chore(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.0

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...0b35c9ecc4f0529d0eb674914510c22f85b196b4) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #729 from crazy-max/git-working-directory
2026-09-17 19:15:13 +02:00 · 2026-09-16 19:24:51 +00:00 · 2026-09-15 13:39:47 +02:00 · 2026-09-15 12:30:34 +02:00 · 2026-09-15 12:24:19 +02:00 · 2026-09-15 12:24:18 +02:00
19 changed files with 382 additions and 280 deletions
@@ -10,6 +10,9 @@ updates:
      crazy-max-dot-github:
        patterns:
          - "crazy-max/.github/*"
+      codeql-actions:
+        patterns:
+          - "github/codeql-action/*"
    labels:
      - "dependencies"
      - "bot"
@@ -34,7 +34,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Docker meta
        uses: ./
@@ -46,10 +46,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -83,10 +83,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -119,10 +119,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -153,10 +153,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -184,10 +184,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -207,10 +207,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -228,10 +228,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -258,10 +258,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -288,10 +288,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -323,10 +323,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver-opts: network=host
@@ -348,7 +348,7 @@ jobs:
            type=sha
      -
        name: Build and push to local registry
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: ./test
          file: ./test/Dockerfile
@@ -371,10 +371,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
      -
@@ -396,7 +396,7 @@ jobs:
            type=sha
      -
        name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          files: |
            ./test/docker-bake.hcl
@@ -416,10 +416,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -444,10 +444,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -465,7 +465,7 @@ jobs:
            maintainer=Foo
      -
        name: Build
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: ./test
          file: ./test/output.Dockerfile
@@ -483,7 +483,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Docker meta
        id: meta
@@ -507,10 +507,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
      -
@@ -534,7 +534,7 @@ jobs:
          DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
      -
        name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          files: |
            ./test/docker-bake.hcl
@@ -548,10 +548,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -574,10 +574,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: latest
      -
@@ -586,7 +586,7 @@ jobs:
        uses: ./
      -
        name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          source: .
          files: |
@@ -607,10 +607,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -631,7 +631,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Dump context
        uses: crazy-max/ghaction-dump-context@4d9eeaf15dd59aa4346919ea84a84ccf514b4db8 # v3.1.0
@@ -22,7 +22,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Enable corepack
        run: |
@@ -30,17 +30,17 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
        with:
          category: "/language:javascript-typescript"
@@ -11,7 +11,7 @@ on:

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@46267a6e61cd56aac2fc79943df180152f4c89d6 # v1.10.1
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@f91220cba053bd54299ba645a599ee8ed436f222 # v1.11.0
    permissions:
      contents: read
      pull-requests: write
@@ -22,7 +22,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Publish
        uses: actions/publish-immutable-action@4bc8754ffc40f27910afb20287dbbbb675a4e978 # v0.0.4
@@ -20,16 +20,16 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Test
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          source: .
          targets: test
      -
        name: Upload coverage
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
        with:
          files: ./coverage/clover.xml
          token: ${{ secrets.CODECOV_TOKEN }}
@@ -30,14 +30,14 @@ jobs:
          permission-contents: write
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          ref: ${{ github.event.pull_request.head.ref }}
          fetch-depth: 0
          token: ${{ steps.docker-read-app.outputs.token }}
      -
        name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          source: .
          targets: build
@@ -22,11 +22,11 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/matrix@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action/subaction/matrix@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          target: validate

@@ -41,6 +41,6 @@ jobs:
    steps:
      -
        name: Validate
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
        with:
          targets: ${{ matrix.target }}
@@ -19,7 +19,7 @@ on:

 jobs:
  zizmor:
-    uses: crazy-max/.github/.github/workflows/zizmor.yml@46267a6e61cd56aac2fc79943df180152f4c89d6 # v1.10.1
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@f91220cba053bd54299ba645a599ee8ed436f222 # v1.11.0
    permissions:
      contents: read
      security-events: write
@@ -285,18 +285,18 @@ The following inputs can be used as `step.with` keys:
 >   org.opencontainers.image.vendor=MyCompany
 > ```

-| Name              | Type   | Description                                                                  |
-|-------------------|--------|------------------------------------------------------------------------------|
-| `context`         | String | Where to get context data. Allowed options are: `workflow` (default), `git`. |
-| `images`          | List   | List of Docker images to use as base name for tags                           |
-| `tags`            | List   | List of [tags](#tags-input) as key-value pair attributes                     |
-| `flavor`          | List   | [Flavor](#flavor-input) to apply                                             |
-| `labels`          | List   | List of custom labels                                                        |
-| `annotations`     | List   | List of custom annotations                                                   |
-| `sep-tags`        | String | Separator to use for tags output (default `\n`)                              |
-| `sep-labels`      | String | Separator to use for labels output (default `\n`)                            |
-| `sep-annotations` | String | Separator to use for annotations output (default `\n`)                       |
-| `bake-target`     | String | Bake target name (default `docker-metadata-action`)                          |
+| Name              | Type   | Description                                                                                |
+|-------------------|--------|--------------------------------------------------------------------------------------------|
+| `context`         | String | Where to get context data. Allowed options are: `workflow` (default), `git`, `git:<path>`. |
+| `images`          | List   | List of Docker images to use as base name for tags                                         |
+| `tags`            | List   | List of [tags](#tags-input) as key-value pair attributes                                   |
+| `flavor`          | List   | [Flavor](#flavor-input) to apply                                                           |
+| `labels`          | List   | List of custom labels                                                                      |
+| `annotations`     | List   | List of custom annotations                                                                 |
+| `sep-tags`        | String | Separator to use for tags output (default `\n`)                                            |
+| `sep-labels`      | String | Separator to use for labels output (default `\n`)                                          |
+| `sep-annotations` | String | Separator to use for annotations output (default `\n`)                                     |
+| `bake-target`     | String | Bake target name (default `docker-metadata-action`)                                        |

 ### outputs

@@ -357,6 +357,24 @@ context: git
 * `workflow`: Get context metadata from the workflow (GitHub context). See https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
 * `git`: Get context metadata from the workflow and overrides some of them with current Git context, such as `ref` and `sha`.

+Use `context: git:<path>` when the repository is checked out to a custom path.
+The path can be absolute or relative to the current working directory
+(normally `$GITHUB_WORKSPACE`):
+
+```yaml
+- uses: actions/checkout@v7
+  with:
+    path: source
+- uses: docker/metadata-action@v6
+  with:
+    context: git:source
+    images: name/app
+    tags: type=sha
+```
+
+The selected checkout supplies the Git ref, SHA, and commit date. Other repository
+metadata still comes from the workflow repository.
+
 ## `images` input

 `images` defines a list of Docker images to use as base name for [`tags`](#tags-input):
@@ -1,8 +1,14 @@
-import {beforeEach, describe, expect, test, it, vi} from 'vitest';
+import {afterEach, beforeEach, describe, expect, test, it, vi} from 'vitest';
+import {execFileSync} from 'child_process';
+import fs from 'fs';
+import path from 'path';
+
 import {Git} from '@docker/actions-toolkit/lib/git.js';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit.js';

 import * as context from '../src/context.js';
+import {Meta} from '../src/meta.js';
+import repoFixture from './fixtures/repo.json' with {type: 'json'};

 const toolkit = new Toolkit({githubToken: 'fake-github-token'});

@@ -16,6 +22,11 @@ describe('getInputs', () => {
    }, {});
  });

+  it('reads a Git context with a path', () => {
+    setInput('context', 'git:nested checkout');
+    expect(context.getInputs().context).toEqual('git:nested checkout');
+  });
+
  // prettier-ignore
  const cases: [number, Map<string, string>, context.Inputs][] = [
    [
@@ -151,13 +162,26 @@ describe('getInputs', () => {
 });

 describe('getContext', () => {
-  it('workflow', async () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it('workflow does not read Git context', async () => {
+    const gitContext = vi.spyOn(Git, 'context');
+    const gitCommitDate = vi.spyOn(Git, 'commitDate');
    const ctx = await context.getContext(context.ContextSource.workflow, toolkit);
    expect(ctx.ref).toEqual('refs/heads/dev');
    expect(ctx.sha).toEqual('5f3331d7f7044c18ca9f12c77d961c4d7cf3276a');
    expect(ctx.commitDate).toEqual(new Date('2024-11-13T13:42:28.000Z'));
+    expect(gitContext).not.toHaveBeenCalled();
+    expect(gitCommitDate).not.toHaveBeenCalled();
  });
-  it('git', async () => {
+  it.each<[string, string | undefined]>([
+    ['git', undefined],
+    ['git:', ''],
+    ['git:source', 'source'],
+    ['git:C:\\nested checkout', 'C:\\nested checkout']
+  ])('reads %s', async (source, workdir) => {
    vi.spyOn(Git, 'context').mockImplementation((): Promise<context.Context> => {
      return Promise.resolve({
        ref: 'refs/heads/git-test',
@@ -167,11 +191,51 @@ describe('getContext', () => {
    vi.spyOn(Git, 'commitDate').mockImplementation(async (): Promise<Date> => {
      return new Date('2023-01-01T13:42:28.000Z');
    });
-    const ctx = await context.getContext(context.ContextSource.git, toolkit);
+    const ctx = await context.getContext(source, toolkit);
+    expect(Git.context).toHaveBeenCalledWith(workdir);
+    expect(Git.commitDate).toHaveBeenCalledWith('git-test-sha', workdir);
    expect(ctx.ref).toEqual('refs/heads/git-test');
    expect(ctx.sha).toEqual('git-test-sha');
    expect(ctx.commitDate).toEqual(new Date('2023-01-01T13:42:28.000Z'));
  });
+
+  it.each(['workflow:source', 'gitfoo:source', 'invalid'])('rejects invalid context %s', async source => {
+    await expect(context.getContext(source, toolkit)).rejects.toThrow(`Invalid context source: ${source}`);
+  });
+
+  it.each(['relative', 'absolute'])('reads a selected checkout using a %s path', async pathType => {
+    const checkoutDir = fs.mkdtempSync(path.join(process.cwd(), 'git context-'));
+    const workdir = pathType === 'relative' ? path.relative(process.cwd(), checkoutDir) : checkoutDir;
+    const commitDate = '2024-01-02T03:04:05Z';
+    const git = (args: string[]) =>
+      execFileSync('git', args, {
+        cwd: checkoutDir,
+        encoding: 'utf8',
+        stdio: 'pipe',
+        env: {...process.env, GIT_AUTHOR_DATE: commitDate, GIT_COMMITTER_DATE: commitDate}
+      }).trim();
+
+    try {
+      git(['init', '--initial-branch=selected-checkout']);
+      git(['-c', 'user.name=Test', '-c', 'user.email=test@example.com', '-c', 'commit.gpgsign=false', 'commit', '--allow-empty', '-m', 'initial']);
+      const sha = git(['rev-parse', 'HEAD']);
+      const ctx = await context.getContext(`git:${workdir}`, toolkit);
+      expect(ctx.ref).toEqual('refs/heads/selected-checkout');
+      expect(ctx.sha).toEqual(sha);
+      expect(ctx.commitDate).toEqual(new Date(commitDate));
+
+      git(['checkout', '--detach', 'HEAD']);
+      git(['branch', '-D', 'selected-checkout']);
+      const detachedContext = await context.getContext(`git:${workdir}`, toolkit);
+      expect(detachedContext.ref).toEqual('');
+      expect(detachedContext.sha).toEqual(sha);
+      expect(detachedContext.commitDate).toEqual(new Date(commitDate));
+      const meta = new Meta({...context.getInputs(), images: ['name/app'], tags: ['type=sha,format=long'], flavor: []}, detachedContext, repoFixture);
+      expect(meta.getTags()).toEqual([`name/app:sha-${sha}`]);
+    } finally {
+      fs.rmSync(checkoutDir, {recursive: true, force: true});
+    }
+  });
 });

 // See: https://github.com/actions/toolkit/blob/master/packages/core/src/core.ts#L67
@@ -72,11 +72,14 @@
  "homepage": "https://github.com",
  "language": null,
  "forks_count": 9,
+  "forks": 9,
  "stargazers_count": 80,
  "watchers_count": 80,
+  "watchers": 80,
  "size": 108,
  "default_branch": "master",
  "open_issues_count": 0,
+  "open_issues": 0,
  "is_template": true,
  "topics": [
    "octocat",
@@ -85,6 +88,7 @@
    "api"
  ],
  "has_issues": true,
+  "has_discussions": false,
  "has_projects": true,
  "has_wiki": true,
  "has_pages": false,
@@ -211,11 +215,15 @@
    "homepage": "https://github.com",
    "language": null,
    "forks_count": 9,
+    "forks": 9,
+    "license": null,
    "stargazers_count": 80,
    "watchers_count": 80,
+    "watchers": 80,
    "size": 108,
    "default_branch": "master",
    "open_issues_count": 0,
+    "open_issues": 0,
    "is_template": true,
    "topics": [
      "octocat",
@@ -322,11 +330,15 @@
    "homepage": "https://github.com",
    "language": null,
    "forks_count": 9,
+    "forks": 9,
+    "license": null,
    "stargazers_count": 80,
    "watchers_count": 80,
+    "watchers": 80,
    "size": 108,
    "default_branch": "master",
    "open_issues_count": 0,
+    "open_issues": 0,
    "is_template": true,
    "topics": [
      "octocat",
@@ -8,7 +8,7 @@ branding:

 inputs:
  context:
-    description: 'Where to get context data. Allowed options are "workflow"  (default), "git".'
+    description: 'Where to get context data. Allowed options are "workflow" (default), "git", "git:<path>".'
    default: "workflow"
    required: true
  images:
@@ -216,7 +216,7 @@ Apache License

 The following npm package may be included in this product:

- - @docker/actions-toolkit@0.92.0
+ - @docker/actions-toolkit@0.100.0

 This package contains the following license:

@@ -1792,7 +1792,7 @@ SOFTWARE.

 The following npm package may be included in this product:

- - js-yaml@5.2.0
+ - js-yaml@5.4.2

 This package contains the following license:

@@ -2631,7 +2631,7 @@ END OF TERMS AND CONDITIONS

 The following npm package may be included in this product:

- - @sigstore/verify@4.1.0
+ - @sigstore/verify@4.1.2

 This package contains the following license:

@@ -3379,7 +3379,7 @@ USE OR OTHER DEALINGS IN THE SOFTWARE.

 The following npm packages may be included in this product:

- - brace-expansion@1.1.14
+ - brace-expansion@1.1.18
 - brace-expansion@2.0.2

 These packages each contain the following license:
@@ -3795,7 +3795,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI

 The following npm package may be included in this product:

- - undici@6.27.0
+ - undici@6.28.0

 This package contains the following license:

@@ -4412,7 +4412,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - csv-parse@7.0.0
+ - csv-parse@7.0.2

 This package contains the following license:

@@ -4538,7 +4538,7 @@ The following npm packages may be included in this product:
 - pump@2.0.1
 - pumpify@1.5.1
 - tar-stream@3.1.7
- - tar-stream@3.2.0
+ - tar-stream@3.2.1

 These packages each contain the following license:

@@ -5056,7 +5056,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - moment-timezone@0.6.2
+ - moment-timezone@0.6.3

 This package contains the following license:

@@ -5086,7 +5086,7 @@ CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 The following npm packages may be included in this product:

 - @actions/artifact@6.2.1
- - @actions/cache@6.1.0
+ - @actions/cache@6.2.0
 - @actions/core@3.0.0
 - @actions/core@3.0.1
 - @actions/exec@3.0.0
@@ -27,12 +27,12 @@
  "dependencies": {
    "@actions/core": "^3.0.1",
    "@actions/github": "^9.1.1",
-    "@docker/actions-toolkit": "^0.92.0",
+    "@docker/actions-toolkit": "^0.100.0",
    "@renovate/pep440": "^1.0.0",
-    "csv-parse": "^7.0.0",
+    "csv-parse": "^7.0.2",
    "handlebars": "^4.7.9",
    "moment": "^2.30.1",
-    "moment-timezone": "^0.6.2",
+    "moment-timezone": "^0.6.3",
    "semver": "^7.8.5"
  },
  "devDependencies": {
@@ -12,7 +12,7 @@ export interface Context extends GithubContext {
 }

 export interface Inputs {
-  context: ContextSource;
+  context: string;
  images: string[];
  tags: string[];
  flavor: string[];
@@ -27,7 +27,7 @@ export interface Inputs {

 export function getInputs(): Inputs {
  return {
-    context: (core.getInput('context') || ContextSource.workflow) as ContextSource,
+    context: core.getInput('context') || ContextSource.workflow,
    images: Util.getInputList('images', {ignoreComma: true, comment: '#', commentNoInfix: true}),
    tags: Util.getInputList('tags', {ignoreComma: true, comment: '#', commentNoInfix: true}),
    flavor: Util.getInputList('flavor', {ignoreComma: true, comment: '#', commentNoInfix: true}),
@@ -46,7 +46,10 @@ export enum ContextSource {
  git = 'git'
 }

-export async function getContext(source: ContextSource, toolkit: Toolkit): Promise<Context> {
+export async function getContext(source: string, toolkit: Toolkit): Promise<Context> {
+  if (source.startsWith(`${ContextSource.git}:`)) {
+    return await getContextFromGit(source.slice(ContextSource.git.length + 1));
+  }
  switch (source) {
    case ContextSource.workflow:
      return await getContextFromWorkflow(toolkit);
@@ -82,11 +85,11 @@ async function getContextFromWorkflow(toolkit: Toolkit): Promise<Context> {
  } as Context;
 }

-async function getContextFromGit(): Promise<Context> {
-  const ctx = await Git.context();
+async function getContextFromGit(workdir?: string): Promise<Context> {
+  const ctx = await Git.context(workdir);

  return {
-    commitDate: await Git.commitDate(ctx.sha),
+    commitDate: await Git.commitDate(ctx.sha, workdir),
    ...ctx
  } as Context;
 }
@@ -34,9 +34,9 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/cache@npm:^6.1.0":
-  version: 6.1.0
-  resolution: "@actions/cache@npm:6.1.0"
+"@actions/cache@npm:^6.2.0":
+  version: 6.2.0
+  resolution: "@actions/cache@npm:6.2.0"
  dependencies:
    "@actions/core": "npm:^3.0.1"
    "@actions/exec": "npm:^3.0.0"
@@ -47,7 +47,7 @@ __metadata:
    "@azure/storage-blob": "npm:^12.31.0"
    "@protobuf-ts/runtime-rpc": "npm:^2.11.1"
    semver: "npm:^7.7.4"
-  checksum: 10/0cd89f335c1e89f514d56060110bfddc6ab1112ec0091533364c32aec2621896112cde71cfc4089b86d00f3b5478996088e4c4e0aba0aec32aae0afeb4921b3d
+  checksum: 10/b2b3d219d3458b6b7e8f47ff6a83a0566f0b3cd5b257e307636d2147f892e595ce8cecbc0675590a57d0eb4d4d73564d08d28753baa50934ad59a65cbee2d8fa
  languageName: node
  linkType: hard

@@ -446,12 +446,12 @@ __metadata:
  languageName: node
  linkType: hard

-"@docker/actions-toolkit@npm:^0.92.0":
-  version: 0.92.0
-  resolution: "@docker/actions-toolkit@npm:0.92.0"
+"@docker/actions-toolkit@npm:^0.100.0":
+  version: 0.100.0
+  resolution: "@docker/actions-toolkit@npm:0.100.0"
  dependencies:
    "@actions/artifact": "npm:^6.2.1"
-    "@actions/cache": "npm:^6.1.0"
+    "@actions/cache": "npm:^6.2.0"
    "@actions/core": "npm:^3.0.1"
    "@actions/exec": "npm:^3.0.0"
    "@actions/github": "npm:^9.1.1"
@@ -460,18 +460,18 @@ __metadata:
    "@actions/tool-cache": "npm:^4.0.0"
    "@sigstore/bundle": "npm:^5.0.0"
    "@sigstore/tuf": "npm:^5.0.0"
-    "@sigstore/verify": "npm:^4.1.0"
+    "@sigstore/verify": "npm:^4.1.2"
    async-retry: "npm:^1.3.3"
-    csv-parse: "npm:^7.0.0"
+    csv-parse: "npm:^7.0.2"
    gunzip-maybe: "npm:^1.4.2"
    handlebars: "npm:^4.7.9"
    he: "npm:^1.2.0"
-    js-yaml: "npm:^5.2.0"
+    js-yaml: "npm:^5.4.1"
    jwt-decode: "npm:^4.0.0"
    semver: "npm:^7.8.5"
-    tar-stream: "npm:^3.2.0"
+    tar-stream: "npm:^3.2.1"
    tmp: "npm:^0.2.7"
-  checksum: 10/599cea84b897069c53744a2f05371c6d9ad60da18448b4431273529b92fd2d77ddc718ee205cf0bf1da53083d412da90b1067f1e64a5fdac73fe71d486726064
+  checksum: 10/74eaa1afb1887ed2974e403870205889844d42eb527550309819fd24b80484b92ebf95ba4ee01eef607b66acd655a8457fc25a6d27ff2f81e842705ff98b1976
  languageName: node
  linkType: hard

@@ -943,20 +943,30 @@ __metadata:
  languageName: node
  linkType: hard

-"@humanfs/core@npm:^0.19.1":
-  version: 0.19.1
-  resolution: "@humanfs/core@npm:0.19.1"
-  checksum: 10/270d936be483ab5921702623bc74ce394bf12abbf57d9145a69e8a0d1c87eb1c768bd2d93af16c5705041e257e6d9cc7529311f63a1349f3678abc776fc28523
+"@humanfs/core@npm:^0.19.2":
+  version: 0.19.2
+  resolution: "@humanfs/core@npm:0.19.2"
+  dependencies:
+    "@humanfs/types": "npm:^0.15.0"
+  checksum: 10/c6c0273721ec8df3d36a57c390a11a168d0a2f513d78bceb25165bded4fcb73609b1a317edc6c8f331cefd4b47285dde0b1e6679e08ef7f062232ec14fe05312
  languageName: node
  linkType: hard

 "@humanfs/node@npm:^0.16.6":
-  version: 0.16.7
-  resolution: "@humanfs/node@npm:0.16.7"
+  version: 0.16.8
+  resolution: "@humanfs/node@npm:0.16.8"
  dependencies:
-    "@humanfs/core": "npm:^0.19.1"
+    "@humanfs/core": "npm:^0.19.2"
+    "@humanfs/types": "npm:^0.15.0"
    "@humanwhocodes/retry": "npm:^0.4.0"
-  checksum: 10/b3633d3dce898592cac515ba5e6693c78e6be92863541d3eaf2c009b10f52b2fa62ff6e6e06f240f2447ddbe7b5f1890bc34e9308470675c876eee207553a08d
+  checksum: 10/ed01b3c066d9cec7526d139b9e71ca00ee4a30b3b5f5f5c198eb069c3509a3e167e180ba7e1e5a83b9571e906c4908bd20402b47586887452311af7354995e95
+  languageName: node
+  linkType: hard
+
+"@humanfs/types@npm:^0.15.0":
+  version: 0.15.0
+  resolution: "@humanfs/types@npm:0.15.0"
+  checksum: 10/dea3cc7fd8f8d4d088ed8d0a9921cf12bd8e1cdf40a6133106b03a6e2aebcc9a6f1771b3643b7ec71baae90d08245db34069dfcc861da8d678662741e6c3c986
  languageName: node
  linkType: hard

@@ -1750,14 +1760,14 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/verify@npm:^4.1.0":
-  version: 4.1.0
-  resolution: "@sigstore/verify@npm:4.1.0"
+"@sigstore/verify@npm:^4.1.2":
+  version: 4.1.2
+  resolution: "@sigstore/verify@npm:4.1.2"
  dependencies:
    "@sigstore/bundle": "npm:^5.0.0"
    "@sigstore/core": "npm:^4.0.1"
    "@sigstore/protobuf-specs": "npm:^0.5.0"
-  checksum: 10/63d34a885d15fb37a111e6a85df61ba6a4247efa15d6989b83328043fe2c7be38b0b87b8e0c26cb906809920fde344eaab37fb34f0acd0d8b97c80bfdaa14f62
+  checksum: 10/a888502f3623e03a47939432ecd3ee441258aafbea2b952b32b872d73b5d14c437b49aee7979538c7b7c9673c7d7951d600a4b12b8242a3402fc83ace38bad12
  languageName: node
  linkType: hard

@@ -2469,12 +2479,12 @@ __metadata:
  linkType: hard

 "brace-expansion@npm:^1.1.7":
-  version: 1.1.14
-  resolution: "brace-expansion@npm:1.1.14"
+  version: 1.1.18
+  resolution: "brace-expansion@npm:1.1.18"
  dependencies:
    balanced-match: "npm:^1.0.0"
    concat-map: "npm:0.0.1"
-  checksum: 10/2de747a5891ea0d3a1946ea1ae26e056a47f7ea8d42a3009e1736ec3a31a5aa69a3c5da59d998426773553afe4c258e5b12d7953b534fa7f2cf12ce92eed4931
+  checksum: 10/b55a3c03239b8d2127c7cbb3408c9ad3a556a8c303bf3064df78bfb7c093160fc8f6e0a32e42a850a78eba12f29ccf6ef997690b9acf945d242c56c61c4aa977
  languageName: node
  linkType: hard

@@ -2487,16 +2497,7 @@ __metadata:
  languageName: node
  linkType: hard

-"brace-expansion@npm:^5.0.2":
-  version: 5.0.6
-  resolution: "brace-expansion@npm:5.0.6"
-  dependencies:
-    balanced-match: "npm:^4.0.2"
-  checksum: 10/a7acf120fefa79e9d7c9c92898114f57c07596a3920197f3c5917e6a628b04220a5f7f9618c30bdd973a6576a32113b99f9c3f1c8245ccc399dd2a9a718d81d8
-  languageName: node
-  linkType: hard
-
-"brace-expansion@npm:^5.0.5":
+"brace-expansion@npm:^5.0.2, brace-expansion@npm:^5.0.5":
  version: 5.0.7
  resolution: "brace-expansion@npm:5.0.7"
  dependencies:
@@ -2837,10 +2838,10 @@ __metadata:
  languageName: node
  linkType: hard

-"csv-parse@npm:^7.0.0":
-  version: 7.0.0
-  resolution: "csv-parse@npm:7.0.0"
-  checksum: 10/53c96e6b4ff80047713bb4d2967d06495890d4b628284a80271860be089fdb5a74cd97c76fd535a00ad26b11cc6e4fc5a243658e5377c0a6334ddd104620d169
+"csv-parse@npm:^7.0.2":
+  version: 7.0.2
+  resolution: "csv-parse@npm:7.0.2"
+  checksum: 10/66158491d25b2070908c6d28130c1d439bec0e0d1ab3fad372973909e573bcc85a46ca317ae410f0178157f272112e3741b164aaf850d8241128c30ea2137670
  languageName: node
  linkType: hard

@@ -2890,7 +2891,7 @@ __metadata:
  dependencies:
    "@actions/core": "npm:^3.0.1"
    "@actions/github": "npm:^9.1.1"
-    "@docker/actions-toolkit": "npm:^0.92.0"
+    "@docker/actions-toolkit": "npm:^0.100.0"
    "@eslint/js": "npm:^9.39.3"
    "@renovate/pep440": "npm:^1.0.0"
    "@types/node": "npm:^24.11.0"
@@ -2899,7 +2900,7 @@ __metadata:
    "@typescript-eslint/parser": "npm:^8.56.1"
    "@vitest/coverage-v8": "npm:^4.0.18"
    "@vitest/eslint-plugin": "npm:^1.6.9"
-    csv-parse: "npm:^7.0.0"
+    csv-parse: "npm:^7.0.2"
    dotenv: "npm:^17.3.1"
    esbuild: "npm:^0.28.0"
    eslint: "npm:^9.39.3"
@@ -2909,7 +2910,7 @@ __metadata:
    globals: "npm:^17.3.0"
    handlebars: "npm:^4.7.9"
    moment: "npm:^2.30.1"
-    moment-timezone: "npm:^0.6.2"
+    moment-timezone: "npm:^0.6.3"
    prettier: "npm:^3.8.1"
    semver: "npm:^7.8.5"
    typescript: "npm:^5.9.3"
@@ -4081,24 +4082,24 @@ __metadata:
  linkType: hard

 "js-yaml@npm:^4.1.0, js-yaml@npm:^4.1.1":
-  version: 4.3.0
-  resolution: "js-yaml@npm:4.3.0"
+  version: 4.3.2
+  resolution: "js-yaml@npm:4.3.2"
  dependencies:
    argparse: "npm:^2.0.1"
  bin:
    js-yaml: bin/js-yaml.js
-  checksum: 10/2bcec3a8118d7f744badeb04e14366578d234a736f353d41fe35d2305e4ce2409a8e041d277f07cd6bbc8aaa12128d650a68ce43247072519bede20962d2126f
+  checksum: 10/05c44b9c73e4901d92703b155e76518df64bf01ac62e4c036b47de4b391e19b72e32656e8954d51b436307f08cc9d0c0d4ec617d061cf2f65fffee9f3114bee7
  languageName: node
  linkType: hard

-"js-yaml@npm:^5.2.0":
-  version: 5.2.0
-  resolution: "js-yaml@npm:5.2.0"
+"js-yaml@npm:^5.4.1":
+  version: 5.4.2
+  resolution: "js-yaml@npm:5.4.2"
  dependencies:
    argparse: "npm:^2.0.1"
  bin:
    js-yaml: bin/js-yaml.mjs
-  checksum: 10/8a5e55c5d0fcafae4ac02114a99dc070048b8e5a82a056089ce1f69f8a00fd8eb05b622e76ad50aac1f9d409010636c9616c6b2ed4e58dae138379a60d301220
+  checksum: 10/f2461abd1d6268fb226733f0a0e0aa48004bb824116e3dfa75f1a1279001936343b672066dfecdb852ac3ca883452706c383a760aa90430cb68ba395aa2cbc84
  languageName: node
  linkType: hard

@@ -4609,12 +4610,12 @@ __metadata:
  languageName: node
  linkType: hard

-"moment-timezone@npm:^0.6.2":
-  version: 0.6.2
-  resolution: "moment-timezone@npm:0.6.2"
+"moment-timezone@npm:^0.6.3":
+  version: 0.6.3
+  resolution: "moment-timezone@npm:0.6.3"
  dependencies:
    moment: "npm:^2.29.4"
-  checksum: 10/021f908742a392ff7234b3814fb20c786cb086d0fa3f98a58f6810181c71a305244e908e913d8bd6750c4a7e09300eda2c869cd77ef0b3f83e58028fa75f84de
+  checksum: 10/55ae516386b87fc2207d7911ef61ecef240ba4b21aece36d0b9f33802e1457db0c21b197ae4fde3b6d819d4bde3d835da0ba3c08de740b158e067c874d16082a
  languageName: node
  linkType: hard

@@ -4639,12 +4640,12 @@ __metadata:
  languageName: node
  linkType: hard

-"nanoid@npm:^3.3.11":
-  version: 3.3.11
-  resolution: "nanoid@npm:3.3.11"
+"nanoid@npm:^3.3.18":
+  version: 3.3.19
+  resolution: "nanoid@npm:3.3.19"
  bin:
    nanoid: bin/nanoid.cjs
-  checksum: 10/73b5afe5975a307aaa3c95dfe3334c52cdf9ae71518176895229b8d65ab0d1c0417dd081426134eb7571c055720428ea5d57c645138161e7d10df80815527c48
+  checksum: 10/a330adb28dad63eccb0a0c95a2a61353e84b7e067061fff94167803d94be8eef0f7b75cf2da1bece06e8b7afb892abbe52cf0ec33298c817a083eedccd7656e4
  languageName: node
  linkType: hard

@@ -5067,23 +5068,23 @@ __metadata:
  linkType: hard

 "postcss-selector-parser@npm:^7.0.0":
-  version: 7.1.1
-  resolution: "postcss-selector-parser@npm:7.1.1"
+  version: 7.1.5
+  resolution: "postcss-selector-parser@npm:7.1.5"
  dependencies:
    cssesc: "npm:^3.0.0"
    util-deprecate: "npm:^1.0.2"
-  checksum: 10/bb3c6455b20af26a556e3021e21101d8470252644e673c1612f7348ff8dd41b11321329f0694cf299b5b94863f823480b72d3e2f4bd3a89dc43e2d8c0dbad341
+  checksum: 10/ae66bbcb5d370a3f4b4660e23a208352a885c651f1b420f7b998faaa1034832b870066f49e295f73ee3da6a6c6312c56fea1b2039969f8d803438fa48232b307
  languageName: node
  linkType: hard

 "postcss@npm:^8.5.6":
-  version: 8.5.10
-  resolution: "postcss@npm:8.5.10"
+  version: 8.5.28
+  resolution: "postcss@npm:8.5.28"
  dependencies:
-    nanoid: "npm:^3.3.11"
+    nanoid: "npm:^3.3.18"
    picocolors: "npm:^1.1.1"
    source-map-js: "npm:^1.2.1"
-  checksum: 10/7eac6169e535b63c8412e94d4f6047fc23efa3e9dde804b541940043c831b25f1cd867d83cd2c4371ad2450c8abcb42c208aa25668c1f0f3650d7f72faf711a8
+  checksum: 10/c34814c1da499f370cd3b02a085a2d866989a966629b7bd4025f4a2a10d538a2ec83dc3181e1008550edb4cf44e49a0c40ec82332b08d9600877e6841240ad05
  languageName: node
  linkType: hard

@@ -5773,15 +5774,15 @@ __metadata:
  languageName: node
  linkType: hard

-"tar-stream@npm:^3.2.0":
-  version: 3.2.0
-  resolution: "tar-stream@npm:3.2.0"
+"tar-stream@npm:^3.2.1":
+  version: 3.2.1
+  resolution: "tar-stream@npm:3.2.1"
  dependencies:
    b4a: "npm:^1.6.4"
    bare-fs: "npm:^4.5.5"
    fast-fifo: "npm:^1.2.0"
    streamx: "npm:^2.15.0"
-  checksum: 10/ce57a81521de73ae7a3b7d55a08da50d6771427c249bfa89a208518e48faf5254c8fa7201a8f5419ab8bde9601a74e6dd512b31a13ec89774aec96178f99a8d3
+  checksum: 10/1a09f857e0789489476d99fb716fa6d209e7d19aa73b7a4b23f40eeba46792d5007ca62fde4fca8f643ed71ace1c526a293c655718a0409275a45a8aa86b562a
  languageName: node
  linkType: hard

@@ -6020,9 +6021,9 @@ __metadata:
  linkType: hard

 "undici@npm:^6.23.0, undici@npm:^6.25.0":
-  version: 6.27.0
-  resolution: "undici@npm:6.27.0"
-  checksum: 10/30c18cdb235edf4dd36f8aa3ace1ffaf44060289a7d62ad44c33180d2d74a224015d25574812f62ce9c625b5beb1b0b766495b650fedf356aca11eed7ce2c816
+  version: 6.28.0
+  resolution: "undici@npm:6.28.0"
+  checksum: 10/672a7a53bd1f6c80edb73b357ab36e98ef9e474024c442aab2b8ea2bc32f1103cab05525c78661ae724f3e1340e23d03efb9730fba28e76218ab0ec52e15d75a
  languageName: node
  linkType: hard