall --ignore-dependencies qemu || true
-        brew autoremove || true
-        curl -o /tmp/qemu.rb https://raw.githubusercontent.com/Homebrew/homebrew-core/f1a9cf104a9a51779c7a532b658c490f69974839/Formula/q/qemu.rb
-        brew install /tmp/qemu.rb
-      continue-on-error: true
-      shell: bash
--- a/.github/buildx-lab-releases.json
+++ b/.github/buildx-lab-releases.json
@@ -1,120 +1,246 @@
 {
  "latest": {
-    "id": 234386442,
-    "tag_name": "v0.26.1-desktop.1",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.26.1-desktop.1",
+    "id": 285373366,
+    "tag_name": "v0.31.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.31.1-desktop.1",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.31.1-desktop.1": {
+    "id": 285373366,
+    "tag_name": "v0.31.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.31.1-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.30.1-desktop.2": {
+    "id": 269523829,
+    "tag_name": "v0.30.1-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.30.1-desktop.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/checksums.txt"
+    ]
+  },
+  "v0.30.1-desktop.1": {
+    "id": 264746294,
+    "tag_name": "v0.30.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.30.1-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/checksums.txt"
    ]
  },
  "edge": {
-    "id": 245038026,
-    "tag_name": "v0.28.0-desktop.1",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.28.0-desktop.1",
+    "id": 285373366,
+    "tag_name": "v0.31.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.31.1-desktop.1",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/buildx-v0.31.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.31.1-desktop.1/checksums.txt"
    ]
  },
  "v0.28.0-desktop.1": {
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
--- a/.github/compose-releases.json
+++ b/.github/compose-releases.json
@@ -1,54 +1,451 @@
 {
  "latest": {
-    "id": 258406598,
-    "tag_name": "v2.40.3",
-    "html_url": "https://github.com/docker/compose/releases/tag/v2.40.3",
+    "id": 289948555,
+    "tag_name": "v5.1.0",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.0",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v2.40.3/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.sbom.json"
+      "https://github.com/docker/compose/releases/download/v5.1.0/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.1.0": {
+    "id": 289948555,
+    "tag_name": "v5.1.0",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.0",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.1.0/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.0.2": {
+    "id": 278255932,
+    "tag_name": "v5.0.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.2",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.1": {
+    "id": 271392988,
+    "tag_name": "v5.0.1",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.1",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.1/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.0": {
+    "id": 266660722,
+    "tag_name": "v5.0.0",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.0",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.0/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "edge": {
+    "id": 289948555,
+    "tag_name": "v5.1.0",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.0",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.1.0/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.0/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.0.0-rc.2": {
+    "id": 262026717,
+    "tag_name": "v5.0.0-rc.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.0-rc.2",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.0-rc.1": {
+    "id": 261813085,
+    "tag_name": "v5.0.0-rc.1",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.0-rc.1",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.sbom.json"
    ]
  },
  "v2.40.3": {
@@ -2396,58 +2793,6 @@
      "https://github.com/docker/compose/releases/download/v2.24.0/docker-compose-windows-x86_64.exe.sha256"
    ]
  },
-  "edge": {
-    "id": 258406598,
-    "tag_name": "v2.40.3",
-    "html_url": "https://github.com/docker/compose/releases/tag/v2.40.3",
-    "assets": [
-      "https://github.com/docker/compose/releases/download/v2.40.3/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.sbom.json"
-    ]
-  },
  "v2.24.0-birthday.10": {
    "id": 133417636,
    "tag_name": "v2.24.0-birthday.10",
--- a/.github/cosign-releases.json
+++ b/.github/cosign-releases.json
@@ -1,92 +1,482 @@
 {
  "latest": {
-    "id": 253720294,
-    "tag_name": "v3.0.2",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.2",
+    "id": 288413621,
+    "tag_name": "v3.0.5",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64_3.0.2_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64_3.0.2_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm_3.0.2_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le_3.0.2_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64_3.0.2_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x_3.0.2_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe_3.0.2_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
+    ]
+  },
+  "v3.0.5": {
+    "id": 288413621,
+    "tag_name": "v3.0.5",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
+    ]
+  },
+  "v3.0.4": {
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
+    ]
+  },
+  "v2.6.2": {
+    "id": 275620649,
+    "tag_name": "v2.6.2",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v2.6.2",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64_2.6.2_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64_2.6.2_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64_2.6.2_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64_2.6.2_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm_2.6.2_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64_2.6.2_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64_2.6.2_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le_2.6.2_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64_2.6.2_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x_2.6.2_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe_2.6.2_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/release-cosign.pub"
+    ]
+  },
+  "v3.0.3": {
+    "id": 268935494,
+    "tag_name": "v3.0.3",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.3",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64_3.0.3_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64_3.0.3_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64_3.0.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64_3.0.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm_3.0.3_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64_3.0.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64_3.0.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le_3.0.3_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64_3.0.3_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x_3.0.3_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe_3.0.3_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/release-cosign.pub"
    ]
  },
  "v3.0.2": {
@@ -3106,93 +3496,93 @@
    ]
  },
  "edge": {
-    "id": 253720294,
-    "tag_name": "v3.0.2",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.2",
+    "id": 288413621,
+    "tag_name": "v3.0.5",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64_3.0.2_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64_3.0.2_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm_3.0.2_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le_3.0.2_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64_3.0.2_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x_3.0.2_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe_3.0.2_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
    ]
  },
  "v2.0.0-rc.3": {
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,7 @@
 version: 2
 updates:
  - package-ecosystem: "github-actions"
+    open-pull-requests-limit: 20
    directory: "/"
    schedule:
      interval: "daily"
@@ -8,16 +9,13 @@ updates:
      - "dependencies"
      - "bot"
  - package-ecosystem: "npm"
+    open-pull-requests-limit: 20
    directory: "/"
    schedule:
      interval: "daily"
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
-    ignore:
-      - # we want to match the same version as the one used by @actions/artifact
-        # https://github.com/actions/toolkit/blob/ae38557bb0dba824cdda26ce787bd6b66cf07a83/packages/artifact/package.json#L46
-        dependency-name: "@azure/storage-blob"
    labels:
      - "dependencies"
      - "bot"
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,14 +1,134 @@
 {
  "latest": {
-    "id": 252833798,
-    "tag_name": "v28.5.1",
-    "html_url": "https://github.com/moby/moby/releases/tag/v28.5.1",
+    "id": 293527283,
+    "tag_name": "docker-v29.3.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
+    "assets": []
+  },
+  "v29.3.0": {
+    "id": 293527283,
+    "tag_name": "docker-v29.3.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
    "assets": []
  },
  "edge": {
-    "id": 258289954,
-    "tag_name": "docker-v29.0.0-rc.2",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.0-rc.2",
+    "id": 293527283,
+    "tag_name": "docker-v29.3.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
+    "assets": []
+  },
+  "v29.3.0-rc.1": {
+    "id": 291481223,
+    "tag_name": "docker-v29.3.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0-rc.1",
+    "assets": []
+  },
+  "v29.2.1": {
+    "id": 282275652,
+    "tag_name": "docker-v29.2.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.1",
+    "assets": []
+  },
+  "v29.2.0": {
+    "id": 280041206,
+    "tag_name": "docker-v29.2.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0",
+    "assets": []
+  },
+  "v29.2.0-rc.2": {
+    "id": 277933908,
+    "tag_name": "docker-v29.2.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0-rc.2",
+    "assets": []
+  },
+  "v29.1.5": {
+    "id": 277389559,
+    "tag_name": "docker-v29.1.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.5",
+    "assets": []
+  },
+  "v29.1.4": {
+    "id": 275290406,
+    "tag_name": "docker-v29.1.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.4",
+    "assets": []
+  },
+  "v29.2.0-rc.1": {
+    "id": 271147963,
+    "tag_name": "docker-v29.2.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0-rc.1",
+    "assets": []
+  },
+  "v29.1.3": {
+    "id": 269884470,
+    "tag_name": "docker-v29.1.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.3",
+    "assets": []
+  },
+  "v29.1.2": {
+    "id": 266898070,
+    "tag_name": "docker-v29.1.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.2",
+    "assets": []
+  },
+  "v29.1.1": {
+    "id": 265971746,
+    "tag_name": "docker-v29.1.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.1",
+    "assets": []
+  },
+  "v29.1.0": {
+    "id": 265770897,
+    "tag_name": "docker-v29.1.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.0",
+    "assets": []
+  },
+  "v29.0.4": {
+    "id": 264940208,
+    "tag_name": "docker-v29.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.4",
+    "assets": []
+  },
+  "v29.0.3": {
+    "id": 264058657,
+    "tag_name": "docker-v29.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.3",
+    "assets": []
+  },
+  "v29.0.2": {
+    "id": 262951416,
+    "tag_name": "docker-v29.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.2",
+    "assets": []
+  },
+  "v29.1.0-rc.1": {
+    "id": 263125085,
+    "tag_name": "docker-v29.1.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.0-rc.1",
+    "assets": []
+  },
+  "v29.0.1": {
+    "id": 262245944,
+    "tag_name": "docker-v29.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.1",
+    "assets": []
+  },
+  "v29.0.0": {
+    "id": 261265152,
+    "tag_name": "docker-v29.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.0",
+    "assets": []
+  },
+  "v29.0.0-rc.3": {
+    "id": 260452080,
+    "tag_name": "docker-v29.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.0-rc.3",
+    "assets": []
+  },
+  "v28.5.2": {
+    "id": 259852183,
+    "tag_name": "v28.5.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v28.5.2",
    "assets": []
  },
  "v29.0.0-rc.2": {
--- a/.github/regclient-releases.json
+++ b/.github/regclient-releases.json
@@ -1,31 +1,171 @@
 {
  "latest": {
-    "id": 243486094,
-    "tag_name": "v0.9.2",
-    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.9.2",
+    "id": 289583033,
+    "tag_name": "v0.11.2",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.2",
    "assets": [
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/metadata.tgz",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-windows-amd64.exe"
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.2": {
+    "id": 289583033,
+    "tag_name": "v0.11.2",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.2",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.1": {
+    "id": 268115419,
+    "tag_name": "v0.11.1",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.1",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.0": {
+    "id": 266508831,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.0",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.10.0": {
+    "id": 260956263,
+    "tag_name": "v0.10.0",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.10.0",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-windows-amd64.exe"
    ]
  },
  "v0.9.2": {
--- a/.github/undock-releases.json
+++ b/.github/undock-releases.json
@@ -1,46 +1,90 @@
 {
  "latest": {
-    "id": 213293369,
-    "tag_name": "v0.10.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.10.0",
+    "id": 273439938,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
+    ]
+  },
+  "v0.11.0": {
+    "id": 273439938,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
    ]
  },
  "v0.10.0": {
@@ -197,47 +241,47 @@
    ]
  },
  "edge": {
-    "id": 213293369,
-    "tag_name": "v0.10.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.10.0",
+    "id": 273439938,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
    ]
  },
  "v0.7.0-rc.1": {
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,11 +21,10 @@ jobs:
        node_version:
          - 24
          - 20
-          - 18
    steps:
      -
        name: Build
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          targets: build
        env:
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: buildx-lab-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: buildx-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -12,7 +12,7 @@ permissions:
  security-events: write

 env:
-  NODE_VERSION: 20
+  NODE_VERSION: "24"

 jobs:
  analyze:
@@ -20,7 +20,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Enable corepack
        run: |
--- a/.github/workflows/compose-lab-releases-json.yml
+++ b/.github/workflows/compose-lab-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/compose-desktop
      artifact_name: compose-lab-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: compose-lab-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/compose-lab-releases-json
--- a/.github/workflows/compose-releases-json.yml
+++ b/.github/workflows/compose-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/compose
      artifact_name: compose-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: compose-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/compose-releases-json
--- a/.github/workflows/cosign-releases-json.yml
+++ b/.github/workflows/cosign-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: sigstore/cosign
      artifact_name: cosign-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: cosign-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/cosign-releases-json
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -17,12 +17,14 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
      filename: docker-releases.json
-      tag_pattern: '^docker-(.*)$'
+      tag_patterns: |
+        ^docker-(.*)$
+        ^(v.*)$
    secrets: inherit

  open-pr:
@@ -33,10 +35,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: docker-releases-json
          path: .github
@@ -46,7 +48,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,5 +1,9 @@
 name: publish

+permissions:
+  id-token: write # required for OIDC
+  contents: write # required to create GitHub Release
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
@@ -9,17 +13,49 @@ on:
    tags:
      - 'v*'

+env:
+  NODE_VERSION: "24"
+
 jobs:
  publish:
    runs-on: ubuntu-latest
    steps:
      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'yarn'
+          package-manager-cache: false
+      -
+        name: Print versions
+        run: |
+          node --version
+          npm --version
+          yarn --version
+      -
+        name: Build
+        run: |
+          yarn install
+          yarn run build
      -
        name: Publish
-        uses: docker/bake-action@v6
+        run: |
+          npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
+          npm publish --provenance --access public
+      -
+        name: Create Release
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b  # v2.5.0
        with:
-          targets: publish
+          draft: true
+          generate_release_notes: true
        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
--- a/.github/workflows/regclient-releases-json.yml
+++ b/.github/workflows/regclient-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: regclient/regclient
      artifact_name: regclient-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: regclient-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/regclient-releases-json
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,9 +14,9 @@ on:
      - '.github/*-releases.json'

 env:
-  NODE_VERSION: "20"
-  BUILDX_VERSION: "edge"
-  BUILDKIT_IMAGE: "moby/buildkit:v0.25.0"
+  NODE_VERSION: "24"
+  BUILDX_VERSION: "v0.32.1"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.28.0"

 jobs:
  test:
@@ -30,20 +30,20 @@ jobs:
        node_version:
          - 24
          - 20
-          - 18
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Test
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          source: .
          targets: test-coverage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NODE_VERSION: ${{ matrix.node_version }}
+          DOCKER_BUILD_SUMMARY: false
      -
        name: Check coverage
        run: |
@@ -69,7 +69,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Enable corepack
        run: |
@@ -149,13 +149,14 @@ jobs:
    permissions:
      contents: read
      id-token: write # needed for signing with GitHub OIDC Token
+      packages: write # needed for pushing to GitHub Container Registry
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Expose GitHub Runtime
-        uses: crazy-max/ghaction-github-runtime@v3
+        uses: crazy-max/ghaction-github-runtime@v4
      -
        # FIXME: Needs to setup node twice on Windows: https://github.com/actions/setup-node/issues/1357#issuecomment-3254613964
        name: Setup Node
@@ -178,7 +179,7 @@ jobs:
      -
        name: Set up Docker Buildx
        if: startsWith(matrix.os, 'ubuntu')
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -186,7 +187,7 @@ jobs:
        name: Set up container builder
        if: startsWith(matrix.os, 'ubuntu')
        id: builder
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver-opts: image=${{ env.BUILDKIT_IMAGE }}
@@ -204,7 +205,7 @@ jobs:
            if (testName) {
              args.push(`--testNamePattern=^${testName} `);
            }
-            args.push(`--runTestsByPath`, `__tests__/${{ matrix.test }}`, `--coverageDirectory=./coverage`);
+            args.push(`__tests__/${{ matrix.test }}`, `--coverage.reportsDirectory=./coverage`);
            await exec.exec('yarn', args);
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: crazy-max/undock
      artifact_name: undock-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
        with:
          name: undock-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/undock-releases-json
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -17,15 +17,15 @@ jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
-      targets: ${{ steps.generate.outputs.targets }}
+      matrix: ${{ steps.generate.outputs.matrix }}
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
-        name: List targets
+        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/list-targets@v6
+        uses: docker/bake-action/subaction/matrix@v7
        with:
          target: validate

@@ -36,10 +36,10 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        target: ${{ fromJson(needs.prepare.outputs.targets) }}
+        include: ${{ fromJson(needs.prepare.outputs.matrix) }}
    steps:
      -
        name: Validate
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
        with:
          targets: ${{ matrix.target }}
--- a/.gitignore
+++ b/.gitignore
@@ -38,13 +38,6 @@ jspm_packages/
 # Yarn Integrity file
 .yarn-integrity

-# dotenv environment variable files
-.env
-.env.development.local
-.env.test.local
-.env.production.local
-.env.local
-
 # yarn v2
 .yarn/cache
 .yarn/unplugged
--- a/.prettierrc.json
+++ b/.prettierrc.json
@@ -6,6 +6,5 @@
  "singleQuote": true,
  "trailingComma": "none",
  "bracketSpacing": false,
-  "arrowParens": "avoid",
-  "parser": "typescript"
+  "arrowParens": "avoid"
 }
--- a/mocks/@actions/github.ts
+++ b/mocks/@actions/github.ts
@@ -1,224 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import {jest} from '@jest/globals';
-
-export const context = {
-  repo: {
-    owner: 'docker',
-    repo: 'actions-toolkit'
-  },
-  ref: 'refs/heads/master',
-  runId: 2188748038,
-  runNumber: 15,
-  payload: {
-    after: '860c1904a1ce19322e91ac35af1ab07466440c37',
-    base_ref: null,
-    before: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
-    commits: [
-      {
-        author: {
-          email: 'crazy-max@users.noreply.github.com',
-          name: 'CrazyMax',
-          username: 'crazy-max'
-        },
-        committer: {
-          email: 'crazy-max@users.noreply.github.com',
-          name: 'CrazyMax',
-          username: 'crazy-max'
-        },
-        distinct: true,
-        id: '860c1904a1ce19322e91ac35af1ab07466440c37',
-        message: 'hello dev',
-        timestamp: '2022-04-19T11:27:24+02:00',
-        tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
-        url: 'https://github.com/docker/test-docker-action/commit/860c1904a1ce19322e91ac35af1ab07466440c37'
-      }
-    ],
-    compare: 'https://github.com/docker/test-docker-action/compare/5f3331d7f704...860c1904a1ce',
-    created: false,
-    deleted: false,
-    forced: false,
-    head_commit: {
-      author: {
-        email: 'crazy-max@users.noreply.github.com',
-        name: 'CrazyMax',
-        username: 'crazy-max'
-      },
-      committer: {
-        email: 'crazy-max@users.noreply.github.com',
-        name: 'CrazyMax',
-        username: 'crazy-max'
-      },
-      distinct: true,
-      id: '860c1904a1ce19322e91ac35af1ab07466440c37',
-      message: 'hello dev',
-      timestamp: '2022-04-19T11:27:24+02:00',
-      tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
-      url: 'https://github.com/docker/test-docker-action/commit/860c1904a1ce19322e91ac35af1ab07466440c37'
-    },
-    organization: {
-      avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
-      description: 'Docker helps developers bring their ideas to life by conquering the complexity of app development.',
-      events_url: 'https://api.github.com/orgs/docker/events',
-      hooks_url: 'https://api.github.com/orgs/docker/hooks',
-      id: 5429470,
-      issues_url: 'https://api.github.com/orgs/docker/issues',
-      login: 'docker',
-      members_url: 'https://api.github.com/orgs/docker/members{/member}',
-      node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
-      public_members_url: 'https://api.github.com/orgs/docker/public_members{/member}',
-      repos_url: 'https://api.github.com/orgs/docker/repos',
-      url: 'https://api.github.com/orgs/docker'
-    },
-    pusher: {
-      email: 'github@crazymax.dev',
-      name: 'crazy-max'
-    },
-    ref: 'refs/heads/dev',
-    repository: {
-      allow_forking: true,
-      archive_url: 'https://api.github.com/repos/docker/test-docker-action/{archive_format}{/ref}',
-      archived: false,
-      assignees_url: 'https://api.github.com/repos/docker/test-docker-action/assignees{/user}',
-      blobs_url: 'https://api.github.com/repos/docker/test-docker-action/git/blobs{/sha}',
-      branches_url: 'https://api.github.com/repos/docker/test-docker-action/branches{/branch}',
-      clone_url: 'https://github.com/docker/test-docker-action.git',
-      collaborators_url: 'https://api.github.com/repos/docker/test-docker-action/collaborators{/collaborator}',
-      comments_url: 'https://api.github.com/repos/docker/test-docker-action/comments{/number}',
-      commits_url: 'https://api.github.com/repos/docker/test-docker-action/commits{/sha}',
-      compare_url: 'https://api.github.com/repos/docker/test-docker-action/compare/{base}...{head}',
-      contents_url: 'https://api.github.com/repos/docker/test-docker-action/contents/{+path}',
-      contributors_url: 'https://api.github.com/repos/docker/test-docker-action/contributors',
-      created_at: 1596792180,
-      default_branch: 'master',
-      deployments_url: 'https://api.github.com/repos/docker/test-docker-action/deployments',
-      description: 'Test "Docker" Actions',
-      disabled: false,
-      downloads_url: 'https://api.github.com/repos/docker/test-docker-action/downloads',
-      events_url: 'https://api.github.com/repos/docker/test-docker-action/events',
-      fork: false,
-      forks: 1,
-      forks_count: 1,
-      forks_url: 'https://api.github.com/repos/docker/test-docker-action/forks',
-      full_name: 'docker/test-docker-action',
-      git_commits_url: 'https://api.github.com/repos/docker/test-docker-action/git/commits{/sha}',
-      git_refs_url: 'https://api.github.com/repos/docker/test-docker-action/git/refs{/sha}',
-      git_tags_url: 'https://api.github.com/repos/docker/test-docker-action/git/tags{/sha}',
-      git_url: 'git://github.com/docker/test-docker-action.git',
-      has_downloads: true,
-      has_issues: true,
-      has_pages: false,
-      has_projects: true,
-      has_wiki: true,
-      homepage: '',
-      hooks_url: 'https://api.github.com/repos/docker/test-docker-action/hooks',
-      html_url: 'https://github.com/docker/test-docker-action',
-      id: 285789493,
-      is_template: false,
-      issue_comment_url: 'https://api.github.com/repos/docker/test-docker-action/issues/comments{/number}',
-      issue_events_url: 'https://api.github.com/repos/docker/test-docker-action/issues/events{/number}',
-      issues_url: 'https://api.github.com/repos/docker/test-docker-action/issues{/number}',
-      keys_url: 'https://api.github.com/repos/docker/test-docker-action/keys{/key_id}',
-      labels_url: 'https://api.github.com/repos/docker/test-docker-action/labels{/name}',
-      language: 'JavaScript',
-      languages_url: 'https://api.github.com/repos/docker/test-docker-action/languages',
-      license: {
-        key: 'mit',
-        name: 'MIT License',
-        node_id: 'MDc6TGljZW5zZTEz',
-        spdx_id: 'MIT',
-        url: 'https://api.github.com/licenses/mit'
-      },
-      master_branch: 'master',
-      merges_url: 'https://api.github.com/repos/docker/test-docker-action/merges',
-      milestones_url: 'https://api.github.com/repos/docker/test-docker-action/milestones{/number}',
-      mirror_url: null,
-      name: 'test-docker-action',
-      node_id: 'MDEwOlJlcG9zaXRvcnkyODU3ODk0OTM=',
-      notifications_url: 'https://api.github.com/repos/docker/test-docker-action/notifications{?since,all,participating}',
-      open_issues: 6,
-      open_issues_count: 6,
-      organization: 'docker',
-      owner: {
-        avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
-        email: 'info@docker.com',
-        events_url: 'https://api.github.com/users/docker/events{/privacy}',
-        followers_url: 'https://api.github.com/users/docker/followers',
-        following_url: 'https://api.github.com/users/docker/following{/other_user}',
-        gists_url: 'https://api.github.com/users/docker/gists{/gist_id}',
-        gravatar_id: '',
-        html_url: 'https://github.com/docker',
-        id: 5429470,
-        login: 'docker',
-        name: 'docker',
-        node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
-        organizations_url: 'https://api.github.com/users/docker/orgs',
-        received_events_url: 'https://api.github.com/users/docker/received_events',
-        repos_url: 'https://api.github.com/users/docker/repos',
-        site_admin: false,
-        starred_url: 'https://api.github.com/users/docker/starred{/owner}{/repo}',
-        subscriptions_url: 'https://api.github.com/users/docker/subscriptions',
-        type: 'Organization',
-        url: 'https://api.github.com/users/docker'
-      },
-      private: true,
-      pulls_url: 'https://api.github.com/repos/docker/test-docker-action/pulls{/number}',
-      pushed_at: 1650360446,
-      releases_url: 'https://api.github.com/repos/docker/test-docker-action/releases{/id}',
-      size: 796,
-      ssh_url: 'git@github.com:docker/test-docker-action.git',
-      stargazers: 0,
-      stargazers_count: 0,
-      stargazers_url: 'https://api.github.com/repos/docker/test-docker-action/stargazers',
-      statuses_url: 'https://api.github.com/repos/docker/test-docker-action/statuses/{sha}',
-      subscribers_url: 'https://api.github.com/repos/docker/test-docker-action/subscribers',
-      subscription_url: 'https://api.github.com/repos/docker/test-docker-action/subscription',
-      svn_url: 'https://github.com/docker/test-docker-action',
-      tags_url: 'https://api.github.com/repos/docker/test-docker-action/tags',
-      teams_url: 'https://api.github.com/repos/docker/test-docker-action/teams',
-      topics: [],
-      trees_url: 'https://api.github.com/repos/docker/test-docker-action/git/trees{/sha}',
-      updated_at: '2022-04-19T09:05:09Z',
-      url: 'https://github.com/docker/test-docker-action',
-      visibility: 'private',
-      watchers: 0,
-      watchers_count: 0
-    },
-    sender: {
-      avatar_url: 'https://avatars.githubusercontent.com/u/1951866?v=4',
-      events_url: 'https://api.github.com/users/crazy-max/events{/privacy}',
-      followers_url: 'https://api.github.com/users/crazy-max/followers',
-      following_url: 'https://api.github.com/users/crazy-max/following{/other_user}',
-      gists_url: 'https://api.github.com/users/crazy-max/gists{/gist_id}',
-      gravatar_id: '',
-      html_url: 'https://github.com/crazy-max',
-      id: 1951866,
-      login: 'crazy-max',
-      node_id: 'MDQ6VXNlcjE5NTE4NjY=',
-      organizations_url: 'https://api.github.com/users/crazy-max/orgs',
-      received_events_url: 'https://api.github.com/users/crazy-max/received_events',
-      repos_url: 'https://api.github.com/users/crazy-max/repos',
-      site_admin: false,
-      starred_url: 'https://api.github.com/users/crazy-max/starred{/owner}{/repo}',
-      subscriptions_url: 'https://api.github.com/users/crazy-max/subscriptions',
-      type: 'User',
-      url: 'https://api.github.com/users/crazy-max'
-    }
-  }
-};
-
-export const getOctokit = jest.fn();
--- a/tests/.fixtures/imagetools-06.json
+++ b/tests/.fixtures/imagetools-06.json
@@ -0,0 +1,15 @@
+[
+  {
+    "mediaType":"application/vnd.oci.image.manifest.v1+json",
+    "digest":"sha256:2ba4ad6eae1efcafee73a971953093c7c32b6938f2f9fd4998c8bf4d0fbe76f2",
+    "size":1113,
+    "annotations":{
+      "vnd.docker.reference.digest":"sha256:dccc69dd895968c4f21aa9e43e715f25f0cedfce4b17f1014c88c307928e22fc",
+      "vnd.docker.reference.type":"attestation-manifest"
+    },
+    "platform":{
+      "architecture":"unknown",
+      "os":"unknown"
+    }
+  }
+]
--- a/tests/.fixtures/imagetools-07.json
+++ b/tests/.fixtures/imagetools-07.json
@@ -0,0 +1,15 @@
+[
+  {
+    "mediaType": "application/vnd.oci.image.manifest.v1+json",
+    "digest": "sha256:0709528fae1747ce17638ad2978ee7936b38a294136eaadaf692e415f64b1e03",
+    "size": 1113,
+    "annotations": {
+      "vnd.docker.reference.digest": "sha256:1b6bce668653f08e2d0f9f7c9b646675b2cbce94ce8abdf4eb0eabaef4353045",
+      "vnd.docker.reference.type": "attestation-manifest"
+    },
+    "platform": {
+      "architecture": "unknown",
+      "os": "unknown"
+    }
+  }
+]
--- a/tests/.helpers/os.ts
+++ b/tests/.helpers/os.ts
@@ -1,5 +1,5 @@
 /**
- * Copyright 2023 actions-toolkit authors
+ * Copyright 2025 actions-toolkit authors
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
@@ -14,18 +14,17 @@
 * limitations under the License.
 */

-module.exports = {
-  testEnvironment: 'node',
-  moduleFileExtensions: ['js', 'ts'],
-  setupFiles: ['dotenv/config'],
-  testMatch: ['**/*.test.itg.ts'],
-  testTimeout: 1800000, // 30 minutes
-  transform: {
-    '^.+\\.ts$': 'ts-jest'
-  },
-  moduleNameMapper: {
-    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
-  },
-  testResultsProcessor: './__tests__/testResultsProcessor.ts',
-  verbose: false
+import {vi} from 'vitest';
+import os from 'os';
+
+export const mockPlatform = (platform: NodeJS.Platform) => {
+  return vi.spyOn(os, 'platform').mockImplementation(() => platform);
+};
+
+export const mockArch = (arch: string) => {
+  return vi.spyOn(os, 'arch').mockImplementation(() => arch);
+};
+
+export const mockHomedir = (dir: string) => {
+  return vi.spyOn(os, 'homedir').mockImplementation(() => dir);
 };
--- a/tests/.setup/list-itg-tests.mjs
+++ b/tests/.setup/list-itg-tests.mjs
@@ -0,0 +1,38 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+
+const testsRoot = path.resolve('__tests__');
+const results = [];
+
+const walk = dir => {
+  for (const entry of fs.readdirSync(dir, {withFileTypes: true})) {
+    const fullPath = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      walk(fullPath);
+      continue;
+    }
+    if (entry.isFile() && entry.name.endsWith('.test.itg.ts')) {
+      results.push(fullPath.replaceAll(path.sep, '/'));
+    }
+  }
+};
+
+walk(testsRoot);
+results.sort((a, b) => a.localeCompare(b));
+process.stdout.write(`${results.join('\n')}\n`);
--- a/tests/.setup/setup.unit.ts
+++ b/tests/.setup/setup.unit.ts
@@ -0,0 +1,242 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import {vi} from 'vitest';
+
+const envTmpDir = process.env.DOCKER_ACTIONS_TOOLKIT_TMPDIR;
+const tmpDir = envTmpDir || fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
+
+process.env = Object.assign({}, process.env, {
+  DOCKER_ACTIONS_TOOLKIT_TMPDIR: tmpDir,
+  TEMP: tmpDir,
+  GITHUB_REPOSITORY: 'docker/actions-toolkit',
+  GITHUB_RUN_ATTEMPT: '2',
+  GITHUB_RUN_ID: '2188748038',
+  GITHUB_RUN_NUMBER: '15',
+  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
+  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
+});
+
+vi.mock('@actions/github', () => ({
+  context: {
+    repo: {
+      owner: 'docker',
+      repo: 'actions-toolkit'
+    },
+    ref: 'refs/heads/master',
+    runId: 2188748038,
+    runNumber: 15,
+    payload: {
+      after: '860c1904a1ce19322e91ac35af1ab07466440c37',
+      base_ref: null,
+      before: '5f3331d7f7044c18ca9f12c77d961c4d7cf3276a',
+      commits: [
+        {
+          author: {
+            email: 'crazy-max@users.noreply.github.com',
+            name: 'CrazyMax',
+            username: 'crazy-max'
+          },
+          committer: {
+            email: 'crazy-max@users.noreply.github.com',
+            name: 'CrazyMax',
+            username: 'crazy-max'
+          },
+          distinct: true,
+          id: '860c1904a1ce19322e91ac35af1ab07466440c37',
+          message: 'hello dev',
+          timestamp: '2022-04-19T11:27:24+02:00',
+          tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
+          url: 'https://github.com/docker/test-docker-action/commit/860c1904a1ce19322e91ac35af1ab07466440c37'
+        }
+      ],
+      compare: 'https://github.com/docker/test-docker-action/compare/5f3331d7f704...860c1904a1ce',
+      created: false,
+      deleted: false,
+      forced: false,
+      head_commit: {
+        author: {
+          email: 'crazy-max@users.noreply.github.com',
+          name: 'CrazyMax',
+          username: 'crazy-max'
+        },
+        committer: {
+          email: 'crazy-max@users.noreply.github.com',
+          name: 'CrazyMax',
+          username: 'crazy-max'
+        },
+        distinct: true,
+        id: '860c1904a1ce19322e91ac35af1ab07466440c37',
+        message: 'hello dev',
+        timestamp: '2022-04-19T11:27:24+02:00',
+        tree_id: 'd2c60af597e863787d2d27f569e30495b0b92820',
+        url: 'https://github.com/docker/test-docker-action/commit/860c1904a1ce19322e91ac35af1ab07466440c37'
+      },
+      organization: {
+        avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
+        description: 'Docker helps developers bring their ideas to life by conquering the complexity of app development.',
+        events_url: 'https://api.github.com/orgs/docker/events',
+        hooks_url: 'https://api.github.com/orgs/docker/hooks',
+        id: 5429470,
+        issues_url: 'https://api.github.com/orgs/docker/issues',
+        login: 'docker',
+        members_url: 'https://api.github.com/orgs/docker/members{/member}',
+        node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
+        public_members_url: 'https://api.github.com/orgs/docker/public_members{/member}',
+        repos_url: 'https://api.github.com/orgs/docker/repos',
+        url: 'https://api.github.com/orgs/docker'
+      },
+      pusher: {
+        email: 'github@crazymax.dev',
+        name: 'crazy-max'
+      },
+      ref: 'refs/heads/dev',
+      repository: {
+        allow_forking: true,
+        archive_url: 'https://api.github.com/repos/docker/test-docker-action/{archive_format}{/ref}',
+        archived: false,
+        assignees_url: 'https://api.github.com/repos/docker/test-docker-action/assignees{/user}',
+        blobs_url: 'https://api.github.com/repos/docker/test-docker-action/git/blobs{/sha}',
+        branches_url: 'https://api.github.com/repos/docker/test-docker-action/branches{/branch}',
+        clone_url: 'https://github.com/docker/test-docker-action.git',
+        collaborators_url: 'https://api.github.com/repos/docker/test-docker-action/collaborators{/collaborator}',
+        comments_url: 'https://api.github.com/repos/docker/test-docker-action/comments{/number}',
+        commits_url: 'https://api.github.com/repos/docker/test-docker-action/commits{/sha}',
+        compare_url: 'https://api.github.com/repos/docker/test-docker-action/compare/{base}...{head}',
+        contents_url: 'https://api.github.com/repos/docker/test-docker-action/contents/{+path}',
+        contributors_url: 'https://api.github.com/repos/docker/test-docker-action/contributors',
+        created_at: 1596792180,
+        default_branch: 'master',
+        deployments_url: 'https://api.github.com/repos/docker/test-docker-action/deployments',
+        description: 'Test "Docker" Actions',
+        disabled: false,
+        downloads_url: 'https://api.github.com/repos/docker/test-docker-action/downloads',
+        events_url: 'https://api.github.com/repos/docker/test-docker-action/events',
+        fork: false,
+        forks: 1,
+        forks_count: 1,
+        forks_url: 'https://api.github.com/repos/docker/test-docker-action/forks',
+        full_name: 'docker/test-docker-action',
+        git_commits_url: 'https://api.github.com/repos/docker/test-docker-action/git/commits{/sha}',
+        git_refs_url: 'https://api.github.com/repos/docker/test-docker-action/git/refs{/sha}',
+        git_tags_url: 'https://api.github.com/repos/docker/test-docker-action/git/tags{/sha}',
+        git_url: 'git://github.com/docker/test-docker-action.git',
+        has_downloads: true,
+        has_issues: true,
+        has_pages: false,
+        has_projects: true,
+        has_wiki: true,
+        homepage: '',
+        hooks_url: 'https://api.github.com/repos/docker/test-docker-action/hooks',
+        html_url: 'https://github.com/docker/test-docker-action',
+        id: 285789493,
+        is_template: false,
+        issue_comment_url: 'https://api.github.com/repos/docker/test-docker-action/issues/comments{/number}',
+        issue_events_url: 'https://api.github.com/repos/docker/test-docker-action/issues/events{/number}',
+        issues_url: 'https://api.github.com/repos/docker/test-docker-action/issues{/number}',
+        keys_url: 'https://api.github.com/repos/docker/test-docker-action/keys{/key_id}',
+        labels_url: 'https://api.github.com/repos/docker/test-docker-action/labels{/name}',
+        language: 'JavaScript',
+        languages_url: 'https://api.github.com/repos/docker/test-docker-action/languages',
+        license: {
+          key: 'mit',
+          name: 'MIT License',
+          node_id: 'MDc6TGljZW5zZTEz',
+          spdx_id: 'MIT',
+          url: 'https://api.github.com/licenses/mit'
+        },
+        master_branch: 'master',
+        merges_url: 'https://api.github.com/repos/docker/test-docker-action/merges',
+        milestones_url: 'https://api.github.com/repos/docker/test-docker-action/milestones{/number}',
+        mirror_url: null,
+        name: 'test-docker-action',
+        node_id: 'MDEwOlJlcG9zaXRvcnkyODU3ODk0OTM=',
+        notifications_url: 'https://api.github.com/repos/docker/test-docker-action/notifications{?since,all,participating}',
+        open_issues: 6,
+        open_issues_count: 6,
+        organization: 'docker',
+        owner: {
+          avatar_url: 'https://avatars.githubusercontent.com/u/5429470?v=4',
+          email: 'info@docker.com',
+          events_url: 'https://api.github.com/users/docker/events{/privacy}',
+          followers_url: 'https://api.github.com/users/docker/followers',
+          following_url: 'https://api.github.com/users/docker/following{/other_user}',
+          gists_url: 'https://api.github.com/users/docker/gists{/gist_id}',
+          gravatar_id: '',
+          html_url: 'https://github.com/docker',
+          id: 5429470,
+          login: 'docker',
+          name: 'docker',
+          node_id: 'MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=',
+          organizations_url: 'https://api.github.com/users/docker/orgs',
+          received_events_url: 'https://api.github.com/users/docker/received_events',
+          repos_url: 'https://api.github.com/users/docker/repos',
+          site_admin: false,
+          starred_url: 'https://api.github.com/users/docker/starred{/owner}{/repo}',
+          subscriptions_url: 'https://api.github.com/users/docker/subscriptions',
+          type: 'Organization',
+          url: 'https://api.github.com/users/docker'
+        },
+        private: true,
+        pulls_url: 'https://api.github.com/repos/docker/test-docker-action/pulls{/number}',
+        pushed_at: 1650360446,
+        releases_url: 'https://api.github.com/repos/docker/test-docker-action/releases{/id}',
+        size: 796,
+        ssh_url: 'git@github.com:docker/test-docker-action.git',
+        stargazers: 0,
+        stargazers_count: 0,
+        stargazers_url: 'https://api.github.com/repos/docker/test-docker-action/stargazers',
+        statuses_url: 'https://api.github.com/repos/docker/test-docker-action/statuses/{sha}',
+        subscribers_url: 'https://api.github.com/repos/docker/test-docker-action/subscribers',
+        subscription_url: 'https://api.github.com/repos/docker/test-docker-action/subscription',
+        svn_url: 'https://github.com/docker/test-docker-action',
+        tags_url: 'https://api.github.com/repos/docker/test-docker-action/tags',
+        teams_url: 'https://api.github.com/repos/docker/test-docker-action/teams',
+        topics: [],
+        trees_url: 'https://api.github.com/repos/docker/test-docker-action/git/trees{/sha}',
+        updated_at: '2022-04-19T09:05:09Z',
+        url: 'https://github.com/docker/test-docker-action',
+        visibility: 'private',
+        watchers: 0,
+        watchers_count: 0
+      },
+      sender: {
+        avatar_url: 'https://avatars.githubusercontent.com/u/1951866?v=4',
+        events_url: 'https://api.github.com/users/crazy-max/events{/privacy}',
+        followers_url: 'https://api.github.com/users/crazy-max/followers',
+        following_url: 'https://api.github.com/users/crazy-max/following{/other_user}',
+        gists_url: 'https://api.github.com/users/crazy-max/gists{/gist_id}',
+        gravatar_id: '',
+        html_url: 'https://github.com/crazy-max',
+        id: 1951866,
+        login: 'crazy-max',
+        node_id: 'MDQ6VXNlcjE5NTE4NjY=',
+        organizations_url: 'https://api.github.com/users/crazy-max/orgs',
+        received_events_url: 'https://api.github.com/users/crazy-max/received_events',
+        repos_url: 'https://api.github.com/users/crazy-max/repos',
+        site_admin: false,
+        starred_url: 'https://api.github.com/users/crazy-max/starred{/owner}{/repo}',
+        subscriptions_url: 'https://api.github.com/users/crazy-max/subscriptions',
+        type: 'User',
+        url: 'https://api.github.com/users/crazy-max'
+      }
+    }
+  },
+  getOctokit: vi.fn()
+}));
--- a/tests/.setup/skipped-reporter.d.mts
+++ b/tests/.setup/skipped-reporter.d.mts
@@ -1,5 +1,5 @@
 /**
- * Copyright 2023 actions-toolkit authors
+ * Copyright 2026 actions-toolkit authors
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
@@ -14,6 +14,6 @@
 * limitations under the License.
 */

-import {Context as GitHubContext} from '@actions/github/lib/context';
+import type {Reporter} from 'vitest/node';

-export type Context = GitHubContext;
+export declare const vitestAllSkippedReporter: () => Reporter;
--- a/tests/.setup/skipped-reporter.mjs
+++ b/tests/.setup/skipped-reporter.mjs
@@ -0,0 +1,59 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+
+export const vitestAllSkippedReporter = () => {
+  let vitest;
+  let hasExecutedTest;
+  let hasAnyCollectedTest;
+
+  const getFlagPath = () => {
+    const reportsDirectory = vitest?.config?.coverage?.reportsDirectory ?? 'coverage';
+    return path.join(reportsDirectory, 'allSkipped.txt');
+  };
+
+  return {
+    onInit(ctx) {
+      vitest = ctx;
+      hasExecutedTest = false;
+      hasAnyCollectedTest = false;
+    },
+    onTestCaseReady() {
+      hasAnyCollectedTest = true;
+    },
+    onTestCaseResult(testCase) {
+      const state = testCase.result()?.state;
+      if (state === 'passed' || state === 'failed') {
+        hasExecutedTest = true;
+      }
+    },
+    onTestRunEnd() {
+      if (!vitest?.config?.coverage?.enabled) {
+        return;
+      }
+      const allSkipped = hasAnyCollectedTest && !hasExecutedTest;
+      const flagPath = getFlagPath();
+      if (allSkipped) {
+        fs.mkdirSync(path.dirname(flagPath), {recursive: true});
+        fs.writeFileSync(flagPath, '');
+      } else if (fs.existsSync(flagPath)) {
+        fs.rmSync(flagPath);
+      }
+    }
+  };
+};
--- a/tests/buildkit/buildkit.test.ts
+++ b/tests/buildkit/buildkit.test.ts
@@ -14,14 +14,14 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, vi, test} from 'vitest';

-import {BuildKit} from '../../src/buildkit/buildkit';
-import {Builder} from '../../src/buildx/builder';
+import {BuildKit} from '../../src/buildkit/buildkit.js';
+import {Builder} from '../../src/buildx/builder.js';

-import {BuilderInfo} from '../../src/types/buildx/builder';
+import {BuilderInfo} from '../../src/types/buildx/builder.js';

-jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
+vi.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
  return {
    name: 'builder2',
    driver: 'docker-container',
@@ -54,7 +54,7 @@ describe('satisfies', () => {
  test.each([
    ['builder2', '>=0.10.0', true],
    ['builder2', '>0.11.0', false]
-  ])('given %p', async (builderName, range, expected) => {
+  ])('given %o', async (builderName, range, expected) => {
    const buildkit = new BuildKit();
    expect(await buildkit.versionSatisfies(builderName, range)).toBe(expected);
  });
--- a/tests/buildkit/config.test.ts
+++ b/tests/buildkit/config.test.ts
@@ -14,25 +14,25 @@
 * limitations under the License.
 */

-import {describe, expect, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, vi, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';

-import {BuildKit} from '../../src/buildkit/buildkit';
-import {Context} from '../../src/context';
+import {BuildKit} from '../../src/buildkit/buildkit.js';
+import {Context} from '../../src/context.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildkit-config-'));
-const tmpName = path.join(tmpDir, '.tmpname-jest');
+const tmpName = path.join(tmpDir, '.tmpname-vi');

-jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  fs.mkdirSync(tmpDir, {recursive: true});
  return tmpDir;
 });

-jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -53,7 +53,7 @@ describe('resolve', () => {
 `,
      null
    ]
-  ])('given %p config', async (val: string, file: boolean, exValue: string, error: Error | null) => {
+  ])('given %o config', async (val: string, file: boolean, exValue: string, error: Error | null) => {
    try {
      const buildkit = new BuildKit();
      let config: string;
@@ -66,7 +66,7 @@ describe('resolve', () => {
      const configValue = fs.readFileSync(tmpName, 'utf-8');
      expect(configValue).toEqual(exValue);
    } catch (e) {
-      // eslint-disable-next-line jest/no-conditional-expect
+      // eslint-disable-next-line vitest/no-conditional-expect
      expect(e.message).toEqual(error?.message);
    }
  });
--- a/tests/buildkit/git.test.ts
+++ b/tests/buildkit/git.test.ts
@@ -14,14 +14,14 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import {beforeEach, describe, expect, vi, test} from 'vitest';

-import {Git} from '../../src/buildkit/git';
+import {Git} from '../../src/buildkit/git.js';

-import {GitRef, GitURL} from '../../src/types/buildkit/git';
+import {GitRef, GitURL} from '../../src/types/buildkit/git.js';

 beforeEach(() => {
-  jest.restoreAllMocks();
+  vi.restoreAllMocks();
 });

 describe('parseURL', () => {
@@ -181,7 +181,7 @@ describe('parseURL', () => {
      } as GitURL,
      false
    ],
-  ])('given %p', async (ref: string, expected: GitURL, expectedErr: boolean) => {
+  ])('given %o', async (ref: string, expected: GitURL, expectedErr: boolean) => {
    try {
      const got = Git.parseURL(ref);
      expect(got.scheme).toEqual(expected.scheme);
@@ -195,7 +195,7 @@ describe('parseURL', () => {
      if (!expectedErr) {
        console.log(err);
      }
-      // eslint-disable-next-line jest/no-conditional-expect
+      // eslint-disable-next-line vitest/no-conditional-expect
      expect(expectedErr).toBeTruthy();
    }
  });
@@ -329,7 +329,7 @@ describe('parseRef', () => {
      '.git',
      undefined
    ],
-  ])('given %p', async (ref: string, expected: GitRef | undefined) => {
+  ])('given %o', async (ref: string, expected: GitRef | undefined) => {
    try {
      const got = Git.parseRef(ref);
      expect(got).toEqual(expected);
@@ -337,7 +337,7 @@ describe('parseRef', () => {
      if (expected) {
        console.log(err);
      }
-      // eslint-disable-next-line jest/no-conditional-expect
+      // eslint-disable-next-line vitest/no-conditional-expect
      expect(expected).toBeUndefined();
    }
  });
--- a/tests/buildx/bake.test.itg.ts
+++ b/tests/buildx/bake.test.itg.ts
@@ -14,12 +14,12 @@
 * limitations under the License.
 */

-import {describe, expect, test} from '@jest/globals';
+import {describe, expect, test} from 'vitest';
 import * as fs from 'fs';
 import * as path from 'path';

-import {Bake} from '../../src/buildx/bake';
-import {BakeDefinition} from '../../src/types/buildx/bake';
+import {Bake} from '../../src/buildx/bake.js';
+import {BakeDefinition} from '../../src/types/buildx/bake.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

@@ -41,7 +41,7 @@ maybe('getDefinition', () => {
    //   path.join(fixturesDir, 'bake-test-docker-action-remote-private.json'),
    //   true,
    // ]
-  ])('given %p', async (source: string, targets: string[], out: string, auth) => {
+  ])('given %o', async (source: string, targets: string[], out: string, auth) => {
    const gitAuthToken = process.env.GITHUB_TOKEN || '';
    if (auth && !gitAuthToken) {
      console.log(`Git auth token not available, skipping test`);
--- a/tests/buildx/bake.test.ts
+++ b/tests/buildx/bake.test.ts
@@ -14,30 +14,30 @@
 * limitations under the License.
 */

-import {afterEach, describe, expect, it, jest, test} from '@jest/globals';
+import {afterEach, describe, expect, it, vi, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';

-import {Bake} from '../../src/buildx/bake';
-import {Context} from '../../src/context';
+import {Bake} from '../../src/buildx/bake.js';
+import {Context} from '../../src/context.js';

 import {ExecOptions} from '@actions/exec';
-import {BakeDefinition} from '../../src/types/buildx/bake';
-import {BuildMetadata} from '../../src/types/buildx/build';
+import {BakeDefinition} from '../../src/types/buildx/bake.js';
+import {BuildMetadata} from '../../src/types/buildx/build.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-bake-'));
-const tmpName = path.join(tmpDir, '.tmpname-jest');
+const tmpName = path.join(tmpDir, '.tmpname-vi');
 const metadata = JSON.parse(fs.readFileSync(path.join(fixturesDir, 'metadata-bake.json'), 'utf-8'));

-jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  fs.mkdirSync(tmpDir, {recursive: true});
  return tmpDir;
 });

-jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -102,7 +102,7 @@ describe('getDefinition', () => {
      undefined,
      path.join(fixturesDir, 'bake-03-default.json')
    ],
-  ])('given %p', async (files: string[], targets: string[], overrides: string[], execOptions: ExecOptions | undefined, out: string) => {
+  ])('given %o', async (files: string[], targets: string[], overrides: string[], execOptions: ExecOptions | undefined, out: string) => {
    const bake = new Bake();
    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
    expect(await bake.getDefinition({
@@ -185,7 +185,7 @@ describe('hasLocalExporter', () => {
      } as unknown as BakeDefinition,
      true
    ]
-  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+  ])('given %o returns %o', async (def: BakeDefinition, expected: boolean) => {
    expect(Bake.hasLocalExporter(def)).toEqual(expected);
  });
 });
@@ -285,7 +285,7 @@ describe('hasTarExporter', () => {
      } as unknown as BakeDefinition,
      false
    ],
-  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+  ])('given %o returns %o', async (def: BakeDefinition, expected: boolean) => {
    expect(Bake.hasTarExporter(def)).toEqual(expected);
  });
 });
@@ -440,7 +440,7 @@ describe('hasDockerExporter', () => {
      true,
      true
    ],
-  ])('given %o and load:%p returns %p', async (def: BakeDefinition, expected: boolean, load: boolean | undefined) => {
+  ])('given %o and load: %o returns %o', async (def: BakeDefinition, expected: boolean, load: boolean | undefined) => {
    expect(Bake.hasDockerExporter(def, load)).toEqual(expected);
  });
 });
@@ -481,7 +481,117 @@ describe('hasGitAuthTokenSecret', () => {
      } as unknown as BakeDefinition,
      true
    ],
-  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+  ])('given %o returns %o', async (def: BakeDefinition, expected: boolean) => {
    expect(Bake.hasGitAuthTokenSecret(def)).toEqual(expected);
  });
 });
+
+describe('hasProvenanceAttestation', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              },
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ]
+  ])('given %o returns %o', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasProvenanceAttestation(def)).toEqual(expected);
+  });
+});
+
+describe('hasSBOMAttestation', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              },
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ]
+  ])('given %o returns %o', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasSBOMAttestation(def)).toEqual(expected);
+  });
+});
--- a/tests/buildx/build.test.ts
+++ b/tests/buildx/build.test.ts
@@ -14,26 +14,26 @@
 * limitations under the License.
 */

-import {afterEach, beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+import {afterEach, beforeEach, describe, expect, it, vi, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';

-import {Context} from '../../src/context';
-import {Build} from '../../src/buildx/build';
+import {Context} from '../../src/context.js';
+import {Build} from '../../src/buildx/build.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-build-'));
-const tmpName = path.join(tmpDir, '.tmpname-jest');
+const tmpName = path.join(tmpDir, '.tmpname-vi');
 const metadata = JSON.parse(fs.readFileSync(path.join(fixturesDir, 'metadata-build.json'), 'utf-8'));

-jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  fs.mkdirSync(tmpDir, {recursive: true});
  return tmpDir;
 });

-jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -136,7 +136,7 @@ describe('getProvenanceInput', () => {
      '',
      ''
    ],
-  ])('given input %p', async (input: string, expected: string) => {
+  ])('given input %o', async (input: string, expected: string) => {
    setInput('provenance', input);
    expect(Build.getProvenanceInput('provenance')).toEqual(expected);
  });
@@ -165,7 +165,7 @@ describe('resolveProvenanceAttrs', () => {
      '',
      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
-  ])('given %p', async (input: string, expected: string) => {
+  ])('given %o', async (input: string, expected: string) => {
    expect(Build.resolveProvenanceAttrs(input)).toEqual(expected);
  });
 });
@@ -180,7 +180,7 @@ describe('resolveSecret', () => {
    ['=bbbbbbb', false, '', '', new Error('=bbbbbbb is not a valid secret')],
    [`foo=${path.join(fixturesDir, 'secret.txt')}`, true, 'foo', 'bar', null],
    [`notfound=secret`, true, '', '', new Error('secret file secret not found')]
-  ])('given %p key and %p secret', async (kvp: string, file: boolean, exKey: string, exValue: string, error: Error | null) => {
+  ])('given %o key and %o secret', async (kvp: string, file: boolean, exKey: string, exValue: string, error: Error | null) => {
    try {
      let secret: string;
      if (file) {
@@ -191,7 +191,7 @@ describe('resolveSecret', () => {
      expect(secret).toEqual(`id=${exKey},src=${tmpName}`);
      expect(fs.readFileSync(tmpName, 'utf-8')).toEqual(exValue);
    } catch (e) {
-      // eslint-disable-next-line jest/no-conditional-expect
+      // eslint-disable-next-line vitest/no-conditional-expect
      expect(e.message).toEqual(error?.message);
    }
  });
@@ -201,12 +201,12 @@ describe('resolveSecret', () => {
    ['FOO=', 'FOO', '', new Error('FOO= is not a valid secret')],
    ['=bar', '', '', new Error('=bar is not a valid secret')],
    ['FOO=bar=baz', 'FOO', 'bar=baz', null]
-  ])('given %p key and %p env', async (kvp: string, exKey: string, exValue: string, error: Error | null) => {
+  ])('given %o key and %o env', async (kvp: string, exKey: string, exValue: string, error: Error | null) => {
    try {
      const secret = Build.resolveSecretEnv(kvp);
      expect(secret).toEqual(`id=${exKey},env=${exValue}`);
    } catch (e) {
-      // eslint-disable-next-line jest/no-conditional-expect
+      // eslint-disable-next-line vitest/no-conditional-expect
      expect(e.message).toEqual(error?.message);
    }
  });
@@ -255,7 +255,7 @@ describe('resolveCacheToAttrs', () => {
      'abcd1234',
      'type=gha,repository=foo/bar,mode=max,ghtoken=abcd1234',
    ],
-  ])('given %p', async (input: string, githubToken: string | undefined, expected: string) => {
+  ])('given %o', async (input: string, githubToken: string | undefined, expected: string) => {
    expect(Build.resolveCacheToAttrs(input, githubToken)).toEqual(expected);
  });
 });
@@ -271,7 +271,7 @@ describe('hasLocalExporter', () => {
    [['"type=tar","dest=/tmp/image.tar"'], false],
    [['" type= local" , dest=./release-out'], true],
    [['.'], true]
-  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
+  ])('given %o returns %o', async (exporters: Array<string>, expected: boolean) => {
    expect(Build.hasLocalExporter(exporters)).toEqual(expected);
  });
 });
@@ -287,7 +287,7 @@ describe('hasTarExporter', () => {
    [['"type=tar","dest=/tmp/image.tar"'], true],
    [['" type= local" , dest=./release-out'], false],
    [['.'], false]
-  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
+  ])('given %o returns %o', async (exporters: Array<string>, expected: boolean) => {
    expect(Build.hasTarExporter(exporters)).toEqual(expected);
  });
 });
@@ -305,7 +305,7 @@ describe('hasDockerExporter', () => {
    [['type=docker'], true, false],
    [['type=docker'], true, true],
    [['.'], true, true],
-  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean, load: boolean | undefined) => {
+  ])('given %o returns %o', async (exporters: Array<string>, expected: boolean, load: boolean | undefined) => {
    expect(Build.hasDockerExporter(exporters, load)).toEqual(expected);
  });
 });
@@ -316,7 +316,7 @@ describe('hasAttestationType', () => {
    ['type=provenance,mode=min', 'provenance', true],
    ['type=sbom,true', 'sbom', true],
    ['type=foo,bar', 'provenance', false],
-  ])('given %p for %p returns %p', async (attrs: string, name: string, expected: boolean) => {
+  ])('given %o for %o returns %o', async (attrs: string, name: string, expected: boolean) => {
    expect(Build.hasAttestationType(name, attrs)).toEqual(expected);
  });
 });
@@ -340,7 +340,7 @@ describe('resolveAttestationAttrs', () => {
      '',
      ''
    ],
-  ])('given %p', async (input: string, expected: string) => {
+  ])('given %o', async (input: string, expected: string) => {
    expect(Build.resolveAttestationAttrs(input)).toEqual(expected);
  });
 });
@@ -348,10 +348,11 @@ describe('resolveAttestationAttrs', () => {
 describe('hasGitAuthTokenSecret', () => {
  // prettier-ignore
  test.each([
-    [['A_SECRET=abcdef0123456789'], false],
-    [['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789'], true],
-  ])('given %p secret', async (kvp: Array<string>, expected: boolean) => {
-    expect(Build.hasGitAuthTokenSecret(kvp)).toBe(expected);
+    [['A_SECRET=abcdef0123456789'], undefined, false],
+    [['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789'], undefined, true],
+    [['GIT_AUTH_TOKEN.github.com=abcdefghijklmno=0123456789'], 'github.com', true],
+  ])('given %o secret', async (kvp: Array<string>, domain: string | undefined, expected: boolean) => {
+    expect(Build.hasGitAuthTokenSecret(kvp, domain)).toBe(expected);
  });
 });

--- a/tests/buildx/builder.test.ts
+++ b/tests/buildx/builder.test.ts
@@ -14,18 +14,18 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, vi, test} from 'vitest';
 import * as fs from 'fs';
 import * as path from 'path';

-import {Builder} from '../../src/buildx/builder';
-import {Exec} from '../../src/exec';
+import {Builder} from '../../src/buildx/builder.js';
+import {Exec} from '../../src/exec.js';

-import {BuilderInfo} from '../../src/types/buildx/builder';
+import {BuilderInfo} from '../../src/types/buildx/builder.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

-jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
+vi.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
  return {
    name: 'builder2',
    driver: 'docker-container',
@@ -46,10 +46,9 @@ jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<Bu

 describe('exists', () => {
  it('valid', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const builder = new Builder();
    await builder.exists('foo');
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'inspect', 'foo'], {
      silent: true,
      ignoreReturnCode: true
@@ -549,7 +548,7 @@ baz = qux
       ]
     }
    ],
-  ])('given %p', async (inspectFile, expected) => {
+  ])('given %o', async (inspectFile, expected) => {
    expect(await Builder.parseInspect(fs.readFileSync(path.join(fixturesDir, inspectFile)).toString())).toEqual(expected);
  });
 });
--- a/tests/buildx/buildx.test.itg.ts
+++ b/tests/buildx/buildx.test.itg.ts
@@ -14,16 +14,16 @@
 * limitations under the License.
 */

-import {describe, expect, it} from '@jest/globals';
+import {describe, expect, it} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as core from '@actions/core';

-import {Buildx} from '../../src/buildx/buildx';
-import {Build} from '../../src/buildx/build';
-import {Bake} from '../../src/buildx/bake';
-import {Exec} from '../../src/exec';
+import {Buildx} from '../../src/buildx/buildx.js';
+import {Build} from '../../src/buildx/build.js';
+import {Bake} from '../../src/buildx/bake.js';
+import {Exec} from '../../src/exec.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-buildx-itg-'));
--- a/tests/buildx/buildx.test.ts
+++ b/tests/buildx/buildx.test.ts
@@ -14,29 +14,29 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
+import {describe, expect, it, vi, test, beforeEach, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
 import * as semver from 'semver';

-import {Buildx} from '../../src/buildx/buildx';
-import {Context} from '../../src/context';
-import {Exec} from '../../src/exec';
+import {Buildx} from '../../src/buildx/buildx.js';
+import {Context} from '../../src/context.js';
+import {Exec} from '../../src/exec.js';

-import {Cert, LocalState} from '../../src/types/buildx/buildx';
+import {Cert, LocalState} from '../../src/types/buildx/buildx.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-buildx-'));
-const tmpName = path.join(tmpDir, '.tmpname-jest');
+const tmpName = path.join(tmpDir, '.tmpname-vi');

-jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  fs.mkdirSync(tmpDir, {recursive: true});
  return tmpDir;
 });

-jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -47,7 +47,7 @@ afterEach(() => {
 describe('configDir', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      BUILDX_CONFIG: '/var/docker/buildx',
@@ -69,7 +69,7 @@ describe('configDir', () => {
 describe('certsDir', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      BUILDX_CONFIG: '/var/docker/buildx'
@@ -86,24 +86,22 @@ describe('certsDir', () => {

 describe('isAvailable', () => {
  it('docker cli', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const buildx = new Buildx({
      standalone: false
    });
    await buildx.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx'], {
      silent: true,
      ignoreReturnCode: true
    });
  });
  it('standalone', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const buildx = new Buildx({
      standalone: true
    });
    await buildx.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`buildx`, [], {
      silent: true,
      ignoreReturnCode: true
@@ -113,7 +111,7 @@ describe('isAvailable', () => {

 describe('printVersion', () => {
  it('docker cli', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const buildx = new Buildx({
      standalone: false
    });
@@ -123,7 +121,7 @@ describe('printVersion', () => {
    });
  });
  it('standalone', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const buildx = new Buildx({
      standalone: true
    });
@@ -147,7 +145,7 @@ describe('parseVersion', () => {
    ['github.com/docker/buildx v0.4.1 bda4882a65349ca359216b135896bddc1d92461c', '0.4.1'],
    ['github.com/docker/buildx v0.4.2 fb7b670b764764dc4716df3eba07ffdae4cc47b2', '0.4.2'],
    ['github.com/docker/buildx f117971 f11797113e5a9b86bd976329c5dbb8a8bfdfadfa', 'f117971']
-  ])('given %p', async (stdout, expected) => {
+  ])('given %o', async (stdout, expected) => {
    expect(Buildx.parseVersion(stdout)).toEqual(expected);
  });
 });
@@ -157,7 +155,7 @@ describe('versionSatisfies', () => {
    ['0.4.1', '>=0.3.2', true],
    ['bda4882a65349ca359216b135896bddc1d92461c', '>0.1.0', false],
    ['f117971', '>0.6.0', true]
-  ])('given %p', async (version, range, expected) => {
+  ])('given %o', async (version, range, expected) => {
    const buildx = new Buildx();
    expect(await buildx.versionSatisfies(range, version)).toBe(expected);
  });
@@ -166,7 +164,7 @@ describe('versionSatisfies', () => {
 describe('resolveCertsDriverOpts', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      BUILDX_CONFIG: path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx')
@@ -238,7 +236,7 @@ describe('resolveCertsDriverOpts', () => {
      ],
      []
    ],
-  ])('%p. given %p endpoint, %p driver', async (id: number, endpoint: string, driver: string, cert: Cert, expectedFiles: Array<string>, expectedOpts: Array<string>) => {
+  ])('%o. given %o endpoint, %o driver', async (id: number, endpoint: string, driver: string, cert: Cert, expectedFiles: Array<string>, expectedOpts: Array<string>) => {
    fs.mkdirSync(Buildx.certsDir, {recursive: true});
    expect(Buildx.resolveCertsDriverOpts(driver, endpoint, cert)).toEqual(expectedOpts);
    for (const k in expectedFiles) {
@@ -300,7 +298,7 @@ describe('localState', () => {
        DockerfilePath: '-'
      } as LocalState,
    ]
-  ])('given %p', async (ref: string, expected: LocalState) => {
+  ])('given %o', async (ref: string, expected: LocalState) => {
    const localState = Buildx.localState(ref, path.join(fixturesDir, 'buildx-refs'));
    expect(localState).toEqual(expected);
  });
--- a/tests/buildx/history.test.itg.ts
+++ b/tests/buildx/history.test.itg.ts
@@ -14,16 +14,16 @@
 * limitations under the License.
 */

-import {describe, expect, it, test} from '@jest/globals';
+import {describe, expect, it, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';

-import {Buildx} from '../../src/buildx/buildx';
-import {Bake} from '../../src/buildx/bake';
-import {Build} from '../../src/buildx/build';
-import {History} from '../../src/buildx/history';
-import {Exec} from '../../src/exec';
+import {Buildx} from '../../src/buildx/buildx.js';
+import {Bake} from '../../src/buildx/bake.js';
+import {Build} from '../../src/buildx/build.js';
+import {History} from '../../src/buildx/history.js';
+import {Exec} from '../../src/exec.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-history-itg-'));
@@ -187,40 +187,4 @@ maybe('export', () => {
    expect(fs.existsSync(exportRes?.dockerbuildFilename)).toBe(true);
    expect(exportRes?.summaries).toBeDefined();
  });
-
-  it('export using container', async () => {
-    const buildx = new Buildx();
-    const build = new Build({buildx: buildx});
-
-    fs.mkdirSync(tmpDir, {recursive: true});
-    await expect(
-      (async () => {
-        // prettier-ignore
-        const buildCmd = await buildx.getCommand([
-          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
-          'build', '-f', path.join(fixturesDir, 'hello.Dockerfile'),
-          '--metadata-file', build.getMetadataFilePath(),
-          fixturesDir
-        ]);
-        await Exec.exec(buildCmd.command, buildCmd.args);
-      })()
-    ).resolves.not.toThrow();
-
-    const metadata = build.resolveMetadata();
-    expect(metadata).toBeDefined();
-    const buildRef = build.resolveRef(metadata);
-    expect(buildRef).toBeDefined();
-
-    const history = new History({buildx: buildx});
-    const exportRes = await history.export({
-      refs: [buildRef ?? ''],
-      useContainer: true
-    });
-
-    expect(exportRes).toBeDefined();
-    expect(exportRes?.dockerbuildFilename).toBeDefined();
-    expect(exportRes?.dockerbuildSize).toBeDefined();
-    expect(fs.existsSync(exportRes?.dockerbuildFilename)).toBe(true);
-    expect(exportRes?.summaries).toBeDefined();
-  });
 });
--- a/tests/buildx/imagetools.test.itg.ts
+++ b/tests/buildx/imagetools.test.itg.ts
@@ -14,15 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, it} from '@jest/globals';
+import {describe, expect, it} from 'vitest';
 import * as fs from 'fs';
 import * as path from 'path';

-import {ImageTools} from '../../src/buildx/imagetools';
+import {ImageTools} from '../../src/buildx/imagetools.js';

-import {Manifest as ImageToolsManifest} from '../../src/types/buildx/imagetools';
-import {Image} from '../../src/types/oci/config';
-import {Descriptor} from '../../src/types/oci/descriptor';
+import {Manifest as ImageToolsManifest} from '../../src/types/buildx/imagetools.js';
+import {Image} from '../../src/types/oci/config.js';
+import {Descriptor} from '../../src/types/oci/descriptor.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

@@ -60,6 +60,16 @@ maybe('attestationDescriptors', () => {
    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-05.json'), {encoding: 'utf-8'}).trim());
    expect(attestations).toEqual(expectedAttestations);
  });
+  it('returns buildkit attestations descriptors for linux/amd64', async () => {
+    const attestations = await new ImageTools().attestationDescriptors('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'amd64'});
+    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-06.json'), {encoding: 'utf-8'}).trim());
+    expect(attestations).toEqual(expectedAttestations);
+  });
+  it('returns buildkit attestations descriptors for linux/arm/v7', async () => {
+    const attestations = await new ImageTools().attestationDescriptors('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'arm', variant: 'v7'});
+    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-07.json'), {encoding: 'utf-8'}).trim());
+    expect(attestations).toEqual(expectedAttestations);
+  });
 });

 maybe('attestationDigests', () => {
@@ -75,4 +85,12 @@ maybe('attestationDigests', () => {
      'sha256:d95ca72d4f2a6bc416d4b2f3003b2af9d5f4dea99acec6ad3ab0c2082000a98c'
    ]);
  });
+  it('returns buildkit attestations digests for linux/amd64', async () => {
+    const digests = await new ImageTools().attestationDigests('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'amd64'});
+    expect(digests).toEqual(['sha256:2ba4ad6eae1efcafee73a971953093c7c32b6938f2f9fd4998c8bf4d0fbe76f2']);
+  });
+  it('returns buildkit attestations digests for linux/arm/v7', async () => {
+    const digests = await new ImageTools().attestationDigests('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'arm', variant: 'v7'});
+    expect(digests).toEqual(['sha256:0709528fae1747ce17638ad2978ee7936b38a294136eaadaf692e415f64b1e03']);
+  });
 });
--- a/tests/buildx/imagetools.test.ts
+++ b/tests/buildx/imagetools.test.ts
@@ -0,0 +1,117 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {afterEach, describe, expect, it, vi} from 'vitest';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as rimraf from 'rimraf';
+
+import {Buildx} from '../../src/buildx/buildx.js';
+import {ImageTools} from '../../src/buildx/imagetools.js';
+import {Context} from '../../src/context.js';
+import {Exec} from '../../src/exec.js';
+
+const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-imagetools-'));
+const metadataFile = path.join(tmpDir, 'imagetools-metadata.json');
+
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+  fs.mkdirSync(tmpDir, {recursive: true});
+  return tmpDir;
+});
+
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
+  return metadataFile;
+});
+
+afterEach(() => {
+  vi.clearAllMocks();
+  rimraf.sync(tmpDir);
+});
+
+describe('create', () => {
+  it('parses metadata and supports cwd sources', async () => {
+    const getCommand = vi.fn().mockResolvedValue({
+      command: 'docker',
+      args: ['buildx', 'imagetools', 'create']
+    });
+    const buildx = {getCommand} as unknown as Buildx;
+
+    fs.writeFileSync(
+      metadataFile,
+      JSON.stringify({
+        'containerimage.descriptor': {
+          mediaType: 'application/vnd.oci.image.index.v1+json',
+          digest: 'sha256:19ffeab6f8bc9293ac2c3fdf94ebe28396254c993aea0b5a542cfb02e0883fa3',
+          size: 4654
+        },
+        'image.name': 'docker.io/user/app,docker.io/user/app2'
+      })
+    );
+
+    const execSpy = vi.spyOn(Exec, 'getExecOutput').mockResolvedValue({
+      exitCode: 0,
+      stdout: '',
+      stderr: ''
+    });
+
+    const result = await new ImageTools({buildx}).create({
+      sources: ['cwd://descriptor.json', 'docker.io/library/alpine:latest'],
+      tags: ['docker.io/user/app:latest']
+    });
+
+    expect(getCommand).toHaveBeenCalledWith(['imagetools', 'create', '--tag', 'docker.io/user/app:latest', '--metadata-file', metadataFile, '--file', 'descriptor.json', 'docker.io/library/alpine:latest']);
+    expect(execSpy).toHaveBeenCalledWith('docker', ['buildx', 'imagetools', 'create'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(result).toEqual({
+      digest: 'sha256:19ffeab6f8bc9293ac2c3fdf94ebe28396254c993aea0b5a542cfb02e0883fa3',
+      descriptor: {
+        mediaType: 'application/vnd.oci.image.index.v1+json',
+        digest: 'sha256:19ffeab6f8bc9293ac2c3fdf94ebe28396254c993aea0b5a542cfb02e0883fa3',
+        size: 4654
+      },
+      imageNames: ['docker.io/user/app', 'docker.io/user/app2']
+    });
+  });
+
+  it('does not parse metadata in dry-run mode', async () => {
+    const getCommand = vi.fn().mockResolvedValue({
+      command: 'docker',
+      args: ['buildx', 'imagetools', 'create']
+    });
+    const buildx = {getCommand} as unknown as Buildx;
+
+    const execSpy = vi.spyOn(Exec, 'getExecOutput').mockResolvedValue({
+      exitCode: 0,
+      stdout: '',
+      stderr: ''
+    });
+
+    const result = await new ImageTools({buildx}).create({
+      sources: ['docker.io/library/alpine:latest'],
+      dryRun: true
+    });
+
+    expect(getCommand).toHaveBeenCalledWith(['imagetools', 'create', '--dry-run', 'docker.io/library/alpine:latest']);
+    expect(execSpy).toHaveBeenCalledWith('docker', ['buildx', 'imagetools', 'create'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(result).toBeUndefined();
+  });
+});
--- a/tests/buildx/install.test.itg.ts
+++ b/tests/buildx/install.test.itg.ts
@@ -14,10 +14,10 @@
 * limitations under the License.
 */

-import {describe, expect, test} from '@jest/globals';
+import {describe, expect, test} from 'vitest';
 import * as fs from 'fs';

-import {Install} from '../../src/buildx/install';
+import {Install} from '../../src/buildx/install.js';

 const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;

@@ -29,7 +29,12 @@ maybe('download', () => {
        const install = new Install({
          standalone: true
        });
-        const toolPath = await install.download(version);
+        const toolPath = await install.download({
+          version: version,
+          verifySignature: true,
+          ghaNoCache: true,
+          disableHtc: true
+        });
        if (!fs.existsSync(toolPath)) {
          throw new Error('toolPath does not exist');
        }
--- a/tests/buildx/install.test.ts
+++ b/tests/buildx/install.test.ts
@@ -14,14 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, it, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
-import osm = require('os');

-import {Install} from '../../src/buildx/install';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {Install} from '../../src/buildx/install.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'buildx-install-'));

@@ -36,9 +37,9 @@ describe('download', () => {
    ['v0.10.5', true],
    ['latest', true]
  ])(
-  'acquires %p of buildx (standalone: %p)', async (version, standalone) => {
+  'acquires %o of buildx (standalone: %o)', async (version, standalone) => {
    const install = new Install({standalone: standalone});
-    const toolPath = await install.download(version);
+    const toolPath = await install.download({version});
    expect(fs.existsSync(toolPath)).toBe(true);
    let buildxBin: string;
    if (standalone) {
@@ -55,9 +56,9 @@ describe('download', () => {
    ['v0.9.0'],
    ['v0.10.5'],
  ])(
-  'acquires %p of buildx with cache', async (version) => {
+  'acquires %o of buildx with cache', async (version) => {
    const install = new Install({standalone: false});
-    const toolPath = await install.download(version);
+    const toolPath = await install.download({version});
    expect(fs.existsSync(toolPath)).toBe(true);
  }, 100000);

@@ -66,9 +67,9 @@ describe('download', () => {
    ['v0.11.2'],
    ['v0.12.0'],
  ])(
-  'acquires %p of buildx without cache', async (version) => {
+  'acquires %o of buildx without cache', async (version) => {
    const install = new Install({standalone: false});
-    const toolPath = await install.download(version, true);
+    const toolPath = await install.download({version: version, ghaNoCache: true});
    expect(fs.existsSync(toolPath)).toBe(true);
  }, 100000);

@@ -85,16 +86,15 @@ describe('download', () => {
    ['linux', 's390x'],
  ])(
  'acquires buildx for %s/%s', async (os, arch) => {
-    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
-    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    mockPlatform(os as NodeJS.Platform);
+    mockArch(arch);
    const install = new Install();
-    const buildxBin = await install.download('latest');
+    const buildxBin = await install.download({version: 'latest'});
    expect(fs.existsSync(buildxBin)).toBe(true);
  }, 100000);
 });

 describe('build', () => {
-  // eslint-disable-next-line jest/no-disabled-tests
  it.skip('builds refs/pull/648/head', async () => {
    const install = new Install();
    const toolPath = await install.build('https://github.com/docker/buildx.git#refs/pull/648/head');
@@ -103,7 +103,6 @@ describe('build', () => {
    expect(fs.existsSync(buildxBin)).toBe(true);
  }, 100000);

-  // eslint-disable-next-line jest/no-disabled-tests
  it.skip('builds 67bd6f4dc82a9cd96f34133dab3f6f7af803bb14', async () => {
    const install = new Install();
    const toolPath = await install.build('https://github.com/docker/buildx.git#67bd6f4dc82a9cd96f34133dab3f6f7af803bb14');
--- a/tests/cache.test.itg.ts
+++ b/tests/cache.test.itg.ts
@@ -14,13 +14,13 @@
 * limitations under the License.
 */

-import {describe, expect, it} from '@jest/globals';
+import {describe, expect, it} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';

-import {Cache} from '../src/cache';
-import {Util} from '../src/util';
+import {Cache} from '../src/cache.js';
+import {Util} from '../src/util.js';

 const fixturesDir = path.join(__dirname, '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'cache-itg-'));
--- a/tests/compose/compose.test.ts
+++ b/tests/compose/compose.test.ts
@@ -14,27 +14,27 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, it, vi, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
 import * as semver from 'semver';

-import {Context} from '../../src/context';
-import {Exec} from '../../src/exec';
+import {Context} from '../../src/context.js';
+import {Exec} from '../../src/exec.js';

-import {Compose} from '../../src/compose/compose';
+import {Compose} from '../../src/compose/compose.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'compose-compose-'));
-const tmpName = path.join(tmpDir, '.tmpname-jest');
+const tmpName = path.join(tmpDir, '.tmpname-vi');

-jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  fs.mkdirSync(tmpDir, {recursive: true});
  return tmpDir;
 });

-jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -44,24 +44,22 @@ afterEach(() => {

 describe('isAvailable', () => {
  it('docker cli', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const compose = new Compose({
      standalone: false
    });
    await compose.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`docker`, ['compose'], {
      silent: true,
      ignoreReturnCode: true
    });
  });
  it('standalone', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const compose = new Compose({
      standalone: true
    });
    await compose.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`compose`, [], {
      silent: true,
      ignoreReturnCode: true
@@ -71,7 +69,7 @@ describe('isAvailable', () => {

 describe('printVersion', () => {
  it('docker cli', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const compose = new Compose({
      standalone: false
    });
@@ -81,7 +79,7 @@ describe('printVersion', () => {
    });
  });
  it('standalone', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const compose = new Compose({
      standalone: true
    });
@@ -103,7 +101,7 @@ describe('parseVersion', () => {
  // prettier-ignore
  test.each([
    ['Docker Compose version v2.31.0', '2.31.0'],
-  ])('given %p', async (stdout, expected) => {
+  ])('given %o', async (stdout, expected) => {
    expect(Compose.parseVersion(stdout)).toEqual(expected);
  });
 });
--- a/tests/compose/install.test.itg.ts
+++ b/tests/compose/install.test.itg.ts
@@ -14,10 +14,10 @@
 * limitations under the License.
 */

-import {describe, expect, test} from '@jest/globals';
+import {describe, expect, test} from 'vitest';
 import * as fs from 'fs';

-import {Install} from '../../src/compose/install';
+import {Install} from '../../src/compose/install.js';

 const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;

--- a/tests/compose/install.test.ts
+++ b/tests/compose/install.test.ts
@@ -14,14 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, it, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
-import osm = require('os');

-import {Install} from '../../src/compose/install';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {Install} from '../../src/compose/install.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'compose-install-'));

@@ -36,7 +37,7 @@ describe('download', () => {
    ['v2.32.4', true],
    ['latest', true]
  ])(
-  'acquires %p of compose (standalone: %p)', async (version, standalone) => {
+  'acquires %o of compose (standalone: %o)', async (version, standalone) => {
    const install = new Install({standalone: standalone});
    const toolPath = await install.download(version);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -55,7 +56,7 @@ describe('download', () => {
    ['v2.31.0'],
    ['v2.32.4'],
  ])(
-  'acquires %p of compose with cache', async (version) => {
+  'acquires %o of compose with cache', async (version) => {
    const install = new Install({standalone: false});
    const toolPath = await install.download(version);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -66,7 +67,7 @@ describe('download', () => {
    ['v2.27.1'],
    ['v2.28.0'],
  ])(
-  'acquires %p of compose without cache', async (version) => {
+  'acquires %o of compose without cache', async (version) => {
    const install = new Install({standalone: false});
    const toolPath = await install.download(version, true);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -85,8 +86,8 @@ describe('download', () => {
    ['linux', 's390x'],
  ])(
  'acquires compose for %s/%s', async (os, arch) => {
-    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
-    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    mockPlatform(os as NodeJS.Platform);
+    mockArch(arch);
    const install = new Install();
    const composeBin = await install.download('latest');
    expect(fs.existsSync(composeBin)).toBe(true);
--- a/tests/context.test.ts
+++ b/tests/context.test.ts
@@ -14,23 +14,23 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it, afterEach, beforeEach, test} from '@jest/globals';
+import {describe, expect, vi, it, afterEach, beforeEach, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';

-import {Context} from '../src/context';
+import {Context} from '../src/context.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'context-'));
-const tmpName = path.join(tmpDir, '.tmpname-jest');
+const tmpName = path.join(tmpDir, '.tmpname-vi');

-jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  fs.mkdirSync(tmpDir, {recursive: true});
  return tmpDir;
 });

-jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+vi.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -47,7 +47,7 @@ describe('gitRef', () => {
 describe('parseGitRef', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      DOCKER_GIT_CONTEXT_PR_HEAD_REF: ''
@@ -66,7 +66,7 @@ describe('parseGitRef', () => {
    ['refs/tags/v1.0.0', '', false, 'refs/tags/v1.0.0'],
    ['refs/pull/15/merge', '', false, 'refs/pull/15/merge'],
    ['refs/pull/15/merge', '', true, 'refs/pull/15/head'],
-  ])('given %p and %p, should return %p', async (ref: string, sha: string, prHeadRef: boolean, expected: string) => {
+  ])('given %o and %o, should return %o', async (ref: string, sha: string, prHeadRef: boolean, expected: string) => {
    process.env.DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF = prHeadRef ? 'true' : '';
    expect(Context.parseGitRef(ref, sha)).toEqual(expected);
  });
--- a/tests/cosign/cosign.test.ts
+++ b/tests/cosign/cosign.test.ts
@@ -14,22 +14,21 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, vi, test} from 'vitest';
 import fs from 'fs';
 import path from 'path';
 import * as semver from 'semver';

-import {Exec} from '../../src/exec';
-import {Cosign} from '../../src/cosign/cosign';
+import {Exec} from '../../src/exec.js';
+import {Cosign} from '../../src/cosign/cosign.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

 describe('isAvailable', () => {
  it('checks Cosign is available', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const cosign = new Cosign();
    await cosign.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`cosign`, [], {
      silent: true,
      ignoreReturnCode: true
@@ -39,7 +38,7 @@ describe('isAvailable', () => {

 describe('printVersion', () => {
  it('prints Cosign version', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const cosign = new Cosign();
    await cosign.printVersion();
    expect(execSpy).toHaveBeenCalledWith(`cosign`, ['version', '--json'], {
@@ -60,7 +59,7 @@ describe('versionSatisfies', () => {
    ['v0.4.1', '>=0.3.2', true],
    ['v0.8.0', '>0.6.0', true],
    ['v0.8.0', '<0.3.0', false]
-  ])('given %p', async (version, range, expected) => {
+  ])('given %o', async (version, range, expected) => {
    const cosign = new Cosign();
    expect(await cosign.versionSatisfies(range, version)).toBe(expected);
  });
@@ -72,7 +71,7 @@ describe('parseCommandOutput', () => {
    [path.join(fixturesDir, 'cosign', 'sign-output1.txt')],
    [path.join(fixturesDir, 'cosign', 'sign-output2.txt')],
    [path.join(fixturesDir, 'cosign', 'sign-output3.txt')],
-  ])('parsing %p', async (fixturePath: string) => {
+  ])('parsing %o', async (fixturePath: string) => {
    const signResult = Cosign.parseCommandOutput(fs.readFileSync(fixturePath, 'utf-8'));
    expect(signResult).toBeDefined();
    expect(signResult.bundle).toBeDefined();
@@ -81,7 +80,7 @@ describe('parseCommandOutput', () => {
  // prettier-ignore
  test.each([
    [path.join(fixturesDir, 'cosign', 'verify-output-err1.txt')],
-  ])('parsing %p', async (fixturePath: string) => {
+  ])('parsing %o', async (fixturePath: string) => {
    const signResult = Cosign.parseCommandOutput(fs.readFileSync(fixturePath, 'utf-8'));
    expect(signResult).toBeDefined();
    expect(signResult.bundle).toBeUndefined();
--- a/tests/cosign/install.test.itg.ts
+++ b/tests/cosign/install.test.itg.ts
@@ -14,10 +14,10 @@
 * limitations under the License.
 */

-import {describe, expect, it, test} from '@jest/globals';
+import {describe, expect, it, test} from 'vitest';
 import * as fs from 'fs';

-import {Install} from '../../src/cosign/install';
+import {Install} from '../../src/cosign/install.js';

 const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;

@@ -27,7 +27,10 @@ describe('download', () => {
    'install cosign %s', async (version) => {
      await expect((async () => {
        const install = new Install();
-        const toolPath = await install.download(version);
+        const toolPath = await install.download({
+          version: version,
+          verifySignature: true
+        });
        if (!fs.existsSync(toolPath)) {
          throw new Error('toolPath does not exist');
        }
--- a/tests/cosign/install.test.ts
+++ b/tests/cosign/install.test.ts
@@ -14,14 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, it, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
-import osm = require('os');

-import {Install} from '../../src/cosign/install';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {Install} from '../../src/cosign/install.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'cosign-install-'));

@@ -36,9 +37,9 @@ describe('download', () => {
    ['v3.0.1'],
    ['latest']
  ])(
-  'acquires %p of cosign', async (version) => {
+  'acquires %o of cosign', async (version) => {
    const install = new Install();
-    const toolPath = await install.download(version);
+    const toolPath = await install.download({version});
    expect(fs.existsSync(toolPath)).toBe(true);
    const cosignBin = await install.install(toolPath, tmpDir);
    expect(fs.existsSync(cosignBin)).toBe(true);
@@ -50,9 +51,9 @@ describe('download', () => {
    ['v2.6.1'],
    ['v3.0.1'],
  ])(
-  'acquires %p of cosign with cache', async (version) => {
+  'acquires %o of cosign with cache', async (version) => {
    const install = new Install();
-    const toolPath = await install.download(version);
+    const toolPath = await install.download({version});
    expect(fs.existsSync(toolPath)).toBe(true);
  }, 100000);

@@ -61,9 +62,12 @@ describe('download', () => {
    ['v2.5.3'],
    ['v2.6.0'],
  ])(
-  'acquires %p of cosign without cache', async (version) => {
+  'acquires %o of cosign without cache', async (version) => {
    const install = new Install();
-    const toolPath = await install.download(version, true);
+    const toolPath = await install.download({
+      version: version,
+      ghaNoCache: true
+    });
    expect(fs.existsSync(toolPath)).toBe(true);
  }, 100000);

@@ -77,10 +81,12 @@ describe('download', () => {
    ['linux', 'arm64']
  ])(
  'acquires undock for %s/%s', async (os, arch) => {
-    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
-    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    mockPlatform(os as NodeJS.Platform);
+    mockArch(arch);
    const install = new Install();
-    const cosignBin = await install.download('latest');
+    const cosignBin = await install.download({
+      version: 'latest'
+    });
    expect(fs.existsSync(cosignBin)).toBe(true);
  }, 100000);
 });
--- a/tests/docker/docker.test.itg.ts
+++ b/tests/docker/docker.test.itg.ts
@@ -14,9 +14,9 @@
 * limitations under the License.
 */

-import {describe, expect, it, test} from '@jest/globals';
+import {describe, expect, it, test} from 'vitest';

-import {Docker} from '../../src/docker/docker';
+import {Docker} from '../../src/docker/docker.js';

 const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;

@@ -55,7 +55,7 @@ maybe('pull', () => {
        if (err === undefined) {
          throw new Error(`Expected no error, but got: ${e.message}`);
        }
-        // eslint-disable-next-line jest/no-conditional-expect
+        // eslint-disable-next-line vitest/no-conditional-expect
        expect(e.message).toContain(err);
      }
    }, 600000);
--- a/tests/docker/docker.test.ts
+++ b/tests/docker/docker.test.ts
@@ -14,17 +14,26 @@
 * limitations under the License.
 */

-import {afterEach, beforeEach, describe, expect, it, jest} from '@jest/globals';
+import {afterEach, beforeEach, describe, expect, it, vi} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as io from '@actions/io';
-import osm = require('os');
 import * as rimraf from 'rimraf';

-import {Docker} from '../../src/docker/docker';
+import {mockHomedir} from '../.helpers/os.js';

-import {ConfigFile} from '../../src/types/docker/docker';
+import {Docker} from '../../src/docker/docker.js';
+
+import {ConfigFile} from '../../src/types/docker/docker.js';
+
+vi.mock('@actions/io', async () => {
+  const actual = await vi.importActual<typeof import('@actions/io')>('@actions/io');
+  return {
+    ...actual,
+    which: vi.fn()
+  };
+});

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'docker-docker-'));
@@ -36,7 +45,7 @@ afterEach(function () {
 describe('configDir', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      DOCKER_CONFIG: '/var/docker/config'
@@ -47,7 +56,7 @@ describe('configDir', () => {
  });
  it('returns default', async () => {
    process.env.DOCKER_CONFIG = '';
-    jest.spyOn(osm, 'homedir').mockImplementation(() => path.join('/tmp', 'home'));
+    mockHomedir(path.join('/tmp', 'home'));
    expect(Docker.configDir).toEqual(path.join('/tmp', 'home', '.docker'));
  });
  it('returns from env', async () => {
@@ -58,7 +67,7 @@ describe('configDir', () => {
 describe('configFile', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    if (!fs.existsSync(tmpDir)) {
      fs.mkdirSync(tmpDir, {recursive: true});
    }
@@ -96,7 +105,7 @@ describe('configFile', () => {

 describe('isAvailable', () => {
  it('cli', async () => {
-    const ioWhichSpy = jest.spyOn(io, 'which');
+    const ioWhichSpy = vi.mocked(io.which).mockResolvedValue('/usr/bin/docker');
    await Docker.isAvailable();
    expect(ioWhichSpy).toHaveBeenCalledTimes(1);
    expect(ioWhichSpy).toHaveBeenCalledWith('docker', true);
@@ -105,7 +114,7 @@ describe('isAvailable', () => {

 describe('exec', () => {
  it('returns docker version', async () => {
-    const execSpy = jest.spyOn(Docker, 'exec');
+    const execSpy = vi.spyOn(Docker, 'exec');
    await Docker.exec(['version'], {
      ignoreReturnCode: true,
      silent: true
@@ -132,7 +141,7 @@ describe('exec', () => {

 describe('getExecOutput', () => {
  it('returns docker version', async () => {
-    const execSpy = jest.spyOn(Docker, 'getExecOutput');
+    const execSpy = vi.spyOn(Docker, 'getExecOutput');
    await Docker.getExecOutput(['version'], {
      ignoreReturnCode: true,
      silent: true
@@ -159,7 +168,7 @@ describe('getExecOutput', () => {

 describe('context', () => {
  it('call docker context show', async () => {
-    const execSpy = jest.spyOn(Docker, 'getExecOutput');
+    const execSpy = vi.spyOn(Docker, 'getExecOutput');
    await Docker.context().catch(() => {
      // noop
    });
@@ -181,7 +190,7 @@ describe('context', () => {

 describe('contextInspect', () => {
  it('call docker context inspect', async () => {
-    const execSpy = jest.spyOn(Docker, 'getExecOutput');
+    const execSpy = vi.spyOn(Docker, 'getExecOutput');
    await Docker.contextInspect('foo').catch(() => {
      // noop
    });
@@ -203,7 +212,7 @@ describe('contextInspect', () => {

 describe('printVersion', () => {
  it('call docker version', async () => {
-    const execSpy = jest.spyOn(Docker, 'exec');
+    const execSpy = vi.spyOn(Docker, 'exec');
    await Docker.printVersion().catch(() => {
      // noop
    });
@@ -219,7 +228,7 @@ describe('printVersion', () => {

 describe('printInfo', () => {
  it('call docker info', async () => {
-    const execSpy = jest.spyOn(Docker, 'exec');
+    const execSpy = vi.spyOn(Docker, 'exec');
    await Docker.printInfo().catch(() => {
      // noop
    });
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -14,16 +14,16 @@
 * limitations under the License.
 */

-import {beforeAll, describe, test, expect} from '@jest/globals';
+import {beforeAll, describe, test, expect} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';

-import {Install, InstallSource, InstallSourceArchive, InstallSourceImage} from '../../src/docker/install';
-import {Docker} from '../../src/docker/docker';
-import {Install as RegclientInstall} from '../../src/regclient/install';
-import {Install as UndockInstall} from '../../src/undock/install';
-import {Exec} from '../../src/exec';
+import {Install, InstallSource, InstallSourceArchive, InstallSourceImage} from '../../src/docker/install.js';
+import {Docker} from '../../src/docker/docker.js';
+import {Install as RegclientInstall} from '../../src/regclient/install.js';
+import {Install as UndockInstall} from '../../src/undock/install.js';
+import {Exec} from '../../src/exec.js';

 const tmpDir = () => fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'docker-install-itg-'));

--- a/tests/docker/install.test.ts
+++ b/tests/docker/install.test.ts
@@ -14,14 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, jest, test, beforeEach, afterEach, it} from '@jest/globals';
+import {describe, expect, vi, test, beforeEach, afterEach, it} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
-import osm = require('os');

-import {Install, InstallSourceArchive, InstallSourceImage} from '../../src/docker/install';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {Install, InstallSourceArchive, InstallSourceImage} from '../../src/docker/install.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'docker-install-'));

@@ -59,9 +60,9 @@ describe('download', () => {
    [image('27.3.1'), 'linux'],
    [image('27.3.1'), 'win32'],
  ])(
-  'acquires %p of docker (%s)', async (source, platformOS) => {
-    jest.spyOn(osm, 'platform').mockImplementation(() => platformOS as NodeJS.Platform);
-    jest.spyOn(osm, 'arch').mockImplementation(() => 'x64');
+  'acquires %o of docker (%s)', async (source, platformOS) => {
+    mockPlatform(platformOS as NodeJS.Platform);
+    mockArch('x64');
    const install = new Install({
      source: source,
      runDir: tmpDir
@@ -102,7 +103,7 @@ describe('getRelease', () => {
 describe('limaImage', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      LIMA_IMAGES: `x86_64:https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-amd64.img@sha256:f6529be56da3429a56e4f5ef202bf4958201bc63f8541e478caa6e8eb712e635
--- a/tests/dockerhub.test.ts
+++ b/tests/dockerhub.test.ts
@@ -14,24 +14,24 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it} from '@jest/globals';
+import {describe, expect, vi, it} from 'vitest';
 import * as fs from 'fs';
 import * as path from 'path';

-import {DockerHub} from '../src/dockerhub';
-import {RepositoryResponse, RepositoryTagsResponse} from '../src/types/dockerhub';
+import {DockerHub} from '../src/dockerhub.js';
+import {RepositoryResponse, RepositoryTagsResponse} from '../src/types/dockerhub.js';

-import repoInfoFixture from './.fixtures/dockerhub-repoinfo.json';
-import repoTagsFixture from './.fixtures/dockerhub-repotags.json';
-import repoAllTagsFixture from './.fixtures/dockerhub-repoalltags.json';
+import repoInfoFixture from './.fixtures/dockerhub-repoinfo.json' with {type: 'json'};
+import repoTagsFixture from './.fixtures/dockerhub-repotags.json' with {type: 'json'};
+import repoAllTagsFixture from './.fixtures/dockerhub-repoalltags.json' with {type: 'json'};

 describe('getRepository', () => {
  it('returns repo info', async () => {
-    jest.spyOn(DockerHub.prototype, 'getRepository').mockImplementation((): Promise<RepositoryResponse> => {
+    vi.spyOn(DockerHub.prototype, 'getRepository').mockImplementation((): Promise<RepositoryResponse> => {
      return <Promise<RepositoryResponse>>(repoInfoFixture as unknown);
    });
    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    vi.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
    const dockerhub = await DockerHub.build({
      credentials: {
        username: 'foo',
@@ -50,11 +50,11 @@ describe('getRepository', () => {

 describe('getRepositoryTags', () => {
  it('return repo tags', async () => {
-    jest.spyOn(DockerHub.prototype, 'getRepositoryTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
+    vi.spyOn(DockerHub.prototype, 'getRepositoryTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
      return <Promise<RepositoryTagsResponse>>(repoTagsFixture as unknown);
    });
    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    vi.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
    const dockerhub = await DockerHub.build({
      credentials: {
        username: 'foo',
@@ -74,11 +74,11 @@ describe('getRepositoryTags', () => {

 describe('getRepositoryAllTags', () => {
  it('return repo all tags', async () => {
-    jest.spyOn(DockerHub.prototype, 'getRepositoryAllTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
+    vi.spyOn(DockerHub.prototype, 'getRepositoryAllTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
      return <Promise<RepositoryTagsResponse>>(repoAllTagsFixture as unknown);
    });
    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    vi.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
    const dockerhub = await DockerHub.build({
      credentials: {
        username: 'foo',
--- a/tests/exec.test.ts
+++ b/tests/exec.test.ts
@@ -14,13 +14,13 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest} from '@jest/globals';
+import {describe, expect, it, vi} from 'vitest';

-import {Exec} from '../src/exec';
+import {Exec} from '../src/exec.js';

 describe('exec', () => {
  it('returns docker version', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    await Exec.exec('docker', ['version'], {
      ignoreReturnCode: true,
      silent: true
@@ -34,7 +34,7 @@ describe('exec', () => {

 describe('getExecOutput', () => {
  it('returns docker version', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    await Exec.getExecOutput('docker', ['version'], {
      ignoreReturnCode: true,
      silent: true
--- a/tests/testResultsProcessor.ts
+++ b/tests/testResultsProcessor.ts
@@ -1,5 +1,5 @@
 /**
- * Copyright 2024 actions-toolkit authors
+ * Copyright 2026 actions-toolkit authors
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
@@ -14,17 +14,12 @@
 * limitations under the License.
 */

-// eslint-disable-next-line @typescript-eslint/no-var-requires
-const fs = require('fs');
+import {describe, expect, it} from 'vitest';

-module.exports = results => {
-  const allSkipped = results.testResults.every(result => {
-    return result.skipped;
+import {Git} from '../src/git.js';
+
+describe('remoteSha', () => {
+  it('returns sha using github api', async () => {
+    expect(await Git.remoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head', process.env.GITHUB_TOKEN)).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
  });
-  if (allSkipped) {
-    console.log('All tests were skipped!');
-    // create an empty file to signal that all tests were skipped for CI
-    fs.closeSync(fs.openSync('./coverage/allSkipped.txt', 'w'));
-  }
-  return results;
-};
+});
--- a/tests/git.test.ts
+++ b/tests/git.test.ts
@@ -14,19 +14,19 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, it, jest} from '@jest/globals';
+import {beforeEach, describe, expect, it, vi} from 'vitest';

-import {Git} from '../src/git';
-import {Exec} from '../src/exec';
+import {Git} from '../src/git.js';
+import {Exec} from '../src/exec.js';
 import {ExecOutput} from '@actions/exec';

 beforeEach(() => {
-  jest.restoreAllMocks();
+  vi.restoreAllMocks();
 });

 describe('context', () => {
  it('returns mocked ref and sha', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -54,10 +54,10 @@ describe('context', () => {

 describe('isInsideWorkTree', () => {
  it('have been called', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    try {
      await Git.isInsideWorkTree();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['rev-parse', '--is-inside-work-tree'], {
@@ -71,17 +71,14 @@ describe('remoteSha', () => {
  it('returns sha using git ls-remote', async () => {
    expect(await Git.remoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head')).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
  });
-  it('returns sha using github api', async () => {
-    expect(await Git.remoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head', process.env.GITHUB_TOKEN)).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
-  });
 });

 describe('remoteURL', () => {
  it('have been called', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    try {
      await Git.remoteURL();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['remote', 'get-url', 'origin'], {
@@ -93,7 +90,7 @@ describe('remoteURL', () => {

 describe('ref', () => {
  it('returns mocked ref', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -110,14 +107,12 @@ describe('ref', () => {
        exitCode: 0
      });
    });
-
    const ref = await Git.ref();
-
    expect(ref).toEqual('refs/heads/test');
  });

  it('returns mocked detached tag ref', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -134,14 +129,12 @@ describe('ref', () => {
        exitCode: 0
      });
    });
-
    const ref = await Git.ref();
-
    expect(ref).toEqual('refs/tags/8.0.0');
  });

  it('returns mocked detached tag ref (shallow clone)', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -158,14 +151,12 @@ describe('ref', () => {
        exitCode: 0
      });
    });
-
    const ref = await Git.ref();
-
    expect(ref).toEqual('refs/tags/8.0.0');
  });

  it('returns mocked detached pull request merge ref (shallow clone)', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -182,14 +173,12 @@ describe('ref', () => {
        exitCode: 0
      });
    });
-
    const ref = await Git.ref();
-
    expect(ref).toEqual('refs/pull/221/merge');
  });

  it('should throws an error when detached HEAD ref is not supported', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -206,12 +195,11 @@ describe('ref', () => {
        exitCode: 0
      });
    });
-
    await expect(Git.ref()).rejects.toThrow('Cannot find detached HEAD ref in "wrong, HEAD, tag: 8.0.0"');
  });

  it('returns mocked detached branch ref', async () => {
-    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
      let result = '';
      switch (fullCmd) {
@@ -228,19 +216,206 @@ describe('ref', () => {
        exitCode: 0
      });
    });
-
    const ref = await Git.ref();
-
    expect(ref).toEqual('refs/heads/test');
  });
+
+  it('returns mocked detached branch ref checked out by SHA', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD, origin/feature-branch';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ref = await Git.ref();
+    expect(ref).toEqual('refs/heads/feature-branch');
+  });
+
+  it('infers ref from local branch when detached HEAD returns only "HEAD"', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = 'refs/heads/main\nrefs/heads/develop';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ref = await Git.ref();
+    expect(ref).toEqual('refs/heads/main');
+  });
+
+  it('infers ref from local branch when detached HEAD returns only "grafted, HEAD"', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'grafted, HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = 'refs/heads/main\nrefs/heads/develop';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ref = await Git.ref();
+    expect(ref).toEqual('refs/heads/main');
+  });
+
+  it('infers ref from remote branch when no local branch contains HEAD', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = 'refs/remotes/origin/feature';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ref = await Git.ref();
+    expect(ref).toEqual('refs/heads/feature');
+  });
+
+  it('infers ref from tag when no branch contains HEAD', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = '';
+          break;
+        case 'git tag --contains HEAD':
+          result = 'v1.0.0\nv0.9.0';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ref = await Git.ref();
+    expect(ref).toEqual('refs/tags/v1.0.0');
+  });
+
+  it('throws error when cannot infer ref from detached HEAD', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = '';
+          break;
+        case 'git tag --contains HEAD':
+          result = '';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    await expect(Git.ref()).rejects.toThrow('Cannot infer ref from detached HEAD');
+  });
+
+  it('handles remote ref without branch pattern when inferring from remote', async () => {
+    vi.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = 'refs/remotes/unusual-format';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ref = await Git.ref();
+    expect(ref).toEqual('refs/remotes/unusual-format');
+  });
 });

 describe('fullCommit', () => {
  it('have been called', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    try {
      await Git.fullCommit();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%H', 'HEAD', '--quiet', '--'], {
@@ -252,10 +427,10 @@ describe('fullCommit', () => {

 describe('shortCommit', () => {
  it('have been called', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    try {
      await Git.shortCommit();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%h', 'HEAD', '--quiet', '--'], {
@@ -267,10 +442,10 @@ describe('shortCommit', () => {

 describe('tag', () => {
  it('have been called', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    try {
      await Git.tag();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['tag', '--points-at', 'HEAD', '--sort', '-version:creatordate'], {
@@ -283,6 +458,6 @@ describe('tag', () => {
 describe('getCommitDate', () => {
  it('head', async () => {
    const date = await Git.commitDate('HEAD');
-    await expect(date).toBeInstanceOf(Date);
+    expect(date).toBeInstanceOf(Date);
  });
 });
--- a/tests/github/artifact.test.itg.ts
+++ b/tests/github/artifact.test.itg.ts
@@ -0,0 +1,42 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it} from 'vitest';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+
+import {GitHubArtifact} from '../../src/github/artifact.js';
+import {Util} from '../../src/util.js';
+
+const fixturesDir = path.join(__dirname, '..', '.fixtures');
+const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'github-itg-'));
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('upload', () => {
+  it('uploads an artifact', async () => {
+    const filename = path.join(tmpDir, `github-repo-${Util.generateRandomString()}.json`);
+    fs.copyFileSync(path.join(fixturesDir, `github-repo.json`), filename);
+    const res = await GitHubArtifact.upload({
+      filename: filename,
+      retentionDays: 1
+    });
+    expect(res).toBeDefined();
+    console.log('uploadArtifactResponse', res);
+    expect(res?.url).toBeDefined();
+  });
+});
--- a/tests/github/github.test.itg.ts
+++ b/tests/github/github.test.itg.ts
@@ -0,0 +1,41 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it} from 'vitest';
+
+import {GitHub} from '../../src/github/github.js';
+
+describe('repoData', () => {
+  it('returns docker/actions-toolkit', async () => {
+    if (!process.env.GITHUB_TOKEN) {
+      console.log(`GitHub token not available, skipping test`);
+      return;
+    }
+    const originalEnv = process.env;
+    process.env = {
+      ...originalEnv,
+      GITHUB_REPOSITORY: 'docker/actions-toolkit'
+    };
+    try {
+      const github = new GitHub({token: process.env.GITHUB_TOKEN});
+      const repo = await github.repoData();
+      const fullName = repo.full_name ?? `${repo.owner?.login}/${repo.name}`;
+      expect(fullName).toEqual('docker/actions-toolkit');
+    } finally {
+      process.env = originalEnv;
+    }
+  });
+});
--- a/tests/github/github.test.ts
+++ b/tests/github/github.test.ts
@@ -14,21 +14,31 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it, beforeEach, afterEach, test} from '@jest/globals';
+import {describe, expect, vi, it, beforeEach, afterEach, test} from 'vitest';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as core from '@actions/core';

-import {GitHub} from '../src/github';
-import {GitHubRepo} from '../src/types/github';
+import {GitHub} from '../../src/github/github.js';
+import {GitHubRepo} from '../../src/types/github/github.js';

-import repoFixture from './.fixtures/github-repo.json';
-jest.spyOn(GitHub.prototype, 'repoData').mockImplementation((): Promise<GitHubRepo> => {
-  return <Promise<GitHubRepo>>(repoFixture as unknown);
+import repoFixture from '../.fixtures/github-repo.json' with {type: 'json'};
+
+const fixturesDir = path.join(__dirname, '..', '.fixtures');
+
+vi.mock('@actions/core', async () => {
+  const actual = await vi.importActual<typeof import('@actions/core')>('@actions/core');
+  return {
+    ...actual,
+    info: vi.fn()
+  };
 });

 describe('repoData', () => {
  it('returns GitHub repo data', async () => {
+    vi.spyOn(GitHub.prototype, 'repoData').mockImplementation((): Promise<GitHubRepo> => {
+      return <Promise<GitHubRepo>>(repoFixture as unknown);
+    });
    const github = new GitHub();
    expect((await github.repoData()).name).toEqual('Hello-World');
  });
@@ -53,7 +63,7 @@ describe('releases', () => {
    ['.github/docker-releases.json'],
    ['.github/regclient-releases.json'],
    ['.github/undock-releases.json'],
-  ])('returns %p', async (path: string) => {
+  ])('returns %o', async (path: string) => {
    const github = new GitHub();
    const releases = await github.releases('App', {
      owner: 'docker',
@@ -69,7 +79,7 @@ describe('releases', () => {
 describe('serverURL', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      GITHUB_SERVER_URL: 'https://foo.github.com'
@@ -90,7 +100,7 @@ describe('serverURL', () => {
 describe('apiURL', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv,
      GITHUB_API_URL: 'https://bar.github.com'
@@ -126,7 +136,7 @@ describe('workflowRunURL', () => {
 describe('actionsRuntimeToken', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv
    };
@@ -141,14 +151,12 @@ describe('actionsRuntimeToken', () => {
  it('malformed', async () => {
    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
    expect(() => {
+      // eslint-disable-next-line @typescript-eslint/no-unused-expressions
      GitHub.actionsRuntimeToken;
    }).toThrow();
  });
  it('fixture', async () => {
-    process.env.ACTIONS_RUNTIME_TOKEN = fs
-      .readFileSync(path.join(__dirname, '.fixtures', 'runtimeToken.txt'))
-      .toString()
-      .trim();
+    process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(fixturesDir, 'runtimeToken.txt')).toString().trim();
    const runtimeToken = GitHub.actionsRuntimeToken;
    expect(runtimeToken?.ac).toEqual('[{"Scope":"refs/heads/master","Permission":3}]');
    expect(runtimeToken?.iss).toEqual('vstoken.actions.githubusercontent.com');
@@ -158,7 +166,7 @@ describe('actionsRuntimeToken', () => {
 describe('printActionsRuntimeTokenACs', () => {
  const originalEnv = process.env;
  beforeEach(() => {
-    jest.resetModules();
+    vi.resetModules();
    process.env = {
      ...originalEnv
    };
@@ -175,11 +183,8 @@ describe('printActionsRuntimeTokenACs', () => {
    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error('Cannot parse GitHub Actions Runtime Token: Invalid token specified: missing part #2'));
  });
  it('refs/heads/master', async () => {
-    const infoSpy = jest.spyOn(core, 'info');
-    process.env.ACTIONS_RUNTIME_TOKEN = fs
-      .readFileSync(path.join(__dirname, '.fixtures', 'runtimeToken.txt'))
-      .toString()
-      .trim();
+    const infoSpy = vi.mocked(core.info);
+    process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(fixturesDir, 'runtimeToken.txt')).toString().trim();
    await GitHub.printActionsRuntimeTokenACs();
    expect(infoSpy).toHaveBeenCalledTimes(1);
    expect(infoSpy).toHaveBeenCalledWith(`refs/heads/master: read/write`);
--- a/tests/github/summary.test.itg.ts
+++ b/tests/github/summary.test.itg.ts
@@ -14,39 +14,24 @@
 * limitations under the License.
 */

-import {describe, expect, it, test} from '@jest/globals';
+import {describe, expect, it, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';

-import {Buildx} from '../src/buildx/buildx';
-import {Bake} from '../src/buildx/bake';
-import {Build} from '../src/buildx/build';
-import {Exec} from '../src/exec';
-import {GitHub} from '../src/github';
-import {History} from '../src/buildx/history';
-import {Util} from '../src/util';
+import {Buildx} from '../../src/buildx/buildx.js';
+import {Bake} from '../../src/buildx/bake.js';
+import {Build} from '../../src/buildx/build.js';
+import {Exec} from '../../src/exec.js';
+import {GitHubArtifact} from '../../src/github/artifact.js';
+import {GitHubSummary} from '../../src/github/summary.js';
+import {History} from '../../src/buildx/history.js';

-const fixturesDir = path.join(__dirname, '.fixtures');
+const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'github-itg-'));

 const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;

-maybe('uploadArtifact', () => {
-  it('uploads an artifact', async () => {
-    const filename = path.join(tmpDir, `github-repo-${Util.generateRandomString()}.json`);
-    fs.copyFileSync(path.join(fixturesDir, `github-repo.json`), filename);
-    const res = await GitHub.uploadArtifact({
-      filename: filename,
-      mimeType: 'application/json',
-      retentionDays: 1
-    });
-    expect(res).toBeDefined();
-    console.log('uploadArtifactResponse', res);
-    expect(res?.url).toBeDefined();
-  });
-});
-
 maybe('writeBuildSummary', () => {
  // prettier-ignore
  test.each([
@@ -98,15 +83,14 @@ maybe('writeBuildSummary', () => {
    expect(exportRes?.dockerbuildSize).toBeDefined();
    expect(exportRes?.summaries).toBeDefined();

-    const uploadRes = await GitHub.uploadArtifact({
+    const uploadRes = await GitHubArtifact.upload({
      filename: exportRes?.dockerbuildFilename,
-      mimeType: 'application/gzip',
      retentionDays: 1
    });
    expect(uploadRes).toBeDefined();
    expect(uploadRes?.url).toBeDefined();

-    await GitHub.writeBuildSummary({
+    await GitHubSummary.writeBuildSummary({
      exportRes: exportRes,
      uploadRes: uploadRes,
      inputs: {
@@ -178,15 +162,14 @@ maybe('writeBuildSummary', () => {
    expect(exportRes?.dockerbuildSize).toBeDefined();
    expect(exportRes?.summaries).toBeDefined();

-    const uploadRes = await GitHub.uploadArtifact({
+    const uploadRes = await GitHubArtifact.upload({
      filename: exportRes?.dockerbuildFilename,
-      mimeType: 'application/gzip',
      retentionDays: 1
    });
    expect(uploadRes).toBeDefined();
    expect(uploadRes?.url).toBeDefined();

-    await GitHub.writeBuildSummary({
+    await GitHubSummary.writeBuildSummary({
      exportRes: exportRes,
      uploadRes: uploadRes,
      inputs: {
@@ -233,15 +216,14 @@ maybe('writeBuildSummary', () => {
    expect(exportRes?.dockerbuildSize).toBeDefined();
    expect(exportRes?.summaries).toBeDefined();

-    const uploadRes = await GitHub.uploadArtifact({
+    const uploadRes = await GitHubArtifact.upload({
      filename: exportRes?.dockerbuildFilename,
-      mimeType: 'application/gzip',
      retentionDays: 1
    });
    expect(uploadRes).toBeDefined();
    expect(uploadRes?.url).toBeDefined();

-    await GitHub.writeBuildSummary({
+    await GitHubSummary.writeBuildSummary({
      exportRes: exportRes,
      uploadRes: uploadRes,
      inputs: {
@@ -288,7 +270,7 @@ maybe('writeBuildSummary', () => {
    expect(exportRes?.dockerbuildSize).toBeDefined();
    expect(exportRes?.summaries).toBeDefined();

-    await GitHub.writeBuildSummary({
+    await GitHubSummary.writeBuildSummary({
      exportRes: exportRes,
      inputs: {
        context: fixturesDir,
--- a/tests/oci/oci.test.ts
+++ b/tests/oci/oci.test.ts
@@ -14,13 +14,17 @@
 * limitations under the License.
 */

-import {afterEach, describe, expect, test} from '@jest/globals';
+import {afterEach, describe, expect, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';

-import {OCI} from '../../src/oci/oci';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {OCI} from '../../src/oci/oci.js';
+
+import {Platform} from '../../src/types/oci/descriptor.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'oci-oci-'));
@@ -29,11 +33,30 @@ afterEach(function () {
  rimraf.sync(tmpDir);
 });

+describe('defaultPlatform', () => {
+  test.each([
+    ['win32', 'x64', {architecture: 'amd64', os: 'windows'}],
+    ['win32', 'arm64', {architecture: 'arm64', os: 'windows'}],
+    ['darwin', 'x64', {architecture: 'amd64', os: 'darwin'}],
+    ['darwin', 'arm64', {architecture: 'arm64', os: 'darwin'}],
+    ['linux', 'ia32', {architecture: '386', os: 'linux'}],
+    ['linux', 'x64', {architecture: 'amd64', os: 'linux'}],
+    ['linux', 'arm64', {architecture: 'arm64', os: 'linux'}],
+    ['linux', 'ppc64', {architecture: 'ppc64le', os: 'linux'}],
+    ['linux', 's390x', {architecture: 's390x', os: 'linux'}]
+  ])('default platform for %s/%s', async (os: string, arch: string, expected: Platform) => {
+    mockPlatform(os as NodeJS.Platform);
+    mockArch(arch);
+    const res = OCI.defaultPlatform();
+    expect(res).toEqual(expected);
+  });
+});
+
 describe('loadArchive', () => {
  // prettier-ignore
  test.each(fs.readdirSync(path.join(fixturesDir, 'oci-archive')).filter(file => {
      return fs.statSync(path.join(path.join(fixturesDir, 'oci-archive'), file)).isFile();
-    }).map(filename => [filename]))('extracting %p', async (filename) => {
+    }).map(filename => [filename]))('extracting %o', async (filename) => {
    const res = await OCI.loadArchive({
      file: path.join(fixturesDir, 'oci-archive', filename)
    });
--- a/tests/regclient/install.test.itg.ts
+++ b/tests/regclient/install.test.itg.ts
@@ -14,10 +14,10 @@
 * limitations under the License.
 */

-import {describe, expect, test} from '@jest/globals';
+import {describe, expect, test} from 'vitest';
 import * as fs from 'fs';

-import {Install} from '../../src/regclient/install';
+import {Install} from '../../src/regclient/install.js';

 describe('download', () => {
  // prettier-ignore
--- a/tests/regclient/install.test.ts
+++ b/tests/regclient/install.test.ts
@@ -14,14 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, it, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
-import osm = require('os');

-import {Install} from '../../src/regclient/install';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {Install} from '../../src/regclient/install.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'regclient-install-'));

@@ -35,7 +36,7 @@ describe('download', () => {
    ['v0.8.2'],
    ['latest']
  ])(
-  'acquires %p of regclient', async (version) => {
+  'acquires %o of regclient', async (version) => {
    const install = new Install();
    const toolPath = await install.download(version);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -48,7 +49,7 @@ describe('download', () => {
    // following versions are already cached to htc from previous test cases
    ['v0.8.2'],
  ])(
-  'acquires %p of regclient with cache', async (version) => {
+  'acquires %o of regclient with cache', async (version) => {
    const install = new Install();
    const toolPath = await install.download(version);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -58,7 +59,7 @@ describe('download', () => {
  test.each([
    ['v0.8.1'],
  ])(
-  'acquires %p of regclient without cache', async (version) => {
+  'acquires %o of regclient without cache', async (version) => {
    const install = new Install();
    const toolPath = await install.download(version, true);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -75,8 +76,8 @@ describe('download', () => {
    ['linux', 's390x'],
  ])(
  'acquires regclient for %s/%s', async (os, arch) => {
-    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
-    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    mockPlatform(os as NodeJS.Platform);
+    mockArch(arch);
    const install = new Install();
    const regclientBin = await install.download('latest');
    expect(fs.existsSync(regclientBin)).toBe(true);
--- a/tests/regclient/regctl.test.ts
+++ b/tests/regclient/regctl.test.ts
@@ -14,20 +14,20 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, vi, test} from 'vitest';
 import * as semver from 'semver';

-import {Exec} from '../../src/exec';
-import {Regctl} from '../../src/regclient/regctl';
+import {Exec} from '../../src/exec.js';
+import {Regctl} from '../../src/regclient/regctl.js';

-import {Image} from '../../src/types/oci/config';
+import {Image} from '../../src/types/oci/config.js';

 describe('manifestGet', () => {
  // prettier-ignore
  test.each([
    ['moby/moby-bin:28.1.0-rc.2'],
    ['crazymax/diun:4.17.0'],
-  ])('given %p', async image => {
+  ])('given %o', async image => {
    const regctl = new Regctl();
    const manifest = await regctl.manifestGet({
      image: image,
@@ -45,7 +45,7 @@ describe('blobGet', () => {
  test.each([
    ['moby/moby-bin', 'sha256:234fccbd13fde0ba978a19f728cbdc67e29bc76247ac560822bb6ae5236c0bf0'],
    ['crazymax/diun', 'sha256:1e4881f66e0ec0f1710b837002107050bbbc0a231d8a42d7f422b56a139900bb'],
-  ])('given %p', async (repo, digest) => {
+  ])('given %o', async (repo, digest) => {
    const regctl = new Regctl();
    const blob = await regctl.blobGet({
      repository: repo,
@@ -60,7 +60,7 @@ describe('image config', () => {
  test.each([
    ['moby/moby-bin:28.1.0-rc.2'],
    ['crazymax/diun:4.17.0'],
-  ])('given %p', async image => {
+  ])('given %o', async image => {
    const regctl = new Regctl();
    const manifest = await regctl.manifestGet({
      image: image,
@@ -82,10 +82,9 @@ describe('image config', () => {

 describe('isAvailable', () => {
  it('checks regctl is available', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const regctl = new Regctl();
    await regctl.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`regctl`, [], {
      silent: true,
      ignoreReturnCode: true
@@ -95,7 +94,7 @@ describe('isAvailable', () => {

 describe('printVersion', () => {
  it('prints regctl version', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const regctl = new Regctl();
    await regctl.printVersion();
    expect(execSpy).toHaveBeenCalledWith(`regctl`, ['version'], {
@@ -116,7 +115,7 @@ describe('versionSatisfies', () => {
    ['v0.8.2', '>=0.6.0', true],
    ['v0.8.0', '>0.6.0', true],
    ['v0.8.0', '<0.3.0', false]
-  ])('given %p', async (version, range, expected) => {
+  ])('given %o', async (version, range, expected) => {
    const regctl = new Regctl();
    expect(await regctl.versionSatisfies(range, version)).toBe(expected);
  });
--- a/tests/sigstore/sigstore-cosign-old.test.itg.ts
+++ b/tests/sigstore/sigstore-cosign-old.test.itg.ts
@@ -0,0 +1,90 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeAll, describe, expect, it} from 'vitest';
+import * as path from 'path';
+
+import {Buildx} from '../../src/buildx/buildx.js';
+import {Build} from '../../src/buildx/build.js';
+import {Install as CosignInstall} from '../../src/cosign/install.js';
+import {Docker} from '../../src/docker/docker.js';
+import {Exec} from '../../src/exec.js';
+import {Sigstore} from '../../src/sigstore/sigstore.js';
+
+const fixturesDir = path.join(__dirname, '..', '.fixtures');
+
+const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');
+
+const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;
+
+beforeAll(async () => {
+  const cosignInstall = new CosignInstall();
+  const cosignBinPath = await cosignInstall.download({
+    version: 'v3.0.2'
+  });
+  await cosignInstall.install(cosignBinPath);
+}, 100000);
+
+maybeIdToken('signAttestationManifests', () => {
+  it('build, sign and verify', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+    const imageName = 'ghcr.io/docker/actions-toolkit/test';
+
+    await expect(
+      (async () => {
+        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+          input: Buffer.from(process.env.GITHUB_TOKEN || '')
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          '--provenance=mode=max',
+          '--tag', `${imageName}:sigstore-itg`,
+          '--platform', 'linux/amd64,linux/arm64',
+          '--push',
+          '--metadata-file', build.getMetadataFilePath(),
+          fixturesDir
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildDigest = build.resolveDigest(metadata);
+    expect(buildDigest).toBeDefined();
+
+    const sigstore = new Sigstore();
+    const signResults = await sigstore.signAttestationManifests({
+      imageNames: [imageName],
+      imageDigest: buildDigest!
+    });
+    expect(Object.keys(signResults).length).toEqual(2);
+
+    const verifyResults = await sigstore.verifySignedManifests(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
+    expect(Object.keys(verifyResults).length).toEqual(2);
+  }, 100000);
+});
--- a/tests/sigstore/sigstore.test.itg.ts
+++ b/tests/sigstore/sigstore.test.itg.ts
@@ -14,27 +14,121 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it, beforeAll} from '@jest/globals';
+import {beforeAll, describe, expect, it, test} from 'vitest';
 import fs from 'fs';
 import * as path from 'path';

-import {Install as CosignInstall} from '../../src/cosign/install';
-import {Sigstore} from '../../src/sigstore/sigstore';
+import {Buildx} from '../../src/buildx/buildx.js';
+import {Build} from '../../src/buildx/build.js';
+import {Install as CosignInstall} from '../../src/cosign/install.js';
+import {Docker} from '../../src/docker/docker.js';
+import {Exec} from '../../src/exec.js';
+import {OCI} from '../../src/oci/oci.js';
+import {Sigstore} from '../../src/sigstore/sigstore.js';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

-const maybe = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ACTIONS_ID_TOKEN_REQUEST_URL && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu') ? describe : describe.skip;
+const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');

-// needs current GitHub repo info
-jest.unmock('@actions/github');
+const maybe = runTest ? describe : describe.skip;
+const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;

 beforeAll(async () => {
  const cosignInstall = new CosignInstall();
-  const cosignBinPath = await cosignInstall.download('v3.0.2', true);
+  const cosignBinPath = await cosignInstall.download({
+    version: 'v3.0.4'
+  });
  await cosignInstall.install(cosignBinPath);
 }, 100000);

-maybe('signProvenanceBlobs', () => {
+maybeIdToken('signAttestationManifests', () => {
+  it('build, sign and verify', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+    const imageName = 'ghcr.io/docker/actions-toolkit/test';
+
+    await expect(
+      (async () => {
+        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+          input: Buffer.from(process.env.GITHUB_TOKEN || '')
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          '--provenance=mode=max',
+          '--tag', `${imageName}:sigstore-itg`,
+          '--platform', 'linux/amd64,linux/arm64',
+          '--push',
+          '--metadata-file', build.getMetadataFilePath(),
+          fixturesDir
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildDigest = build.resolveDigest(metadata);
+    expect(buildDigest).toBeDefined();
+
+    const sigstore = new Sigstore();
+    const signResults = await sigstore.signAttestationManifests({
+      imageNames: [imageName],
+      imageDigest: buildDigest!
+    });
+    expect(Object.keys(signResults).length).toEqual(2);
+
+    const verifyResults = await sigstore.verifySignedManifests(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
+    expect(Object.keys(verifyResults).length).toEqual(2);
+  }, 100000);
+});
+
+maybe('verifyImageAttestations', () => {
+  test.each([
+    ['moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`],
+    ['docker/dockerfile-upstream:master@sha256:3e8cd5ebf48acd1a1939649ad1c62ca44c029852b22493c16a9307b654334958', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`]
+  ])(
+    'given %p',
+    async (image, certificateIdentityRegexp) => {
+      const sigstore = new Sigstore();
+      const verifyResults = await sigstore.verifyImageAttestations(image, {
+        certificateIdentityRegexp: certificateIdentityRegexp
+      });
+      expect(Object.keys(verifyResults).length).toBeGreaterThan(0);
+      for (const [attestationRef, res] of Object.entries(verifyResults)) {
+        expect(attestationRef).toBeDefined();
+        expect(res.cosignArgs).toBeDefined();
+        expect(res.signatureManifestDigest).toBeDefined();
+      }
+    },
+    60000
+  );
+
+  it('default platform', async () => {
+    const sigstore = new Sigstore();
+    const verifyResults = await sigstore.verifyImageAttestations('moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', {
+      certificateIdentityRegexp: `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`,
+      platform: OCI.defaultPlatform()
+    });
+    expect(Object.keys(verifyResults).length).toEqual(1);
+    for (const [attestationRef, res] of Object.entries(verifyResults)) {
+      expect(attestationRef).toBeDefined();
+      expect(res.cosignArgs).toBeDefined();
+      expect(res.signatureManifestDigest).toBeDefined();
+    }
+  });
+});
+
+maybeIdToken('signProvenanceBlobs', () => {
  it('single platform', async () => {
    const sigstore = new Sigstore();
    const results = await sigstore.signProvenanceBlobs({
@@ -66,7 +160,7 @@ maybe('signProvenanceBlobs', () => {
  });
 });

-maybe('verifySignedArtifacts', () => {
+maybeIdToken('verifySignedArtifacts', () => {
  it('sign and verify', async () => {
    const sigstore = new Sigstore();
    const signResults = await sigstore.signProvenanceBlobs({
@@ -74,12 +168,9 @@ maybe('verifySignedArtifacts', () => {
    });
    expect(Object.keys(signResults).length).toEqual(2);

-    const verifyResults = await sigstore.verifySignedArtifacts(
-      {
-        certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-      },
-      signResults
-    );
+    const verifyResults = await sigstore.verifySignedArtifacts(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
    expect(Object.keys(verifyResults).length).toEqual(2);
    for (const [artifactPath, res] of Object.entries(verifyResults)) {
      expect(fs.existsSync(artifactPath)).toBe(true);
--- a/tests/undock/install.test.itg.ts
+++ b/tests/undock/install.test.itg.ts
@@ -14,10 +14,10 @@
 * limitations under the License.
 */

-import {describe, expect, test} from '@jest/globals';
+import {describe, expect, test} from 'vitest';
 import * as fs from 'fs';

-import {Install} from '../../src/undock/install';
+import {Install} from '../../src/undock/install.js';

 describe('download', () => {
  // prettier-ignore
--- a/tests/undock/install.test.ts
+++ b/tests/undock/install.test.ts
@@ -14,14 +14,15 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
+import {describe, expect, it, test, afterEach} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
-import osm = require('os');

-import {Install} from '../../src/undock/install';
+import {mockArch, mockPlatform} from '../.helpers/os.js';
+
+import {Install} from '../../src/undock/install.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'undock-install-'));

@@ -36,7 +37,7 @@ describe('download', () => {
    ['v0.7.0'],
    ['latest']
  ])(
-  'acquires %p of undock', async (version) => {
+  'acquires %o of undock', async (version) => {
    const install = new Install();
    const toolPath = await install.download(version);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -50,7 +51,7 @@ describe('download', () => {
    ['v0.4.0'],
    ['v0.7.0'],
  ])(
-  'acquires %p of undock with cache', async (version) => {
+  'acquires %o of undock with cache', async (version) => {
    const install = new Install();
    const toolPath = await install.download(version);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -61,7 +62,7 @@ describe('download', () => {
    ['v0.5.0'],
    ['v0.6.0'],
  ])(
-  'acquires %p of undock without cache', async (version) => {
+  'acquires %o of undock without cache', async (version) => {
    const install = new Install();
    const toolPath = await install.download(version, true);
    expect(fs.existsSync(toolPath)).toBe(true);
@@ -80,8 +81,8 @@ describe('download', () => {
    ['linux', 's390x'],
  ])(
  'acquires undock for %s/%s', async (os, arch) => {
-    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
-    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    mockPlatform(os as NodeJS.Platform);
+    mockArch(arch);
    const install = new Install();
    const undockBin = await install.download('latest');
    expect(fs.existsSync(undockBin)).toBe(true);
--- a/tests/undock/undock.test.itg.ts
+++ b/tests/undock/undock.test.itg.ts
@@ -14,12 +14,12 @@
 * limitations under the License.
 */

-import {describe, expect, it} from '@jest/globals';
+import {describe, expect, it} from 'vitest';
 import fs from 'fs';
 import os from 'os';

-import {Undock} from '../../src/undock/undock';
-import {Install as UndockInstall} from '../../src/undock/install';
+import {Undock} from '../../src/undock/undock.js';
+import {Install as UndockInstall} from '../../src/undock/install.js';

 describe('run', () => {
  it('extracts moby/moby-bin:26.1.5', async () => {
--- a/tests/undock/undock.test.ts
+++ b/tests/undock/undock.test.ts
@@ -17,11 +17,11 @@
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
-import {describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, vi, test} from 'vitest';
 import * as semver from 'semver';

-import {Exec} from '../../src/exec';
-import {Undock} from '../../src/undock/undock';
+import {Exec} from '../../src/exec.js';
+import {Undock} from '../../src/undock/undock.js';

 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'undock-undock-'));

@@ -43,10 +43,9 @@ describe('run', () => {

 describe('isAvailable', () => {
  it('checks undock is available', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const execSpy = vi.spyOn(Exec, 'getExecOutput');
    const undock = new Undock();
    await undock.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`undock`, [], {
      silent: true,
      ignoreReturnCode: true
@@ -56,7 +55,7 @@ describe('isAvailable', () => {

 describe('printVersion', () => {
  it('prints undock version', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = vi.spyOn(Exec, 'exec');
    const undock = new Undock();
    await undock.printVersion();
    expect(execSpy).toHaveBeenCalledWith(`undock`, ['--version'], {
@@ -77,7 +76,7 @@ describe('versionSatisfies', () => {
    ['v0.4.1', '>=0.3.2', true],
    ['v0.8.0', '>0.6.0', true],
    ['v0.8.0', '<0.3.0', false]
-  ])('given %p', async (version, range, expected) => {
+  ])('given %o', async (version, range, expected) => {
    const undock = new Undock();
    expect(await undock.versionSatisfies(range, version)).toBe(expected);
  });
--- a/tests/util.test.ts
+++ b/tests/util.test.ts
@@ -14,11 +14,11 @@
 * limitations under the License.
 */

-import {describe, expect, it, test} from '@jest/globals';
+import {describe, expect, it, test} from 'vitest';
 import * as fs from 'fs';
 import * as path from 'path';

-import {Util} from '../src/util';
+import {Util} from '../src/util.js';

 describe('getInputList', () => {
  it('single line correctly', async () => {
@@ -87,6 +87,12 @@ describe('getInputList', () => {
    expect(res).toEqual(['foo=bar', 'bar=qux']);
  });

+  it('multiline with comment and no infix comment', async () => {
+    setInput('labels', '# ignore this\nfoo=bar\nbar=qux#baz');
+    const res = Util.getInputList('labels', {comment: '#', commentNoInfix: true});
+    expect(res).toEqual(['foo=bar', 'bar=qux#baz']);
+  });
+
  it('different new lines and ignoring comma correctly', async () => {
    setInput('cache-from', 'user/app:cache\r\ntype=local,src=path/to/dir');
    const res = Util.getInputList('cache-from', {ignoreComma: true});
@@ -247,7 +253,7 @@ describe('isValidURL', () => {
    ['git://github.com/user/repo.git', false],
    ['github.com/moby/buildkit.git#main', false],
    ['v0.4.1', false]
-  ])('given %p', async (url, expected) => {
+  ])('given %o', async (url, expected) => {
    expect(Util.isValidURL(url)).toEqual(expected);
  });
 });
@@ -260,7 +266,7 @@ describe('isValidRef', () => {
    ['git://github.com/user/repo.git', true],
    ['github.com/moby/buildkit.git#main', true],
    ['v0.4.1', false]
-  ])('given %p', async (url, expected) => {
+  ])('given %o', async (url, expected) => {
    expect(Util.isValidRef(url)).toEqual(expected);
  });
 });
@@ -278,7 +284,7 @@ describe('trimPrefix', () => {
    ['abcdabc', 'abc', 'dabc'],
    ['abcabc', 'abc', 'abc'],
    ['abcdabc', 'd', 'abcdabc']
-  ])('given %p', async (str, prefix, expected) => {
+  ])('given %o', async (str, prefix, expected) => {
    expect(Util.trimPrefix(str, prefix)).toEqual(expected);
  });
 });
@@ -295,7 +301,7 @@ describe('trimSuffix', () => {
    ['abcdabc', 'abc', 'abcd'],
    ['abcabc', 'abc', 'abc'],
    ['abcdabc', 'd', 'abcdabc']
-  ])('given %p', async (str, suffix, expected) => {
+  ])('given %o', async (str, suffix, expected) => {
    expect(Util.trimSuffix(str, suffix)).toEqual(expected);
  });
 });
@@ -326,10 +332,10 @@ describe('parseBool', () => {
  ].forEach(({input, expected, throwsError}) => {
    test(`parseBool("${input}")`, () => {
      if (throwsError) {
-        // eslint-disable-next-line jest/no-conditional-expect
+        // eslint-disable-next-line vitest/no-conditional-expect
        expect(() => Util.parseBool(input)).toThrow();
      } else {
-        // eslint-disable-next-line jest/no-conditional-expect
+        // eslint-disable-next-line vitest/no-conditional-expect
        expect(Util.parseBool(input)).toBe(expected);
      }
    });
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -14,13 +14,13 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.

-ARG NODE_VERSION=20
-ARG DOCKER_VERSION=28.3
-ARG BUILDX_VERSION=0.29.1
+ARG NODE_VERSION=24
+ARG DOCKER_VERSION=29.2
+ARG BUILDX_VERSION=0.32.1
 ARG COMPOSE_VERSION=2.39.1
 ARG UNDOCK_VERSION=0.10.0
 ARG REGCTL_VERSION=v0.8.2
-ARG COSIGN_VERSION=v3.0.2
+ARG COSIGN_VERSION=v3.0.3

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
@@ -96,29 +96,8 @@ RUN --mount=type=bind,target=.,rw \
    --mount=type=bind,from=undock,source=/usr/local/bin/undock,target=/usr/bin/undock \
    --mount=type=bind,from=regctl,source=/regctl,target=/usr/bin/regctl \
    --mount=type=bind,from=cosign,source=/ko-app/cosign,target=/usr/bin/cosign \
-    --mount=type=secret,id=GITHUB_TOKEN \
-  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test:coverage --coverageDirectory=/tmp/coverage
+    --mount=type=secret,id=GITHUB_TOKEN,env=GITHUB_TOKEN \
+  yarn run test:coverage --coverage.reportsDirectory=/tmp/coverage

 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /
-
-FROM base AS publish
-ARG GITHUB_REF
-RUN --mount=type=bind,target=.,rw \
-    --mount=type=cache,target=/src/.yarn/cache \
-    --mount=type=cache,target=/src/node_modules \
-    --mount=type=secret,id=NODE_AUTH_TOKEN,env=NODE_AUTH_TOKEN <<EOT
-  set -e
-  if ! [[ $GITHUB_REF =~ ^refs/tags/v ]]; then
-    echo "GITHUB_REF is not a tag"
-    exit 1
-  fi
-  yarn install
-  yarn run build
-  npm config set //registry.npmjs.org/:_authToken $NODE_AUTH_TOKEN
-  npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
-  npm publish --access public
-
-  # FIXME: Can't publish with yarn berry atm: https://github.com/changesets/changesets/pull/674
-  #yarn publish --no-git-tag-version --new-version ${GITHUB_REF#refs/tags/v}
-EOT
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -99,23 +99,6 @@ target "test-coverage" {
  secret = ["id=GITHUB_TOKEN,env=GITHUB_TOKEN"]
 }

-# GITHUB_REF is the actual ref that triggers the workflow and used as version
-# when a tag is pushed: https://docs.github.com/en/actions/learn-github-actions/environment-variables#default-environment-variables
-variable "GITHUB_REF" {
-  default = ""
-}
-
-target "publish" {
-  inherits = ["_common"]
-  dockerfile = "dev.Dockerfile"
-  args = {
-    GITHUB_REF = GITHUB_REF
-  }
-  target = "publish"
-  output = ["type=cacheonly"]
-  secret = ["id=NODE_AUTH_TOKEN,env=NODE_AUTH_TOKEN"]
-}
-
 target "license-validate" {
  inherits = ["_common"]
  dockerfile = "./hack/dockerfiles/license.Dockerfile"
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -0,0 +1,68 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {defineConfig} from 'eslint/config';
+import js from '@eslint/js';
+import tseslint from '@typescript-eslint/eslint-plugin';
+import vitest from '@vitest/eslint-plugin';
+import globals from 'globals';
+import eslintConfigPrettier from 'eslint-config-prettier/flat';
+import eslintPluginPrettier from 'eslint-plugin-prettier';
+
+export default defineConfig([
+  {
+    ignores: ['.yarn/**/*', 'coverage/**/*', 'lib/**/*']
+  },
+  js.configs.recommended,
+  ...tseslint.configs['flat/recommended'],
+  eslintConfigPrettier,
+  {
+    languageOptions: {
+      globals: {
+        ...globals.node
+      }
+    }
+  },
+  {
+    files: ['__tests__/**'],
+    ...vitest.configs.recommended,
+    languageOptions: {
+      globals: {
+        ...globals.node,
+        ...vitest.environments.env.globals
+      }
+    },
+    rules: {
+      ...vitest.configs.recommended.rules,
+      'vitest/no-conditional-expect': 'error',
+      'vitest/no-disabled-tests': 0
+    }
+  },
+  {
+    plugins: {
+      prettier: eslintPluginPrettier
+    },
+    rules: {
+      'prettier/prettier': 'error',
+      '@typescript-eslint/no-require-imports': [
+        'error',
+        {
+          allowAsImport: true
+        }
+      ]
+    }
+  }
+]);
--- a/hack/dockerfiles/license.Dockerfile
+++ b/hack/dockerfiles/license.Dockerfile
@@ -14,14 +14,14 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.

-ARG ADDLICENSE_VERSION="v1.1.1"
-ARG ALPINE_VERSION="3.21"
-ARG GO_VERSION="1.23"
-ARG XX_VERSION="1.6.1"
+ARG ADDLICENSE_VERSION="v1.2.0"
+ARG ALPINE_VERSION="3.23"
+ARG GO_VERSION="1.26"
+ARG XX_VERSION="1.9.0"

 ARG LICENSE_HOLDER="actions-toolkit authors"
 ARG LICENSE_TYPE="apache"
-ARG LICENSE_FILES=".*\(Dockerfile\|Makefile\|\.js\|\.ts\|\.hcl\|\.sh|\.ps1\)"
+ARG LICENSE_FILES=".*\(Dockerfile\|Makefile\|\.js\|\.cjs\|\.mjs\|\.ts\|\.hcl\|\.sh|\.ps1\)"

 FROM --platform=$BUILDPLATFORM tonistiigi/xx:${XX_VERSION} AS xx

@@ -52,9 +52,9 @@ ARG LICENSE_TYPE
 ARG LICENSE_FILES
 RUN --mount=type=bind,target=.,rw \
    --mount=from=addlicense,source=/out/addlicense,target=/usr/bin/addlicense \
-    find . -regex "${LICENSE_FILES}" -not -path "./.yarn/*" -not -path "./node_modules/*" | xargs addlicense -c "$LICENSE_HOLDER" -l "$LICENSE_TYPE" && \
+    find . -regex "${LICENSE_FILES}" -not -path "./.yarn/*" -not -path "./lib/*" -not -path "./node_modules/*" | xargs addlicense -c "$LICENSE_HOLDER" -l "$LICENSE_TYPE" && \
    mkdir /out && \
-    find . -regex "${LICENSE_FILES}" -not -path "./.yarn/*" -not -path "./node_modules/*" | cpio -pdm /out
+    find . -regex "${LICENSE_FILES}" -not -path "./.yarn/*" -not -path "./lib/*"  -not -path "./node_modules/*" | cpio -pdm /out

 FROM scratch AS update
 COPY --from=set /out /
@@ -65,4 +65,4 @@ ARG LICENSE_TYPE
 ARG LICENSE_FILES
 RUN --mount=type=bind,target=. \
    --mount=from=addlicense,source=/out/addlicense,target=/usr/bin/addlicense \
-    find . -regex "${LICENSE_FILES}" -not -path "./.yarn/*" -not -path "./node_modules/*" | xargs addlicense -check -c "$LICENSE_HOLDER" -l "$LICENSE_TYPE"
+    find . -regex "${LICENSE_FILES}" -not -path "./.yarn/*" -not -path "./lib/*" -not -path "./node_modules/*" | xargs addlicense -check -c "$LICENSE_HOLDER" -l "$LICENSE_TYPE"
--- a/jest.config.ts
+++ b/jest.config.ts
@@ -1,51 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import fs from 'fs';
-import os from 'os';
-import path from 'path';
-
-const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
-
-process.env = Object.assign({}, process.env, {
-  TEMP: tmpDir,
-  GITHUB_REPOSITORY: 'docker/actions-toolkit',
-  GITHUB_RUN_ATTEMPT: 2,
-  GITHUB_RUN_ID: 2188748038,
-  GITHUB_RUN_NUMBER: 15,
-  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
-  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
-}) as {
-  [key: string]: string;
-};
-
-module.exports = {
-  clearMocks: true,
-  testEnvironment: 'node',
-  moduleFileExtensions: ['js', 'ts'],
-  setupFiles: ['dotenv/config'],
-  testMatch: ['**/*.test.ts'],
-  transform: {
-    '^.+\\.ts$': 'ts-jest'
-  },
-  moduleNameMapper: {
-    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
-  },
-  collectCoverageFrom: ['src/**/{!(index.ts),}.ts'],
-  coveragePathIgnorePatterns: ['lib/', 'node_modules/', '__mocks__/', '__tests__/'],
-  testResultsProcessor: './__tests__/testResultsProcessor.ts',
-  verbose: true
-};
--- a/package.json
+++ b/package.json
@@ -2,19 +2,16 @@
  "name": "@docker/actions-toolkit",
  "version": "0.0.0+unknown",
  "description": "Toolkit for Docker (GitHub) Actions",
+  "type": "module",
  "scripts": {
    "build": "tsc",
-    "lint": "yarn run prettier && yarn run eslint",
-    "format": "yarn run prettier:fix && yarn run eslint:fix",
-    "eslint": "eslint --max-warnings=0 .",
-    "eslint:fix": "eslint --fix .",
-    "prettier": "prettier --check \"./**/*.ts\"",
-    "prettier:fix": "prettier --write \"./**/*.ts\"",
-    "test": "jest",
-    "test:coverage": "jest --coverage",
-    "test:itg": "jest -c jest.config.itg.ts --runInBand --detectOpenHandles",
-    "test:itg-list": "jest -c jest.config.itg.ts --listTests",
-    "test:itg-coverage": "jest --coverage -c jest.config.itg.ts --runInBand --detectOpenHandles"
+    "lint": "eslint --max-warnings=0 .",
+    "format": "eslint --fix .",
+    "test": "vitest run -c vitest.config.ts",
+    "test:coverage": "vitest run -c vitest.config.ts --coverage",
+    "test:itg": "vitest run -c vitest.config.itg.ts --maxWorkers=1",
+    "test:itg-list": "node ./__tests__/.setup/list-itg-tests.mjs",
+    "test:itg-coverage": "vitest run -c vitest.config.itg.ts --coverage --maxWorkers=1"
  },
  "repository": {
    "type": "git",
@@ -45,52 +42,49 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/artifact": "^4.0.0",
-    "@actions/cache": "^4.1.0",
-    "@actions/core": "^1.11.1",
-    "@actions/exec": "^1.1.1",
-    "@actions/github": "^6.0.1",
-    "@actions/http-client": "^2.2.3",
-    "@actions/io": "^1.1.3",
-    "@actions/tool-cache": "^2.0.2",
-    "@azure/storage-blob": "^12.15.0",
-    "@octokit/core": "^5.2.2",
-    "@octokit/plugin-rest-endpoint-methods": "^10.4.1",
+    "@actions/artifact": "^6.2.0",
+    "@actions/cache": "^6.0.0",
+    "@actions/core": "^3.0.0",
+    "@actions/exec": "^3.0.0",
+    "@actions/github": "^9.0.0",
+    "@actions/http-client": "^4.0.0",
+    "@actions/io": "^3.0.2",
+    "@actions/tool-cache": "^4.0.0",
    "@sigstore/bundle": "^4.0.0",
-    "@sigstore/sign": "^4.0.1",
+    "@sigstore/sign": "^4.1.0",
+    "@sigstore/tuf": "^4.0.1",
+    "@sigstore/verify": "^3.1.0",
    "async-retry": "^1.3.3",
    "csv-parse": "^6.1.0",
    "gunzip-maybe": "^1.4.2",
    "handlebars": "^4.7.8",
    "he": "^1.2.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.1.1",
    "jwt-decode": "^4.0.0",
-    "semver": "^7.7.3",
+    "semver": "^7.7.4",
    "tar-stream": "^3.1.7",
    "tmp": "^0.2.5"
  },
  "devDependencies": {
-    "@sigstore/rekor-types": "^3.0.0",
-    "@types/gunzip-maybe": "^1.4.2",
+    "@eslint/js": "^9.39.3",
+    "@types/gunzip-maybe": "^1.4.3",
    "@types/he": "^1.2.3",
    "@types/js-yaml": "^4.0.9",
-    "@types/node": "^20.19.9",
+    "@types/node": "^24.11.0",
    "@types/semver": "^7.7.1",
    "@types/tar-stream": "^3.1.4",
    "@types/tmp": "^0.2.6",
-    "@typescript-eslint/eslint-plugin": "^7.18.0",
-    "@typescript-eslint/parser": "^7.18.0",
-    "dotenv": "^17.2.1",
-    "eslint": "^8.57.1",
-    "eslint-config-prettier": "^9.1.2",
-    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-jest": "^28.14.0",
-    "eslint-plugin-prettier": "^5.5.3",
-    "jest": "^29.7.0",
-    "prettier": "^3.6.2",
-    "rimraf": "^6.0.1",
-    "ts-jest": "^29.4.1",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.9.2"
+    "@typescript-eslint/eslint-plugin": "^8.56.1",
+    "@typescript-eslint/parser": "^8.56.1",
+    "@vitest/coverage-v8": "^4.0.18",
+    "@vitest/eslint-plugin": "^1.6.9",
+    "eslint": "^9.39.3",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-prettier": "^5.5.5",
+    "globals": "^17.3.0",
+    "prettier": "^3.8.1",
+    "rimraf": "^6.1.3",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
  }
 }
--- a/src/buildkit/buildkit.ts
+++ b/src/buildkit/buildkit.ts
@@ -17,12 +17,12 @@
 import * as core from '@actions/core';
 import * as semver from 'semver';

-import {Buildx} from '../buildx/buildx';
-import {Builder} from '../buildx/builder';
-import {Docker} from '../docker/docker';
-import {Config} from './config';
+import {Buildx} from '../buildx/buildx.js';
+import {Builder} from '../buildx/builder.js';
+import {Docker} from '../docker/docker.js';
+import {Config} from './config.js';

-import {BuilderInfo, NodeInfo} from '../types/buildx/builder';
+import {BuilderInfo, NodeInfo} from '../types/buildx/builder.js';

 export interface BuildKitOpts {
  buildx?: Buildx;
@@ -85,7 +85,7 @@ export class BuildKit {
      if (!bkversion) {
        try {
          bkversion = await this.getVersionWithinImage(node.name || '');
-        } catch (e) {
+        } catch {
          core.debug(`BuildKit.versionSatisfies ${node.name}: can't get version`);
          return false;
        }
--- a/src/buildkit/config.ts
+++ b/src/buildkit/config.ts
@@ -16,7 +16,7 @@

 import fs from 'fs';

-import {Context} from '../context';
+import {Context} from '../context.js';

 export class Config {
  public resolveFromString(s: string): string {
--- a/src/buildkit/git.ts
+++ b/src/buildkit/git.ts
@@ -14,7 +14,7 @@
 * limitations under the License.
 */

-import {GitRef, GitURL, GitURLFragment, URLUserInfo} from '../types/buildkit/git';
+import {GitRef, GitURL, GitURLFragment, URLUserInfo} from '../types/buildkit/git.js';

 export class Git {
  private static protoRegexp = new RegExp('^[a-zA-Z0-9]+://');
--- a/src/buildx/bake.ts
+++ b/src/buildx/bake.ts
@@ -18,15 +18,15 @@ import fs from 'fs';
 import path from 'path';
 import {parse} from 'csv-parse/sync';

-import {Buildx} from './buildx';
-import {Context} from '../context';
-import {Exec} from '../exec';
-import {Util} from '../util';
+import {Buildx} from './buildx.js';
+import {Context} from '../context.js';
+import {Exec} from '../exec.js';
+import {Util} from '../util.js';

 import {ExecOptions} from '@actions/exec';
-import {AttestEntry, BakeDefinition, CacheEntry, ExportEntry, SecretEntry, SSHEntry} from '../types/buildx/bake';
-import {BuildMetadata} from '../types/buildx/build';
-import {VertexWarning} from '../types/buildkit/client';
+import {AttestEntry, BakeDefinition, CacheEntry, ExportEntry, SecretEntry, SSHEntry} from '../types/buildx/bake.js';
+import {BuildMetadata} from '../types/buildx/build.js';
+import {VertexWarning} from '../types/buildkit/client.js';

 export interface BakeOpts {
  buildx?: Buildx;
@@ -105,13 +105,7 @@ export class Bake {
  public async getDefinition(cmdOpts: BakeCmdOpts, execOptions?: ExecOptions): Promise<BakeDefinition> {
    execOptions = execOptions || {ignoreReturnCode: true};
    execOptions.ignoreReturnCode = true;
-    if (cmdOpts.githubToken) {
-      execOptions.env = Object.assign({}, process.env, {
-        BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken
-      }) as {
-        [key: string]: string;
-      };
-    }
+    execOptions.env = Object.assign({}, process.env, execOptions.env || {}, cmdOpts.githubToken ? {BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken} : {});

    const args = ['bake'];

@@ -424,4 +418,34 @@ export class Bake {
    }
    return false;
  }
+
+  public static hasProvenanceAttestation(def: BakeDefinition): boolean {
+    return Bake.hasAttestationType('provenance', Bake.attestations(def));
+  }
+
+  public static hasSBOMAttestation(def: BakeDefinition): boolean {
+    return Bake.hasAttestationType('sbom', Bake.attestations(def));
+  }
+
+  public static hasAttestationType(name: string, attestations: Array<AttestEntry>): boolean {
+    for (const attestation of attestations) {
+      if (attestation.type == name) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  private static attestations(def: BakeDefinition): Array<AttestEntry> {
+    const attestations = new Array<AttestEntry>();
+    for (const key in def.target) {
+      const target = def.target[key];
+      if (target.attest) {
+        for (const attest of target.attest) {
+          attestations.push(Bake.parseAttestEntry(attest));
+        }
+      }
+    }
+    return attestations;
+  }
 }
--- a/src/buildx/build.ts
+++ b/src/buildx/build.ts
@@ -19,14 +19,14 @@ import path from 'path';
 import * as core from '@actions/core';
 import {parse} from 'csv-parse/sync';

-import {Buildx} from './buildx';
-import {Context} from '../context';
-import {GitHub} from '../github';
-import {Util} from '../util';
+import {Buildx} from './buildx.js';
+import {Context} from '../context.js';
+import {GitHub} from '../github/github.js';
+import {Util} from '../util.js';

-import {BuildMetadata} from '../types/buildx/build';
-import {VertexWarning} from '../types/buildkit/client';
-import {ProvenancePredicate} from '../types/intoto/slsa_provenance/v0.2/provenance';
+import {BuildMetadata} from '../types/buildx/build.js';
+import {VertexWarning} from '../types/buildkit/client.js';
+import {ProvenancePredicate} from '../types/intoto/slsa_provenance/v0.2/provenance.js';

 export interface BuildOpts {
  buildx?: Buildx;
@@ -169,7 +169,7 @@ export class Build {
    }
    try {
      return core.getBooleanInput(name) ? `builder-id=${GitHub.workflowRunURL(true)}` : 'false';
-    } catch (err) {
+    } catch {
      // not a valid boolean, so we assume it's a string
      return Build.resolveProvenanceAttrs(input);
    }
@@ -302,7 +302,7 @@ export class Build {
          // https://github.com/docker/buildx/blob/8abef5908705e49f7ba88ef8c957e1127b597a2a/util/buildflags/attests.go#L13-L21
          const v = Util.parseBool(attr);
          res.push(`disabled=${!v}`);
-        } catch (err) {
+        } catch {
          res.push(attr);
        }
      }
@@ -310,9 +310,11 @@ export class Build {
    return res.join(',');
  }

-  public static hasGitAuthTokenSecret(secrets: string[]): boolean {
+  public static hasGitAuthTokenSecret(secrets: string[], domain?: string): boolean {
    for (const secret of secrets) {
-      if (secret.startsWith('GIT_AUTH_TOKEN=')) {
+      if (domain && secret.startsWith(`GIT_AUTH_TOKEN.${domain}=`)) {
+        return true;
+      } else if (secret.startsWith('GIT_AUTH_TOKEN=')) {
        return true;
      }
    }
--- a/src/buildx/builder.ts
+++ b/src/buildx/builder.ts
@@ -16,10 +16,10 @@

 import * as core from '@actions/core';

-import {Buildx} from './buildx';
-import {Exec} from '../exec';
+import {Buildx} from './buildx.js';
+import {Exec} from '../exec.js';

-import {BuilderInfo, Device, GCPolicy, NodeInfo} from '../types/buildx/builder';
+import {BuilderInfo, Device, GCPolicy, NodeInfo} from '../types/buildx/builder.js';

 export interface BuilderOpts {
  buildx?: Buildx;
--- a/src/buildx/buildx.ts
+++ b/src/buildx/buildx.ts
@@ -19,16 +19,16 @@ import path from 'path';
 import * as core from '@actions/core';
 import * as semver from 'semver';

-import {Git} from '../buildkit/git';
-import {Docker} from '../docker/docker';
-import {GitHub} from '../github';
-import {Exec} from '../exec';
-import {Util} from '../util';
+import {Git} from '../buildkit/git.js';
+import {Docker} from '../docker/docker.js';
+import {GitHub} from '../github/github.js';
+import {Exec} from '../exec.js';
+import {Util} from '../util.js';

-import {VertexWarning} from '../types/buildkit/client';
-import {GitURL} from '../types/buildkit/git';
-import {Cert, LocalRefsOpts, LocalRefsResponse, LocalState} from '../types/buildx/buildx';
-import {GitHubAnnotation} from '../types/github';
+import {VertexWarning} from '../types/buildkit/client.js';
+import {GitURL} from '../types/buildkit/git.js';
+import {Cert, LocalRefsOpts, LocalRefsResponse, LocalState} from '../types/buildx/buildx.js';
+import {GitHubAnnotation} from '../types/github/github.js';

 export interface BuildxOpts {
  standalone?: boolean;
@@ -148,7 +148,7 @@ export class Buildx {
    let url: URL;
    try {
      url = new URL(endpoint);
-    } catch (e) {
+    } catch {
      return [];
    }
    if (url.protocol != 'tcp:') {
@@ -280,7 +280,7 @@ export class Buildx {
    const fnGitURL = function (inp: string): GitURL | undefined {
      try {
        return Git.parseURL(inp);
-      } catch (e) {
+      } catch {
        // noop
      }
    };
--- a/src/buildx/history.ts
+++ b/src/buildx/history.ts
@@ -14,21 +14,17 @@
 * limitations under the License.
 */

-import {ChildProcessByStdio, spawn} from 'child_process';
 import fs from 'fs';
-import os from 'os';
 import path from 'path';
-import {Readable, Writable} from 'stream';
 import * as core from '@actions/core';

-import {Buildx} from './buildx';
-import {Context} from '../context';
-import {Docker} from '../docker/docker';
-import {Exec} from '../exec';
-import {GitHub} from '../github';
-import {Util} from '../util';
+import {Buildx} from './buildx.js';
+import {Context} from '../context.js';
+import {Exec} from '../exec.js';
+import {GitHub} from '../github/github.js';
+import {Util} from '../util.js';

-import {ExportOpts, ExportResponse, InspectOpts, InspectResponse, Summaries} from '../types/buildx/history';
+import {ExportOpts, ExportResponse, InspectOpts, InspectResponse, Summaries} from '../types/buildx/history.js';

 export interface HistoryOpts {
  buildx?: Buildx;
@@ -74,6 +70,10 @@ export class History {
  }

  public async export(opts: ExportOpts): Promise<ExportResponse> {
+    if (!(await this.buildx.versionSatisfies('>=0.23.0'))) {
+      throw new Error('Buildx >= 0.23.0 is required to export a build record');
+    }
+
    let builderName: string = '';
    let nodeName: string = '';
    const refs: Array<string> = [];
@@ -101,10 +101,6 @@ export class History {
    core.info(`exporting build record to ${outDir}`);
    fs.mkdirSync(outDir, {recursive: true});

-    if (opts.useContainer || (await this.buildx.versionSatisfies('<0.23.0'))) {
-      return await this.exportLegacy(builderName, nodeName, refs, outDir, opts.image);
-    }
-
    if (await this.buildx.versionSatisfies('<0.24.0')) {
      // wait 3 seconds to ensure build records are finalized: https://github.com/moby/buildkit/pull/5109
      // not necessary since buildx 0.24.0: https://github.com/docker/buildx/pull/3152
@@ -162,143 +158,6 @@ export class History {
    };
  }

-  private async exportLegacy(builderName: string, nodeName: string, refs: Array<string>, outDir: string, image?: string): Promise<ExportResponse> {
-    if (os.platform() === 'win32') {
-      throw new Error('Exporting a build record is currently not supported on Windows');
-    }
-    if (!(await Docker.isAvailable())) {
-      throw new Error('Docker is required to export a build record');
-    }
-    if (!(await Docker.isDaemonRunning())) {
-      throw new Error('Docker daemon needs to be running to export a build record');
-    }
-    if (!(await this.buildx.versionSatisfies('>=0.13.0'))) {
-      throw new Error('Buildx >= 0.13.0 is required to export a build record');
-    }
-
-    // wait 3 seconds to ensure build records are finalized: https://github.com/moby/buildkit/pull/5109
-    await Util.sleep(3);
-
-    const buildxInFifoPath = Context.tmpName({
-      template: 'buildx-in-XXXXXX.fifo',
-      tmpdir: Context.tmpDir()
-    });
-    await Exec.exec('mkfifo', [buildxInFifoPath]);
-
-    const buildxOutFifoPath = Context.tmpName({
-      template: 'buildx-out-XXXXXX.fifo',
-      tmpdir: Context.tmpDir()
-    });
-    await Exec.exec('mkfifo', [buildxOutFifoPath]);
-
-    const buildxDialStdioCmd = await this.buildx.getCommand(['--builder', builderName, 'dial-stdio']);
-    core.info(`[command]${buildxDialStdioCmd.command} ${buildxDialStdioCmd.args.join(' ')}`);
-    const buildxDialStdioProc = spawn(buildxDialStdioCmd.command, buildxDialStdioCmd.args, {
-      stdio: ['pipe', 'pipe', 'inherit'],
-      detached: true
-    });
-    let buildxDialStdioKilled = false;
-    fs.createReadStream(buildxInFifoPath).pipe(buildxDialStdioProc.stdin);
-    buildxDialStdioProc.stdout.pipe(fs.createWriteStream(buildxOutFifoPath));
-    buildxDialStdioProc.on('exit', (code, signal) => {
-      buildxDialStdioKilled = true;
-      if (signal) {
-        core.info(`Process "buildx dial-stdio" was killed with signal ${signal}`);
-      } else {
-        core.info(`Process "buildx dial-stdio" exited with code ${code}`);
-      }
-    });
-
-    const tmpDockerbuildFilename = path.join(outDir, 'rec.dockerbuild');
-    const summaryFilename = path.join(outDir, 'summary.json');
-
-    let dockerRunProc: ChildProcessByStdio<Writable, Readable, null> | undefined;
-    let dockerRunProcKilled = false;
-    await new Promise<void>((resolve, reject) => {
-      const ebargs: Array<string> = ['--ref-state-dir=/buildx-refs', `--node=${builderName}/${nodeName}`];
-      for (const ref of refs) {
-        ebargs.push(`--ref=${ref}`);
-      }
-      if (typeof process.getuid === 'function') {
-        ebargs.push(`--uid=${process.getuid()}`);
-      }
-      if (typeof process.getgid === 'function') {
-        ebargs.push(`--gid=${process.getgid()}`);
-      }
-      // prettier-ignore
-      const dockerRunArgs = [
-        'run', '--rm', '-i',
-        '-v', `${Buildx.refsDir}:/buildx-refs`,
-        '-v', `${outDir}:/out`,
-        image || process.env['DOCKER_BUILD_EXPORT_BUILD_IMAGE'] || 'docker.io/dockereng/export-build:latest',
-        ...ebargs
-      ]
-      core.info(`[command]docker ${dockerRunArgs.join(' ')}`);
-      dockerRunProc = spawn('docker', dockerRunArgs, {
-        stdio: ['pipe', 'pipe', 'inherit'],
-        env: {
-          ...process.env,
-          DOCKER_CONTENT_TRUST: 'false'
-        }
-      });
-      fs.createReadStream(buildxOutFifoPath).pipe(dockerRunProc.stdin);
-      dockerRunProc.stdout.pipe(fs.createWriteStream(buildxInFifoPath));
-      dockerRunProc.on('close', code => {
-        if (code === 0) {
-          if (!fs.existsSync(tmpDockerbuildFilename)) {
-            reject(new Error(`Failed to export build record: ${tmpDockerbuildFilename} not found`));
-          } else {
-            resolve();
-          }
-        } else {
-          reject(new Error(`Process "docker run" closed with code ${code}`));
-        }
-      });
-      dockerRunProc.on('error', err => {
-        core.error(`Error executing "docker run": ${err}`);
-        reject(err);
-      });
-      dockerRunProc.on('exit', (code, signal) => {
-        dockerRunProcKilled = true;
-        if (signal) {
-          core.info(`Process "docker run" was killed with signal ${signal}`);
-        } else {
-          core.info(`Process "docker run" exited with code ${code}`);
-        }
-      });
-    })
-      .catch(err => {
-        throw err;
-      })
-      .finally(() => {
-        if (buildxDialStdioProc && !buildxDialStdioKilled) {
-          core.debug('Force terminating "buildx dial-stdio" process');
-          buildxDialStdioProc.kill('SIGKILL');
-        }
-        if (dockerRunProc && !dockerRunProcKilled) {
-          core.debug('Force terminating "docker run" process');
-          dockerRunProc.kill('SIGKILL');
-        }
-      });
-
-    const dockerbuildPath = path.join(outDir, `${History.exportFilename(refs)}.dockerbuild`);
-    fs.renameSync(tmpDockerbuildFilename, dockerbuildPath);
-    const dockerbuildStats = fs.statSync(dockerbuildPath);
-
-    core.info(`Parsing ${summaryFilename}`);
-    fs.statSync(summaryFilename);
-    const summaries = <Summaries>JSON.parse(fs.readFileSync(summaryFilename, {encoding: 'utf-8'}));
-
-    return {
-      dockerbuildFilename: dockerbuildPath,
-      dockerbuildSize: dockerbuildStats.size,
-      builderName: builderName,
-      nodeName: nodeName,
-      refs: refs,
-      summaries: summaries
-    };
-  }
-
  private static exportFilename(refs: Array<string>): string {
    let name = `${GitHub.context.repo.owner}~${GitHub.context.repo.repo}~${refs[0].substring(0, 6).toUpperCase()}`;
    if (refs.length > 1) {
--- a/src/buildx/imagetools.ts
+++ b/src/buildx/imagetools.ts
@@ -14,13 +14,15 @@
 * limitations under the License.
 */

-import {Buildx} from './buildx';
-import {Exec} from '../exec';
+import fs from 'fs';
+import {Buildx} from './buildx.js';
+import {Context} from '../context.js';
+import {Exec} from '../exec.js';

-import {Manifest as ImageToolsManifest} from '../types/buildx/imagetools';
-import {Image} from '../types/oci/config';
-import {Descriptor} from '../types/oci/descriptor';
-import {Digest} from '../types/oci/digest';
+import {CreateOpts, CreateResponse, CreateResult, Manifest as ImageToolsManifest} from '../types/buildx/imagetools.js';
+import {Image} from '../types/oci/config.js';
+import {Descriptor, Platform} from '../types/oci/descriptor.js';
+import {Digest} from '../types/oci/digest.js';

 export interface ImageToolsOpts {
  buildx?: Buildx;
@@ -41,6 +43,10 @@ export class ImageTools {
    return await this.getCommand(['inspect', ...args]);
  }

+  public async getCreateCommand(args: Array<string>) {
+    return await this.getCommand(['create', ...args]);
+  }
+
  public async inspectImage(name: string): Promise<Record<string, Image> | Image> {
    const cmd = await this.getInspectCommand([name, '--format', '{{json .Image}}']);
    return await Exec.getExecOutput(cmd.command, cmd.args, {
@@ -83,15 +89,107 @@ export class ImageTools {
    });
  }

-  public async attestationDescriptors(name: string): Promise<Array<Descriptor>> {
+  public async attestationDescriptors(name: string, platform?: Platform): Promise<Array<Descriptor>> {
    const manifest = await this.inspectManifest(name);
-    if (typeof manifest === 'object' && manifest !== null && 'manifests' in manifest && Array.isArray(manifest.manifests)) {
-      return manifest.manifests.filter(m => m.annotations && m.annotations['vnd.docker.reference.type'] === 'attestation-manifest');
+
+    if (typeof manifest !== 'object' || manifest === null || !('manifests' in manifest) || !Array.isArray(manifest.manifests)) {
+      throw new Error(`No descriptor found for ${name}`);
    }
-    throw new Error(`No attestation descriptors found for ${name}`);
+
+    const attestations = manifest.manifests.filter(m => m.annotations?.['vnd.docker.reference.type'] === 'attestation-manifest');
+    if (!platform) {
+      return attestations;
+    }
+
+    const manifestByDigest = new Map<string, Descriptor>();
+    for (const m of manifest.manifests) {
+      if (m.digest) {
+        manifestByDigest.set(m.digest, m);
+      }
+    }
+
+    return attestations.filter(attestation => {
+      const refDigest = attestation.annotations?.['vnd.docker.reference.digest'];
+      if (!refDigest) {
+        return false;
+      }
+      const referencedManifest = manifestByDigest.get(refDigest);
+      if (!referencedManifest) {
+        return false;
+      }
+      return referencedManifest.platform?.os === platform.os && referencedManifest.platform?.architecture === platform.architecture && (referencedManifest.platform?.variant ?? '') === (platform.variant ?? '');
+    });
  }

-  public async attestationDigests(name: string): Promise<Array<Digest>> {
-    return (await this.attestationDescriptors(name)).map(attestation => attestation.digest);
+  public async attestationDigests(name: string, platform?: Platform): Promise<Array<Digest>> {
+    return (await this.attestationDescriptors(name, platform)).map(attestation => attestation.digest);
+  }
+
+  public async create(opts: CreateOpts): Promise<CreateResult | undefined> {
+    const args: Array<string> = [];
+
+    const metadataFile = Context.tmpName({tmpdir: Context.tmpDir(), template: 'imagetools-metadata-XXXXXX'});
+    const fileSources: Array<string> = [];
+    const sources: Array<string> = [];
+    for (const source of opts.sources) {
+      if (source.startsWith('cwd://')) {
+        const fileSource = source.substring('cwd://'.length);
+        if (fileSource.length > 0) {
+          fileSources.push(fileSource);
+        }
+        continue;
+      }
+      sources.push(source);
+    }
+    if (opts.tags) {
+      for (const tag of opts.tags) {
+        args.push('--tag', tag);
+      }
+    }
+    if (opts.platforms) {
+      for (const platform of opts.platforms) {
+        args.push('--platform', platform);
+      }
+    }
+    if (opts.dryRun) {
+      args.push('--dry-run');
+    } else {
+      args.push('--metadata-file', metadataFile);
+    }
+    for (const fileSource of fileSources) {
+      args.push('--file', fileSource);
+    }
+    for (const source of sources) {
+      args.push(source);
+    }
+
+    const cmd = await this.getCreateCommand(args);
+    return await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      if (!opts.dryRun) {
+        if (!fs.existsSync(metadataFile)) {
+          return undefined;
+        }
+        const dt = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
+        if (dt === '' || dt === 'null') {
+          return undefined;
+        }
+        const response = <CreateResponse>JSON.parse(dt);
+        const descriptor = response['containerimage.descriptor'];
+        if (!descriptor) {
+          return undefined;
+        }
+        return {
+          digest: response['containerimage.digest'] || descriptor.digest,
+          descriptor: descriptor,
+          imageNames: response['image.name'] ? response['image.name'].split(',').map(name => name.trim()) : []
+        };
+      }
+    });
  }
 }
--- a/src/buildx/install.ts
+++ b/src/buildx/install.ts
@@ -18,34 +18,48 @@ import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
 import * as tc from '@actions/tool-cache';
 import * as semver from 'semver';
 import * as util from 'util';

-import {Buildx} from './buildx';
-import {Cache} from '../cache';
-import {Context} from '../context';
-import {Exec} from '../exec';
-import {Docker} from '../docker/docker';
-import {Git} from '../git';
-import {GitHub} from '../github';
-import {Util} from '../util';
+import {Buildx} from './buildx.js';
+import {Cache} from '../cache.js';
+import {Context} from '../context.js';
+import {Exec} from '../exec.js';
+import {Docker} from '../docker/docker.js';
+import {Git} from '../git.js';
+import {GitHub} from '../github/github.js';
+import {Sigstore} from '../sigstore/sigstore.js';
+import {Util} from '../util.js';

-import {DownloadVersion} from '../types/buildx/buildx';
-import {GitHubRelease} from '../types/github';
+import {DownloadVersion} from '../types/buildx/buildx.js';
+import {GitHubRelease} from '../types/github/github.js';
+import {SEARCH_URL} from '../types/sigstore/sigstore.js';
+
+export interface DownloadOpts {
+  version: string;
+  ghaNoCache?: boolean;
+  disableHtc?: boolean;
+  skipState?: boolean;
+  verifySignature?: boolean;
+}

 export interface InstallOpts {
  standalone?: boolean;
  githubToken?: string;
+  sigstore?: Sigstore;
 }

 export class Install {
  private readonly standalone: boolean | undefined;
  private readonly githubToken: string | undefined;
+  private readonly sigstore: Sigstore;

  constructor(opts?: InstallOpts) {
    this.standalone = opts?.standalone;
    this.githubToken = opts?.githubToken || process.env.GITHUB_TOKEN;
+    this.sigstore = opts?.sigstore || new Sigstore();
  }

  /*
@@ -54,8 +68,8 @@ export class Install {
   * @param ghaNoCache: disable binary caching in GitHub Actions cache backend
   * @returns path to the buildx binary
   */
-  public async download(v: string, ghaNoCache?: boolean): Promise<string> {
-    const version: DownloadVersion = await Install.getDownloadVersion(v);
+  public async download(opts: DownloadOpts): Promise<string> {
+    const version: DownloadVersion = await Install.getDownloadVersion(opts.version);
    core.debug(`Install.download version: ${version.version}`);

    const release: GitHubRelease = await Install.getRelease(version, this.githubToken);
@@ -74,11 +88,11 @@ export class Install {
      htcVersion: vspec,
      baseCacheDir: path.join(Buildx.configDir, '.bin'),
      cacheFile: os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx',
-      ghaNoCache: ghaNoCache
+      ghaNoCache: opts.ghaNoCache
    });

    const cacheFoundPath = await installCache.find();
-    if (cacheFoundPath) {
+    if (!opts.disableHtc && cacheFoundPath) {
      core.info(`Buildx binary found in ${cacheFoundPath}`);
      return cacheFoundPath;
    }
@@ -89,7 +103,11 @@ export class Install {
    const htcDownloadPath = await tc.downloadTool(downloadURL, undefined, this.githubToken);
    core.debug(`Install.download htcDownloadPath: ${htcDownloadPath}`);

-    const cacheSavePath = await installCache.save(htcDownloadPath);
+    if (opts.verifySignature && semver.satisfies(vspec, '>=0.31.0-0', {includePrerelease: true})) {
+      await this.verifySignature(htcDownloadPath, downloadURL);
+    }
+
+    const cacheSavePath = await installCache.save(htcDownloadPath, opts.skipState);
    core.info(`Cached to ${cacheSavePath}`);
    return cacheSavePath;
  }
@@ -213,6 +231,31 @@ export class Install {
    return standalone;
  }

+  private async verifySignature(binPath: string, downloadURL: string): Promise<void> {
+    const bundleURL = `${downloadURL.replace(/\.exe$/, '')}.sigstore.json`;
+    core.info(`Downloading keyless verification bundle at ${bundleURL}`);
+
+    let bundlePath: string;
+    try {
+      bundlePath = await tc.downloadTool(bundleURL, undefined, this.githubToken);
+      core.debug(`Install.verifySignature bundlePath: ${bundlePath}`);
+    } catch (e) {
+      if (e.message && e.message.statusCode === httpm.HttpCodes.NotFound) {
+        core.info(`No signature bundle found at ${bundleURL}, skipping verification`);
+        return;
+      }
+      throw e;
+    }
+
+    const verifyResult = await this.sigstore.verifyArtifact(binPath, bundlePath, {
+      // TODO: add githubWorkflowRepository , runnerEnvironment and sourceRepositoryURI extensions when supported by sigstore module
+      subjectAlternativeName: /^https:\/\/github\.com\/docker\/(github-builder-experimental|github-builder)\/\.github\/workflows\/bake\.yml.*$/,
+      issuer: 'https://token.actions.githubusercontent.com'
+    });
+
+    core.info(`Buildx binary signature verified! ${verifyResult.tlogID ? `${SEARCH_URL}?logIndex=${verifyResult.tlogID}` : ''}`);
+  }
+
  private filename(version: string): string {
    let arch: string;
    switch (os.arch()) {
--- a/src/compose/compose.ts
+++ b/src/compose/compose.ts
@@ -16,8 +16,8 @@

 import * as core from '@actions/core';

-import {Docker} from '../docker/docker';
-import {Exec} from '../exec';
+import {Docker} from '../docker/docker.js';
+import {Exec} from '../exec.js';

 export interface ComposeOpts {
  standalone?: boolean;
--- a/src/compose/install.ts
+++ b/src/compose/install.ts
@@ -22,13 +22,13 @@ import * as tc from '@actions/tool-cache';
 import * as semver from 'semver';
 import * as util from 'util';

-import {Cache} from '../cache';
-import {Context} from '../context';
-import {Docker} from '../docker/docker';
-import {GitHub} from '../github';
+import {Cache} from '../cache.js';
+import {Context} from '../context.js';
+import {Docker} from '../docker/docker.js';
+import {GitHub} from '../github/github.js';

-import {DownloadVersion} from '../types/compose/compose';
-import {GitHubRelease} from '../types/github';
+import {DownloadVersion} from '../types/compose/compose.js';
+import {GitHubRelease} from '../types/github/github.js';

 export interface InstallOpts {
  standalone?: boolean;
--- a/src/context.ts
+++ b/src/context.ts
@@ -20,7 +20,7 @@ import path from 'path';
 import * as tmp from 'tmp';
 import * as github from '@actions/github';

-import {GitHub} from './github';
+import {GitHub} from './github/github.js';

 export class Context {
  private static readonly _tmpDir = fs.mkdtempSync(path.join(Context.ensureDirExists(process.env.RUNNER_TEMP || os.tmpdir()), 'docker-actions-toolkit-'));
--- a/src/cosign/cosign.ts
+++ b/src/cosign/cosign.ts
@@ -17,9 +17,9 @@
 import * as core from '@actions/core';
 import {BUNDLE_V03_MEDIA_TYPE, SerializedBundle} from '@sigstore/bundle';

-import {Exec} from '../exec';
+import {Exec} from '../exec.js';
 import * as semver from 'semver';
-import {MEDIATYPE_EMPTY_JSON_V1} from '../types/oci/mediatype';
+import {MEDIATYPE_EMPTY_JSON_V1} from '../types/oci/mediatype.js';

 export interface CosignOpts {
  binPath?: string;
@@ -142,15 +142,12 @@ export class Cosign {
        bundlePayload = obj as SerializedBundle;
      }

-      if (bundlePayload && signatureManifestDigest) {
+      if (bundlePayload && (signatureManifestDigest || signatureManifestFallbackDigest)) {
+        errors = undefined; // clear errors if we have both payload and manifest digest
        break;
      }
    }

-    if (!errors && !bundlePayload) {
-      throw new Error(`Cannot find signature bundle from cosign command output: ${logs}`);
-    }
-
    return {
      bundle: bundlePayload,
      signatureManifestDigest: signatureManifestDigest || signatureManifestFallbackDigest,
--- a/src/cosign/install.ts
+++ b/src/cosign/install.ts
@@ -22,34 +22,46 @@ import * as tc from '@actions/tool-cache';
 import * as semver from 'semver';
 import * as util from 'util';

-import {Buildx} from '../buildx/buildx';
-import {Cache} from '../cache';
-import {Context} from '../context';
-import {Exec} from '../exec';
-import {Git} from '../git';
-import {GitHub} from '../github';
-import {Util} from '../util';
+import {Buildx} from '../buildx/buildx.js';
+import {Cache} from '../cache.js';
+import {Context} from '../context.js';
+import {Exec} from '../exec.js';
+import {Git} from '../git.js';
+import {GitHub} from '../github/github.js';
+import {Sigstore} from '../sigstore/sigstore.js';
+import {Util} from '../util.js';

-import {DownloadVersion} from '../types/cosign/cosign';
-import {GitHubRelease} from '../types/github';
-import {dockerfileContent} from './dockerfile';
+import {DownloadVersion} from '../types/cosign/cosign.js';
+import {GitHubRelease} from '../types/github/github.js';
+import {dockerfileContent} from './dockerfile.js';
+import {SEARCH_URL} from '../types/sigstore/sigstore.js';
+
+export interface DownloadOpts {
+  version: string;
+  ghaNoCache?: boolean;
+  skipState?: boolean;
+  verifySignature?: boolean;
+}

 export interface InstallOpts {
  githubToken?: string;
  buildx?: Buildx;
+  sigstore?: Sigstore;
 }

 export class Install {
  private readonly githubToken: string | undefined;
  private readonly buildx: Buildx;
+  private readonly sigstore: Sigstore;

  constructor(opts?: InstallOpts) {
    this.githubToken = opts?.githubToken || process.env.GITHUB_TOKEN;
    this.buildx = opts?.buildx || new Buildx();
+    this.sigstore = opts?.sigstore || new Sigstore();
  }

-  public async download(v: string, ghaNoCache?: boolean, skipState?: boolean): Promise<string> {
-    const version: DownloadVersion = await Install.getDownloadVersion(v);
+  public async download(opts: DownloadOpts): Promise<string> {
+    const version: DownloadVersion = await Install.getDownloadVersion(opts.version);
    core.debug(`Install.download version: ${version.version}`);

    const release: GitHubRelease = await Install.getRelease(version, this.githubToken);
@@ -68,7 +80,7 @@ export class Install {
      htcVersion: vspec,
      baseCacheDir: path.join(os.homedir(), '.bin'),
      cacheFile: os.platform() == 'win32' ? 'cosign.exe' : 'cosign',
-      ghaNoCache: ghaNoCache
+      ghaNoCache: opts.ghaNoCache
    });

    const cacheFoundPath = await installCache.find();
@@ -83,7 +95,11 @@ export class Install {
    const htcDownloadPath = await tc.downloadTool(downloadURL, undefined, this.githubToken);
    core.debug(`Install.download htcDownloadPath: ${htcDownloadPath}`);

-    const cacheSavePath = await installCache.save(htcDownloadPath, skipState);
+    if (opts.verifySignature && semver.satisfies(vspec, '>=3.0.1')) {
+      await this.verifySignature(htcDownloadPath, downloadURL);
+    }
+
+    const cacheSavePath = await installCache.save(htcDownloadPath, opts.skipState);
    core.info(`Cached to ${cacheSavePath}`);
    return cacheSavePath;
  }
@@ -176,6 +192,20 @@ export class Install {
    return await new Buildx({standalone: buildStandalone}).getCommand(args);
  }

+  private async verifySignature(cosignBinPath: string, downloadURL: string): Promise<void> {
+    const bundleURL = `${downloadURL}.sigstore.json`;
+    core.info(`Downloading keyless verification bundle at ${bundleURL}`);
+    const bundlePath = await tc.downloadTool(bundleURL, undefined, this.githubToken);
+    core.debug(`Install.verifySignature bundlePath: ${bundlePath}`);
+
+    const verifyResult = await this.sigstore.verifyArtifact(cosignBinPath, bundlePath, {
+      subjectAlternativeName: 'keyless@projectsigstore.iam.gserviceaccount.com',
+      issuer: 'https://accounts.google.com'
+    });
+
+    core.info(`Cosign binary signature verified! ${verifyResult.tlogID ? `${SEARCH_URL}?logIndex=${verifyResult.tlogID}` : ''}`);
+  }
+
  private filename(): string {
    let arch: string;
    switch (os.arch()) {
--- a/Show More
+++ b/Show More