Merge pull request #1099 from crazy-max/inputlist-trim-opt

util: add opt-in whitespace preservation for multiline inputs
Merge pull request #1098 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
2026-04-24 15:04:00 +02:00 · 2026-04-24 15:03:08 +02:00 · 2026-04-24 15:02:31 +02:00 · 2026-04-24 15:02:12 +02:00 · 2026-04-24 14:54:53 +02:00 · 2026-04-24 12:50:14 +00:00
31 changed files with 1050 additions and 350 deletions
--- a/.github/compose-releases.json
+++ b/.github/compose-releases.json
@@ -1,65 +1,191 @@
 {
  "latest": {
-    "id": 299261182,
-    "tag_name": "v5.1.1",
-    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.1",
+    "id": 309393346,
+    "tag_name": "v5.1.3",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.3",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v5.1.1/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sigstore.json"
+      "https://github.com/docker/compose/releases/download/v5.1.3/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.1.3": {
+    "id": 309393346,
+    "tag_name": "v5.1.3",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.3",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.1.3/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sigstore.json"
+    ]
+  },
+  "v5.1.2": {
+    "id": 306957188,
+    "tag_name": "v5.1.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.2",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.1.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.2/docker-compose-windows-x86_64.sigstore.json"
    ]
  },
  "v5.1.1": {
@@ -345,66 +471,66 @@
    ]
  },
  "edge": {
-    "id": 299261182,
-    "tag_name": "v5.1.1",
-    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.1",
+    "id": 309393346,
+    "tag_name": "v5.1.3",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.1.3",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v5.1.1/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-darwin-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv6.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-armv7.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-ppc64le.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-riscv64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-s390x.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-linux-x86_64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-aarch64.sigstore.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.1.1/docker-compose-windows-x86_64.sigstore.json"
+      "https://github.com/docker/compose/releases/download/v5.1.3/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-darwin-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv6.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-armv7.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-ppc64le.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-riscv64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-s390x.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-linux-x86_64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-aarch64.sigstore.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.1.3/docker-compose-windows-x86_64.sigstore.json"
    ]
  },
  "v5.0.0-rc.2": {
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,8 +1,14 @@
 {
  "latest": {
-    "id": 305984249,
-    "tag_name": "docker-v29.4.0",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0",
+    "id": 311295981,
+    "tag_name": "docker-v29.4.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.1",
+    "assets": []
+  },
+  "v29.4.1": {
+    "id": 311295981,
+    "tag_name": "docker-v29.4.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.1",
    "assets": []
  },
  "v29.4.0": {
@@ -12,9 +18,9 @@
    "assets": []
  },
  "edge": {
-    "id": 305984249,
-    "tag_name": "docker-v29.4.0",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0",
+    "id": 311295981,
+    "tag_name": "docker-v29.4.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.1",
    "assets": []
  },
  "v29.4.0-rc.1": {
--- a/.github/regclient-releases.json
+++ b/.github/regclient-releases.json
@@ -1,37 +1,72 @@
 {
  "latest": {
-    "id": 289583033,
-    "tag_name": "v0.11.2",
-    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.2",
+    "id": 308364025,
+    "tag_name": "v0.11.3",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.3",
    "assets": [
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/metadata.tgz",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-freebsd-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-riscv64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regbot-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-freebsd-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-riscv64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regctl-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-freebsd-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-riscv64",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.11.2/regsync-windows-amd64.exe"
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.3": {
+    "id": 308364025,
+    "tag_name": "v0.11.3",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.3",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.3/regsync-windows-amd64.exe"
    ]
  },
  "v0.11.2": {
--- a/.github/undock-releases.json
+++ b/.github/undock-releases.json
@@ -1,46 +1,90 @@
 {
  "latest": {
-    "id": 273439938,
-    "tag_name": "v0.11.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
+    "id": 307426692,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.12.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.zip"
+    ]
+  },
+  "v0.12.0": {
+    "id": 307426692,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.12.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.zip"
    ]
  },
  "v0.11.0": {
@@ -241,47 +285,47 @@
    ]
  },
  "edge": {
-    "id": 273439938,
-    "tag_name": "v0.11.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
+    "id": 307426692,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.12.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_windows_arm64.zip"
    ]
  },
  "v0.7.0-rc.1": {
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -27,7 +27,7 @@ jobs:
    steps:
      -
        name: Build
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          targets: build
        env:
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -29,19 +29,19 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
        with:
          languages: javascript-typescript
      -
        name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/compose-lab-releases-json.yml
+++ b/.github/workflows/compose-lab-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/compose-desktop
      artifact_name: compose-lab-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/compose-lab-releases-json
--- a/.github/workflows/compose-releases-json.yml
+++ b/.github/workflows/compose-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: docker/compose
      artifact_name: compose-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/compose-releases-json
--- a/.github/workflows/cosign-releases-json.yml
+++ b/.github/workflows/cosign-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: sigstore/cosign
      artifact_name: cosign-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/cosign-releases-json
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
@@ -53,7 +53,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/pr-assign-author.yml
+++ b/.github/workflows/pr-assign-author.yml
@@ -11,7 +11,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      pull-requests: write
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -32,7 +32,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
--- a/.github/workflows/regclient-releases-json.yml
+++ b/.github/workflows/regclient-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: regclient/regclient
      artifact_name: regclient-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/regclient-releases-json
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -39,7 +39,7 @@ jobs:
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Test
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          source: .
          targets: test-coverage
@@ -80,7 +80,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
@@ -90,7 +90,7 @@ jobs:
      -
        name: Create includes
        id: set
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
          script: |
            let tests = [];
@@ -109,7 +109,7 @@ jobs:
            });
            await core.group(`Set includes`, async () => {
              let includes = [];
-              for (const os of ['ubuntu-latest', 'ubuntu-24.04-arm', 'macos-15-intel', 'windows-latest']) {
+              for (const os of ['ubuntu-latest', 'ubuntu-24.04-arm', 'macos-26-large', 'windows-latest']) {
                for (const test of tests) {
                  if (test === 'docker/install.test.itg.ts') {
                    if (os !== 'windows-latest') {
@@ -164,7 +164,7 @@ jobs:
        # FIXME: Needs to setup node twice on Windows: https://github.com/actions/setup-node/issues/1357#issuecomment-3254613964
        name: Setup Node
        if: startsWith(matrix.os, 'windows')
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          package-manager-cache: false
@@ -175,7 +175,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
@@ -200,7 +200,7 @@ jobs:
        run: yarn install
      -
        name: Test
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
          script: |
            const testName = `${{ matrix.test_name }}`;
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -20,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    with:
      repository: crazy-max/undock
      artifact_name: undock-releases-json
@@ -50,7 +50,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/undock-releases-json
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -0,0 +1,327 @@
+name: update-deps
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 9 * * *'
+  push:
+    branches:
+      - 'main'
+
+jobs:
+  update:
+    runs-on: ubuntu-24.04
+    environment: update-deps # secrets are gated by this environment
+    timeout-minutes: 10
+    permissions:
+      contents: write
+      pull-requests: write
+    strategy:
+      fail-fast: false
+      matrix:
+        dep:
+          - docker
+          - buildx
+          - buildkit
+          - compose
+          - cosign
+          - regctl
+          - undock
+    steps:
+      -
+        name: GitHub auth token from GitHub App
+        id: write-app
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        with:
+          client-id: ${{ vars.GHACTIONS_REPO_WRITE_CLIENT_ID }}
+          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_PRIVATE_KEY }}
+          owner: docker
+          repositories: actions-toolkit
+      -
+        name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          token: ${{ steps.write-app.outputs.token }}
+          fetch-depth: 0
+          persist-credentials: false
+      -
+        name: Update dependency
+        id: update
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          INPUT_DEP: ${{ matrix.dep }}
+        with:
+          script: |
+            const fs = require('fs');
+            const path = require('path');
+
+            const dep = core.getInput('dep');
+
+            function escapeRegExp(value) {
+              return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+            }
+
+            function formatList(values) {
+              const quoted = values.map(value => `\`${value}\``);
+              if (quoted.length === 1) {
+                return quoted[0];
+              }
+              if (quoted.length === 2) {
+                return `${quoted[0]} and ${quoted[1]}`;
+              }
+              return `${quoted.slice(0, -1).join(', ')}, and ${quoted.at(-1)}`;
+            }
+
+            function unique(values) {
+              return [...new Set(values)];
+            }
+
+            function stripLeadingV(value) {
+              return value.startsWith('v') ? value.slice(1) : value;
+            }
+
+            function stripDockerTag(value) {
+              return value.replace(/^docker-v/, '').replace(/^v/, '');
+            }
+
+            function majorMinor(value) {
+              const match = value.match(/^(\d+\.\d+)/);
+              if (!match) {
+                throw new Error(`Unable to derive major.minor version from ${value}`);
+              }
+              return match[1];
+            }
+
+            function readJson(relativePath) {
+              const absolutePath = path.join(process.env.GITHUB_WORKSPACE, relativePath);
+              return JSON.parse(fs.readFileSync(absolutePath, 'utf8'));
+            }
+
+            function readLatestTag(relativePath) {
+              const tag = readJson(relativePath)?.latest?.tag_name;
+              if (!tag) {
+                throw new Error(`Unable to resolve latest tag from ${relativePath}`);
+              }
+              return tag;
+            }
+
+            function dockerfileArgPattern(key) {
+              return new RegExp(`^(ARG ${escapeRegExp(key)}=)(.+)$`, 'm');
+            }
+
+            function workflowEnvPattern(key) {
+              return new RegExp(`^(  ${escapeRegExp(key)}: ")([^"]*)(")$`, 'm');
+            }
+
+            const dependencyConfigs = {
+              docker: {
+                name: 'Docker version',
+                branch: 'deps/docker-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/docker-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/docker-releases.json');
+                  const version = majorMinor(stripDockerTag(tag));
+                  return {
+                    titleValue: version,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'DOCKER_VERSION',
+                        value: version,
+                        pattern: dockerfileArgPattern('DOCKER_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              buildx: {
+                name: 'Buildx version',
+                branch: 'deps/buildx-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/buildx-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/buildx-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'BUILDX_VERSION',
+                        value: stripLeadingV(tag),
+                        pattern: dockerfileArgPattern('BUILDX_VERSION')
+                      },
+                      {
+                        path: '.github/workflows/test.yml',
+                        key: 'BUILDX_VERSION',
+                        value: tag,
+                        pattern: workflowEnvPattern('BUILDX_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              buildkit: {
+                name: 'BuildKit image',
+                branch: 'deps/buildkit-image',
+                sourceUrl: 'https://github.com/moby/buildkit/releases/latest',
+                async resolve({github}) {
+                  const release = await github.rest.repos.getLatestRelease({
+                    owner: 'moby',
+                    repo: 'buildkit'
+                  });
+                  const image = `moby/buildkit:${release.data.tag_name}`;
+                  return {
+                    titleValue: image,
+                    targets: [
+                      {
+                        path: '.github/workflows/test.yml',
+                        key: 'BUILDKIT_IMAGE',
+                        value: image,
+                        pattern: workflowEnvPattern('BUILDKIT_IMAGE')
+                      }
+                    ]
+                  };
+                }
+              },
+              compose: {
+                name: 'Compose version',
+                branch: 'deps/compose-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/compose-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/compose-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'COMPOSE_VERSION',
+                        value: stripLeadingV(tag),
+                        pattern: dockerfileArgPattern('COMPOSE_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              undock: {
+                name: 'Undock version',
+                branch: 'deps/undock-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/undock-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/undock-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'UNDOCK_VERSION',
+                        value: stripLeadingV(tag),
+                        pattern: dockerfileArgPattern('UNDOCK_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              regctl: {
+                name: 'Regctl version',
+                branch: 'deps/regctl-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/regclient-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/regclient-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'REGCTL_VERSION',
+                        value: tag,
+                        pattern: dockerfileArgPattern('REGCTL_VERSION')
+                      }
+                    ]
+                  };
+                }
+              },
+              cosign: {
+                name: 'Cosign version',
+                branch: 'deps/cosign-version',
+                sourceUrl: 'https://github.com/docker/actions-toolkit/blob/main/.github/cosign-releases.json',
+                async resolve() {
+                  const tag = readLatestTag('.github/cosign-releases.json');
+                  return {
+                    titleValue: tag,
+                    targets: [
+                      {
+                        path: 'dev.Dockerfile',
+                        key: 'COSIGN_VERSION',
+                        value: tag,
+                        pattern: dockerfileArgPattern('COSIGN_VERSION')
+                      }
+                    ]
+                  };
+                }
+              }
+            };
+
+            const config = dependencyConfigs[dep];
+            if (!config) {
+              core.setFailed(`Unknown dependency ${dep}`);
+              return;
+            }
+
+            const resolved = await config.resolve({github});
+            const currentValues = [];
+            const changedFiles = [];
+
+            for (const target of resolved.targets) {
+              const absolutePath = path.join(process.env.GITHUB_WORKSPACE, target.path);
+              const content = fs.readFileSync(absolutePath, 'utf8');
+              const match = content.match(target.pattern);
+              if (!match) {
+                throw new Error(`Missing ${target.key} in ${target.path}`);
+              }
+              currentValues.push(match[2]);
+              if (match[2] === target.value) {
+                continue;
+              }
+              const updatedContent = content.replace(target.pattern, (...args) => {
+                const groups = args.slice(1, -2);
+                const prefix = groups[0];
+                const suffix = groups[2] || '';
+                return `${prefix}${target.value}${suffix}`;
+              });
+              fs.writeFileSync(absolutePath, updatedContent, 'utf8');
+              changedFiles.push(target.path);
+            }
+
+            core.info(`Resolved ${config.name} from ${config.sourceUrl}`);
+            if (changedFiles.length === 0) {
+              core.info(`No workspace changes needed for ${config.name}`);
+            } else {
+              core.info(`New ${config.name} ${resolved.titleValue} found`);
+            }
+
+            core.setOutput('branch', config.branch);
+            core.setOutput('title', `chore(deps): update ${config.name} to ${resolved.titleValue}`);
+            core.setOutput('before', formatList(unique(currentValues)));
+            core.setOutput('files', formatList(unique(changedFiles)));
+            core.setOutput('source-url', config.sourceUrl);
+      -
+        name: Create pull request
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
+        with:
+          base: main
+          branch: ${{ steps.update.outputs.branch }}
+          token: ${{ steps.write-app.outputs.token }}
+          commit-message: ${{ steps.update.outputs.title }}
+          title: ${{ steps.update.outputs.title }}
+          signoff: true
+          delete-branch: true
+          body: |
+            This updates the pinned value from ${{ steps.update.outputs.before }} in ${{ steps.update.outputs.files }}.
+
+            The source of truth for this update is ${{ steps.update.outputs.source-url }}.
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -28,7 +28,7 @@ jobs:
      -
        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/matrix@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action/subaction/matrix@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          target: validate

@@ -43,6 +43,6 @@ jobs:
    steps:
      -
        name: Validate
-        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
+        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
        with:
          targets: ${{ matrix.target }}
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -16,7 +16,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16 # v1.7.1
    permissions:
      contents: read
      security-events: write
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@@ -1,4 +0,0 @@
-# https://docs.zizmor.sh/configuration/
-rules:
-  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
-    disable: true
--- a/tests/buildx/build.test.ts
+++ b/tests/buildx/build.test.ts
@@ -18,6 +18,7 @@ import {afterEach, beforeEach, describe, expect, it, vi, test} from 'vitest';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
+import * as github from '@actions/github';
 import * as rimraf from 'rimraf';

 import {Context} from '../../src/context.js';
@@ -46,6 +47,8 @@ afterEach(() => {

 describe('gitContext', () => {
  const originalEnv = process.env;
+  const githubContextSha = '860c1904a1ce19322e91ac35af1ab07466440c37';
+  const pullRequestHeadSha = 'f11797113e5a9b86bd976329c5dbb8a8bfdfadfa';
  beforeEach(() => {
    vi.resetModules();
    process.env = {
@@ -53,9 +56,17 @@ describe('gitContext', () => {
      DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF: '',
      BUILDX_SEND_GIT_QUERY_AS_INPUT: ''
    };
+    github.context.sha = githubContextSha;
+    github.context.payload.pull_request = {
+      number: 15,
+      head: {
+        sha: pullRequestHeadSha
+      }
+    };
  });
  afterEach(() => {
    process.env = originalEnv;
+    delete github.context.payload.pull_request;
  });

  type GitContextTestCase = {
@@ -75,13 +86,13 @@ describe('gitContext', () => {
    // no format set (defaults to fragment)
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'master', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/merge'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/tags/v1.0.0', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/head'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
    // no format set (defaults to query only when client-side query resolution is enabled and supported)
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/merge&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: undefined, prHeadRef: true, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/head&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: undefined, prHeadRef: true, sendGitQueryAsInput: true, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: true, buildxQuerySupport: false}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {}}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', checksum: undefined, format: undefined, prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe'}}, 'https://github.com/docker/actions-toolkit.git#cafebabe'],
@@ -95,9 +106,10 @@ describe('gitContext', () => {
    // query format
    [{ref: 'refs/heads/master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/merge&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/tags/v1.0.0', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/tags/v1.0.0&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'query', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/head&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'query', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git?ref=f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe'}}, 'https://github.com/docker/actions-toolkit.git?ref=refs/pull/15/merge&checksum=cafebabe'],
    [{ref: 'refs/heads/master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37&subdir=subdir'],
    [{ref: 'refs/heads/master', format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: '.'}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', checksum: undefined, format: 'query', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {ref: 'refs/tags/v1.0.0', checksum: 'cafebabe', subdir: 'subdir', submodules: 'false'}}, 'https://github.com/docker/actions-toolkit.git?ref=refs/heads/master&checksum=cafebabe&subdir=subdir&submodules=false'],
@@ -108,14 +120,15 @@ describe('gitContext', () => {
    // fragment format
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/merge'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/tags/v1.0.0', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/head'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true}, 'https://github.com/docker/actions-toolkit.git#f11797113e5a9b86bd976329c5dbb8a8bfdfadfa'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe'}}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/merge'],
    [{ref: 'refs/heads/master', checksum: undefined, format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {checksum: 'cafebabe', subdir: 'subdir', ref: 'refs/tags/v1.0.0'}}, 'https://github.com/docker/actions-toolkit.git#cafebabe:subdir'],
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, attrs: {'keep-git-dir': 'true'}}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37:subdir'],
    [{ref: 'refs/heads/master', format: 'fragment', prHeadRef: false, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: '.'}, 'https://github.com/docker/actions-toolkit.git#860c1904a1ce19322e91ac35af1ab07466440c37'],
-    [{ref: 'refs/pull/15/merge', format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git#refs/pull/15/head:subdir'],
+    [{ref: 'refs/pull/15/merge', checksum: undefined, format: 'fragment', prHeadRef: true, sendGitQueryAsInput: false, buildxQuerySupport: true, subdir: 'subdir'}, 'https://github.com/docker/actions-toolkit.git#f11797113e5a9b86bd976329c5dbb8a8bfdfadfa:subdir'],
  ];

  test.each(gitContextCases)('given %o should return %o', async (input: GitContextTestCase, expected: string) => {
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -29,7 +29,7 @@ const tmpDir = () => fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), '

 beforeAll(async () => {
  const undockInstall = new UndockInstall();
-  const undockBinPath = await undockInstall.download('v0.10.0', true);
+  const undockBinPath = await undockInstall.download('v0.12.0', true);
  await undockInstall.install(undockBinPath);

  const regclientInstall = new RegclientInstall();
--- a/tests/util.test.ts
+++ b/tests/util.test.ts
@@ -157,6 +157,28 @@ ccc`
    ]);
  });

+  it('preserves trailing new lines when trimming is disabled', async () => {
+    setInput(
+      'secrets',
+      `"PRIVATE_SSH_KEY=TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+
+
+"
+`
+    );
+    const res = Util.getInputList('secrets', {ignoreComma: true, trimWhitespace: false});
+    expect(res).toEqual([
+      `PRIVATE_SSH_KEY=TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+TESTESTTESTESTTESTESTTESTEST
+
+
+`
+    ]);
+  });
+
  it('multiline values without quotes', async () => {
    setInput(
      'secrets',
@@ -392,6 +414,20 @@ describe('generateRandomString', () => {
  });
 });

+describe('compileHandlebars', () => {
+  it('renders the template with the meta context and compile options', () => {
+    const rendered = Util.compileHandlebars(
+      '{{name}} {{{raw}}}',
+      {noEscape: true},
+      {
+        name: 'docker',
+        raw: '<strong>actions-toolkit</strong>'
+      }
+    );
+    expect(rendered).toBe('docker <strong>actions-toolkit</strong>');
+  });
+});
+
 describe('stringToUnicodeEntities', () => {
  it('should convert a string to Unicode entities', () => {
    const input = 'Hello, World!';
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -15,12 +15,12 @@
 # limitations under the License.

 ARG NODE_VERSION=24
-ARG DOCKER_VERSION=29.3
+ARG DOCKER_VERSION=29.4
 ARG BUILDX_VERSION=0.33.0
-ARG COMPOSE_VERSION=5.1.1
-ARG UNDOCK_VERSION=0.11.0
-ARG REGCTL_VERSION=v0.11.2
-ARG COSIGN_VERSION=v3.0.5
+ARG COMPOSE_VERSION=5.1.3
+ARG UNDOCK_VERSION=0.12.0
+ARG REGCTL_VERSION=v0.11.3
+ARG COSIGN_VERSION=v3.0.6

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
--- a/package.json
+++ b/package.json
@@ -44,10 +44,10 @@
  "dependencies": {
    "@actions/artifact": "^6.2.1",
    "@actions/cache": "^6.0.0",
-    "@actions/core": "^3.0.0",
+    "@actions/core": "^3.0.1",
    "@actions/exec": "^3.0.0",
-    "@actions/github": "^9.0.0",
-    "@actions/http-client": "^4.0.0",
+    "@actions/github": "^9.1.1",
+    "@actions/http-client": "^4.0.1",
    "@actions/io": "^3.0.2",
    "@actions/tool-cache": "^4.0.0",
    "@sigstore/bundle": "^4.0.0",
--- a/src/buildx/build.ts
+++ b/src/buildx/build.ts
@@ -59,28 +59,37 @@ export class Build {

  public async gitContext(opts?: GitContextOpts): Promise<string> {
    const gitContextCommonAttrs = new Set(['ref', 'checksum', 'subdir']);
-    const setPullRequestHeadRef = Util.parseBoolOrDefault(process.env.DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF);
-    const commonAttrs = {
-      ref: opts?.attrs?.ref,
-      checksum: opts?.attrs?.checksum,
-      subdir: opts?.attrs?.subdir
-    };
+    const commonAttrs = opts?.attrs || {};
+    const extraAttrs = Object.entries(commonAttrs).filter(([name]) => !gitContextCommonAttrs.has(name));

-    const gitChecksum = opts?.checksum || commonAttrs.checksum || github.context.sha;
    let ref = opts?.ref || commonAttrs.ref || github.context.ref;
-    const subdir = opts?.subdir || commonAttrs.subdir;
-    const attrs = Object.entries(opts?.attrs || {}).filter(([name]) => !gitContextCommonAttrs.has(name));
    if (!ref.startsWith('refs/')) {
      ref = `refs/heads/${ref}`;
-    } else if (ref.startsWith(`refs/pull/`) && setPullRequestHeadRef) {
+    } else if (ref.startsWith(`refs/pull/`) && Util.parseBoolOrDefault(process.env.DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF)) {
      ref = ref.replace(/\/merge$/g, '/head');
    }

+    const inputChecksum = opts?.checksum || commonAttrs.checksum;
+    const inputSubdir = opts?.subdir || commonAttrs.subdir;
+    const checksum = inputChecksum || (ref.startsWith(`refs/pull/`) ? undefined : github.context.sha);
+
+    // BuildKit resolves PR refs remotely at build time, so mutable refs like
+    // refs/pull/*/{merge,head} can drift away from the event SHA. actions/checkout
+    // avoids that by fetching the exact commit into a local PR ref; here we do the
+    // equivalent for implicit PR contexts by rewriting them to the event's commit SHA.
+    if (!inputChecksum && ref.startsWith(`refs/pull/`)) {
+      if (ref.endsWith('/merge')) {
+        ref = github.context.sha;
+      } else if (ref.endsWith('/head') && typeof github.context.payload.pull_request?.head?.sha === 'string') {
+        ref = github.context.payload.pull_request.head.sha;
+      }
+    }
+
    const baseURL = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git`;
    let format = opts?.format;
    if (!format) {
      format = 'fragment';
-      if (attrs.length > 0) {
+      if (extraAttrs.length > 0) {
        format = 'query';
      } else if (Util.parseBoolOrDefault(process.env.BUILDX_SEND_GIT_QUERY_AS_INPUT)) {
        try {
@@ -92,21 +101,23 @@ export class Build {
        }
      }
    }
+
    if (format === 'query') {
      const query = [`ref=${ref}`];
-      if (gitChecksum) {
-        query.push(`checksum=${gitChecksum}`);
+      if (checksum) {
+        query.push(`checksum=${checksum}`);
      }
-      if (subdir && subdir !== '.') {
-        query.push(`subdir=${subdir}`);
+      if (inputSubdir && inputSubdir !== '.') {
+        query.push(`subdir=${inputSubdir}`);
      }
-      for (const [name, value] of attrs) {
+      for (const [name, value] of extraAttrs) {
        query.push(`${name}=${value}`);
      }
      return `${baseURL}?${query.join('&')}`;
    }
-    const fragmentRef = gitChecksum && !ref.startsWith(`refs/pull/`) ? gitChecksum : ref;
-    return `${baseURL}#${fragmentRef}${subdir && subdir !== '.' ? `:${subdir}` : ''}`;
+
+    const fragmentRef = inputChecksum && ref.startsWith(`refs/pull/`) ? ref : (checksum ?? ref);
+    return `${baseURL}#${fragmentRef}${inputSubdir && inputSubdir !== '.' ? `:${inputSubdir}` : ''}`;
  }

  public getImageIDFilePath(): string {
--- a/src/docker/assets.ts
+++ b/src/docker/assets.ts
@@ -165,19 +165,19 @@ images:
  arch: "{{arch}}"
  digest: "{{digest}}"
 {{/each}}
- location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-amd64.img"
+- location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/ubuntu-24.04-server-cloudimg-amd64.img"
  arch: "x86_64"
-  digest: "sha256:f1652d29d497fb7c623433705c9fca6525d1311b11294a0f495eed55c7639d1f"
+  digest: "sha256:5c3ddb00f60bc455dac0862fabe9d8bacec46c33ac1751143c5c3683404b110d"
  kernel:
-    location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic"
-    digest: "sha256:67cd9af083515de2101de032b49a64fc4b65778e5383df6ef21cf788a3f4688e"
+    location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic"
+    digest: "sha256:5b2a4fe174dacb18281f8f7d72ae32ac4b92801f0b7b5cb43ea55dee29fb789d"
    cmdline: "root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyAMA0 no_timer_check"
  initrd:
-    location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic"
-    digest: "sha256:f257d581c44f66da2d80c7c5dc3fa598ce76ef313d6e27b368683e8030a9e8fd"
- location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-arm64.img"
+    location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic"
+    digest: "sha256:cd0b64a5498e583a820a5b842369df83d036b4200b33bc51cadc58176184aaca"
+- location: "https://cloud-images.ubuntu.com/releases/noble/release-20260321/ubuntu-24.04-server-cloudimg-arm64.img"
  arch: "aarch64"
-  digest: "sha256:bbecbb88100ee65497927ed0da247ba15af576a8855004182cf3c87265e25d35"
+  digest: "sha256:1ea801e659d2f5035ac294e0faab0aac9b6ba66753df933ba5c7beab0c689bd0"
 # Fallback to the latest release image.
 # Hint: run \`limactl prune\` to invalidate the cache
 - location: https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-amd64.img
@@ -231,6 +231,7 @@ provision:
  script: |
    #!/bin/bash
    set -eux -o pipefail
+    archiveInstallLog=/var/log/docker-actions-toolkit-archive-install.log
    command -v docker >/dev/null 2>&1 && exit 0
    if [ ! -e /etc/systemd/system/docker.socket.d/override.conf ]; then
      mkdir -p /etc/systemd/system/docker.socket.d
@@ -248,19 +249,41 @@ provision:
    fi
    export DEBIAN_FRONTEND=noninteractive
    if [ "{{srcType}}" == "archive" ]; then
-      curl -fsSL https://get.docker.com | sh -s -- --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}
-      sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}} --containerd=/run/containerd/containerd.sock|' /usr/lib/systemd/system/docker.service
-      systemctl daemon-reload
-      systemctl restart docker
-      systemctl status docker.socket || true
-      systemctl status docker.service || true
+      {
+        getDockerScript=$(mktemp)
+        curl --retry 3 --retry-all-errors --retry-delay 5 -fsSL -o "$getDockerScript" https://get.docker.com
+
+        attempt=1
+        max_attempts=3
+        until [ "$attempt" -gt "$max_attempts" ]; do
+          echo "Docker install attempt $attempt/$max_attempts"
+          if sh "$getDockerScript" --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}; then
+            break
+          fi
+          if [ "$attempt" -eq "$max_attempts" ]; then
+            echo >&2 "Docker install failed after $max_attempts attempts"
+            exit 1
+          fi
+          echo >&2 "Docker install attempt $attempt failed, retrying after $((attempt * 30))s"
+          rm -rf /var/lib/apt/lists/partial/* || true
+          apt-get clean || true
+          sleep $((attempt * 30))
+          attempt=$((attempt + 1))
+        done
+
+        sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}} --containerd=/run/containerd/containerd.sock|' /usr/lib/systemd/system/docker.service
+        systemctl daemon-reload
+        systemctl restart docker
+        systemctl status docker.socket || true
+        systemctl status docker.service || true
+      } 2>&1 | tee "$archiveInstallLog"
    elif [ "{{srcType}}" == "image" ]; then
      arch=$(uname -m)
      case $arch in
        x86_64) arch=amd64;;
        aarch64) arch=arm64;;
      esac
-      url="https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_$arch.tar.gz"
+      url="https://github.com/crazy-max/undock/releases/download/v0.12.0/undock_0.12.0_linux_$arch.tar.gz"

      wget "$url" -O /tmp/undock.tar.gz
      tar -C /usr/local/bin -xvf /tmp/undock.tar.gz
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -326,6 +326,7 @@ export class Install {
      try {
        await Exec.exec(`limactl ${limaStartArgs.join(' ')}`, [], {env: envs});
      } catch (e) {
+        await this.printDarwinDiagnostics();
        fsp
          .readdir(limaDir)
          .then(files => {
@@ -539,11 +540,7 @@ EOF`,
  }

  private async tearDownDarwin(): Promise<void> {
-    await core.group('Docker daemon logs', async () => {
-      await Exec.exec('limactl', ['shell', '--tty=false', this.limaInstanceName, 'sudo', 'journalctl', '-u', 'docker.service', '-l', '--no-pager']).catch(() => {
-        core.warning(`Failed to get Docker daemon logs`);
-      });
-    });
+    await this.printDarwinDiagnostics();
    await core.group('Stopping lima instance', async () => {
      await Exec.exec('limactl', ['stop', '--tty=false', this.limaInstanceName, '--force']);
    });
@@ -558,6 +555,36 @@ EOF`,
    });
  }

+  private async printDarwinDiagnostics(): Promise<void> {
+    await this.printDarwinGuestCommandOutput('Cloud-init output log', ['sudo', 'cat', '/var/log/cloud-init-output.log']);
+    await this.printDarwinGuestCommandOutput('Cloud-init status', ['sudo', 'timeout', '300s', 'cloud-init', 'status', '--wait']);
+    await this.printDarwinGuestCommandOutput('Docker unit file', ['sudo', 'systemctl', 'cat', 'docker.service']);
+    await this.printDarwinGuestCommandOutput('Docker service status', ['sudo', 'systemctl', 'status', 'docker.service', 'docker.socket', '-l', '--no-pager']);
+    await this.printDarwinGuestCommandOutput('Archive install script log', ['sudo', 'cat', '/var/log/docker-actions-toolkit-archive-install.log']);
+    await this.printDarwinGuestCommandOutput('Docker daemon logs', ['sudo', 'journalctl', '-u', 'docker.service', '-l', '--no-pager']);
+  }
+
+  private async printDarwinGuestCommandOutput(title: string, args: string[]): Promise<void> {
+    await core.group(title, async () => {
+      const res = await Exec.getExecOutput('limactl', ['shell', '--tty=false', this.limaInstanceName, ...args], {
+        ignoreReturnCode: true,
+        silent: true
+      }).catch(error => {
+        core.info(`Failed to get ${title}: ${error}`);
+        return undefined;
+      });
+      if (!res) {
+        return;
+      }
+      const output = [res.stdout.trim(), res.stderr.trim()].filter(Boolean).join('\n');
+      if (output.length > 0) {
+        core.info(output);
+      } else if (res.exitCode !== 0) {
+        core.info(`${title} exited with code ${res.exitCode}`);
+      }
+    });
+  }
+
  private async tearDownLinux(): Promise<void> {
    await core.group('Docker daemon logs', async () => {
      core.info(fs.readFileSync(path.join(this.runDir, 'dockerd.log'), {encoding: 'utf8'}));
--- a/src/util.ts
+++ b/src/util.ts
@@ -17,6 +17,7 @@
 import crypto from 'crypto';
 import fs from 'fs';
 import path from 'path';
+import * as handlebars from 'handlebars';
 import * as core from '@actions/core';
 import * as io from '@actions/io';
 import {parse} from 'csv-parse/sync';
@@ -26,11 +27,12 @@ export interface ListOpts {
  comment?: string;
  commentNoInfix?: boolean;
  quote?: string | boolean | Buffer | null;
+  trimWhitespace?: boolean;
 }

 export class Util {
  public static getInputList(name: string, opts?: ListOpts): string[] {
-    return this.getList(core.getInput(name), opts);
+    return this.getList(core.getInput(name, {trimWhitespace: opts?.trimWhitespace !== false}), opts);
  }

  public static getList(input: string, opts?: ListOpts): string[] {
@@ -63,7 +65,7 @@ export class Util {
      }
    }

-    return res.filter(item => item).map(pat => pat.trim());
+    return res.filter(item => item).map(item => (opts?.trimWhitespace === false ? item : item.trim()));
  }

  public static getInputNumber(name: string): number | undefined {
@@ -202,6 +204,10 @@ export class Util {
    return bytes.toString('hex').slice(0, length);
  }

+  public static compileHandlebars(value: string, options: Parameters<typeof handlebars.compile>[1], data: unknown): string {
+    return handlebars.compile(value, options)(data);
+  }
+
  public static stringToUnicodeEntities(str: string) {
    return Array.from(str)
      .map(char => `&#x${char.charCodeAt(0).toString(16)};`)
--- a/yarn.lock
+++ b/yarn.lock
@@ -61,6 +61,16 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/core@npm:^3.0.1":
+  version: 3.0.1
+  resolution: "@actions/core@npm:3.0.1"
+  dependencies:
+    "@actions/exec": "npm:^3.0.0"
+    "@actions/http-client": "npm:^4.0.0"
+  checksum: 10/e1295f6b81299cc5655ea571e7b3eea02889fdc479e71c783ad9ca48432c613f52a1fd01fecc973a64488b053083ea925a0d23ac7af0bcd8462afc4f4371918b
+  languageName: node
+  linkType: hard
+
 "@actions/exec@npm:^3.0.0":
  version: 3.0.0
  resolution: "@actions/exec@npm:3.0.0"
@@ -85,6 +95,21 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/github@npm:^9.1.1":
+  version: 9.1.1
+  resolution: "@actions/github@npm:9.1.1"
+  dependencies:
+    "@actions/http-client": "npm:^3.0.2"
+    "@octokit/core": "npm:^7.0.6"
+    "@octokit/plugin-paginate-rest": "npm:^14.0.0"
+    "@octokit/plugin-rest-endpoint-methods": "npm:^17.0.0"
+    "@octokit/request": "npm:^10.0.7"
+    "@octokit/request-error": "npm:^7.1.0"
+    undici: "npm:^6.23.0"
+  checksum: 10/eb77846e506df107208ee6a57aa38c80ce6cdd9ab499ec3518a8e3000334def8f93fcf2b43c8b512fede9b093a1ca39d184551a9c50f37cb8fc17704d09c7e70
+  languageName: node
+  linkType: hard
+
 "@actions/glob@npm:^0.6.1":
  version: 0.6.1
  resolution: "@actions/glob@npm:0.6.1"
@@ -115,6 +140,16 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/http-client@npm:^4.0.1":
+  version: 4.0.1
+  resolution: "@actions/http-client@npm:4.0.1"
+  dependencies:
+    tunnel: "npm:^0.0.6"
+    undici: "npm:^6.23.0"
+  checksum: 10/4fab65bf488e15143db87ce200a9d1f6f81832adfb1cbdadc380bbe2a95c86b1f5daa0d89c029533ccea4cd2b811a84ce984dfd0d6530479b82bc9860e8be704
+  languageName: node
+  linkType: hard
+
 "@actions/io@npm:^3.0.0, @actions/io@npm:^3.0.2":
  version: 3.0.2
  resolution: "@actions/io@npm:3.0.2"
@@ -372,10 +407,10 @@ __metadata:
  dependencies:
    "@actions/artifact": "npm:^6.2.1"
    "@actions/cache": "npm:^6.0.0"
-    "@actions/core": "npm:^3.0.0"
+    "@actions/core": "npm:^3.0.1"
    "@actions/exec": "npm:^3.0.0"
-    "@actions/github": "npm:^9.0.0"
-    "@actions/http-client": "npm:^4.0.0"
+    "@actions/github": "npm:^9.1.1"
+    "@actions/http-client": "npm:^4.0.1"
    "@actions/io": "npm:^3.0.2"
    "@actions/tool-cache": "npm:^4.0.0"
    "@eslint/js": "npm:^9.39.3"
@@ -802,6 +837,13 @@ __metadata:
  languageName: node
  linkType: hard

+"@nodable/entities@npm:^2.1.0":
+  version: 2.1.0
+  resolution: "@nodable/entities@npm:2.1.0"
+  checksum: 10/355c55e82aebe45d4b962d16530951df51e19e3e63a27ea61ad3260c0807064619b270b9c83db10e8394f42760abd5b7f7c5b5117678c4246ce8364a4aafc637
+  languageName: node
+  linkType: hard
+
 "@npmcli/agent@npm:^4.0.0":
  version: 4.0.0
  resolution: "@npmcli/agent@npm:4.0.0"
@@ -2676,25 +2718,26 @@ __metadata:
  languageName: node
  linkType: hard

-"fast-xml-builder@npm:^1.1.4":
-  version: 1.1.4
-  resolution: "fast-xml-builder@npm:1.1.4"
+"fast-xml-builder@npm:^1.1.5":
+  version: 1.1.5
+  resolution: "fast-xml-builder@npm:1.1.5"
  dependencies:
    path-expression-matcher: "npm:^1.1.3"
-  checksum: 10/32937866aaf5a90e69d1f4ee6e15e875248d5b5d2afd70277e9e8323074de4980cef24575a591b8e43c29f405d5f12377b3bad3842dc412b0c5c17a3eaee4b6b
+  checksum: 10/377c4ef816972e67192fd32757c50d2a9d4cccf352ceac48bda6681a0ee24fb0b1f1c892810f77886db760681f23fe0b8f62c7c0cc9469c0d2863c5c529ac1d2
  languageName: node
  linkType: hard

 "fast-xml-parser@npm:^5.0.7":
-  version: 5.5.7
-  resolution: "fast-xml-parser@npm:5.5.7"
+  version: 5.7.1
+  resolution: "fast-xml-parser@npm:5.7.1"
  dependencies:
-    fast-xml-builder: "npm:^1.1.4"
-    path-expression-matcher: "npm:^1.1.3"
-    strnum: "npm:^2.2.0"
+    "@nodable/entities": "npm:^2.1.0"
+    fast-xml-builder: "npm:^1.1.5"
+    path-expression-matcher: "npm:^1.5.0"
+    strnum: "npm:^2.2.3"
  bin:
    fxparser: src/cli/cli.js
-  checksum: 10/b69e65cb1c6b43487f1702c5cdd6a67589e4760ba41c06826e56891594cb2d322a6b81cd15b4c01b88ef9bc58657c92cd7d86c6f0e078a2f94ede31533fbaf7e
+  checksum: 10/ce7de013cae7707d12b9da8cb294265da3780bb8bfa36b17f98053654628a0142159d78746747b1ed38bdefca8b6817f051171183e69a527ba18e1df067e9bce
  languageName: node
  linkType: hard

@@ -3376,9 +3419,9 @@ __metadata:
  linkType: hard

 "lodash@npm:^4.17.15":
-  version: 4.17.23
-  resolution: "lodash@npm:4.17.23"
-  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  version: 4.18.1
+  resolution: "lodash@npm:4.18.1"
+  checksum: 10/306fea53dfd39dad1f03d45ba654a2405aebd35797b673077f401edb7df2543623dc44b9effbb98f69b32152295fff725a4cec99c684098947430600c6af0c3f
  languageName: node
  linkType: hard

@@ -3948,6 +3991,13 @@ __metadata:
  languageName: node
  linkType: hard

+"path-expression-matcher@npm:^1.5.0":
+  version: 1.5.0
+  resolution: "path-expression-matcher@npm:1.5.0"
+  checksum: 10/28303bb9ee6831e6df14c10cd3f3f7b2d7c8d7f788d8bdb7440136fd696064c82a3e264999a0764d28e39f698275fc03a5493bec93c57ef4a22566280367dd64
+  languageName: node
+  linkType: hard
+
 "path-is-absolute@npm:^1.0.0":
  version: 1.0.1
  resolution: "path-is-absolute@npm:1.0.1"
@@ -4628,10 +4678,10 @@ __metadata:
  languageName: node
  linkType: hard

-"strnum@npm:^2.2.0":
-  version: 2.2.1
-  resolution: "strnum@npm:2.2.1"
-  checksum: 10/c553d83e1adc223bc33c29c6e8b0c4a512d5d432ae636c6117a713c9e6d50d2bf2d3d6bc53cd8dc210c3cf27986904bee44e6d58ad8c767507a27d90400a572b
+"strnum@npm:^2.2.3":
+  version: 2.2.3
+  resolution: "strnum@npm:2.2.3"
+  checksum: 10/fb70206301858c319f59ed34fecedf90ac3b821692c2accd403d9d4a3384223a09df8fd92b130bbd4e885b67b7790715c003405ce5f959d9cabbf07d41d62aa8
  languageName: node
  linkType: hard