Merge pull request #1099 from crazy-max/inputlist-trim-opt

util: add opt-in whitespace preservation for multiline inputs
Merge pull request #1098 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
2026-04-24 15:04:00 +02:00 · 2026-04-24 15:03:08 +02:00 · 2026-04-24 15:02:31 +02:00 · 2026-04-24 15:02:12 +02:00 · 2026-04-24 14:54:53 +02:00 · 2026-04-24 12:50:14 +00:00
39 changed files with 2022 additions and 896 deletions
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,76 +1,298 @@
 {
  "latest": {
-    "id": 293153745,
-    "tag_name": "v0.32.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.32.1",
+    "id": 303766308,
+    "tag_name": "v0.33.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/checksums.txt"
+    ]
+  },
+  "v0.33.0": {
+    "id": 303766308,
+    "tag_name": "v0.33.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/checksums.txt"
+    ]
+  },
+  "edge": {
+    "id": 303766308,
+    "tag_name": "v0.33.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/checksums.txt"
+    ]
+  },
+  "v0.33.0-rc1": {
+    "id": 301579825,
+    "tag_name": "v0.33.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/checksums.txt"
    ]
  },
  "v0.32.1": {
@@ -221,80 +443,6 @@
      "https://github.com/docker/buildx/releases/download/v0.32.0/checksums.txt"
    ]
  },
-  "edge": {
-    "id": 293153745,
-    "tag_name": "v0.32.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.32.1",
-    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/checksums.txt"
-    ]
-  },
  "v0.32.0-rc2": {
    "id": 291436359,
    "tag_name": "v0.32.0-rc2",
--- a/.github/compose-releases.json
+++ b/.github/compose-releases.json
@@ -1,65 +1,191 @@
 {
  "latest": {
-    "id": 299261182,
-    "tag_name": "v5.1.1",
-    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.1",
+    "id": 309393346,
+    "tag_name": "v5.1.3",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.3",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v5.1.1/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sigstore.json"
+      "https://github.com/docker/compose/releases/download/v5.1.3/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.1.3": {
+    "id": 309393346,
+    "tag_name": "v5.1.3",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.3",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.1.3/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.1.2": {
+    "id": 306957188,
+    "tag_name": "v5.1.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.2",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.1.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.sigstore.json"
    ]
  },
  "v5.1.1": {
@@ -345,66 +471,66 @@
    ]
  },
  "edge": {
-    "id": 299261182,
-    "tag_name": "v5.1.1",
-    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.1",
+    "id": 309393346,
+    "tag_name": "v5.1.3",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.3",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v5.1.1/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sigstore.json"
+      "https://github.com/docker/compose/releases/download/v5.1.3/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sigstore.json"
    ]
  },
  "v5.0.0-rc.2": {
--- a/.github/cosign-releases.json
+++ b/.github/cosign-releases.json
@@ -1,92 +1,302 @@
 {
  "latest": {
-    "id": 288413621,
-    "tag_name": "v3.0.5",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
+    "id": 305842182,
+    "tag_name": "v3.0.6",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.6",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64_3.0.6_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64_3.0.6_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm_3.0.6_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le_3.0.6_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64_3.0.6_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x_3.0.6_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe_3.0.6_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/release-cosign.pub"
+    ]
+  },
+  "v3.0.6": {
+    "id": 305842182,
+    "tag_name": "v3.0.6",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.6",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64_3.0.6_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64_3.0.6_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm_3.0.6_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le_3.0.6_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64_3.0.6_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x_3.0.6_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe_3.0.6_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/release-cosign.pub"
+    ]
+  },
+  "v2.6.3": {
+    "id": 305838705,
+    "tag_name": "v2.6.3",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v2.6.3",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.aarch64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.aarch64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.armv7hl.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.armv7hl.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.ppc64le.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.ppc64le.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.riscv64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.riscv64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.s390x.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.s390x.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.x86_64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.x86_64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64_2.6.3_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64_2.6.3_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64_2.6.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64_2.6.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm_2.6.3_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64_2.6.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64_2.6.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le_2.6.3_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64_2.6.3_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x_2.6.3_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe_2.6.3_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_aarch64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_aarch64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_amd64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_amd64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_arm64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_arm64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armhf.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armhf.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armv7.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armv7.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64el.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64el.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64le.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64le.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_x86_64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_x86_64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_checksums.txt-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_checksums.txt-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/release-cosign.pub"
    ]
  },
  "v3.0.5": {
@@ -3496,93 +3706,93 @@
    ]
  },
  "edge": {
-    "id": 288413621,
-    "tag_name": "v3.0.5",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
+    "id": 305842182,
+    "tag_name": "v3.0.6",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.6",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64_3.0.6_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64_3.0.6_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm_3.0.6_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le_3.0.6_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64_3.0.6_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x_3.0.6_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe_3.0.6_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/release-cosign.pub"
    ]
  },
  "v2.0.0-rc.3": {
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,12 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    groups:
+      crazy-max-dot-github:
+        patterns:
+          - "crazy-max/.github/*"
+    cooldown:
+      default-days: 2
    labels:
      - "dependencies"
      - "bot"
@@ -13,6 +19,8 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    cooldown:
+      default-days: 2
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,17 +1,41 @@
 {
  "latest": {
-    "id": 293527283,
-    "tag_name": "docker-v29.3.0",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
+    "id": 311295981,
+    "tag_name": "docker-v29.4.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.1",
    "assets": []
  },
-  "v29.3.0": {
-    "id": 293527283,
-    "tag_name": "docker-v29.3.0",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
+  "v29.4.1": {
+    "id": 311295981,
+    "tag_name": "docker-v29.4.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.1",
+    "assets": []
+  },
+  "v29.4.0": {
+    "id": 305984249,
+    "tag_name": "docker-v29.4.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0",
    "assets": []
  },
  "edge": {
+    "id": 311295981,
+    "tag_name": "docker-v29.4.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.1",
+    "assets": []
+  },
+  "v29.4.0-rc.1": {
+    "id": 305082087,
+    "tag_name": "docker-v29.4.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0-rc.1",
+    "assets": []
+  },
+  "v29.3.1": {
+    "id": 301291796,
+    "tag_name": "docker-v29.3.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.1",
+    "assets": []
+  },
+  "v29.3.0": {
    "id": 293527283,
    "tag_name": "docker-v29.3.0",
    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
--- a/.github/regclient-releases.json
+++ b/.github/regclient-releases.json
@@ -1,37 +1,72 @@
 {
  "latest": {
-    "id": 289583033,
-    "tag_name": "v0.11.2",
-    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.2",
+    "id": 308364025,
+    "tag_name": "v0.11.3",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.3",
    "assets": [
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/metadata.tgz",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-freebsd-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-riscv64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-freebsd-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-riscv64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-freebsd-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-riscv64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-windows-amd64.exe"
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.3": {
+    "id": 308364025,
+    "tag_name": "v0.11.3",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.3",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-windows-amd64.exe"
    ]
  },
  "v0.11.2": {
--- a/.github/undock-releases.json
+++ b/.github/undock-releases.json
@@ -1,46 +1,90 @@
 {
  "latest": {
-    "id": 273439938,
-    "tag_name": "v0.11.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
+    "id": 307426692,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.12.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.zip"
+    ]
+  },
+  "v0.12.0": {
+    "id": 307426692,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.12.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.zip"
    ]
  },
  "v0.11.0": {
@@ -241,47 +285,47 @@
    ]
  },
  "edge": {
-    "id": 273439938,
-    "tag_name": "v0.11.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
+    "id": 307426692,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.12.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.zip"
    ]
  },
  "v0.7.0-rc.1": {
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  push:
    branches:
@@ -24,7 +27,7 @@ jobs:
    steps:
      -
        name: Build
-        uses: docker/bake-action@v7
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          targets: build
        env:
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
      filename: buildx-lab-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: buildx-lab-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
      filename: buildx-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: buildx-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -7,9 +7,7 @@ on:
  pull_request:

 permissions:
-  actions: read
  contents: read
-  security-events: write

 env:
  NODE_VERSION: "24"
@@ -17,10 +15,13 @@ env:
 jobs:
  analyze:
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Enable corepack
        run: |
@@ -28,19 +29,19 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
        with:
          languages: javascript-typescript
      -
        name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+        uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/compose-lab-releases-json.yml
+++ b/.github/workflows/compose-lab-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/compose-desktop
      artifact_name: compose-lab-releases-json
      filename: compose-lab-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: compose-lab-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/compose-lab-releases-json
--- a/.github/workflows/compose-releases-json.yml
+++ b/.github/workflows/compose-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/compose
      artifact_name: compose-releases-json
      filename: compose-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: compose-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/compose-releases-json
--- a/.github/workflows/cosign-releases-json.yml
+++ b/.github/workflows/cosign-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: sigstore/cosign
      artifact_name: cosign-releases-json
      filename: cosign-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: cosign-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/cosign-releases-json
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
@@ -25,20 +28,22 @@ jobs:
      tag_patterns: |
        ^docker-(.*)$
        ^(v.*)$
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: docker-releases-json
          path: .github
@@ -48,7 +53,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/pr-assign-author.yml
+++ b/.github/workflows/pr-assign-author.yml
@@ -4,14 +4,14 @@ permissions:
  contents: read

 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] does not checkout, safe to use pull_request_target
    types:
      - opened
      - reopened

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@1b673f36fad86812f538c1df9794904038a23cbf
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      pull-requests: write
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,13 +1,12 @@
 name: publish

-permissions:
-  id-token: write # required for OIDC
-  contents: write # required to create GitHub Release
-
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  push:
    tags:
@@ -19,10 +18,13 @@ env:
 jobs:
  publish:
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write # required for OIDC
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Enable corepack
        run: |
@@ -30,7 +32,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
@@ -51,11 +53,3 @@ jobs:
        run: |
          npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
          npm publish --provenance --access public
-      -
-        name: Create Release
-        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe  # v2.6.1
-        with:
-          draft: true
-          generate_release_notes: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
--- a/.github/workflows/regclient-releases-json.yml
+++ b/.github/workflows/regclient-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: regclient/regclient
      artifact_name: regclient-releases-json
      filename: regclient-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-latest
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: regclient-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/regclient-releases-json
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  push:
@@ -15,8 +18,8 @@ on:

 env:
  NODE_VERSION: "24"
-  BUILDX_VERSION: "v0.32.1"
-  BUILDKIT_IMAGE: "moby/buildkit:v0.28.0"
+  BUILDX_VERSION: "v0.33.0"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.29.0"

 jobs:
  test:
@@ -33,10 +36,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Test
-        uses: docker/bake-action@v7
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          source: .
          targets: test-coverage
@@ -55,7 +58,7 @@ jobs:
        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        if: env.RUN_CODECOV == 'true' && matrix.node_version == env.NODE_VERSION
        with:
          files: ./coverage/clover.xml
@@ -69,7 +72,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Enable corepack
        run: |
@@ -77,7 +80,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
@@ -87,7 +90,7 @@ jobs:
      -
        name: Create includes
        id: set
-        uses: actions/github-script@v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
          script: |
            let tests = [];
@@ -106,7 +109,7 @@ jobs:
            });
            await core.group(`Set includes`, async () => {
              let includes = [];
-              for (const os of ['ubuntu-latest', 'ubuntu-24.04-arm', 'macos-15-intel', 'windows-latest']) {
+              for (const os of ['ubuntu-latest', 'ubuntu-24.04-arm', 'macos-26-large', 'windows-latest']) {
                for (const test of tests) {
                  if (test === 'docker/install.test.itg.ts') {
                    if (os !== 'windows-latest') {
@@ -153,15 +156,15 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Expose GitHub Runtime
-        uses: crazy-max/ghaction-github-runtime@v4
+        uses: crazy-max/ghaction-github-runtime@04d248b84655b509d8c44dc1d6f990c879747487 # v4.0.0
      -
        # FIXME: Needs to setup node twice on Windows: https://github.com/actions/setup-node/issues/1357#issuecomment-3254613964
        name: Setup Node
        if: startsWith(matrix.os, 'windows')
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          package-manager-cache: false
@@ -172,14 +175,14 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
      -
        name: Set up Docker Buildx
        if: startsWith(matrix.os, 'ubuntu')
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -187,7 +190,7 @@ jobs:
        name: Set up container builder
        if: startsWith(matrix.os, 'ubuntu')
        id: builder
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver-opts: image=${{ env.BUILDKIT_IMAGE }}
@@ -197,7 +200,7 @@ jobs:
        run: yarn install
      -
        name: Test
-        uses: actions/github-script@v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
          script: |
            const testName = `${{ matrix.test_name }}`;
@@ -225,7 +228,7 @@ jobs:
        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        if: env.RUN_CODECOV == 'true'
        with:
          files: ./coverage/clover.xml
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: crazy-max/undock
      artifact_name: undock-releases-json
      filename: undock-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: undock-releases-json
          path: .github
@@ -45,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/undock-releases-json
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -0,0 +1,327 @@
+name: update-deps
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 9 * * *'
+  push:
+    branches:
+      - 'main'
+
+jobs:
+  update:
+    runs-on: ubuntu-24.04
+    environment: update-deps # secrets are gated by this environment
+    timeout-minutes: 10
+    permissions:
+      contents: write
+      pull-requests: write
+    strategy:
+      fail-fast: false
+      matrix:
+        dep:
+          - docker
+          - buildx
+          - buildkit
+          - compose
+          - cosign
+          - regctl
+          - undock
+    steps:
+      -
+        name: GitHub auth token from GitHub App
+        id: write-app
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        with:
+          client-id: ${{ vars.GHACTIONS_REPO_WRITE_CLIENT_ID }}
+          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_PRIVATE_KEY }}
+          owner: docker
+          repositories: actions-toolkit
+      -
+        name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          token: ${{ steps.write-app.outputs.token }}
+          fetch-depth: 0
+          persist-credentials: false
+      -
+        name: Update dependency
+        id: update
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          INPUT_DEP: ${{ matrix.dep }}
+        with:
+          script: |
+            const fs = require('fs');
+            const path = require('path');
+
+            const dep = core.getInput('dep');
+
+            function escapeRegExp(value) {
+              return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+            }
+
+            function formatList(values) {
+              const quoted = values.map(value => `\`${value}\``);
+              if (quoted.length === 1) {
+                return quoted[0];
+              }
+              if (quoted.length === 2) {
+                return `${quoted[0]} and ${quoted[1]}`;
+              }
+              return `${quoted.slice(0, -1).join(', ')}, and ${quoted.at(-1)}`;
+            }
+
+            function unique(values) {
+              return [...new Set(values)];
+            }
+
+            function stripLeadingV(value) {
+              return value.startsWith('v') ? value.slice(1) : value;
+            }
+
+            function stripDockerTag(value) {
+              return value.replace(/^docker-v/, '').replace(/^v/, '');
+            }
+
+            function majorMinor(value) {
+              const match = value.match(/^(\d+\.\d+)/);
+              if (!match) {
+                throw new Error(`Unable to derive major.minor version from ${value}`);
+              }
+              return match[1];
+            }
+
+            function readJson(relativePath) {
+              const absolutePath = path.join(process.env.GITHUB_WORKSPACE, relativePath);
+              return JSON.parse(fs.readFileSync(absolutePath, 'utf8'));
+            }
+
+            function readLatestTag(relativePath) {
+              const tag = readJson(relativePath)?.latest?.tag_name;
+              if (!tag) {
+                throw new Error(`Unable to resolve latest tag from ${relativePath}`);
+              }
+              return tag;
+            }
+
+            function dockerfileArgPattern(key) {
+              return new RegExp(`^(ARG ${escapeRegExp(key)}=)(.+)$`, 'm');
+            }
+
+            function workflowEnvPattern(key) {
+              return new RegExp(`^(  ${escapeRegExp(key)}: ")([^"]*)(")$`, 'm');
+            }
+
+            const dependencyConfigs = {
+              docker: {
+                name: 'Docker version',
+                branch: 'deps/docker-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/docker-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/docker-releases.json');
+                  const version = majorMinor(stripDockerTag(tag));
+                  return {
+                    titleValue: version,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'DOCKER_VERSION',
+                        value: version,
+                        pattern: dockerfileArgPattern('DOCKER_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              buildx: {
+                name: 'Buildx version',
+                branch: 'deps/buildx-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/buildx-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/buildx-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'BUILDX_VERSION',
+                        value: stripLeadingV(tag),
+                        pattern: dockerfileArgPattern('BUILDX_VERSION')
+                      },
+                      {
+                        path: '.github/workflows/test.yml',
+                        key: 'BUILDX_VERSION',
+                        value: tag,
+                        pattern: workflowEnvPattern('BUILDX_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              buildkit: {
+                name: 'BuildKit image',
+                branch: 'deps/buildkit-image',
+                sourceUrl: 'https://github.com/moby/buildkit/releases/latest',
+                async resolve({github}) {
+                  const release = await github.rest.repos.getLatestRelease({
+                    owner: 'moby',
+                    repo: 'buildkit'
+                  });
+                  const image = `moby/buildkit:${release.data.tag_name}`;
+                  return {
+                    titleValue: image,
+                    targets: [
+                      {
+                        path: '.github/workflows/test.yml',
+                        key: 'BUILDKIT_IMAGE',
+                        value: image,
+                        pattern: workflowEnvPattern('BUILDKIT_IMAGE')
+                      }
+                    ]
+                  };
+                }
+              },
+              compose: {
+                name: 'Compose version',
+                branch: 'deps/compose-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/compose-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/compose-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'COMPOSE_VERSION',
+                        value: stripLeadingV(tag),
+                        pattern: dockerfileArgPattern('COMPOSE_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              undock: {
+                name: 'Undock version',
+                branch: 'deps/undock-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/undock-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/undock-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'UNDOCK_VERSION',
+                        value: stripLeadingV(tag),
+                        pattern: dockerfileArgPattern('UNDOCK_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              regctl: {
+                name: 'Regctl version',
+                branch: 'deps/regctl-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/regclient-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/regclient-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'REGCTL_VERSION',
+                        value: tag,
+                        pattern: dockerfileArgPattern('REGCTL_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              cosign: {
+                name: 'Cosign version',
+                branch: 'deps/cosign-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/cosign-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/cosign-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'COSIGN_VERSION',
+                        value: tag,
+                        pattern: dockerfileArgPattern('COSIGN_VERSION')
+                      }
+                    ]
+                  };
+                }
+              }
+            };
+
+            const config = dependencyConfigs[dep];
+            if (!config) {
+              core.setFailed(`Unknown dependency ${dep}`);
+              return;
+            }
+
+            const resolved = await config.resolve({github});
+            const currentValues = [];
+            const changedFiles = [];
+
+            for (const target of resolved.targets) {
+              const absolutePath = path.join(process.env.GITHUB_WORKSPACE, target.path);
+              const content = fs.readFileSync(absolutePath, 'utf8');
+              const match = content.match(target.pattern);
+              if (!match) {
+                throw new Error(`Missing ${target.key} in ${target.path}`);
+              }
+              currentValues.push(match[2]);
+              if (match[2] === target.value) {
+                continue;
+              }
+              const updatedContent = content.replace(target.pattern, (...args) => {
+                const groups = args.slice(1, -2);
+                const prefix = groups[0];
+                const suffix = groups[2] || '';
+                return `${prefix}${target.value}${suffix}`;
+              });
+              fs.writeFileSync(absolutePath, updatedContent, 'utf8');
+              changedFiles.push(target.path);
+            }
+
+            core.info(`Resolved ${config.name} from ${config.sourceUrl}`);
+            if (changedFiles.length === 0) {
+              core.info(`No workspace changes needed for ${config.name}`);
+            } else {
+              core.info(`New ${config.name} ${resolved.titleValue} found`);
+            }
+
+            core.setOutput('branch', config.branch);
+            core.setOutput('title', `chore(deps): update ${config.name} to ${resolved.titleValue}`);
+            core.setOutput('before', formatList(unique(currentValues)));
+            core.setOutput('files', formatList(unique(changedFiles)));
+            core.setOutput('source-url', config.sourceUrl);
+      -
+        name: Create pull request
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
+        with:
+          base: main
+          branch: ${{ steps.update.outputs.branch }}
+          token: ${{ steps.write-app.outputs.token }}
+          commit-message: ${{ steps.update.outputs.title }}
+          title: ${{ steps.update.outputs.title }}
+          signoff: true
+          delete-branch: true
+          body: |
+            This updates the pinned value from ${{ steps.update.outputs.before }} in ${{ steps.update.outputs.files }}.
+
+            The source of truth for this update is ${{ steps.update.outputs.source-url }}.
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  push:
@@ -21,11 +24,11 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/matrix@v7
+        uses: docker/bake-action/subaction/matrix@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          target: validate

@@ -40,6 +43,6 @@ jobs:
    steps:
      -
        name: Validate
-        uses: docker/bake-action@v7
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          targets: ${{ matrix.target }}
--- a/.github/workflows/virtual-env.yml
+++ b/.github/workflows/virtual-env.yml
@@ -1,5 +1,12 @@
 name: virtual-env

+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -68,4 +75,4 @@ jobs:
      -
        name: Dump context
        if: always()
-        uses: crazy-max/ghaction-dump-context@v2
+        uses: crazy-max/ghaction-dump-context@5d2753e7076f4568c7729971e25231f32147e2d8 # v3.0.0
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -0,0 +1,26 @@
+name: zizmor
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+
+jobs:
+  run:
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
+    permissions:
+      contents: read
+      security-events: write
+    with:
+      min-severity: medium
+      min-confidence: medium
+      persona: pedantic
--- a/tests/buildx/build.test.ts
+++ b/tests/buildx/build.test.ts
@@ -18,6 +18,7 @@ import {afterEach, beforeEach, describe, expect, it, vi, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
+import * as github from '@actions/github';
 import * as rimraf from 'rimraf';

 import {Context} from '../../src/context.js';
@@ -46,6 +47,8 @@ afterEach(() => {

 describe('gitContext', () => {
  const originalEnv = process.env;
+  const githubContextSha = '860c1904a1ce19322e91ac35af1ab07466440c37';
+  const pullRequestHeadSha = 'f11797113e5a9b86bd976329c5dbb8a8bfdfadfa';
  beforeEach(() => {
    vi.resetModules();
    process.env = {
@@ -53,9 +56,17 @@ describe('gitContext', () => {
      DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF: '',
      BUILDX_SEND_GIT_QUERY_AS_INPUT: ''
    };
+    github.context.sha = githubContextSha;
+    github.context.payload.pull_request = {
+      number: 15,
+      head: {
+        sha: pullRequestHeadSha
+      }
+    };
  });
  afterEach(() => {
    process.env = originalEnv;
+    delete github.context.payload.pull_request;
  });

  type GitContextTestCase = {
@@ -75,13 +86,13 @@ describe('gitContext', () => {
    // no format set (defaults to fragment)
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'master', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/merge'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/tags/v1.0.0', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/head'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
    // no format set (defaults to query only when client-side query resolution is enabled and supported)
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/merge&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: true, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/head&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: true, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: false}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {}}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', checksum: undefined, format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe'}}, 'https://github.com/docker/actions-toolkit.git#cafebabe'],
@@ -95,9 +106,10 @@ describe('gitContext', () => {
    // query format
    [{ref: 'refs/heads/master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/merge&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/tags/v1.0.0', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/tags/v1.0.0&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'query', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/head&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'query', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe'}}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/merge&checksum=cafebabe'],
    [{ref: 'refs/heads/master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37&subdir=subdir'],
    [{ref: 'refs/heads/master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: '.'}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', checksum: undefined, format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {ref: 'refs/tags/v1.0.0', checksum: 'cafebabe', subdir: 'subdir', submodules: 'false'}}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=cafebabe&subdir=subdir&submodules=false'],
@@ -108,14 +120,15 @@ describe('gitContext', () => {
    // fragment format
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/merge'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/tags/v1.0.0', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/head'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe'}}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/merge'],
    [{ref: 'refs/heads/master', checksum: undefined, format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe', subdir: 'subdir', ref: 'refs/tags/v1.0.0'}}, 'https://github.com/docker/actions-toolkit.git#cafebabe:subdir'],
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {'keep-git-dir': 'true'}}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37:subdir'],
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: '.'}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/head:subdir'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git#f11797113e5a9b86bd976329c5dbb8a8bfdfadfa:subdir'],
  ];

  test.each(gitContextCases)('given %o should return %o', async (input: GitContextTestCase, expected: string) => {
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -29,7 +29,7 @@ const tmpDir = () => fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), '

 beforeAll(async () => {
  const undockInstall = new UndockInstall();
-  const undockBinPath = await undockInstall.download('v0.10.0', true);
+  const undockBinPath = await undockInstall.download('v0.12.0', true);
  await undockInstall.install(undockBinPath);

  const regclientInstall = new RegclientInstall();
--- a/tests/sigstore/sigstore-cosign-old.test.itg.ts
+++ b/tests/sigstore/sigstore-cosign-old.test.itg.ts
@@ -1,90 +0,0 @@
-/**
- * Copyright 2026 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import {beforeAll, describe, expect, it} from 'vitest';
-import * as path from 'path';
-
-import {Buildx} from '../../src/buildx/buildx.js';
-import {Build} from '../../src/buildx/build.js';
-import {Install as CosignInstall} from '../../src/cosign/install.js';
-import {Docker} from '../../src/docker/docker.js';
-import {Exec} from '../../src/exec.js';
-import {Sigstore} from '../../src/sigstore/sigstore.js';
-
-const fixturesDir = path.join(__dirname, '..', '.fixtures');
-
-const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');
-
-const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;
-
-beforeAll(async () => {
-  const cosignInstall = new CosignInstall();
-  const cosignBinPath = await cosignInstall.download({
-    version: 'v3.0.2'
-  });
-  await cosignInstall.install(cosignBinPath);
-}, 100000);
-
-maybeIdToken('signAttestationManifests', () => {
-  it('build, sign and verify', async () => {
-    const buildx = new Buildx();
-    const build = new Build({buildx: buildx});
-    const imageName = 'ghcr.io/docker/actions-toolkit/test';
-
-    await expect(
-      (async () => {
-        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
-          input: Buffer.from(process.env.GITHUB_TOKEN || '')
-        });
-      })()
-    ).resolves.not.toThrow();
-
-    await expect(
-      (async () => {
-        // prettier-ignore
-        const buildCmd = await buildx.getCommand([
-          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
-          'build',
-          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
-          '--provenance=mode=max',
-          '--tag', `${imageName}:sigstore-itg`,
-          '--platform', 'linux/amd64,linux/arm64',
-          '--push',
-          '--metadata-file', build.getMetadataFilePath(),
-          fixturesDir
-        ]);
-        await Exec.exec(buildCmd.command, buildCmd.args);
-      })()
-    ).resolves.not.toThrow();
-
-    const metadata = build.resolveMetadata();
-    expect(metadata).toBeDefined();
-    const buildDigest = build.resolveDigest(metadata);
-    expect(buildDigest).toBeDefined();
-
-    const sigstore = new Sigstore();
-    const signResults = await sigstore.signAttestationManifests({
-      imageNames: [imageName],
-      imageDigest: buildDigest!
-    });
-    expect(Object.keys(signResults).length).toEqual(2);
-
-    const verifyResults = await sigstore.verifySignedManifests(signResults, {
-      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-    });
-    expect(Object.keys(verifyResults).length).toEqual(2);
-  }, 100000);
-});
--- a/tests/sigstore/sigstore.test.itg.ts
+++ b/tests/sigstore/sigstore.test.itg.ts
@@ -16,10 +16,12 @@

 import {beforeAll, describe, expect, it, test} from 'vitest';
 import fs from 'fs';
+import os from 'os';
 import * as path from 'path';

 import {Buildx} from '../../src/buildx/buildx.js';
 import {Build} from '../../src/buildx/build.js';
+import {Cosign} from '../../src/cosign/cosign.js';
 import {Install as CosignInstall} from '../../src/cosign/install.js';
 import {Docker} from '../../src/docker/docker.js';
 import {Exec} from '../../src/exec.js';
@@ -33,73 +35,106 @@ const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'tr
 const maybe = runTest ? describe : describe.skip;
 const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;

-beforeAll(async () => {
-  const cosignInstall = new CosignInstall();
-  const cosignBinPath = await cosignInstall.download({
-    version: 'v3.0.4'
+const imageName = 'ghcr.io/docker/actions-toolkit/test';
+const currentCosignVersion = 'v3.0.6';
+const signAttestationCosignVersions = ['v3.0.2', currentCosignVersion] as const;
+const installedCosign = new Map<string, Promise<string>>();
+
+async function installCosign(version: string): Promise<string> {
+  let installedPath = installedCosign.get(version);
+  if (!installedPath) {
+    installedPath = (async () => {
+      const cosignInstall = new CosignInstall();
+      const cosignBinPath = await cosignInstall.download({
+        version
+      });
+      const installDir = fs.mkdtempSync(path.join(process.env.RUNNER_TEMP || os.tmpdir(), `sigstore-cosign-${version.replace(/[^a-zA-Z0-9]+/g, '-')}-`));
+      return await cosignInstall.install(cosignBinPath, installDir);
+    })();
+    installedCosign.set(version, installedPath);
+  }
+  return await installedPath;
+}
+
+for (const cosignVersion of signAttestationCosignVersions) {
+  maybeIdToken(`signAttestationManifests with cosign ${cosignVersion}`, () => {
+    let sigstore: Sigstore;
+
+    beforeAll(async () => {
+      sigstore = new Sigstore({
+        cosign: new Cosign({
+          binPath: await installCosign(cosignVersion)
+        })
+      });
+    }, 100000);
+
+    it('build, sign and verify', async () => {
+      const buildx = new Buildx();
+      const build = new Build({buildx: buildx});
+      const versionTag = cosignVersion.replace(/^v/, '').replace(/\./g, '-');
+
+      await expect(
+        (async () => {
+          await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+            input: Buffer.from(process.env.GITHUB_TOKEN || '')
+          });
+        })()
+      ).resolves.not.toThrow();
+
+      await expect(
+        (async () => {
+          // prettier-ignore
+          const buildCmd = await buildx.getCommand([
+            '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+            'build',
+            '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+            '--provenance=mode=max',
+            '--tag', `${imageName}:sigstore-itg-cosign-${versionTag}`,
+            '--platform', 'linux/amd64,linux/arm64',
+            '--push',
+            '--metadata-file', build.getMetadataFilePath(),
+            fixturesDir
+          ]);
+          await Exec.exec(buildCmd.command, buildCmd.args);
+        })()
+      ).resolves.not.toThrow();
+
+      const metadata = build.resolveMetadata();
+      expect(metadata).toBeDefined();
+      const buildDigest = build.resolveDigest(metadata);
+      expect(buildDigest).toBeDefined();
+
+      const signResults = await sigstore.signAttestationManifests({
+        imageNames: [imageName],
+        imageDigest: buildDigest!
+      });
+      expect(Object.keys(signResults).length).toEqual(2);
+
+      const verifyResults = await sigstore.verifySignedManifests(signResults, {
+        certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+      });
+      expect(Object.keys(verifyResults).length).toEqual(2);
+    }, 200000);
  });
-  await cosignInstall.install(cosignBinPath);
-}, 100000);
-
-maybeIdToken('signAttestationManifests', () => {
-  it('build, sign and verify', async () => {
-    const buildx = new Buildx();
-    const build = new Build({buildx: buildx});
-    const imageName = 'ghcr.io/docker/actions-toolkit/test';
-
-    await expect(
-      (async () => {
-        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
-          input: Buffer.from(process.env.GITHUB_TOKEN || '')
-        });
-      })()
-    ).resolves.not.toThrow();
-
-    await expect(
-      (async () => {
-        // prettier-ignore
-        const buildCmd = await buildx.getCommand([
-          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
-          'build',
-          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
-          '--provenance=mode=max',
-          '--tag', `${imageName}:sigstore-itg`,
-          '--platform', 'linux/amd64,linux/arm64',
-          '--push',
-          '--metadata-file', build.getMetadataFilePath(),
-          fixturesDir
-        ]);
-        await Exec.exec(buildCmd.command, buildCmd.args);
-      })()
-    ).resolves.not.toThrow();
-
-    const metadata = build.resolveMetadata();
-    expect(metadata).toBeDefined();
-    const buildDigest = build.resolveDigest(metadata);
-    expect(buildDigest).toBeDefined();
-
-    const sigstore = new Sigstore();
-    const signResults = await sigstore.signAttestationManifests({
-      imageNames: [imageName],
-      imageDigest: buildDigest!
-    });
-    expect(Object.keys(signResults).length).toEqual(2);
-
-    const verifyResults = await sigstore.verifySignedManifests(signResults, {
-      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-    });
-    expect(Object.keys(verifyResults).length).toEqual(2);
-  }, 100000);
-});
+}

 maybe('verifyImageAttestations', () => {
+  let sigstore: Sigstore;
+
+  beforeAll(async () => {
+    sigstore = new Sigstore({
+      cosign: new Cosign({
+        binPath: await installCosign(currentCosignVersion)
+      })
+    });
+  }, 100000);
+
  test.each([
    ['moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`],
    ['docker/dockerfile-upstream:master@sha256:3e8cd5ebf48acd1a1939649ad1c62ca44c029852b22493c16a9307b654334958', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`]
  ])(
    'given %p',
    async (image, certificateIdentityRegexp) => {
-      const sigstore = new Sigstore();
      const verifyResults = await sigstore.verifyImageAttestations(image, {
        certificateIdentityRegexp: certificateIdentityRegexp
      });
@@ -114,7 +149,6 @@ maybe('verifyImageAttestations', () => {
  );

  it('default platform', async () => {
-    const sigstore = new Sigstore();
    const verifyResults = await sigstore.verifyImageAttestations('moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', {
      certificateIdentityRegexp: `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`,
      platform: OCI.defaultPlatform()
@@ -161,8 +195,17 @@ maybeIdToken('signProvenanceBlobs', () => {
 });

 maybeIdToken('verifySignedArtifacts', () => {
+  let sigstore: Sigstore;
+
+  beforeAll(async () => {
+    sigstore = new Sigstore({
+      cosign: new Cosign({
+        binPath: await installCosign(currentCosignVersion)
+      })
+    });
+  }, 100000);
+
  it('sign and verify', async () => {
-    const sigstore = new Sigstore();
    const signResults = await sigstore.signProvenanceBlobs({
      localExportDir: path.join(fixturesDir, 'sigstore', 'multi')
    });
--- a/tests/util.test.ts
+++ b/tests/util.test.ts
@@ -157,6 +157,28 @@ ccc`
    ]);
  });

+  it('preserves trailing new lines when trimming is disabled', async () => {
+    setInput(
+      'secrets',
+      `"PRIVATE_SSH_KEY=TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+
+
+"
+`
+    );
+    const res = Util.getInputList('secrets', {ignoreComma: true, trimWhitespace: false});
+    expect(res).toEqual([
+      `PRIVATE_SSH_KEY=TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+
+
+`
+    ]);
+  });
+
  it('multiline values without quotes', async () => {
    setInput(
      'secrets',
@@ -392,6 +414,20 @@ describe('generateRandomString', () => {
  });
 });

+describe('compileHandlebars', () => {
+  it('renders the template with the meta context and compile options', () => {
+    const rendered = Util.compileHandlebars(
+      '{{name}} {{{raw}}}',
+      {noEscape: true},
+      {
+        name: 'docker',
+        raw: '<strong>actions-toolkit</strong>'
+      }
+    );
+    expect(rendered).toBe('docker <strong>actions-toolkit</strong>');
+  });
+});
+
 describe('stringToUnicodeEntities', () => {
  it('should convert a string to Unicode entities', () => {
    const input = 'Hello, World!';
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -15,12 +15,12 @@
 # limitations under the License.

 ARG NODE_VERSION=24
-ARG DOCKER_VERSION=29.2
-ARG BUILDX_VERSION=0.32.1
-ARG COMPOSE_VERSION=2.39.1
-ARG UNDOCK_VERSION=0.10.0
-ARG REGCTL_VERSION=v0.8.2
-ARG COSIGN_VERSION=v3.0.3
+ARG DOCKER_VERSION=29.4
+ARG BUILDX_VERSION=0.33.0
+ARG COMPOSE_VERSION=5.1.3
+ARG UNDOCK_VERSION=0.12.0
+ARG REGCTL_VERSION=v0.11.3
+ARG COSIGN_VERSION=v3.0.6

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
--- a/package.json
+++ b/package.json
@@ -44,10 +44,10 @@
  "dependencies": {
    "@actions/artifact": "^6.2.1",
    "@actions/cache": "^6.0.0",
-    "@actions/core": "^3.0.0",
+    "@actions/core": "^3.0.1",
    "@actions/exec": "^3.0.0",
-    "@actions/github": "^9.0.0",
-    "@actions/http-client": "^4.0.0",
+    "@actions/github": "^9.1.1",
+    "@actions/http-client": "^4.0.1",
    "@actions/io": "^3.0.2",
    "@actions/tool-cache": "^4.0.0",
    "@sigstore/bundle": "^4.0.0",
@@ -57,7 +57,7 @@
    "async-retry": "^1.3.3",
    "csv-parse": "^6.2.1",
    "gunzip-maybe": "^1.4.2",
-    "handlebars": "^4.7.8",
+    "handlebars": "^4.7.9",
    "he": "^1.2.0",
    "js-yaml": "^4.1.1",
    "jwt-decode": "^4.0.0",
--- a/src/buildx/build.ts
+++ b/src/buildx/build.ts
@@ -59,50 +59,65 @@ export class Build {

  public async gitContext(opts?: GitContextOpts): Promise<string> {
    const gitContextCommonAttrs = new Set(['ref', 'checksum', 'subdir']);
-    const setPullRequestHeadRef = Util.parseBoolOrDefault(process.env.DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF);
-    const commonAttrs = {
-      ref: opts?.attrs?.ref,
-      checksum: opts?.attrs?.checksum,
-      subdir: opts?.attrs?.subdir
-    };
+    const commonAttrs = opts?.attrs || {};
+    const extraAttrs = Object.entries(commonAttrs).filter(([name]) => !gitContextCommonAttrs.has(name));

-    const gitChecksum = opts?.checksum || commonAttrs.checksum || github.context.sha;
    let ref = opts?.ref || commonAttrs.ref || github.context.ref;
-    const subdir = opts?.subdir || commonAttrs.subdir;
-    const attrs = Object.entries(opts?.attrs || {}).filter(([name]) => !gitContextCommonAttrs.has(name));
    if (!ref.startsWith('refs/')) {
      ref = `refs/heads/${ref}`;
-    } else if (ref.startsWith(`refs/pull/`) && setPullRequestHeadRef) {
+    } else if (ref.startsWith(`refs/pull/`) && Util.parseBoolOrDefault(process.env.DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF)) {
      ref = ref.replace(/\/merge$/g, '/head');
    }

+    const inputChecksum = opts?.checksum || commonAttrs.checksum;
+    const inputSubdir = opts?.subdir || commonAttrs.subdir;
+    const checksum = inputChecksum || (ref.startsWith(`refs/pull/`) ? undefined : github.context.sha);
+
+    // BuildKit resolves PR refs remotely at build time, so mutable refs like
+    // refs/pull/*/{merge,head} can drift away from the event SHA. actions/checkout
+    // avoids that by fetching the exact commit into a local PR ref; here we do the
+    // equivalent for implicit PR contexts by rewriting them to the event's commit SHA.
+    if (!inputChecksum && ref.startsWith(`refs/pull/`)) {
+      if (ref.endsWith('/merge')) {
+        ref = github.context.sha;
+      } else if (ref.endsWith('/head') && typeof github.context.payload.pull_request?.head?.sha === 'string') {
+        ref = github.context.payload.pull_request.head.sha;
+      }
+    }
+
    const baseURL = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git`;
    let format = opts?.format;
    if (!format) {
-      const sendGitQueryAsInput = Util.parseBoolOrDefault(process.env.BUILDX_SEND_GIT_QUERY_AS_INPUT);
-      if (attrs.length > 0) {
+      format = 'fragment';
+      if (extraAttrs.length > 0) {
        format = 'query';
-      } else if (sendGitQueryAsInput && (await this.buildx.versionSatisfies('>=0.29.0'))) {
-        format = 'query';
-      } else {
-        format = 'fragment';
+      } else if (Util.parseBoolOrDefault(process.env.BUILDX_SEND_GIT_QUERY_AS_INPUT)) {
+        try {
+          if (await this.buildx.versionSatisfies('>=0.29.0')) {
+            format = 'query';
+          }
+        } catch {
+          // keep fragment fallback when Buildx version cannot be determined.
+        }
      }
    }
+
    if (format === 'query') {
      const query = [`ref=${ref}`];
-      if (gitChecksum) {
-        query.push(`checksum=${gitChecksum}`);
+      if (checksum) {
+        query.push(`checksum=${checksum}`);
      }
-      if (subdir && subdir !== '.') {
-        query.push(`subdir=${subdir}`);
+      if (inputSubdir && inputSubdir !== '.') {
+        query.push(`subdir=${inputSubdir}`);
      }
-      for (const [name, value] of attrs) {
+      for (const [name, value] of extraAttrs) {
        query.push(`${name}=${value}`);
      }
      return `${baseURL}?${query.join('&')}`;
    }
-    const fragmentRef = gitChecksum && !ref.startsWith(`refs/pull/`) ? gitChecksum : ref;
-    return `${baseURL}#${fragmentRef}${subdir && subdir !== '.' ? `:${subdir}` : ''}`;
+
+    const fragmentRef = inputChecksum && ref.startsWith(`refs/pull/`) ? ref : (checksum ?? ref);
+    return `${baseURL}#${fragmentRef}${inputSubdir && inputSubdir !== '.' ? `:${inputSubdir}` : ''}`;
  }

  public getImageIDFilePath(): string {
--- a/src/cosign/cosign.ts
+++ b/src/cosign/cosign.ts
@@ -38,7 +38,7 @@ export interface CosignCommandError {
 }

 export class Cosign {
-  private readonly binPath: string;
+  public readonly binPath: string;
  private _version: string;
  private _versionOnce: boolean;

--- a/src/docker/assets.ts
+++ b/src/docker/assets.ts
@@ -165,19 +165,19 @@ images:
  arch: "{{arch}}"
  digest: "{{digest}}"
 {{/each}}
- location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-amd64.img"
+- location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/ubuntu-24.04-server-cloudimg-amd64.img"
  arch: "x86_64"
-  digest: "sha256:f1652d29d497fb7c623433705c9fca6525d1311b11294a0f495eed55c7639d1f"
+  digest: "sha256:5c3ddb00f60bc455dac0862fabe9d8bacec46c33ac1751143c5c3683404b110d"
  kernel:
-    location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic"
-    digest: "sha256:67cd9af083515de2101de032b49a64fc4b65778e5383df6ef21cf788a3f4688e"
+    location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic"
+    digest: "sha256:5b2a4fe174dacb18281f8f7d72ae32ac4b92801f0b7b5cb43ea55dee29fb789d"
    cmdline: "root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyAMA0 no_timer_check"
  initrd:
-    location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic"
-    digest: "sha256:f257d581c44f66da2d80c7c5dc3fa598ce76ef313d6e27b368683e8030a9e8fd"
- location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-arm64.img"
+    location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic"
+    digest: "sha256:cd0b64a5498e583a820a5b842369df83d036b4200b33bc51cadc58176184aaca"
+- location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/ubuntu-24.04-server-cloudimg-arm64.img"
  arch: "aarch64"
-  digest: "sha256:bbecbb88100ee65497927ed0da247ba15af576a8855004182cf3c87265e25d35"
+  digest: "sha256:1ea801e659d2f5035ac294e0faab0aac9b6ba66753df933ba5c7beab0c689bd0"
 # Fallback to the latest release image.
 # Hint: run \`limactl prune\` to invalidate the cache
 - location: https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-amd64.img
@@ -231,6 +231,7 @@ provision:
  script: |
    #!/bin/bash
    set -eux -o pipefail
+    archiveInstallLog=/var/log/docker-actions-toolkit-archive-install.log
    command -v docker >/dev/null 2>&1 && exit 0
    if [ ! -e /etc/systemd/system/docker.socket.d/override.conf ]; then
      mkdir -p /etc/systemd/system/docker.socket.d
@@ -248,19 +249,41 @@ provision:
    fi
    export DEBIAN_FRONTEND=noninteractive
    if [ "{{srcType}}" == "archive" ]; then
-      curl -fsSL https://get.docker.com | sh -s -- --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}
-      sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}} --containerd=/run/containerd/containerd.sock|' /usr/lib/systemd/system/docker.service
-      systemctl daemon-reload
-      systemctl restart docker
-      systemctl status docker.socket || true
-      systemctl status docker.service || true
+      {
+        getDockerScript=$(mktemp)
+        curl --retry 3 --retry-all-errors --retry-delay 5 -fsSL -o "$getDockerScript" https://get.docker.com
+
+        attempt=1
+        max_attempts=3
+        until [ "$attempt" -gt "$max_attempts" ]; do
+          echo "Docker install attempt $attempt/$max_attempts"
+          if sh "$getDockerScript" --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}; then
+            break
+          fi
+          if [ "$attempt" -eq "$max_attempts" ]; then
+            echo >&2 "Docker install failed after $max_attempts attempts"
+            exit 1
+          fi
+          echo >&2 "Docker install attempt $attempt failed, retrying after $((attempt * 30))s"
+          rm -rf /var/lib/apt/lists/partial/* || true
+          apt-get clean || true
+          sleep $((attempt * 30))
+          attempt=$((attempt + 1))
+        done
+
+        sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}} --containerd=/run/containerd/containerd.sock|' /usr/lib/systemd/system/docker.service
+        systemctl daemon-reload
+        systemctl restart docker
+        systemctl status docker.socket || true
+        systemctl status docker.service || true
+      } 2>&1 | tee "$archiveInstallLog"
    elif [ "{{srcType}}" == "image" ]; then
      arch=$(uname -m)
      case $arch in
        x86_64) arch=amd64;;
        aarch64) arch=arm64;;
      esac
-      url="https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_$arch.tar.gz"
+      url="https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_$arch.tar.gz"

      wget "$url" -O /tmp/undock.tar.gz
      tar -C /usr/local/bin -xvf /tmp/undock.tar.gz
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -326,6 +326,7 @@ export class Install {
      try {
        await Exec.exec(`limactl ${limaStartArgs.join(' ')}`, [], {env: envs});
      } catch (e) {
+        await this.printDarwinDiagnostics();
        fsp
          .readdir(limaDir)
          .then(files => {
@@ -539,11 +540,7 @@ EOF`,
  }

  private async tearDownDarwin(): Promise<void> {
-    await core.group('Docker daemon logs', async () => {
-      await Exec.exec('limactl', ['shell', '--tty=false', this.limaInstanceName, 'sudo', 'journalctl', '-u', 'docker.service', '-l', '--no-pager']).catch(() => {
-        core.warning(`Failed to get Docker daemon logs`);
-      });
-    });
+    await this.printDarwinDiagnostics();
    await core.group('Stopping lima instance', async () => {
      await Exec.exec('limactl', ['stop', '--tty=false', this.limaInstanceName, '--force']);
    });
@@ -558,6 +555,36 @@ EOF`,
    });
  }

+  private async printDarwinDiagnostics(): Promise<void> {
+    await this.printDarwinGuestCommandOutput('Cloud-init output log', ['sudo', 'cat', '/var/log/cloud-init-output.log']);
+    await this.printDarwinGuestCommandOutput('Cloud-init status', ['sudo', 'timeout', '300s', 'cloud-init', 'status', '--wait']);
+    await this.printDarwinGuestCommandOutput('Docker unit file', ['sudo', 'systemctl', 'cat', 'docker.service']);
+    await this.printDarwinGuestCommandOutput('Docker service status', ['sudo', 'systemctl', 'status', 'docker.service', 'docker.socket', '-l', '--no-pager']);
+    await this.printDarwinGuestCommandOutput('Archive install script log', ['sudo', 'cat', '/var/log/docker-actions-toolkit-archive-install.log']);
+    await this.printDarwinGuestCommandOutput('Docker daemon logs', ['sudo', 'journalctl', '-u', 'docker.service', '-l', '--no-pager']);
+  }
+
+  private async printDarwinGuestCommandOutput(title: string, args: string[]): Promise<void> {
+    await core.group(title, async () => {
+      const res = await Exec.getExecOutput('limactl', ['shell', '--tty=false', this.limaInstanceName, ...args], {
+        ignoreReturnCode: true,
+        silent: true
+      }).catch(error => {
+        core.info(`Failed to get ${title}: ${error}`);
+        return undefined;
+      });
+      if (!res) {
+        return;
+      }
+      const output = [res.stdout.trim(), res.stderr.trim()].filter(Boolean).join('\n');
+      if (output.length > 0) {
+        core.info(output);
+      } else if (res.exitCode !== 0) {
+        core.info(`${title} exited with code ${res.exitCode}`);
+      }
+    });
+  }
+
  private async tearDownLinux(): Promise<void> {
    await core.group('Docker daemon logs', async () => {
      core.info(fs.readFileSync(path.join(this.runDir, 'dockerd.log'), {encoding: 'utf8'}));
--- a/src/sigstore/sigstore.ts
+++ b/src/sigstore/sigstore.ts
@@ -55,6 +55,8 @@ export interface SigstoreOpts {
  imageTools?: ImageTools;
 }

+const COSIGN_PREDICATE_SLSA_PROVENANCE_V1 = 'slsaprovenance1';
+
 export class Sigstore {
  private readonly cosign: Cosign;
  private readonly imageTools: ImageTools;
@@ -95,7 +97,7 @@ export class Sigstore {
          if (noTransparencyLog) {
            createConfigArgs.push('--no-default-rekor=true');
          }
-          await Exec.exec('cosign', createConfigArgs, {
+          await Exec.exec(this.cosign.binPath, createConfigArgs, {
            env: Object.assign({}, process.env, {
              COSIGN_EXPERIMENTAL: '1'
            }) as {
@@ -130,8 +132,8 @@ export class Sigstore {
              '--new-bundle-format',
              ...cosignExtraArgs
            ];
-            core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-            const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+            core.info(`[command]${this.cosign.binPath} ${[...cosignArgs, attestationRef].join(' ')}`);
+            const execRes = await Exec.getExecOutput(this.cosign.binPath, ['--verbose', ...cosignArgs, attestationRef], {
              ignoreReturnCode: true,
              silent: true,
              env: Object.assign({}, process.env, {
@@ -227,8 +229,8 @@ export class Sigstore {
    }

    if (!opts.retryOnManifestUnknown) {
-      core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+      core.info(`[command]${this.cosign.binPath} ${[...cosignArgs, attestationRef].join(' ')}`);
+      const execRes = await Exec.getExecOutput(this.cosign.binPath, ['--verbose', ...cosignArgs, attestationRef], {
        ignoreReturnCode: true,
        silent: true,
        env: Object.assign({}, process.env, {
@@ -248,9 +250,9 @@ export class Sigstore {

    const retries = opts.retryLimit ?? 15;
    let lastError: Error | undefined;
-    core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+    core.info(`[command]${this.cosign.binPath} ${[...cosignArgs, attestationRef].join(' ')}`);
    for (let attempt = 0; attempt < retries; attempt++) {
-      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+      const execRes = await Exec.getExecOutput(this.cosign.binPath, ['--verbose', ...cosignArgs, attestationRef], {
        ignoreReturnCode: true,
        silent: true,
        env: Object.assign({}, process.env, {
@@ -352,13 +354,14 @@ export class Sigstore {
            'verify-blob-attestation',
            '--new-bundle-format',
            '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
-            '--certificate-identity-regexp', opts.certificateIdentityRegexp
+            '--certificate-identity-regexp', opts.certificateIdentityRegexp,
+            '--type', opts.predicateType ?? COSIGN_PREDICATE_SLSA_PROVENANCE_V1
          ]
          if (opts.noTransparencyLog || !signedRes.tlogID) {
            // if there is no tlog entry, we skip tlog verification but still verify the signed timestamp
            cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
          }
-          const execRes = await Exec.getExecOutput('cosign', [...cosignArgs, '--bundle', signedRes.bundlePath, artifactPath], {
+          const execRes = await Exec.getExecOutput(this.cosign.binPath, [...cosignArgs, '--bundle', signedRes.bundlePath, artifactPath], {
            ignoreReturnCode: true
          });
          if (execRes.stderr.length > 0 && execRes.exitCode != 0) {
--- a/src/types/sigstore/sigstore.ts
+++ b/src/types/sigstore/sigstore.ts
@@ -73,6 +73,7 @@ export interface SignProvenanceBlobsResult extends ParsedBundle {
 }

 export interface VerifySignedArtifactsOpts {
+  predicateType?: string;
  certificateIdentityRegexp: string;
  noTransparencyLog?: boolean;
 }
--- a/src/util.ts
+++ b/src/util.ts
@@ -17,6 +17,7 @@
 import crypto from 'crypto';
 import fs from 'fs';
 import path from 'path';
+import * as handlebars from 'handlebars';
 import * as core from '@actions/core';
 import * as io from '@actions/io';
 import {parse} from 'csv-parse/sync';
@@ -26,11 +27,12 @@ export interface ListOpts {
  comment?: string;
  commentNoInfix?: boolean;
  quote?: string | boolean | Buffer | null;
+  trimWhitespace?: boolean;
 }

 export class Util {
  public static getInputList(name: string, opts?: ListOpts): string[] {
-    return this.getList(core.getInput(name), opts);
+    return this.getList(core.getInput(name, {trimWhitespace: opts?.trimWhitespace !== false}), opts);
  }

  public static getList(input: string, opts?: ListOpts): string[] {
@@ -63,7 +65,7 @@ export class Util {
      }
    }

-    return res.filter(item => item).map(pat => pat.trim());
+    return res.filter(item => item).map(item => (opts?.trimWhitespace === false ? item : item.trim()));
  }

  public static getInputNumber(name: string): number | undefined {
@@ -202,6 +204,10 @@ export class Util {
    return bytes.toString('hex').slice(0, length);
  }

+  public static compileHandlebars(value: string, options: Parameters<typeof handlebars.compile>[1], data: unknown): string {
+    return handlebars.compile(value, options)(data);
+  }
+
  public static stringToUnicodeEntities(str: string) {
    return Array.from(str)
      .map(char => `&#x${char.charCodeAt(0).toString(16)};`)
--- a/yarn.lock
+++ b/yarn.lock
@@ -61,6 +61,16 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/core@npm:^3.0.1":
+  version: 3.0.1
+  resolution: "@actions/core@npm:3.0.1"
+  dependencies:
+    "@actions/exec": "npm:^3.0.0"
+    "@actions/http-client": "npm:^4.0.0"
+  checksum: 10/e1295f6b81299cc5655ea571e7b3eea02889fdc479e71c783ad9ca48432c613f52a1fd01fecc973a64488b053083ea925a0d23ac7af0bcd8462afc4f4371918b
+  languageName: node
+  linkType: hard
+
 "@actions/exec@npm:^3.0.0":
  version: 3.0.0
  resolution: "@actions/exec@npm:3.0.0"
@@ -85,6 +95,21 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/github@npm:^9.1.1":
+  version: 9.1.1
+  resolution: "@actions/github@npm:9.1.1"
+  dependencies:
+    "@actions/http-client": "npm:^3.0.2"
+    "@octokit/core": "npm:^7.0.6"
+    "@octokit/plugin-paginate-rest": "npm:^14.0.0"
+    "@octokit/plugin-rest-endpoint-methods": "npm:^17.0.0"
+    "@octokit/request": "npm:^10.0.7"
+    "@octokit/request-error": "npm:^7.1.0"
+    undici: "npm:^6.23.0"
+  checksum: 10/eb77846e506df107208ee6a57aa38c80ce6cdd9ab499ec3518a8e3000334def8f93fcf2b43c8b512fede9b093a1ca39d184551a9c50f37cb8fc17704d09c7e70
+  languageName: node
+  linkType: hard
+
 "@actions/glob@npm:^0.6.1":
  version: 0.6.1
  resolution: "@actions/glob@npm:0.6.1"
@@ -115,6 +140,16 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/http-client@npm:^4.0.1":
+  version: 4.0.1
+  resolution: "@actions/http-client@npm:4.0.1"
+  dependencies:
+    tunnel: "npm:^0.0.6"
+    undici: "npm:^6.23.0"
+  checksum: 10/4fab65bf488e15143db87ce200a9d1f6f81832adfb1cbdadc380bbe2a95c86b1f5daa0d89c029533ccea4cd2b811a84ce984dfd0d6530479b82bc9860e8be704
+  languageName: node
+  linkType: hard
+
 "@actions/io@npm:^3.0.0, @actions/io@npm:^3.0.2":
  version: 3.0.2
  resolution: "@actions/io@npm:3.0.2"
@@ -372,10 +407,10 @@ __metadata:
  dependencies:
    "@actions/artifact": "npm:^6.2.1"
    "@actions/cache": "npm:^6.0.0"
-    "@actions/core": "npm:^3.0.0"
+    "@actions/core": "npm:^3.0.1"
    "@actions/exec": "npm:^3.0.0"
-    "@actions/github": "npm:^9.0.0"
-    "@actions/http-client": "npm:^4.0.0"
+    "@actions/github": "npm:^9.1.1"
+    "@actions/http-client": "npm:^4.0.1"
    "@actions/io": "npm:^3.0.2"
    "@actions/tool-cache": "npm:^4.0.0"
    "@eslint/js": "npm:^9.39.3"
@@ -401,7 +436,7 @@ __metadata:
    eslint-plugin-prettier: "npm:^5.5.5"
    globals: "npm:^17.3.0"
    gunzip-maybe: "npm:^1.4.2"
-    handlebars: "npm:^4.7.8"
+    handlebars: "npm:^4.7.9"
    he: "npm:^1.2.0"
    js-yaml: "npm:^4.1.1"
    jwt-decode: "npm:^4.0.0"
@@ -802,6 +837,13 @@ __metadata:
  languageName: node
  linkType: hard

+"@nodable/entities@npm:^2.1.0":
+  version: 2.1.0
+  resolution: "@nodable/entities@npm:2.1.0"
+  checksum: 10/355c55e82aebe45d4b962d16530951df51e19e3e63a27ea61ad3260c0807064619b270b9c83db10e8394f42760abd5b7f7c5b5117678c4246ce8364a4aafc637
+  languageName: node
+  linkType: hard
+
 "@npmcli/agent@npm:^4.0.0":
  version: 4.0.0
  resolution: "@npmcli/agent@npm:4.0.0"
@@ -1951,12 +1993,12 @@ __metadata:
  linkType: hard

 "brace-expansion@npm:^1.1.7":
-  version: 1.1.12
-  resolution: "brace-expansion@npm:1.1.12"
+  version: 1.1.13
+  resolution: "brace-expansion@npm:1.1.13"
  dependencies:
    balanced-match: "npm:^1.0.0"
    concat-map: "npm:0.0.1"
-  checksum: 10/12cb6d6310629e3048cadb003e1aca4d8c9bb5c67c3c321bafdd7e7a50155de081f78ea3e0ed92ecc75a9015e784f301efc8132383132f4f7904ad1ac529c562
+  checksum: 10/b5f4329fdbe9d2e25fa250c8f866ebd054ba946179426e99b86dcccddabdb1d481f0e40ee5430032e62a7d0a6c2837605ace6783d015aa1d65d85ca72154d936
  languageName: node
  linkType: hard

@@ -2676,25 +2718,26 @@ __metadata:
  languageName: node
  linkType: hard

-"fast-xml-builder@npm:^1.1.4":
-  version: 1.1.4
-  resolution: "fast-xml-builder@npm:1.1.4"
+"fast-xml-builder@npm:^1.1.5":
+  version: 1.1.5
+  resolution: "fast-xml-builder@npm:1.1.5"
  dependencies:
    path-expression-matcher: "npm:^1.1.3"
-  checksum: 10/32937866aaf5a90e69d1f4ee6e15e875248d5b5d2afd70277e9e8323074de4980cef24575a591b8e43c29f405d5f12377b3bad3842dc412b0c5c17a3eaee4b6b
+  checksum: 10/377c4ef816972e67192fd32757c50d2a9d4cccf352ceac48bda6681a0ee24fb0b1f1c892810f77886db760681f23fe0b8f62c7c0cc9469c0d2863c5c529ac1d2
  languageName: node
  linkType: hard

 "fast-xml-parser@npm:^5.0.7":
-  version: 5.5.7
-  resolution: "fast-xml-parser@npm:5.5.7"
+  version: 5.7.1
+  resolution: "fast-xml-parser@npm:5.7.1"
  dependencies:
-    fast-xml-builder: "npm:^1.1.4"
-    path-expression-matcher: "npm:^1.1.3"
-    strnum: "npm:^2.2.0"
+    "@nodable/entities": "npm:^2.1.0"
+    fast-xml-builder: "npm:^1.1.5"
+    path-expression-matcher: "npm:^1.5.0"
+    strnum: "npm:^2.2.3"
  bin:
    fxparser: src/cli/cli.js
-  checksum: 10/b69e65cb1c6b43487f1702c5cdd6a67589e4760ba41c06826e56891594cb2d322a6b81cd15b4c01b88ef9bc58657c92cd7d86c6f0e078a2f94ede31533fbaf7e
+  checksum: 10/ce7de013cae7707d12b9da8cb294265da3780bb8bfa36b17f98053654628a0142159d78746747b1ed38bdefca8b6817f051171183e69a527ba18e1df067e9bce
  languageName: node
  linkType: hard

@@ -2948,9 +2991,9 @@ __metadata:
  languageName: node
  linkType: hard

-"handlebars@npm:^4.7.8":
-  version: 4.7.8
-  resolution: "handlebars@npm:4.7.8"
+"handlebars@npm:^4.7.9":
+  version: 4.7.9
+  resolution: "handlebars@npm:4.7.9"
  dependencies:
    minimist: "npm:^1.2.5"
    neo-async: "npm:^2.6.2"
@@ -2962,7 +3005,7 @@ __metadata:
      optional: true
  bin:
    handlebars: bin/handlebars
-  checksum: 10/bd528f4dd150adf67f3f857118ef0fa43ff79a153b1d943fa0a770f2599e38b25a7a0dbac1a3611a4ec86970fd2325a81310fb788b5c892308c9f8743bd02e11
+  checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
  languageName: node
  linkType: hard

@@ -3376,9 +3419,9 @@ __metadata:
  linkType: hard

 "lodash@npm:^4.17.15":
-  version: 4.17.23
-  resolution: "lodash@npm:4.17.23"
-  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  version: 4.18.1
+  resolution: "lodash@npm:4.18.1"
+  checksum: 10/306fea53dfd39dad1f03d45ba654a2405aebd35797b673077f401edb7df2543623dc44b9effbb98f69b32152295fff725a4cec99c684098947430600c6af0c3f
  languageName: node
  linkType: hard

@@ -3948,6 +3991,13 @@ __metadata:
  languageName: node
  linkType: hard

+"path-expression-matcher@npm:^1.5.0":
+  version: 1.5.0
+  resolution: "path-expression-matcher@npm:1.5.0"
+  checksum: 10/28303bb9ee6831e6df14c10cd3f3f7b2d7c8d7f788d8bdb7440136fd696064c82a3e264999a0764d28e39f698275fc03a5493bec93c57ef4a22566280367dd64
+  languageName: node
+  linkType: hard
+
 "path-is-absolute@npm:^1.0.0":
  version: 1.0.1
  resolution: "path-is-absolute@npm:1.0.1"
@@ -4018,9 +4068,9 @@ __metadata:
  linkType: hard

 "picomatch@npm:^4.0.3":
-  version: 4.0.3
-  resolution: "picomatch@npm:4.0.3"
-  checksum: 10/57b99055f40b16798f2802916d9c17e9744e620a0db136554af01d19598b96e45e2f00014c91d1b8b13874b80caa8c295b3d589a3f72373ec4aaf54baa5962d5
+  version: 4.0.4
+  resolution: "picomatch@npm:4.0.4"
+  checksum: 10/f6ef80a3590827ce20378ae110ac78209cc4f74d39236370f1780f957b7ee41c12acde0e4651b90f39983506fd2f5e449994716f516db2e9752924aff8de93ce
  languageName: node
  linkType: hard

@@ -4628,10 +4678,10 @@ __metadata:
  languageName: node
  linkType: hard

-"strnum@npm:^2.2.0":
-  version: 2.2.1
-  resolution: "strnum@npm:2.2.1"
-  checksum: 10/c553d83e1adc223bc33c29c6e8b0c4a512d5d432ae636c6117a713c9e6d50d2bf2d3d6bc53cd8dc210c3cf27986904bee44e6d58ad8c767507a27d90400a572b
+"strnum@npm:^2.2.3":
+  version: 2.2.3
+  resolution: "strnum@npm:2.2.3"
+  checksum: 10/fb70206301858c319f59ed34fecedf90ac3b821692c2accd403d9d4a3384223a09df8fd92b130bbd4e885b67b7790715c003405ce5f959d9cabbf07d41d62aa8
  languageName: node
  linkType: hard

@@ -4916,8 +4966,8 @@ __metadata:
  linkType: hard

 "vite@npm:^6.0.0 || ^7.0.0":
-  version: 7.3.1
-  resolution: "vite@npm:7.3.1"
+  version: 7.3.2
+  resolution: "vite@npm:7.3.2"
  dependencies:
    esbuild: "npm:^0.27.0"
    fdir: "npm:^6.5.0"
@@ -4966,7 +5016,7 @@ __metadata:
      optional: true
  bin:
    vite: bin/vite.js
-  checksum: 10/62e48ffa4283b688f0049005405a004447ad38ffc99a0efea4c3aa9b7eed739f7402b43f00668c0ee5a895b684dc953d62f0722d8a92c5b2f6c95f051bceb208
+  checksum: 10/c5f7a9a60011c41c836cedf31c8ee7624102aff9b6a7f3aab2ff47639721bba0916f81994c3a3ea6577a16c4f0dfee1e7dbd244e0da8edd5954e3c6d48daaaa2
  languageName: node
  linkType: hard