dependabot[bot] and GitHub
1addff927e
build(deps): bump alpine from 3.24.0 to 3.24.1
...
Bumps alpine from 3.24.0 to 3.24.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.24.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-16 17:52:35 +00:00
dependabot[bot] and GitHub
31a1b86966
build(deps): bump alpine from 3.23.4 to 3.24.0
...
Bumps alpine from 3.23.4 to 3.24.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 17:52:42 +00:00
Jean-Philippe Evrard
e531f64b85
feat(release): let GoReleaser manage artifacts
...
GoReleaser now builds the multi-arch images,
publishes SBOM/provenance metadata, signs image digests, and attaches
the generated combined Kubernetes manifest to tagged GitHub releases.
This is to have goReleaser as a single point of work for release
automation. With this, so tags and main commits follow one consistent
image pipeline.
We keep the CI and developer image builds intentionally local.
PR, periodic, main, and tag scan jobs build only `kured:dev` and scan that
local image with Trivy, which avoids pushing disposable images and keeps
the tested image identical to the one used by kind-based e2e tests.
Simplify the Makefile around the remaining artifact boundaries: `build` for a
local GoReleaser binary build, `dev-image` for local Docker/e2e/scan use, and
`release` for the GoReleaser publish path. Remove the old manual manifest
target because the release manifest is now generated during the tagged release
flow.
To avoid a mess with all the configuration files, I move everything into
a `.config` folder, for the tools supporting it.
This also meant updating golangci-lint to a valid v2 config, and simplify
the Dockerfile to the layout expected by GoReleaser `dockers_v2`
using `TARGETPLATFORM`.
Handle Prometheus client initialization errors explicitly so the stricter
errcheck configuration keeps the existing fail-closed reboot-blocking behavior,
to fix the golangci-lint issue that appeared.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:19:04 +02:00
dependabot[bot] and GitHub
68a0bcc376
build(deps): bump alpine from 3.23.3 to 3.23.4
...
Bumps alpine from 3.23.3 to 3.23.4.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.23.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-16 17:52:57 +00:00
dependabot[bot] and GitHub
605d025509
build(deps): bump alpine from 3.22.2 to 3.23.3
...
Bumps alpine from 3.22.2 to 3.23.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.23.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-28 17:52:50 +00:00
dependabot[bot] and GitHub
709f2df695
build(deps): bump alpine from 3.22.1 to 3.22.2
...
Bumps alpine from 3.22.1 to 3.22.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.22.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-09 17:05:03 +00:00
dependabot[bot] and Jean-Philippe Evrard
47fadc3607
build(deps): bump alpine from 3.22.0 to 3.22.1
...
Bumps alpine from 3.22.0 to 3.22.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.22.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-11 13:00:49 +02:00
2d80ea51ad
build(deps): bump alpine from 3.21.3 to 3.22.0 ( #1137 )
...
Bumps alpine from 3.21.3 to 3.22.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-06 09:13:33 -07:00
dependabot[bot] and GitHub
acc8e89504
build(deps): bump alpine from 3.21.2 to 3.21.3
...
Bumps alpine from 3.21.2 to 3.21.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-17 17:34:22 +00:00
dependabot[bot] and GitHub
465a6cceab
build(deps): bump alpine from 3.20.3 to 3.21.2
...
Bumps alpine from 3.20.3 to 3.21.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:09:37 +00:00
StepSecurity Bot
95e6055522
[StepSecurity] Apply security best practices
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
2024-11-07 21:38:39 +00:00
Jean-Philippe Evrard and GitHub
d29cc2ae68
Cleanup dockerfile ( #996 )
...
Without this, docker buildx will complain about the
following issues:
- "RedundantTargetPlatform: Setting platform to predefined $TARGETPLATFORM in
FROM is redundant as this is the default behavior"
- "FromAsCasing: 'as' and 'FROM' keywords' casing do not match"
This fixes it.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2024-10-25 15:04:16 -07:00
dependabot[bot] and GitHub
fc9a5c75e3
build(deps): bump alpine from 3.20.2 to 3.20.3
...
Bumps alpine from 3.20.2 to 3.20.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-11 13:57:07 +00:00
dependabot[bot] and GitHub
66cfca4a60
build(deps): bump alpine from 3.20.1 to 3.20.2
...
Bumps alpine from 3.20.1 to 3.20.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-23 17:47:56 +00:00
dependabot[bot] and GitHub
3f69a3c3cb
build(deps): bump alpine from 3.20.0 to 3.20.1
...
Bumps alpine from 3.20.0 to 3.20.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-06-21 17:26:51 +00:00
dependabot[bot] and GitHub
4d37b6544c
build(deps): bump alpine from 3.19.1 to 3.20.0
...
Bumps alpine from 3.19.1 to 3.20.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-05-23 17:10:19 +00:00
dependabot[bot] and GitHub
1151d324fa
build(deps): bump alpine from 3.19.0 to 3.19.1
...
Bumps alpine from 3.19.0 to 3.19.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-29 17:36:18 +00:00
dependabot[bot] and GitHub
0db448da56
build(deps): bump alpine from 3.18.5 to 3.19.0
...
Bumps alpine from 3.18.5 to 3.19.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-08 17:50:10 +00:00
dependabot[bot] and GitHub
34b3d9c1a3
build(deps): bump alpine from 3.18.4 to 3.18.5
...
Bumps alpine from 3.18.4 to 3.18.5.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-01 17:24:12 +00:00
dependabot[bot] and GitHub
ccbdbe8d16
build(deps): bump alpine from 3.18.3 to 3.18.4
...
Bumps alpine from 3.18.3 to 3.18.4.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-29 17:25:08 +00:00
dependabot[bot] and GitHub
c159b37fcc
build(deps): bump alpine from 3.18.2 to 3.18.3
...
Bumps alpine from 3.18.2 to 3.18.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-08 17:08:31 +00:00
dependabot[bot] and GitHub
ec328e33d6
build(deps): bump alpine from 3.18.0 to 3.18.2
...
Bumps alpine from 3.18.0 to 3.18.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-06-15 18:01:15 +00:00
dependabot[bot] and GitHub
f44ced2d04
build(deps): bump alpine from 3.17.3 to 3.18.0
...
Bumps alpine from 3.17.3 to 3.18.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-05-10 18:11:22 +00:00
dependabot[bot] and GitHub
efa0fe808d
build(deps): bump alpine from 3.17.2 to 3.17.3
...
Bumps alpine from 3.17.2 to 3.17.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-03-29 18:02:03 +00:00
dependabot[bot] and GitHub
9ab71c894f
build(deps): bump alpine from 3.17.1 to 3.17.2
...
Bumps alpine from 3.17.1 to 3.17.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-02-13 18:15:01 +00:00
c6d9bf07e6
build(deps): bump alpine from 3.17.0 to 3.17.1 ( #714 )
...
Bumps alpine from 3.17.0 to 3.17.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-10 17:21:57 +01:00
28a05ca941
build(deps): bump alpine from 3.16.3 to 3.17.0 ( #704 )
...
Bumps alpine from 3.16.3 to 3.17.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-25 06:25:32 +01:00
dependabot[bot] and GitHub
3299e8ebf7
build(deps): bump alpine from 3.16.2 to 3.16.3
...
Bumps alpine from 3.16.2 to 3.16.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-15 06:18:12 +00:00
Christian Kotzbauer and GitHub
ba1328ca12
feat: Integrate GoReleaser, Cosign and Syft ( #595 )
...
* build: integrate goreleaser, syft and cosign
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: chmod for all binaries
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: version-env
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: remove prefix
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: remove prefix
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: schellcheck
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: shellcheck
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: several script updates
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: remove main-prefix
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
2022-10-02 15:25:17 +02:00