Commit Graph
1599 Commits
Author SHA1 Message Date
dependabot[bot]andGitHub 6cf396e51b build(deps): bump jdx/mise-action from 4.2.0 to 4.2.3
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.2.0 to 4.2.3.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d...9e7f7633ff6f6d6048a9418a68d48f288f50eb14)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-29 06:48:25 +00:00
Jean-Philippe EvrardandGitHub ec37867496 Merge pull request #1398 from evrardjp/coherent-go-mod-and-mise-update 2026-07-29 08:46:47 +02:00
Jean-Philippe EvrardandGitHub 0d6693c653 Merge pull request #1394 from evrardjp/bundle-codeql 2026-07-29 08:46:30 +02:00
Jean-Philippe Evrard 253038c5d7 Bump codeql together
Without this, multiple codeql actions are bumped separately,
and there is a risk of failure like in [0][1][2].

[0]: https://github.com/kubereboot/kured/pull/1381
[1]: https://github.com/kubereboot/kured/pull/1384
[2]: https://github.com/kubereboot/kured/pull/1386

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-07-28 17:51:52 +02:00
Jean-Philippe Evrard 18d163a2b1 Ensure mise and go.mod are aligned
go.mod and the tool versions (here, mise) need to be in sync.
This creates a test to verify they are aligned.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-07-28 17:51:27 +02:00
Jean-Philippe EvrardandGitHub c2c263a646 Merge pull request #1396 from evrardjp/fix-CVE-2026-39822
fix CVE-2026-39822
2026-07-28 17:49:09 +02:00
Jean-Philippe Evrard 94806e8856 fix CVE-2026-39822
Without this, trivy will fail.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-07-28 11:28:11 +02:00
Jean-Philippe EvrardandGitHub 9a98d90e27 Merge pull request #1385 from evrardjp/update_contributing
Fix release process
2026-07-04 11:54:30 +02:00
Jean-Philippe EvrardandGitHub d70ee2978b Merge pull request #1382 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-4.2.0
build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
2026-07-03 18:56:25 +02:00
Jean-Philippe Evrard a2cafa4f4d Fix release process
We need to keep the previous process to merge broken manifests,
so that people git cloning at each TAG event will receive the
right manifest.

Without this, the update of the kured-ds and kured-ds-signal
happen by dependabot AFTER the release, so it means the tag
is NOT INCLUDING the right manifest.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-07-03 18:54:29 +02:00
dependabot[bot]andGitHub e45faee425 build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-03 16:37:30 +00:00
Jean-Philippe EvrardandGitHub 3993e90d6d Merge pull request #1383 from kubereboot/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.3
build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
2026-07-03 18:36:24 +02:00
Jean-Philippe EvrardandGitHub 863ce0a032 Merge pull request #1378 from dharsanb/add-release-footnotes
Update GoReleaser config to include footer with contribution details
2026-07-03 18:35:13 +02:00
Jean-Philippe EvrardandGitHub dd8e760ecd Merge pull request #1379 from kubereboot/dependabot/docker/kubereboot/kured-1.23.0
build(deps): bump kubereboot/kured from 1.22.1 to 1.23.0
2026-07-03 18:34:14 +02:00
Jean-Philippe EvrardandGitHub 4b5b1d0a66 Merge pull request #1380 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.2.0
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-07-03 18:32:15 +02:00
dependabot[bot]andGitHub a278d5bee5 build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 17:52:50 +00:00
dependabot[bot]andGitHub a1baec89fd build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be40b68a1882f3264fb8)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-01 17:52:36 +00:00
dependabot[bot]andGitHub b40c59caa8 build(deps): bump kubereboot/kured from 1.22.1 to 1.23.0
Bumps [kubereboot/kured](https://github.com/kubereboot/kured) from 1.22.1 to 1.23.0.
- [Release notes](https://github.com/kubereboot/kured/releases)
- [Commits](https://github.com/kubereboot/kured/compare/1.22.1...1.23.0)

---
updated-dependencies:
- dependency-name: kubereboot/kured
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-30 17:52:39 +00:00
Dharsan Baskar 9b1319e1b5 ci: update GoReleaser config to include footer with contribution details
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-30 17:14:09 +05:30
Jean-Philippe EvrardandGitHub ef3c90b2bd Merge pull request #1377 from kubereboot/update-gitignore-for-releases
Remove trivy cache from checkout folder
1.23.0
2026-06-30 13:27:32 +02:00
Jean-Philippe Evrard 32c87fc982 Remove trivy cache from checkout folder
The release process is producing a local image and scanning it
with trivy before continuing the process.

As trivy is by default having its cache in the checked out folder
for the code, the git repository ends up having content, and
considered dirty by goreleaser.

This is a problem, as goreleaser does not want to release if the
git tree is dirty.

This fixes it by ignoring all changes in .cache folder.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-30 13:11:58 +02:00
Jean-Philippe EvrardandGitHub b70c02ec3f Merge pull request #1376 from evrardjp/update_contributing_with_new_process
Update CONTRIBUTING guide with new instructions
2026-06-30 13:08:58 +02:00
Jean-Philippe Evrard 49e782a1c0 Update CONTRIBUTING guide with new instructions
Since we moved to two supported releases instead of 3, we only
have 2 sets of files for kind testing.

We missed updating the CONTRIBUTING guide for it.
This fixes it.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-30 12:41:03 +02:00
Jean-Philippe EvrardandGitHub a21f48bd79 Merge pull request #1374 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
2026-06-29 22:10:56 +02:00
dependabot[bot]andGitHub cc6f490671 build(deps): bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 18:22:09 +00:00
Jean-Philippe EvrardandGitHub 4800cf13b5 Merge pull request #1375 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 20:20:13 +02:00
Jean-Philippe EvrardandGitHub 344560b6b3 Merge pull request #1373 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3
build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
2026-06-29 20:19:59 +02:00
dependabot[bot]andGitHub 496c5061b1 build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/v4.1.0...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 17:52:56 +00:00
dependabot[bot]andGitHub 2c5e9b5009 build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 7.2.2 to 7.2.3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89...f06c13b6b1a9625abc9e6e439d9c05a8f2190e94)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 17:52:27 +00:00
Jean-Philippe EvrardandGitHub 22c0c14e88 Merge pull request #1367 from kubereboot/dependabot/go_modules/kubernetes-5d633567bd
build(deps): bump the kubernetes group with 4 updates
2026-06-29 18:58:32 +02:00
Jean-Philippe EvrardandGitHub 45543beb1e Merge pull request #1369 from kubereboot/dependabot/go_modules/all-a69d9c8a96
build(deps): bump github.com/prometheus/common from 0.68.1 to 0.69.0 in the all group
2026-06-29 18:58:00 +02:00
Jean-Philippe EvrardandGitHub f2c74b3890 Merge pull request #1363 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.19.4
build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4
2026-06-29 18:57:35 +02:00
Jean-Philippe EvrardandGitHub c775910f6d Merge pull request #1355 from evrardjp/improve_testing
Simplify testing
2026-06-29 18:57:05 +02:00
Jean-Philippe EvrardandGitHub 7c3712cc06 Merge pull request #1368 from kubereboot/dependabot/docker/alpine-3.24.1
build(deps): bump alpine from 3.24.0 to 3.24.1
2026-06-29 18:55:49 +02:00
Jean-Philippe EvrardandGitHub efdb3ab888 Merge pull request #1370 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 18:54:45 +02:00
Jean-Philippe EvrardandGitHub 31236bcec1 Merge pull request #1371 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
2026-06-29 18:54:22 +02:00
dependabot[bot]andGitHub 5e19c8ac21 build(deps): bump actions/checkout from 6.0.1 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-18 17:52:46 +00:00
dependabot[bot]andGitHub a9d8f3cf8e build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/dba19683ed58901619b14f395a24841710cb4925...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-18 17:52:24 +00:00
dependabot[bot]andGitHub 27101f28e5 build(deps): bump github.com/prometheus/common in the all group
Bumps the all group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-17 17:52:39 +00:00
dependabot[bot]andGitHub 1addff927e build(deps): bump alpine from 3.24.0 to 3.24.1
Bumps alpine from 3.24.0 to 3.24.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 17:52:35 +00:00
dependabot[bot]andGitHub 3ebe1b05d0 build(deps): bump the kubernetes group with 4 updates
Bumps the kubernetes group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl).


Updates `k8s.io/api` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2)

Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2)

Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2)

Updates `k8s.io/kubectl` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.36.1...v0.36.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/kubectl
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-15 17:53:10 +00:00
Jean-Philippe EvrardandGitHub 2a2efd2055 Merge pull request #1364 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.2 2026-06-11 23:24:38 +02:00
dependabot[bot]andGitHub 590101eb5f build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.2.2.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-11 16:29:26 +00:00
dependabot[bot]andGitHub 554421fd17 build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.19.4.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/v2.14.0...9af89fc71515a100421586dfdb3dc9c984fbf411)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-11 16:29:22 +00:00
Jean-Philippe EvrardandGitHub 0bd7cf300b Merge pull request #1362 from dharsanb/add-goreleaser-linting 2026-06-11 18:28:24 +02:00
Jean-Philippe EvrardandGitHub b037cae2e2 Merge pull request #1361 from dharsanb/fix-registry-image-name 2026-06-11 18:25:11 +02:00
Dharsan Baskar 162eb0a5f3 ci: unify YAML file extension to .yaml across config and workflows
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:57:28 +05:30
Dharsan Baskar 0f5cbf0b03 ci: add GoReleaser config verification on PRs and pushes
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:30:57 +05:30
Dharsan Baskar 5dcdc2874a chore: remove redundant DH_ORG environment variable and add registry as a configurable variable.
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:29:03 +05:30
Jean-Philippe EvrardandGitHub ca5b1015e8 Merge pull request #1358 from kubereboot/dependabot/github_actions/guyarb/golang-test-annoations-0.9.0
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
2026-06-10 20:17:58 +02:00