dependabot[bot] and GitHub
27101f28e5
build(deps): bump github.com/prometheus/common in the all group
...
Bumps the all group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common ).
Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:52:39 +00:00
Jean-Philippe Evrard and GitHub
2a2efd2055
Merge pull request #1364 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.2
2026-06-11 23:24:38 +02:00
dependabot[bot] and GitHub
590101eb5f
build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 6.4.0 to 7.2.2.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-version: 7.2.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 16:29:26 +00:00
Jean-Philippe Evrard and GitHub
0bd7cf300b
Merge pull request #1362 from dharsanb/add-goreleaser-linting
2026-06-11 18:28:24 +02:00
Jean-Philippe Evrard and GitHub
b037cae2e2
Merge pull request #1361 from dharsanb/fix-registry-image-name
2026-06-11 18:25:11 +02:00
Dharsan Baskar
162eb0a5f3
ci: unify YAML file extension to .yaml across config and workflows
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-11 13:57:28 +05:30
Dharsan Baskar
0f5cbf0b03
ci: add GoReleaser config verification on PRs and pushes
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-11 13:30:57 +05:30
Dharsan Baskar
5dcdc2874a
chore: remove redundant DH_ORG environment variable and add registry as a configurable variable.
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-11 13:29:03 +05:30
Jean-Philippe Evrard and GitHub
ca5b1015e8
Merge pull request #1358 from kubereboot/dependabot/github_actions/guyarb/golang-test-annoations-0.9.0
...
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
2026-06-10 20:17:58 +02:00
Jean-Philippe Evrard and GitHub
6ca6544ff3
Merge pull request #1357 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.1.0
...
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
2026-06-10 20:17:35 +02:00
Jean-Philippe Evrard and GitHub
a325fdcdb9
Merge pull request #1360 from kubereboot/dependabot/docker/alpine-3.24.0
...
build(deps): bump alpine from 3.23.4 to 3.24.0
2026-06-10 20:09:36 +02:00
dependabot[bot] and GitHub
31a1b86966
build(deps): bump alpine from 3.23.4 to 3.24.0
...
Bumps alpine from 3.23.4 to 3.24.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 17:52:42 +00:00
dependabot[bot] and GitHub
c0db37c164
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
...
Bumps [guyarb/golang-test-annoations](https://github.com/guyarb/golang-test-annoations ) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/guyarb/golang-test-annoations/releases )
- [Commits](https://github.com/guyarb/golang-test-annoations/compare/2941118d7ef622b1b3771d1ff6eae9e90659eb26...96fc379b171c49932041d6c789e73331a7bdeec1 )
---
updated-dependencies:
- dependency-name: guyarb/golang-test-annoations
dependency-version: 0.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 11:40:12 +00:00
dependabot[bot] and GitHub
260a3162af
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 11:40:09 +00:00
Jean-Philippe Evrard and GitHub
d5e9a2e912
Merge pull request #1348 from evrardjp/bump-goreleaser
2026-06-10 13:38:24 +02:00
Jean-Philippe Evrard and GitHub
17f61232c9
Merge pull request #1350 from kubereboot/dependabot/go_modules/all-67dfae0cad
...
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the all group across 1 directory
2026-06-09 11:10:08 +02:00
dependabot[bot] and GitHub
bcacba1c95
build(deps): bump github.com/prometheus/common
...
Bumps the all group with 1 update in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common ).
Updates `github.com/prometheus/common` from 0.68.0 to 0.68.1
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/common/compare/v0.68.0...v0.68.1 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-version: 0.68.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 08:54:42 +00:00
Jean-Philippe Evrard
315d8e0475
Add github release changelog text generation
...
Without this, we will not produce text that is basically exactly
what we do.
By using goreleaser github-native method, we will also generate
the usual changelog.
The only remaining part would be to edit it for the extra manual
messages we add.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:49:54 +02:00
Jean-Philippe Evrard
2a23325b81
chore(tests): Cleanup test matrix
...
There is no point of having a more complex series of jobs.
This puts all the manifests testing cases into one kind of
pipeline, simplifying debugging.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:25:47 +02:00
Jean-Philippe Evrard
b91831b9bb
Migrate mise config file
...
Now that we have a .config folder, we can move mise into such
folder, to clean up the root of the directory
We therefore fix the contributing guide link with new location.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:20:08 +02:00
Jean-Philippe Evrard
c36ae33c67
fix: stop building main branch containers
...
Without this, we will continue building and storing artifacts
that are used by less than 10% of our community. This means
maintaining different workflows and complicates goreleaser
for really no reason.
If someone has a strong opposition to this practice, please
tell me, I will revert this commit.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:20:06 +02:00
Jean-Philippe Evrard
51903f1364
cleanup more of the makefile
...
We remove a step that is now useless.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:19:06 +02:00
Jean-Philippe Evrard
e531f64b85
feat(release): let GoReleaser manage artifacts
...
GoReleaser now builds the multi-arch images,
publishes SBOM/provenance metadata, signs image digests, and attaches
the generated combined Kubernetes manifest to tagged GitHub releases.
This is to have goReleaser as a single point of work for release
automation. With this, so tags and main commits follow one consistent
image pipeline.
We keep the CI and developer image builds intentionally local.
PR, periodic, main, and tag scan jobs build only `kured:dev` and scan that
local image with Trivy, which avoids pushing disposable images and keeps
the tested image identical to the one used by kind-based e2e tests.
Simplify the Makefile around the remaining artifact boundaries: `build` for a
local GoReleaser binary build, `dev-image` for local Docker/e2e/scan use, and
`release` for the GoReleaser publish path. Remove the old manual manifest
target because the release manifest is now generated during the tagged release
flow.
To avoid a mess with all the configuration files, I move everything into
a `.config` folder, for the tools supporting it.
This also meant updating golangci-lint to a valid v2 config, and simplify
the Dockerfile to the layout expected by GoReleaser `dockers_v2`
using `TARGETPLATFORM`.
Handle Prometheus client initialization errors explicitly so the stricter
errcheck configuration keeps the existing fail-closed reboot-blocking behavior,
to fix the golangci-lint issue that appeared.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:19:04 +02:00
Jean-Philippe Evrard
52114a1245
Bump goreleaser
...
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-09 09:16:56 +02:00
Jean-Philippe Evrard and GitHub
20b968b224
Merge pull request #1353 from kubereboot/dependabot/github_actions/docker/login-action-4.2.0
...
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
2026-06-09 09:12:56 +02:00
Jean-Philippe Evrard and GitHub
3d5d2865c9
Merge pull request #1354 from kubereboot/dependabot/github_actions/actions/checkout-6.0.3
...
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
2026-06-09 09:11:34 +02:00
Jean-Philippe Evrard and GitHub
b1f9863507
Merge pull request #1351 from kubereboot/dependabot/github_actions/jdx/mise-action-4.1.0
...
build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0
2026-06-09 09:11:05 +02:00
Jean-Philippe Evrard and GitHub
5a73db1268
Merge pull request #1352 from kubereboot/dependabot/github_actions/actions/stale-10.3.0
...
build(deps): bump actions/stale from 10.2.0 to 10.3.0
2026-06-09 09:10:35 +02:00
dependabot[bot] and GitHub
4b8283b86e
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 17:52:54 +00:00
dependabot[bot] and GitHub
4f624f7421
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 17:52:45 +00:00
dependabot[bot] and GitHub
c5cb3b84a8
build(deps): bump actions/stale from 10.2.0 to 10.3.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 17:52:42 +00:00
dependabot[bot] and GitHub
df57174e94
build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0
...
Bumps [jdx/mise-action](https://github.com/jdx/mise-action ) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/jdx/mise-action/releases )
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jdx/mise-action/compare/1648a7812b9aeae629881980618f079932869151...dba19683ed58901619b14f395a24841710cb4925 )
---
updated-dependencies:
- dependency-name: jdx/mise-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 17:52:38 +00:00
Jean-Philippe Evrard and GitHub
f273b466cf
Merge pull request #1344 from evrardjp/bump-to-next-kubernetes-version
...
Update Kured to latest kubernetes modules
2026-06-08 19:43:24 +02:00
Jean-Philippe Evrard
b7f127b7ba
Update Kured to latest kubernetes modules
...
Now that a new kind version is released supporting 1.36,
we can use it for our CI testing.
This commit:
- Bumps the kind version and its images to support the 1.36
- Ensure all the API calls are done with client-go 0.36
(and dependent k8s deps), to allow future 1.37 release.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-08 19:03:13 +02:00
Jean-Philippe Evrard and GitHub
27441b539a
Merge pull request #1347 from evrardjp/bump-golangci-lint
...
Bump golangci lint
2026-06-08 15:55:51 +02:00
Jean-Philippe Evrard
896ee8d183
chore: Quick fix to pass linters
...
This whole block should be refactored, but this will be done
inside v2.
At the same time, it should not block the golangci-lint, so
I did exactly what the golangci lint wanted to have.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-08 15:19:48 +02:00
Jean-Philippe Evrard and GitHub
a344db3f6a
Merge pull request #1346 from evrardjp/freeze-mise
...
Revert "chore: Bump mise"
2026-06-08 15:17:25 +02:00
Jean-Philippe Evrard
45bd82c4ba
Bump golangci-lint
...
This will allow to bump golang to 1.26 without issues.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-08 15:11:37 +02:00
Jean-Philippe Evrard
aa5e79531b
Revert "chore: Bump mise"
...
This reverts the implementation of the bump mise, done
with commit 5c8754ceb2 .
Instead of unfreezing the mise version completely, which could
expose us to supply chain attacks, we simply bump the version
manually.
It means we will have to fix the drift of mise versions using
another tool, as dependabot does not do it.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-08 14:41:25 +02:00
Jean-Philippe Evrard and GitHub
b5fc952a32
Merge pull request #1345 from evrardjp/unfreeze-mise
...
chore: Bump mise
2026-06-08 14:11:44 +02:00
Jean-Philippe Evrard
5c8754ceb2
chore: Bump mise
...
Without this, mise will be stuck to a pre-defined version.
This auto bumps mise and will bump versions. It should not
be damaging for CI (quite the opposite, we will benefit
from cache).
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-08 14:02:01 +02:00
Jean-Philippe Evrard and GitHub
5e3699d68d
Merge pull request #1343 from kubereboot/prepare-release-1.22.1
...
chore: update release
1.22.1
2026-06-08 13:16:12 +02:00
Jean-Philippe Evrard
89902251e2
chore: update release
...
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-08 13:05:42 +02:00
Jean-Philippe Evrard and GitHub
73712baba7
Merge pull request #1342 from evrardjp/get_rid_of_setup_go
...
Remove setup-go
2026-06-08 12:51:20 +02:00
Jean-Philippe Evrard and GitHub
3549e4475d
Merge pull request #1335 from kubereboot/dependabot/github_actions/docker/build-push-action-7.2.0
...
build(deps): bump docker/build-push-action from 7.0.0 to 7.2.0
2026-06-08 12:51:01 +02:00
Jean-Philippe Evrard and GitHub
35d0dea4f7
Merge pull request #1334 from kubereboot/dependabot/github_actions/aquasecurity/trivy-action-0.36.0
...
build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
2026-06-08 12:50:45 +02:00
Jean-Philippe Evrard and GitHub
42462f1ec8
Merge pull request #1333 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-4.1.0
...
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
2026-06-08 12:50:28 +02:00
Jean-Philippe Evrard and GitHub
3e8d5eaba4
Merge pull request #1332 from kubereboot/dependabot/github_actions/github/codeql-action-4.36.0
...
build(deps): bump github/codeql-action from 4.35.1 to 4.36.2
2026-06-08 12:50:05 +02:00
dependabot[bot] and GitHub
3b36f05a58
build(deps): bump docker/build-push-action from 7.0.0 to 7.2.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 7.0.0 to 7.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...f9f3042f7e2789586610d6e8b85c8f03e5195baf )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 10:29:39 +00:00
dependabot[bot] and GitHub
c2da96ecb8
build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/57a97c7e7821a5776cebc9bb87c984fa69cba8f1...ed142fd0673e97e23eac54620cfb913e5ce36c25 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 10:29:32 +00:00