github/kured
1
0
Fork 0
mirror of https://github.com/kubereboot/kured.git synced 2026-08-19 11:26:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,577 Commits 14 Branches 50 Tags
32c87fc982ca74fbe7e7c7e4cd8648d5c5ad8613
Commit Graph
1577 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jean-Philippe Evrard 32c87fc982 Remove trivy cache from checkout folder 
The release process is producing a local image and scanning it
with trivy before continuing the process.

As trivy is by default having its cache in the checked out folder
for the code, the git repository ends up having content, and
considered dirty by goreleaser.

This is a problem, as goreleaser does not want to release if the
git tree is dirty.

This fixes it by ignoring all changes in .cache folder.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-30 13:11:58 +02:00
Jean-Philippe EvrardandGitHub a21f48bd79 Merge pull request #1374 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0 
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
 2026-06-29 22:10:56 +02:00
dependabot[bot]andGitHub cc6f490671 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 18:22:09 +00:00
Jean-Philippe EvrardandGitHub 4800cf13b5 Merge pull request #1375 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0 
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
 2026-06-29 20:20:13 +02:00
Jean-Philippe EvrardandGitHub 344560b6b3 Merge pull request #1373 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3 
build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
 2026-06-29 20:19:59 +02:00
dependabot[bot]andGitHub 496c5061b1 build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0 
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/v4.1.0...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 17:52:56 +00:00
dependabot[bot]andGitHub 2c5e9b5009 build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 7.2.2 to 7.2.3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89...f06c13b6b1a9625abc9e6e439d9c05a8f2190e94)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 17:52:27 +00:00
Jean-Philippe EvrardandGitHub 22c0c14e88 Merge pull request #1367 from kubereboot/dependabot/go_modules/kubernetes-5d633567bd 
build(deps): bump the kubernetes group with 4 updates
 2026-06-29 18:58:32 +02:00
Jean-Philippe EvrardandGitHub 45543beb1e Merge pull request #1369 from kubereboot/dependabot/go_modules/all-a69d9c8a96 
build(deps): bump github.com/prometheus/common from 0.68.1 to 0.69.0 in the all group
 2026-06-29 18:58:00 +02:00
Jean-Philippe EvrardandGitHub f2c74b3890 Merge pull request #1363 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.19.4 
build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4
 2026-06-29 18:57:35 +02:00
Jean-Philippe EvrardandGitHub c775910f6d Merge pull request #1355 from evrardjp/improve_testing 
Simplify testing
 2026-06-29 18:57:05 +02:00
Jean-Philippe EvrardandGitHub 7c3712cc06 Merge pull request #1368 from kubereboot/dependabot/docker/alpine-3.24.1 
build(deps): bump alpine from 3.24.0 to 3.24.1
 2026-06-29 18:55:49 +02:00
Jean-Philippe EvrardandGitHub efdb3ab888 Merge pull request #1370 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0 
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
 2026-06-29 18:54:45 +02:00
Jean-Philippe EvrardandGitHub 31236bcec1 Merge pull request #1371 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0 
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
 2026-06-29 18:54:22 +02:00
dependabot[bot]andGitHub 5e19c8ac21 build(deps): bump actions/checkout from 6.0.1 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 17:52:46 +00:00
dependabot[bot]andGitHub a9d8f3cf8e build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0 
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/dba19683ed58901619b14f395a24841710cb4925...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 17:52:24 +00:00
dependabot[bot]andGitHub 27101f28e5 build(deps): bump github.com/prometheus/common in the all group 
Bumps the all group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-17 17:52:39 +00:00
dependabot[bot]andGitHub 1addff927e build(deps): bump alpine from 3.24.0 to 3.24.1 
Bumps alpine from 3.24.0 to 3.24.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 17:52:35 +00:00
dependabot[bot]andGitHub 3ebe1b05d0 build(deps): bump the kubernetes group with 4 updates 
Bumps the kubernetes group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl).


Updates `k8s.io/api` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2)

Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2)

Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2)

Updates `k8s.io/kubectl` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.36.1...v0.36.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/kubectl
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-15 17:53:10 +00:00
Jean-Philippe EvrardandGitHub 2a2efd2055 Merge pull request #1364 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.2 2026-06-11 23:24:38 +02:00
dependabot[bot]andGitHub 590101eb5f build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.2.2.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-11 16:29:26 +00:00
dependabot[bot]andGitHub 554421fd17 build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.19.4.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/v2.14.0...9af89fc71515a100421586dfdb3dc9c984fbf411)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-11 16:29:22 +00:00
Jean-Philippe EvrardandGitHub 0bd7cf300b Merge pull request #1362 from dharsanb/add-goreleaser-linting 2026-06-11 18:28:24 +02:00
Jean-Philippe EvrardandGitHub b037cae2e2 Merge pull request #1361 from dharsanb/fix-registry-image-name 2026-06-11 18:25:11 +02:00
Dharsan Baskar 162eb0a5f3 ci: unify YAML file extension to .yaml across config and workflows 
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
 2026-06-11 13:57:28 +05:30
Dharsan Baskar 0f5cbf0b03 ci: add GoReleaser config verification on PRs and pushes 
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
 2026-06-11 13:30:57 +05:30
Dharsan Baskar 5dcdc2874a chore: remove redundant DH_ORG environment variable and add registry as a configurable variable. 
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
 2026-06-11 13:29:03 +05:30
Jean-Philippe EvrardandGitHub ca5b1015e8 Merge pull request #1358 from kubereboot/dependabot/github_actions/guyarb/golang-test-annoations-0.9.0 
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
 2026-06-10 20:17:58 +02:00
Jean-Philippe EvrardandGitHub 6ca6544ff3 Merge pull request #1357 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.1.0 
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
 2026-06-10 20:17:35 +02:00
Jean-Philippe EvrardandGitHub a325fdcdb9 Merge pull request #1360 from kubereboot/dependabot/docker/alpine-3.24.0 
build(deps): bump alpine from 3.23.4 to 3.24.0
 2026-06-10 20:09:36 +02:00
Jean-Philippe Evrard 48999c3d86 tests: Cleanup the test matrix for readability 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-10 20:04:41 +02:00
Jean-Philippe Evrard 8830c0bc9d Add github actions linting 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-10 20:04:41 +02:00
dependabot[bot]andGitHub 31a1b86966 build(deps): bump alpine from 3.23.4 to 3.24.0 
Bumps alpine from 3.23.4 to 3.24.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-10 17:52:42 +00:00
dependabot[bot]andGitHub c0db37c164 build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0 
Bumps [guyarb/golang-test-annoations](https://github.com/guyarb/golang-test-annoations) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/guyarb/golang-test-annoations/releases)
- [Commits](https://github.com/guyarb/golang-test-annoations/compare/2941118d7ef622b1b3771d1ff6eae9e90659eb26...96fc379b171c49932041d6c789e73331a7bdeec1)

---
updated-dependencies:
- dependency-name: guyarb/golang-test-annoations
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-10 11:40:12 +00:00
dependabot[bot]andGitHub 260a3162af build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-10 11:40:09 +00:00
Jean-Philippe EvrardandGitHub d5e9a2e912 Merge pull request #1348 from evrardjp/bump-goreleaser 2026-06-10 13:38:24 +02:00
Jean-Philippe EvrardandGitHub 17f61232c9 Merge pull request #1350 from kubereboot/dependabot/go_modules/all-67dfae0cad 
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the all group across 1 directory
 2026-06-09 11:10:08 +02:00
dependabot[bot]andGitHub bcacba1c95 build(deps): bump github.com/prometheus/common 
Bumps the all group with 1 update in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/common` from 0.68.0 to 0.68.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.68.0...v0.68.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 08:54:42 +00:00
Jean-Philippe Evrard 315d8e0475 Add github release changelog text generation 
Without this, we will not produce text that is basically exactly
what we do.

By using goreleaser github-native method, we will also generate
the usual changelog.

The only remaining part would be to edit it for the extra manual
messages we add.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:49:54 +02:00
Jean-Philippe Evrard 2a23325b81 chore(tests): Cleanup test matrix 
There is no point of having a more complex series of jobs.
This puts all the manifests testing cases into one kind of
pipeline, simplifying debugging.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:25:47 +02:00
Jean-Philippe Evrard b91831b9bb Migrate mise config file 
Now that we have a .config folder, we can move mise into such
folder, to clean up the root of the directory

We therefore fix the contributing guide link with new location.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:20:08 +02:00
Jean-Philippe Evrard c36ae33c67 fix: stop building main branch containers 
Without this, we will continue building and storing artifacts
that are used by less than 10% of our community. This means
maintaining different workflows and complicates goreleaser
for really no reason.

If someone has a strong opposition to this practice, please
tell me, I will revert this commit.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:20:06 +02:00
Jean-Philippe Evrard 51903f1364 cleanup more of the makefile 
We remove a step that is now useless.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:19:06 +02:00
Jean-Philippe Evrard e531f64b85 feat(release): let GoReleaser manage artifacts 
GoReleaser now builds the multi-arch images,
publishes SBOM/provenance metadata, signs image digests, and attaches
the generated combined Kubernetes manifest to tagged GitHub releases.

This is to have goReleaser as a single point of work for release
automation. With this, so tags and main commits follow one consistent
image pipeline.

We keep the CI and developer image builds intentionally local.
PR, periodic, main, and tag scan jobs build only `kured:dev` and scan that
local image with Trivy, which avoids pushing disposable images and keeps
the tested image identical to the one used by kind-based e2e tests.

Simplify the Makefile around the remaining artifact boundaries: `build` for a
local GoReleaser binary build, `dev-image` for local Docker/e2e/scan use, and
`release` for the GoReleaser publish path. Remove the old manual manifest
target because the release manifest is now generated during the tagged release
flow.

To avoid a mess with all the configuration files, I move everything into
a `.config` folder, for the tools supporting it.

This also meant updating golangci-lint to a valid v2 config, and simplify
the Dockerfile to the layout expected by GoReleaser `dockers_v2`
using `TARGETPLATFORM`.

Handle Prometheus client initialization errors explicitly so the stricter
errcheck configuration keeps the existing fail-closed reboot-blocking behavior,
to fix the golangci-lint issue that appeared.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:19:04 +02:00
Jean-Philippe Evrard 52114a1245 Bump goreleaser 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:16:56 +02:00
Jean-Philippe EvrardandGitHub 20b968b224 Merge pull request #1353 from kubereboot/dependabot/github_actions/docker/login-action-4.2.0 
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
 2026-06-09 09:12:56 +02:00
Jean-Philippe EvrardandGitHub 3d5d2865c9 Merge pull request #1354 from kubereboot/dependabot/github_actions/actions/checkout-6.0.3 
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
 2026-06-09 09:11:34 +02:00
Jean-Philippe EvrardandGitHub b1f9863507 Merge pull request #1351 from kubereboot/dependabot/github_actions/jdx/mise-action-4.1.0 
build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0
 2026-06-09 09:11:05 +02:00
Jean-Philippe EvrardandGitHub 5a73db1268 Merge pull request #1352 from kubereboot/dependabot/github_actions/actions/stale-10.3.0 
build(deps): bump actions/stale from 10.2.0 to 10.3.0
 2026-06-09 09:10:35 +02:00
dependabot[bot]andGitHub 4b8283b86e build(deps): bump actions/checkout from 6.0.2 to 6.0.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 17:52:54 +00:00