github/kured
1
0
Fork 0
mirror of https://github.com/kubereboot/kured.git synced 2026-08-19 11:26:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,543 Commits 14 Branches 50 Tags
c0db37c164b4dd55de99042d3e547ecf86b989dd
Commit Graph
1543 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]andGitHub c0db37c164 build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0 
Bumps [guyarb/golang-test-annoations](https://github.com/guyarb/golang-test-annoations) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/guyarb/golang-test-annoations/releases)
- [Commits](https://github.com/guyarb/golang-test-annoations/compare/2941118d7ef622b1b3771d1ff6eae9e90659eb26...96fc379b171c49932041d6c789e73331a7bdeec1)

---
updated-dependencies:
- dependency-name: guyarb/golang-test-annoations
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-10 11:40:12 +00:00
Jean-Philippe EvrardandGitHub d5e9a2e912 Merge pull request #1348 from evrardjp/bump-goreleaser 2026-06-10 13:38:24 +02:00
Jean-Philippe EvrardandGitHub 17f61232c9 Merge pull request #1350 from kubereboot/dependabot/go_modules/all-67dfae0cad 
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the all group across 1 directory
 2026-06-09 11:10:08 +02:00
dependabot[bot]andGitHub bcacba1c95 build(deps): bump github.com/prometheus/common 
Bumps the all group with 1 update in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/common` from 0.68.0 to 0.68.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.68.0...v0.68.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 08:54:42 +00:00
Jean-Philippe Evrard 315d8e0475 Add github release changelog text generation 
Without this, we will not produce text that is basically exactly
what we do.

By using goreleaser github-native method, we will also generate
the usual changelog.

The only remaining part would be to edit it for the extra manual
messages we add.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:49:54 +02:00
Jean-Philippe Evrard 2a23325b81 chore(tests): Cleanup test matrix 
There is no point of having a more complex series of jobs.
This puts all the manifests testing cases into one kind of
pipeline, simplifying debugging.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:25:47 +02:00
Jean-Philippe Evrard b91831b9bb Migrate mise config file 
Now that we have a .config folder, we can move mise into such
folder, to clean up the root of the directory

We therefore fix the contributing guide link with new location.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:20:08 +02:00
Jean-Philippe Evrard c36ae33c67 fix: stop building main branch containers 
Without this, we will continue building and storing artifacts
that are used by less than 10% of our community. This means
maintaining different workflows and complicates goreleaser
for really no reason.

If someone has a strong opposition to this practice, please
tell me, I will revert this commit.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:20:06 +02:00
Jean-Philippe Evrard 51903f1364 cleanup more of the makefile 
We remove a step that is now useless.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:19:06 +02:00
Jean-Philippe Evrard e531f64b85 feat(release): let GoReleaser manage artifacts 
GoReleaser now builds the multi-arch images,
publishes SBOM/provenance metadata, signs image digests, and attaches
the generated combined Kubernetes manifest to tagged GitHub releases.

This is to have goReleaser as a single point of work for release
automation. With this, so tags and main commits follow one consistent
image pipeline.

We keep the CI and developer image builds intentionally local.
PR, periodic, main, and tag scan jobs build only `kured:dev` and scan that
local image with Trivy, which avoids pushing disposable images and keeps
the tested image identical to the one used by kind-based e2e tests.

Simplify the Makefile around the remaining artifact boundaries: `build` for a
local GoReleaser binary build, `dev-image` for local Docker/e2e/scan use, and
`release` for the GoReleaser publish path. Remove the old manual manifest
target because the release manifest is now generated during the tagged release
flow.

To avoid a mess with all the configuration files, I move everything into
a `.config` folder, for the tools supporting it.

This also meant updating golangci-lint to a valid v2 config, and simplify
the Dockerfile to the layout expected by GoReleaser `dockers_v2`
using `TARGETPLATFORM`.

Handle Prometheus client initialization errors explicitly so the stricter
errcheck configuration keeps the existing fail-closed reboot-blocking behavior,
to fix the golangci-lint issue that appeared.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:19:04 +02:00
Jean-Philippe Evrard 52114a1245 Bump goreleaser 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-09 09:16:56 +02:00
Jean-Philippe EvrardandGitHub 20b968b224 Merge pull request #1353 from kubereboot/dependabot/github_actions/docker/login-action-4.2.0 
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
 2026-06-09 09:12:56 +02:00
Jean-Philippe EvrardandGitHub 3d5d2865c9 Merge pull request #1354 from kubereboot/dependabot/github_actions/actions/checkout-6.0.3 
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
 2026-06-09 09:11:34 +02:00
Jean-Philippe EvrardandGitHub b1f9863507 Merge pull request #1351 from kubereboot/dependabot/github_actions/jdx/mise-action-4.1.0 
build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0
 2026-06-09 09:11:05 +02:00
Jean-Philippe EvrardandGitHub 5a73db1268 Merge pull request #1352 from kubereboot/dependabot/github_actions/actions/stale-10.3.0 
build(deps): bump actions/stale from 10.2.0 to 10.3.0
 2026-06-09 09:10:35 +02:00
dependabot[bot]andGitHub 4b8283b86e build(deps): bump actions/checkout from 6.0.2 to 6.0.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 17:52:54 +00:00
dependabot[bot]andGitHub 4f624f7421 build(deps): bump docker/login-action from 4.1.0 to 4.2.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 17:52:45 +00:00
dependabot[bot]andGitHub c5cb3b84a8 build(deps): bump actions/stale from 10.2.0 to 10.3.0 
Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 17:52:42 +00:00
dependabot[bot]andGitHub df57174e94 build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0 
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/1648a7812b9aeae629881980618f079932869151...dba19683ed58901619b14f395a24841710cb4925)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 17:52:38 +00:00
Jean-Philippe EvrardandGitHub f273b466cf Merge pull request #1344 from evrardjp/bump-to-next-kubernetes-version 
Update Kured to latest kubernetes modules
 2026-06-08 19:43:24 +02:00
Jean-Philippe Evrard b7f127b7ba Update Kured to latest kubernetes modules 
Now that a new kind version is released supporting 1.36,
we can use it for our CI testing.

This commit:
- Bumps the kind version and its images to support the 1.36
- Ensure all the API calls are done with client-go 0.36
  (and dependent k8s deps), to allow future 1.37 release.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 19:03:13 +02:00
Jean-Philippe EvrardandGitHub 27441b539a Merge pull request #1347 from evrardjp/bump-golangci-lint 
Bump golangci lint
 2026-06-08 15:55:51 +02:00
Jean-Philippe Evrard 896ee8d183 chore: Quick fix to pass linters 
This whole block should be refactored, but this will be done
inside v2.

At the same time, it should not block the golangci-lint, so
I did exactly what the golangci lint wanted to have.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 15:19:48 +02:00
Jean-Philippe EvrardandGitHub a344db3f6a Merge pull request #1346 from evrardjp/freeze-mise 
Revert "chore: Bump mise"
 2026-06-08 15:17:25 +02:00
Jean-Philippe Evrard 45bd82c4ba Bump golangci-lint 
This will allow to bump golang to 1.26 without issues.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 15:11:37 +02:00
Jean-Philippe Evrard aa5e79531b Revert "chore: Bump mise" 
This reverts the implementation of the bump mise, done
with commit 5c8754ceb2.

Instead of unfreezing the mise version completely, which could
expose us to supply chain attacks, we simply bump the version
manually.

It means we will have to fix the drift of mise versions using
another tool, as dependabot does not do it.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 14:41:25 +02:00
Jean-Philippe EvrardandGitHub b5fc952a32 Merge pull request #1345 from evrardjp/unfreeze-mise 
chore: Bump mise
 2026-06-08 14:11:44 +02:00
Jean-Philippe Evrard 5c8754ceb2 chore: Bump mise 
Without this, mise will be stuck to a pre-defined version.
This auto bumps mise and will bump versions. It should not
be damaging for CI (quite the opposite, we will benefit
from cache).

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 14:02:01 +02:00
Jean-Philippe EvrardandGitHub 5e3699d68d Merge pull request #1343 from kubereboot/prepare-release-1.22.1 
chore: update release
1.22.1 		2026-06-08 13:16:12 +02:00
Jean-Philippe Evrard 89902251e2 chore: update release 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 13:05:42 +02:00
Jean-Philippe EvrardandGitHub 73712baba7 Merge pull request #1342 from evrardjp/get_rid_of_setup_go 
Remove setup-go
 2026-06-08 12:51:20 +02:00
Jean-Philippe EvrardandGitHub 3549e4475d Merge pull request #1335 from kubereboot/dependabot/github_actions/docker/build-push-action-7.2.0 
build(deps): bump docker/build-push-action from 7.0.0 to 7.2.0
 2026-06-08 12:51:01 +02:00
Jean-Philippe EvrardandGitHub 35d0dea4f7 Merge pull request #1334 from kubereboot/dependabot/github_actions/aquasecurity/trivy-action-0.36.0 
build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
 2026-06-08 12:50:45 +02:00
Jean-Philippe EvrardandGitHub 42462f1ec8 Merge pull request #1333 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-4.1.0 
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
 2026-06-08 12:50:28 +02:00
Jean-Philippe EvrardandGitHub 3e8d5eaba4 Merge pull request #1332 from kubereboot/dependabot/github_actions/github/codeql-action-4.36.0 
build(deps): bump github/codeql-action from 4.35.1 to 4.36.2
 2026-06-08 12:50:05 +02:00
dependabot[bot]andGitHub 3b36f05a58 build(deps): bump docker/build-push-action from 7.0.0 to 7.2.0 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...f9f3042f7e2789586610d6e8b85c8f03e5195baf)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 10:29:39 +00:00
dependabot[bot]andGitHub c2da96ecb8 build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/57a97c7e7821a5776cebc9bb87c984fa69cba8f1...ed142fd0673e97e23eac54620cfb913e5ce36c25)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 10:29:32 +00:00
dependabot[bot]andGitHub 50728eca54 build(deps): bump github/codeql-action from 4.35.1 to 4.36.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 10:29:18 +00:00
dependabot[bot]andGitHub c639d744c2 build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 10:29:14 +00:00
Jean-Philippe Evrard b5f6eca82e Remove setup-go 
We use mise everywhere, so there is no need to setup go, mise
should take care of setting up all the go requirements.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 12:27:10 +02:00
Jean-Philippe EvrardandGitHub 5c24aba3bb Merge pull request #1341 from evrardjp/bump-go 
Bump go to fix CVE-2026-42504
 2026-06-08 12:24:34 +02:00
Jean-Philippe Evrard aabe5868d6 Bump go to fix CVE-2026-42504 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-06-08 12:13:46 +02:00
Jean-Philippe EvrardandGitHub 984d46844c Merge pull request #1336 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.19.4 
build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4
 2026-06-08 11:43:08 +02:00
Jean-Philippe EvrardandGitHub a962b6eea9 Merge pull request #1339 from kubereboot/dependabot/go_modules/all-798ff1a463 2026-06-06 14:02:22 +02:00
dependabot[bot]andGitHub c6e0ef61a6 build(deps): bump github.com/prometheus/common in the all group 
Bumps the all group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/common` from 0.67.5 to 0.68.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.67.5...v0.68.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-29 20:48:55 +00:00
Jean-Philippe EvrardandGitHub 1f37a84cad Merge pull request #1337 from evrardjp/prepare-release-1.22.0 
chore: update release
1.22.0 		2026-05-26 15:40:53 +02:00
Jean-Philippe Evrard bc10cd0445 chore: update release 
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-05-26 15:37:42 +02:00
dependabot[bot]andGitHub 3b7c3241ad build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.0 to 2.19.4.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/8d3c67de8e2fe68ef647c8db1e6a09f647780f40...9af89fc71515a100421586dfdb3dc9c984fbf411)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 12:29:48 +00:00
Jean-Philippe EvrardandGitHub 1882041f7c Merge pull request #1331 from evrardjp/update_dependabot_handling 
Alter bumping work of dependabot
 2026-05-26 14:10:43 +02:00
Jean-Philippe Evrard 7f2d941c5c Alter bumping work of dependabot 
Without this, dependabot would separate all the dependencies in
different PRs.

This is inefficient: The only group of PRs that need to be
separate, is kubernetes: We only want to bump them for a new
release.

On top of that, those kubernetes dependencies also need to be
bumped together.

This fixes the dependabot config to match that use case.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
 2026-05-26 14:06:19 +02:00