github/flagger
1
0
Fork 0
mirror of https://github.com/fluxcd/flagger.git synced 2026-04-15 06:57:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,881 Commits 9 Branches 107 Tags
dfa403705defc54e80581acff045db6f77ee71db
Commit Graph
36 Commits
Author SHA1 Message Date
dependabot[bot]andGitHub 785db00796 build(deps): bump the ci group with 3 updates 
Bumps the ci group with 3 updates: [actions/cache](https://github.com/actions/cache), [codecov/codecov-action](https://github.com/codecov/codecov-action) and [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).


Updates `actions/cache` from 3.3.2 to 4.0.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.3.2...v4.0.0)

Updates `codecov/codecov-action` from 3 to 4
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v3...v4)

Updates `sigstore/cosign-installer` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.3.0...v3.4.0)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-02-05 11:16:40 +00:00
dependabot[bot]andGitHub 0810972d31 build(deps): bump the ci group with 3 updates 
Bumps the ci group with 3 updates: [actions/setup-go](https://github.com/actions/setup-go), [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/setup-go` from 4 to 5
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

Updates `sigstore/cosign-installer` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.2.0...v3.3.0)

Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-25 11:52:08 +00:00
dependabot[bot]andGitHub 9189f17ff8 build(deps): bump the ci group with 1 update 
Bumps the ci group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).

- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.2...v3.2.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-11-20 11:14:05 +00:00
Stefan Prodan e4c05c3034 ci: Use GitHub larger runners 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2023-09-19 17:16:01 +03:00
dependabot[bot]andGitHub 0bcc814154 build(deps): bump the ci group with 9 updates 
Bumps the ci group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/cache](https://github.com/actions/cache) | `3.3.1` | `3.3.2` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.1.1` | `3.1.2` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `2` | `3` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2` | `3` |
| [docker/login-action](https://github.com/docker/login-action) | `2` | `3` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `4` | `5` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `4` | `5` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `4` | `5` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

Updates `actions/cache` from 3.3.1 to 3.3.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.3.1...v3.3.2)

Updates `sigstore/cosign-installer` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.1...v3.1.2)

Updates `docker/setup-qemu-action` from 2 to 3
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2...v3)

Updates `docker/setup-buildx-action` from 2 to 3
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3)

Updates `docker/login-action` from 2 to 3
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

Updates `docker/metadata-action` from 4 to 5
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v4...v5)

Updates `docker/build-push-action` from 4 to 5
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v4...v5)

Updates `goreleaser/goreleaser-action` from 4 to 5
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-16 07:12:30 +00:00
Stefan Prodan 0c8b5048dd ci: Fix flux push artifact 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2023-08-29 16:09:46 +03:00
Stefan Prodan cef1bb8e67 ci: Fix cosign signatures 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2023-08-29 15:19:42 +03:00
Sanskar Jaiswal 2fd45cd0d8 ci: fix release workflow 
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
 2023-08-29 16:09:24 +05:30
Stefan Prodan 137d31ac79 ci: Generate SLSA provenance for release artifacts 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2023-08-29 11:34:15 +03:00
Sanskar Jaiswal 7cce4fd6d8 ci: update cosign signing 
Bypass prompt confirmation and switch to signing digests instead of
tags.

Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
 2023-08-28 14:51:47 +05:30
dependabot[bot]andGitHub 6359d5ea19 build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.1.1 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.8.1 to 3.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.1...v3.1.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-08-21 17:27:50 +00:00
dependabot[bot]andGitHub bb2cf39393 build(deps): bump docker/build-push-action from 3 to 4 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-06 11:09:45 +00:00
Sanskar Jaiswal 7ec3774172 modify release workflow to publish rc images 
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
 2023-02-05 17:38:41 +05:30
Stefan Prodan 925cc37c8f build: Enable SBOM and SLSA Provenance 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2023-01-31 15:11:28 +02:00
dependabot[bot]andGitHub 86081708a4 Bump goreleaser/goreleaser-action from 3 to 4 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3 to 4.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-19 11:17:57 +00:00
dependabot[bot]andGitHub ec74dc5a33 Bump stefanprodan/helm-gh-pages from 1.6.0 to 1.7.0 
Bumps [stefanprodan/helm-gh-pages](https://github.com/stefanprodan/helm-gh-pages) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/stefanprodan/helm-gh-pages/releases)
- [Commits](https://github.com/stefanprodan/helm-gh-pages/compare/v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: stefanprodan/helm-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-28 11:21:21 +00:00
Stefan ProdanandGitHub ec44f64465 Merge pull request #1298 from fluxcd/dependabot/github_actions/goreleaser/goreleaser-action-3 
Bump goreleaser/goreleaser-action from 2 to 3
 2022-10-24 17:25:52 +03:00
dependabot[bot]andGitHub f9f8d7e71e Bump docker/build-push-action from 2 to 3 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-24 11:36:21 +00:00
dependabot[bot]andGitHub bdbd1fb1f0 Bump goreleaser/goreleaser-action from 2 to 3 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2 to 3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-24 11:36:16 +00:00
Stefan Prodan f5f3d92d3d ci: Pin Helm and Cosign action version 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2022-10-23 15:38:36 +03:00
Stefan Prodan 4d074799ca ci: Use Helm action from fluxcd org 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2022-10-23 13:36:32 +03:00
Stefan Prodan cf8fcd0539 ci: Publish signed Helm charts and manifests to GHCR 
- Push Flagger Helm chart to `ghcr.io/fluxcd/charts/flagger`
- Sign Flagger Helm chart with Cosign and GitHub OIDC
- Push install manifests and overlays from `./kustomize` with Flux CLI to `ghcr.io/fluxcd/flagger-manifests`
- Sign Flagger manifests with Cosign and GitHub OIDC

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2022-10-22 14:46:20 +03:00
Stefan Prodan 300cd24493 ci: Sign release and containers with Cosign and GitHub OIDC 
- Replace the Cosign static key with GitHub Actions OIDC when signing the flagger container image
- Sign the GitHub release assets checksums with Cosign keyless
- Sign the load-tester container image with Cosign keyless

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2022-10-21 16:39:29 +03:00
Stefan ProdanandGitHub fb66d24f89 Merge pull request #1288 from fluxcd/dependabot/github_actions/stefanprodan/helm-gh-pages-1.6.0 
Bump stefanprodan/helm-gh-pages from 1.3.0 to 1.6.0
 2022-10-21 12:33:36 +03:00
dependabot[bot]andGitHub d82d9765e1 Bump docker/metadata-action from 3 to 4 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-21 09:30:33 +00:00
dependabot[bot]andGitHub 6adf51083e Bump stefanprodan/helm-gh-pages from 1.3.0 to 1.6.0 
Bumps [stefanprodan/helm-gh-pages](https://github.com/stefanprodan/helm-gh-pages) from 1.3.0 to 1.6.0.
- [Release notes](https://github.com/stefanprodan/helm-gh-pages/releases)
- [Commits](https://github.com/stefanprodan/helm-gh-pages/compare/v1.3.0...v1.6.0)

---
updated-dependencies:
- dependency-name: stefanprodan/helm-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-21 09:30:22 +00:00
Stefan Prodan 82db9ff213 ci: Adjust GitHub workflow permissions 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2022-10-21 11:55:37 +03:00
Stefan Prodan 2f0d34adb2 Publish a Software Bill of Materials (SBOM) 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2022-01-21 14:20:48 +02:00
Stefan Prodan be8ed8a696 Fix cosign workflow 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2021-08-25 12:16:06 +03:00
Stefan Prodan f0fa2aa6bb Sign Flagger container images with cosign 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2021-08-24 17:58:54 +03:00
Stefan Prodan 376bf194b3 Disable Helm chart linting 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2020-12-22 18:16:19 +02:00
Stefan Prodan ecf73e967a Release v1.5.0 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2020-12-22 16:18:00 +02:00
Stefan Prodan ec6aab2c8d Publish multi-arch image to GitHub Container Registry 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2020-12-22 14:53:01 +02:00
Stefan Prodan 38777801de Upload coverage to Codecov 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2020-12-21 17:04:31 +02:00
Stefan Prodan fda53fbf80 Remove CircleCI testing framework 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2020-12-21 11:52:13 +02:00
Stefan Prodan be9b03d99b Add release workflow 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2020-12-20 17:07:32 +02:00