dependabot[bot] and GitHub
9189f17ff8
build(deps): bump the ci group with 1 update
...
Bumps the ci group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ).
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.2...v3.2.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ci
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-20 11:14:05 +00:00
Stefan Prodan
e4c05c3034
ci: Use GitHub larger runners
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2023-09-19 17:16:01 +03:00
dependabot[bot] and GitHub
0bcc814154
build(deps): bump the ci group with 9 updates
...
Bumps the ci group with 9 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `3` | `4` |
| [actions/cache](https://github.com/actions/cache ) | `3.3.1` | `3.3.2` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) | `3.1.1` | `3.1.2` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) | `2` | `3` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) | `2` | `3` |
| [docker/login-action](https://github.com/docker/login-action ) | `2` | `3` |
| [docker/metadata-action](https://github.com/docker/metadata-action ) | `4` | `5` |
| [docker/build-push-action](https://github.com/docker/build-push-action ) | `4` | `5` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) | `4` | `5` |
Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
Updates `actions/cache` from 3.3.1 to 3.3.2
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v3.3.1...v3.3.2 )
Updates `sigstore/cosign-installer` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.1...v3.1.2 )
Updates `docker/setup-qemu-action` from 2 to 3
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2...v3 )
Updates `docker/setup-buildx-action` from 2 to 3
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3 )
Updates `docker/login-action` from 2 to 3
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v2...v3 )
Updates `docker/metadata-action` from 4 to 5
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md )
- [Commits](https://github.com/docker/metadata-action/compare/v4...v5 )
Updates `docker/build-push-action` from 4 to 5
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v4...v5 )
Updates `goreleaser/goreleaser-action` from 4 to 5
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ci
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ci
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-16 07:12:30 +00:00
Sanskar Jaiswal
7cce4fd6d8
ci: update cosign signing
...
Bypass prompt confirmation and switch to signing digests instead of
tags.
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com >
2023-08-28 14:51:47 +05:30
dependabot[bot] and GitHub
6359d5ea19
build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.1.1
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 2.8.1 to 3.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.1...v3.1.1 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-21 17:27:50 +00:00
dependabot[bot] and GitHub
bb2cf39393
build(deps): bump docker/build-push-action from 3 to 4
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-02-06 11:09:45 +00:00
Stefan Prodan
925cc37c8f
build: Enable SBOM and SLSA Provenance
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2023-01-31 15:11:28 +02:00
Stefan Prodan and GitHub
19d4e521a3
Merge pull request #1297 from fluxcd/dependabot/github_actions/docker/login-action-2
...
Bump docker/login-action from 1 to 2
2022-10-24 17:25:34 +03:00
dependabot[bot] and GitHub
f9f8d7e71e
Bump docker/build-push-action from 2 to 3
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 2 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-10-24 11:36:21 +00:00
dependabot[bot] and GitHub
b3112a53f1
Bump docker/login-action from 1 to 2
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-10-24 11:36:13 +00:00
Stefan Prodan
f5f3d92d3d
ci: Pin Helm and Cosign action version
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2022-10-23 15:38:36 +03:00
Stefan Prodan
300cd24493
ci: Sign release and containers with Cosign and GitHub OIDC
...
- Replace the Cosign static key with GitHub Actions OIDC when signing the flagger container image
- Sign the GitHub release assets checksums with Cosign keyless
- Sign the load-tester container image with Cosign keyless
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2022-10-21 16:39:29 +03:00
dependabot[bot] and GitHub
d82d9765e1
Bump docker/metadata-action from 3 to 4
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md )
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-10-21 09:30:33 +00:00
Stefan Prodan
82db9ff213
ci: Adjust GitHub workflow permissions
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2022-10-21 11:55:37 +03:00
Sanskar Jaiswal
1664ca436e
add arm64 support for loadtester
...
Signed-off-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works >
2022-03-07 17:34:24 +05:30
Stefan Prodan
2f0d34adb2
Publish a Software Bill of Materials (SBOM)
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2022-01-21 14:20:48 +02:00
Stefan Prodan
1216990f52
Fix loadtester CI workflow
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2021-12-16 13:33:06 +02:00
Stefan Prodan
48ee4f8bd2
Add workflow for pushing loadtester image
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com >
2021-12-14 18:53:29 +02:00