Skip to content

chore(ci)(deps): Bump docker/metadata-action from 5 to 6#7

Open
dependabot[bot] wants to merge 38 commits intomainfrom
dependabot/github_actions/docker/metadata-action-6
Open

chore(ci)(deps): Bump docker/metadata-action from 5 to 6#7
dependabot[bot] wants to merge 38 commits intomainfrom
dependabot/github_actions/docker/metadata-action-6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps docker/metadata-action from 5 to 6.

Release notes

Sourced from docker/metadata-action's releases.

v6.0.0

Full Changelog: docker/metadata-action@v5.10.0...v6.0.0

v5.10.0

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

v5.8.0

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

v5.7.0

Full Changelog: docker/metadata-action@v5.6.1...v5.7.0

... (truncated)

Commits
  • 030e881 Merge pull request #607 from crazy-max/allow-comments
  • 4b529ac chore: update generated content
  • b0082b3 preserve comments in list input values with commentNoInfix
  • 7b19fec Merge pull request #604 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 281c9b0 chore: update generated content
  • 5f43b3b test: stabilize github mock setup since ESM
  • 9d53276 github class moved since actions-toolkit v0.77.0
  • eaa3d39 chore(deps): Bump @​docker/actions-toolkit from 0.68.0 to 0.77.0
  • 6b695f7 Merge pull request #605 from crazy-max/node24
  • a1afadc node 24 as default runtime
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

mos and others added 30 commits April 3, 2026 16:48
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 76 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 4 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 11 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 5 py, 0 dart, 0 ts/tsx, 22 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 9 dart, 0 ts/tsx, 3 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 25 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 8 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 7 dart, 0 ts/tsx, 6 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 5 dart, 0 ts/tsx, 5 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 3 py, 0 dart, 0 ts/tsx, 0 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 2 py, 0 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 1 dart, 0 ts/tsx, 3 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 0 dart, 0 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 3 py, 0 dart, 0 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 23 dart, 2 ts/tsx, 8 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 5 dart, 0 ts/tsx, 13 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 8 dart, 0 ts/tsx, 1 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 4 rs, 0 py, 119 dart, 0 ts/tsx, 154 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 1 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Merges worktree-agent-a17332f2 branch containing the complete Flutter
super-app (app/) with all 10 pillar screens, providers, and Rust bridge.
Resolved docs/papers/che-framework/are-spec.md conflict (kept worktree version).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The Flutter super-app source code (app/lib/, app/test/, app/pubspec.yaml)
was accidentally deleted in commit 8bd6eef. Restored from 8bd6eef~1.
All 11 feature screens present: vault, messenger, voip, vpn, anonymizer,
qai, email, browser, mesh, auth, settings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…rProvider

WS-1 Pillar 5 (95% → 100%):
- AnonymizerScreen now uses anonymizerProvider for level slider + redact
  (was incorrectly using piiProvider for everything)
- L7 Quantum Jitter: entropy-seeded noise per character (non-deterministic)
- L8 Differential Privacy: Laplace mechanism for numeric PII (epsilon=1.0)
- L9 K-Anonymity: generalize email→domain, phone→area, zip→3 digits,
  name→initials, date→year
- L10 Quantum OTP: XOR with entropy bytes, FNV-1a hash tag [QR_xxxxxx]
- All levels fall back to Random.secure() when Rust entropy unavailable
- Also restored app/rust/ (accidentally deleted in 8bd6eef)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-2 Pillars 6+8 (85% → 100%):

Shared fix (P6+P8):
- main.rs: use mpsc channel to capture proxy port from async spawn
- AI sidebar now receives actual proxy port (was always None)
- Cloud AI chat routes through PQC proxy when available

P8 ZipBrowser fixes:
- Back/Forward buttons now call goBack()/goForward() on provider
  (were empty closures `() {}`)
- Fingerprint/Cookie toggles wired to BrowserState
  (were local _BrowserScreenState bools that reset on rebuild)
- BrowserState gains history stack, fingerprintProtection, cookieRotation
- Fallback screen shows "Open in System Browser" via url_launcher
  (was dead-end "Use Tauri desktop" message)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-3 Pillar 7 (75% → 90%):
- _encryptAndSend() now scans message body for PII before encrypting
- Shows dialog with PII count, sensitivity, and category breakdown
- Three actions: Cancel, Anonymize & Send (uses anonymizerProvider at
  selected attachment level), or Send Anyway
- Wired anonymizerProvider and piiProvider into email compose flow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-4 Pillar 2 (85% → 95%):
- sendMessage() no longer unconditionally schedules demo auto-replies
- Demo replies only fire when signaling was never connected (!isLive)
- If signaling was live but dropped, shows error instead of faking replies
- Production builds won't see demo behavior when connected to real server

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 1 rs, 0 py, 0 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…mCanary)

WS-5 Pillar 9 (90% → 95%):
- PresenceProof (0x05): spatiotemporal attestation with 64B signature
- VitalAuthChallenge (0x06): continuous biometric auth with 32B nonce
- EmCanaryAlert (0x07): TEMPEST countermeasure with frequency/power/level
- All three have builder methods, serialize/deserialize, HMAC auth
- 15 existing mesh tests pass, wire format backward-compatible

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-3 Pillar 7 (90% → 95%):
- FilePicker with multi-select for txt/csv/json/pdf/doc/xlsx/png/jpg
- Attachment chips with remove buttons in compose flow
- Conditional warning when attachment anonymization level > 0
- Wired between compose card and self-destruct row

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-2 Pillar 6 (85% → 100%):
- OllamaService: calls localhost:11434/api/chat with health check
- Available models discovered via /api/tags endpoint
- Provider selector shows "Ollama (Local)" with green/red health dot
- Falls back gracefully when Ollama not running

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
mos and others added 8 commits April 6, 2026 08:33
Files: 0 rs, 4 py, 1 dart, 0 ts/tsx, 0 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 0 dart, 0 ts/tsx, 0 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Restored ios/, android/, macos/, linux/, web/, windows/, rust_builder/
  (deleted in 8bd6eef, only lib/ was restored earlier)
- Fixed 12 analysis errors: isOnDevice→isLocal, removed dead rust.getEntropy
  call, added url_launcher dep, created assets/logos/ dir
- Added mesh_provider.dart, provision_ruview_mesh.py, WebSocket ratchet tests
- flutter analyze: 0 errors (5 info/warning)
- flutter build ios --no-codesign: SUCCESS (41.5 MB)

Ready for TestFlight: needs codesigning with Apple Developer cert.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 0 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 3 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…h visualizations

Paper 1 (quantum anonymization):
- Add IND-ANON indistinguishability game with per-cell zero advantage proof
- Add DP-QRNG composition theorem (was "left for future work")
- Add ideal functionality F_ANON with UC realization sketch
- Fix: per-value bound uses joint TV (product formula), not max
- Fix: corollary no longer overclaims k-anon/l-div survival through DP
- Fix: UC delta uses single-dataset metric, not IND-ANON pair metric
- Add Canetti UC citation (FOCS 2001)
- Compiles clean, 25 pages, 20 formal results

IP Assessment Report:
- 7 figures (radar, market, thicket, regulatory, valuation, competitive, pillars)
- Full scoring tables, institution lists, market sizing
- Norwegian email body + English report versions
- PDF + HTML (self-contained with embedded figures)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
GitHub push protection blocked the push because PII scanner test
fixtures contained example Stripe test API keys. Replaced with
obviously fake placeholders that still trigger the PII scanner
pattern match.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@v5...v6)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 6, 2026

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants