github/kured
1
0
Fork 0
mirror of https://github.com/kubereboot/kured.git synced 2026-08-20 11:56:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,483 Commits 14 Branches 50 Tags
afa59056b4e917ae7a2197b6046ce580c4fd3c97
Commit Graph
1483 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jean-Philippe EvrardandGitHub afa59056b4 Merge pull request #1319 from kubereboot/dependabot/github_actions/docker/login-action-4.1.0 
build(deps): bump docker/login-action from 4.0.0 to 4.1.0
 2026-05-26 10:32:58 +02:00
Jean-Philippe EvrardandGitHub 086b3eee01 Merge pull request #1304 from kubereboot/dependabot/github_actions/actions/dependency-review-action-4.9.0 
build(deps): bump actions/dependency-review-action from 4.8.1 to 4.9.0
 2026-05-26 10:31:52 +02:00
dependabot[bot]andGitHub cb06421abb build(deps): bump docker/login-action from 4.0.0 to 4.1.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 18:06:54 +00:00
Jean-Philippe EvrardandGitHub 117dc5d185 Merge pull request #1310 from kubereboot/dependabot/docker/alpine-3.23.4 2026-04-23 05:46:37 +02:00
Jean-Philippe EvrardandGitHub 646c31f56e Merge pull request #1311 from kubereboot/dependabot/go_modules/k8s.io/kubectl-0.35.4 2026-04-23 05:46:06 +02:00
Jean-Philippe EvrardandGitHub 5f33b41235 Merge pull request #1307 from kubereboot/dependabot/github_actions/actions/stale-10.2.0 2026-04-23 05:44:05 +02:00
Jean-Philippe EvrardandGitHub da63cfe7d0 Merge pull request #1308 from kubereboot/dependabot/github_actions/github/codeql-action-4.35.1 2026-04-23 05:42:31 +02:00
Jean-Philippe EvrardandGitHub a8576cbbbe Merge pull request #1305 from kubereboot/dependabot/github_actions/docker/login-action-4.0.0 2026-04-23 05:39:31 +02:00
dependabot[bot]andGitHub 00898d8814 build(deps): bump k8s.io/kubectl from 0.35.3 to 0.35.4 
Bumps [k8s.io/kubectl](https://github.com/kubernetes/kubectl) from 0.35.3 to 0.35.4.
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.35.3...v0.35.4)

---
updated-dependencies:
- dependency-name: k8s.io/kubectl
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 17:53:08 +00:00
dependabot[bot]andGitHub 68a0bcc376 build(deps): bump alpine from 3.23.3 to 3.23.4 
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 17:52:57 +00:00
dependabot[bot]andGitHub fcaf85cff6 build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 17:54:16 +00:00
dependabot[bot]andGitHub e2d4455cf0 build(deps): bump actions/stale from 10.1.0 to 10.2.0 
Bumps [actions/stale](https://github.com/actions/stale) from 10.1.0 to 10.2.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/5f858e3efba33a5ca4407a664cc011ad407f2008...b5d41d4e1d5dceea10e7104786b73624c18a190f)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 17:53:27 +00:00
dependabot[bot]andGitHub 9bdb304231 build(deps): bump docker/login-action from 3.7.0 to 4.0.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.0.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/c94ce9fb468520275223c153574b00df6fe4bcc9...b45d80f862d83dbcd57f89517bcf500b2ab88fb2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 17:53:04 +00:00
dependabot[bot]andGitHub 30c4ed0835 build(deps): bump actions/dependency-review-action from 4.8.1 to 4.9.0 
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.8.1 to 4.9.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/40c09b7dc99638e5ddb0bfd91c1673effc064d8a...2031cfc080254a8a887f58cffee85186f0e49e48)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 17:52:59 +00:00
Jean-Philippe EvrardandGitHub 08b436aeed Merge pull request #1303 from evrardjp/update-comment 
Update upload-artifact comment
 2026-03-26 04:22:29 +01:00
Jean-Philippe Evrard 99ada00506 Update upload-artifact comment 
Fixes dependabot incorrect comment update in PR#1299

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-03-26 03:59:14 +01:00
Jean-Philippe EvrardandGitHub 66cf0ccc5d Merge pull request #1299 from kubereboot/dependabot/github_actions/actions/upload-artifact-7.0.0 
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
 2026-03-26 03:56:26 +01:00
Jean-Philippe EvrardandGitHub b18f7398eb Merge pull request #1298 from kubereboot/dependabot/github_actions/lycheeverse/lychee-action-2.8.0 
build(deps): bump lycheeverse/lychee-action from 2.7.0 to 2.8.0
 2026-03-26 03:53:50 +01:00
Jean-Philippe EvrardandGitHub 6bd56b8dc5 Merge pull request #1300 from kubereboot/dependabot/github_actions/jdx/mise-action-4.0.1 
build(deps): bump jdx/mise-action from 3.6.1 to 4.0.1
 2026-03-26 03:52:49 +01:00
Jean-Philippe EvrardandGitHub 157d027d6c Merge pull request #1301 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.0.0 
build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0
 2026-03-26 03:51:40 +01:00
Jean-Philippe EvrardandGitHub ebbca87f4e Merge pull request #1302 from kubereboot/dependabot/github_actions/docker/metadata-action-6.0.0 
build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0
 2026-03-26 03:51:14 +01:00
dependabot[bot]andGitHub 1ac5bd69bf build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/c299e40c65443455700f0fdfc63efafe5b349051...030e881283bb7a6894de51c315a6bfe6a94e05cf)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-24 17:53:25 +00:00
dependabot[bot]andGitHub 20168b53cc build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.7.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/c7c53464625b32c7a7e944ae62b3e17d2b600130...ce360397dd3f832beb865e1373c09c0e9f86d70a)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-24 17:53:20 +00:00
dependabot[bot]andGitHub da72996abe build(deps): bump jdx/mise-action from 3.6.1 to 4.0.1 
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 3.6.1 to 4.0.1.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/6d1e696aa24c1aa1bcc1adea0212707c71ab78a8...1648a7812b9aeae629881980618f079932869151)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-24 17:53:13 +00:00
dependabot[bot]andGitHub 757cb25fe8 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-24 17:53:01 +00:00
dependabot[bot]andGitHub 72b55a5ed4 build(deps): bump lycheeverse/lychee-action from 2.7.0 to 2.8.0 
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](https://github.com/lycheeverse/lychee-action/compare/a8c4c7cb88f0c7386610c35eb25108e448569cb0...8646ba30535128ac92d33dfc9133794bfdd9b411)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-24 17:52:57 +00:00
Jean-Philippe EvrardandGitHub 334fb5f99c Merge pull request #1289 from evrardjp/include-comment-for-dependabot 
Fix dependabot bumping
 2026-03-24 09:58:48 +01:00
Jean-Philippe Evrard ee13c5c40a Unpin actions to fix dependabot bumping 
Since September 2025, dependabot does not update some actions
anymore. Putting in a comment the _version tag_ (next to the
sha) make it clear that the intent is not to pin and should
allow further bumping by dependabot.

This was not necessary in the past and seem required now.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-03-24 09:50:55 +01:00
Jean-Philippe EvrardandGitHub 01317d3e0a Merge pull request #1293 from kubereboot/dependabot/github_actions/github/codeql-action-4.34.1 2026-03-23 22:20:50 +01:00
Jean-Philippe EvrardandGitHub 25951e7834 Merge pull request #1285 from kubereboot/dependabot/github_actions/actions/checkout-6.0.2 2026-03-23 22:18:55 +01:00
Jean-Philippe EvrardandGitHub 4e4371b81a Merge pull request #1292 from kubereboot/dependabot/go_modules/k8s.io/kubectl-0.35.3 2026-03-23 22:18:05 +01:00
dependabot[bot]andGitHub b281833696 build(deps): bump actions/checkout from 5.0.0 to 6.0.2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 21:04:52 +00:00
Jean-Philippe EvrardandGitHub 87a8aa6fb6 Merge pull request #1297 from kubereboot/dependabot/github_actions/actions/setup-go-6.3.0 2026-03-23 22:04:23 +01:00
dependabot[bot]andGitHub a266787b94 build(deps): bump k8s.io/kubectl from 0.35.2 to 0.35.3 
Bumps [k8s.io/kubectl](https://github.com/kubernetes/kubectl) from 0.35.2 to 0.35.3.
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.35.2...v0.35.3)

---
updated-dependencies:
- dependency-name: k8s.io/kubectl
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 21:01:02 +00:00
Jean-Philippe EvrardandGitHub ae33ad8879 Merge pull request #1294 from kubereboot/dependabot/go_modules/k8s.io/api-0.35.3 2026-03-23 21:59:30 +01:00
Jean-Philippe EvrardandGitHub 4b15eeb4a5 Merge pull request #1295 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-4.0.0 2026-03-23 21:59:01 +01:00
Jean-Philippe EvrardandGitHub 8c77afaa5b Merge pull request #1296 from kubereboot/dependabot/github_actions/docker/build-push-action-7.0.0 2026-03-23 21:58:36 +01:00
dependabot[bot]andGitHub 0330c1737c build(deps): bump actions/setup-go from 6.0.0 to 6.3.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.0.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/44694675825211faa026b3c33043df3e48a5fa00...4b73464bb391d4059bd26b0524d20df3927bd417)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 05:48:59 +00:00
dependabot[bot]andGitHub 0faf1d812b build(deps): bump docker/build-push-action from 6.18.0 to 7.0.0 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.18.0 to 7.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/263435318d21b8e681c14492fe198d362a7d2c83...d08e5c354a6adb9ed34480a06d141179aa583294)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 05:48:01 +00:00
dependabot[bot]andGitHub ca152e76f7 build(deps): bump docker/setup-buildx-action from 3.11.1 to 4.0.0 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.11.1 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/e468171a9de216ec08956ac3ada2f0791b6bd435...4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 05:47:52 +00:00
dependabot[bot]andGitHub 99a7bc9559 build(deps): bump k8s.io/api from 0.35.2 to 0.35.3 
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.35.2 to 0.35.3.
- [Commits](https://github.com/kubernetes/api/compare/v0.35.2...v0.35.3)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 05:47:50 +00:00
dependabot[bot]andGitHub 8302d7d6f9 build(deps): bump github/codeql-action from 3.30.6 to 4.34.1 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.6 to 4.34.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/64d10c13136e1c5bce3e5fbde8d4906eeaafc885...38697555549f1db7851b81482ff19f1fa5c4fedc)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 05:47:46 +00:00
Jean-Philippe EvrardandGitHub 6a5dc5081b Merge pull request #1268 from evrardjp/update-policy-on-kube-versions 2026-03-23 06:46:42 +01:00
Jean-Philippe Evrard fe114765ef Manually bump trivy 
Without this, the CI will fail to use trivy.

Multiple reasons:
- We used shas + tags in the past. This was to guarantee the
version matches the release. Sadly that behaviour has changed
since september 2025, and dependabot does not update anymore
the sha pinned actions unless the version is also in comment.
This will be fixed in another PR.
- Trivy releases had to be republished since trivy security
incident.
- Old releases should not be used, so bumping is necessary.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-03-19 18:53:25 +01:00
Jean-Philippe Evrard 168fe81bb4 Update policy for kube version 
We have historically decided to support AND TEST 3 versions
of kubernetes. For that, we lagged behind in terms of client versions.

Lagging behind one version allowed us, thanks to kubernetes client version skew,
to support 3 versions at relatively low cost.

However, maintaining 3 versions has always been a pain.
For that, we pinned old versions of kubernetes clients/api and test tooling.

In december 2025 community meeting, we decided to only maintain two
versions: the most current one, and the previous one.

This allows us to bump more regularly and be more secure.
We can also more easily use dependabot this way.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-03-19 06:07:15 +01:00
Jean-Philippe EvrardandGitHub 4d5ca31338 Merge pull request #1279 from kubereboot/dependabot/github_actions/docker/metadata-action-5.10.0 2026-02-22 08:17:34 +01:00
Jean-Philippe EvrardandGitHub 6a1ba49eb6 Merge pull request #1278 from kubereboot/dependabot/github_actions/docker/login-action-3.7.0 2026-02-22 08:17:07 +01:00
Jean-Philippe EvrardandGitHub cbc7da275f Merge pull request #1277 from kubereboot/dependabot/github_actions/jdx/mise-action-3.6.1 2026-02-22 08:16:32 +01:00
Jean-Philippe EvrardandGitHub 763aea8976 Merge pull request #1276 from kubereboot/dependabot/github_actions/actions/upload-artifact-6.0.0 2026-02-22 08:15:54 +01:00
Jean-Philippe EvrardandGitHub bf9ecd8566 Merge pull request #1270 from kubereboot/dependabot/go_modules/github.com/sirupsen/logrus-1.9.4 2026-02-22 08:15:30 +01:00