Jean-Philippe Evrard
a2cafa4f4d
Fix release process
...
We need to keep the previous process to merge broken manifests,
so that people git cloning at each TAG event will receive the
right manifest.
Without this, the update of the kured-ds and kured-ds-signal
happen by dependabot AFTER the release, so it means the tag
is NOT INCLUDING the right manifest.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-07-03 18:54:29 +02:00
Jean-Philippe Evrard and GitHub
3993e90d6d
Merge pull request #1383 from kubereboot/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.3
...
build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
2026-07-03 18:36:24 +02:00
Jean-Philippe Evrard and GitHub
863ce0a032
Merge pull request #1378 from dharsanb/add-release-footnotes
...
Update GoReleaser config to include footer with contribution details
2026-07-03 18:35:13 +02:00
Jean-Philippe Evrard and GitHub
dd8e760ecd
Merge pull request #1379 from kubereboot/dependabot/docker/kubereboot/kured-1.23.0
...
build(deps): bump kubereboot/kured from 1.22.1 to 1.23.0
2026-07-03 18:34:14 +02:00
Jean-Philippe Evrard and GitHub
4b5b1d0a66
Merge pull request #1380 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.2.0
...
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-07-03 18:32:15 +02:00
dependabot[bot] and GitHub
a278d5bee5
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:52:50 +00:00
dependabot[bot] and GitHub
a1baec89fd
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be40b68a1882f3264fb8 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 17:52:36 +00:00
dependabot[bot] and GitHub
b40c59caa8
build(deps): bump kubereboot/kured from 1.22.1 to 1.23.0
...
Bumps [kubereboot/kured](https://github.com/kubereboot/kured ) from 1.22.1 to 1.23.0.
- [Release notes](https://github.com/kubereboot/kured/releases )
- [Commits](https://github.com/kubereboot/kured/compare/1.22.1...1.23.0 )
---
updated-dependencies:
- dependency-name: kubereboot/kured
dependency-version: 1.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-30 17:52:39 +00:00
Dharsan Baskar
9b1319e1b5
ci: update GoReleaser config to include footer with contribution details
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-30 17:14:09 +05:30
Jean-Philippe Evrard and GitHub
ef3c90b2bd
Merge pull request #1377 from kubereboot/update-gitignore-for-releases
...
Remove trivy cache from checkout folder
1.23.0
2026-06-30 13:27:32 +02:00
Jean-Philippe Evrard
32c87fc982
Remove trivy cache from checkout folder
...
The release process is producing a local image and scanning it
with trivy before continuing the process.
As trivy is by default having its cache in the checked out folder
for the code, the git repository ends up having content, and
considered dirty by goreleaser.
This is a problem, as goreleaser does not want to release if the
git tree is dirty.
This fixes it by ignoring all changes in .cache folder.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-30 13:11:58 +02:00
Jean-Philippe Evrard and GitHub
b70c02ec3f
Merge pull request #1376 from evrardjp/update_contributing_with_new_process
...
Update CONTRIBUTING guide with new instructions
2026-06-30 13:08:58 +02:00
Jean-Philippe Evrard
49e782a1c0
Update CONTRIBUTING guide with new instructions
...
Since we moved to two supported releases instead of 3, we only
have 2 sets of files for kind testing.
We missed updating the CONTRIBUTING guide for it.
This fixes it.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-30 12:41:03 +02:00
Jean-Philippe Evrard and GitHub
a21f48bd79
Merge pull request #1374 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
2026-06-29 22:10:56 +02:00
dependabot[bot] and GitHub
cc6f490671
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 18:22:09 +00:00
Jean-Philippe Evrard and GitHub
4800cf13b5
Merge pull request #1375 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
...
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 20:20:13 +02:00
Jean-Philippe Evrard and GitHub
344560b6b3
Merge pull request #1373 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3
...
build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
2026-06-29 20:19:59 +02:00
dependabot[bot] and GitHub
496c5061b1
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
...
Bumps [jdx/mise-action](https://github.com/jdx/mise-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases )
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jdx/mise-action/compare/v4.1.0...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d )
---
updated-dependencies:
- dependency-name: jdx/mise-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 17:52:56 +00:00
dependabot[bot] and GitHub
2c5e9b5009
build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 7.2.2 to 7.2.3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89...f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-version: 7.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 17:52:27 +00:00
Jean-Philippe Evrard and GitHub
22c0c14e88
Merge pull request #1367 from kubereboot/dependabot/go_modules/kubernetes-5d633567bd
...
build(deps): bump the kubernetes group with 4 updates
2026-06-29 18:58:32 +02:00
Jean-Philippe Evrard and GitHub
45543beb1e
Merge pull request #1369 from kubereboot/dependabot/go_modules/all-a69d9c8a96
...
build(deps): bump github.com/prometheus/common from 0.68.1 to 0.69.0 in the all group
2026-06-29 18:58:00 +02:00
Jean-Philippe Evrard and GitHub
f2c74b3890
Merge pull request #1363 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.19.4
...
build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4
2026-06-29 18:57:35 +02:00
Jean-Philippe Evrard and GitHub
c775910f6d
Merge pull request #1355 from evrardjp/improve_testing
...
Simplify testing
2026-06-29 18:57:05 +02:00
Jean-Philippe Evrard and GitHub
7c3712cc06
Merge pull request #1368 from kubereboot/dependabot/docker/alpine-3.24.1
...
build(deps): bump alpine from 3.24.0 to 3.24.1
2026-06-29 18:55:49 +02:00
Jean-Philippe Evrard and GitHub
efdb3ab888
Merge pull request #1370 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
...
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 18:54:45 +02:00
Jean-Philippe Evrard and GitHub
31236bcec1
Merge pull request #1371 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
2026-06-29 18:54:22 +02:00
dependabot[bot] and GitHub
5e19c8ac21
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-18 17:52:46 +00:00
dependabot[bot] and GitHub
a9d8f3cf8e
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
...
Bumps [jdx/mise-action](https://github.com/jdx/mise-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases )
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jdx/mise-action/compare/dba19683ed58901619b14f395a24841710cb4925...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d )
---
updated-dependencies:
- dependency-name: jdx/mise-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-18 17:52:24 +00:00
dependabot[bot] and GitHub
27101f28e5
build(deps): bump github.com/prometheus/common in the all group
...
Bumps the all group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common ).
Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:52:39 +00:00
dependabot[bot] and GitHub
1addff927e
build(deps): bump alpine from 3.24.0 to 3.24.1
...
Bumps alpine from 3.24.0 to 3.24.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.24.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-16 17:52:35 +00:00
dependabot[bot] and GitHub
3ebe1b05d0
build(deps): bump the kubernetes group with 4 updates
...
Bumps the kubernetes group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api ), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ), [k8s.io/client-go](https://github.com/kubernetes/client-go ) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl ).
Updates `k8s.io/api` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2 )
Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2 )
Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2 )
Updates `k8s.io/kubectl` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.36.1...v0.36.2 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
- dependency-name: k8s.io/client-go
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
- dependency-name: k8s.io/kubectl
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-15 17:53:10 +00:00
Jean-Philippe Evrard and GitHub
2a2efd2055
Merge pull request #1364 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.2
2026-06-11 23:24:38 +02:00
dependabot[bot] and GitHub
590101eb5f
build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 6.4.0 to 7.2.2.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-version: 7.2.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 16:29:26 +00:00
dependabot[bot] and GitHub
554421fd17
build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.14.0 to 2.19.4.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/v2.14.0...9af89fc71515a100421586dfdb3dc9c984fbf411 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.19.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 16:29:22 +00:00
Jean-Philippe Evrard and GitHub
0bd7cf300b
Merge pull request #1362 from dharsanb/add-goreleaser-linting
2026-06-11 18:28:24 +02:00
Jean-Philippe Evrard and GitHub
b037cae2e2
Merge pull request #1361 from dharsanb/fix-registry-image-name
2026-06-11 18:25:11 +02:00
Dharsan Baskar
162eb0a5f3
ci: unify YAML file extension to .yaml across config and workflows
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-11 13:57:28 +05:30
Dharsan Baskar
0f5cbf0b03
ci: add GoReleaser config verification on PRs and pushes
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-11 13:30:57 +05:30
Dharsan Baskar
5dcdc2874a
chore: remove redundant DH_ORG environment variable and add registry as a configurable variable.
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-11 13:29:03 +05:30
Jean-Philippe Evrard and GitHub
ca5b1015e8
Merge pull request #1358 from kubereboot/dependabot/github_actions/guyarb/golang-test-annoations-0.9.0
...
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
2026-06-10 20:17:58 +02:00
Jean-Philippe Evrard and GitHub
6ca6544ff3
Merge pull request #1357 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.1.0
...
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
2026-06-10 20:17:35 +02:00
Jean-Philippe Evrard and GitHub
a325fdcdb9
Merge pull request #1360 from kubereboot/dependabot/docker/alpine-3.24.0
...
build(deps): bump alpine from 3.23.4 to 3.24.0
2026-06-10 20:09:36 +02:00
Jean-Philippe Evrard
48999c3d86
tests: Cleanup the test matrix for readability
...
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-10 20:04:41 +02:00
Jean-Philippe Evrard
8830c0bc9d
Add github actions linting
...
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-10 20:04:41 +02:00
dependabot[bot] and GitHub
31a1b86966
build(deps): bump alpine from 3.23.4 to 3.24.0
...
Bumps alpine from 3.23.4 to 3.24.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 17:52:42 +00:00
dependabot[bot] and GitHub
c0db37c164
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
...
Bumps [guyarb/golang-test-annoations](https://github.com/guyarb/golang-test-annoations ) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/guyarb/golang-test-annoations/releases )
- [Commits](https://github.com/guyarb/golang-test-annoations/compare/2941118d7ef622b1b3771d1ff6eae9e90659eb26...96fc379b171c49932041d6c789e73331a7bdeec1 )
---
updated-dependencies:
- dependency-name: guyarb/golang-test-annoations
dependency-version: 0.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 11:40:12 +00:00
dependabot[bot] and GitHub
260a3162af
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 11:40:09 +00:00
Jean-Philippe Evrard and GitHub
d5e9a2e912
Merge pull request #1348 from evrardjp/bump-goreleaser
2026-06-10 13:38:24 +02:00
Jean-Philippe Evrard and GitHub
17f61232c9
Merge pull request #1350 from kubereboot/dependabot/go_modules/all-67dfae0cad
...
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the all group across 1 directory
2026-06-09 11:10:08 +02:00
dependabot[bot] and GitHub
bcacba1c95
build(deps): bump github.com/prometheus/common
...
Bumps the all group with 1 update in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common ).
Updates `github.com/prometheus/common` from 0.68.0 to 0.68.1
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/common/compare/v0.68.0...v0.68.1 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-version: 0.68.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 08:54:42 +00:00