Commit Graph
1564 Commits
Author SHA1 Message Date
Jean-Philippe EvrardandGitHub c775910f6d Merge pull request #1355 from evrardjp/improve_testing
Simplify testing
2026-06-29 18:57:05 +02:00
Jean-Philippe EvrardandGitHub 7c3712cc06 Merge pull request #1368 from kubereboot/dependabot/docker/alpine-3.24.1
build(deps): bump alpine from 3.24.0 to 3.24.1
2026-06-29 18:55:49 +02:00
Jean-Philippe EvrardandGitHub efdb3ab888 Merge pull request #1370 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 18:54:45 +02:00
Jean-Philippe EvrardandGitHub 31236bcec1 Merge pull request #1371 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
2026-06-29 18:54:22 +02:00
dependabot[bot]andGitHub 5e19c8ac21 build(deps): bump actions/checkout from 6.0.1 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-18 17:52:46 +00:00
dependabot[bot]andGitHub a9d8f3cf8e build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/dba19683ed58901619b14f395a24841710cb4925...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-18 17:52:24 +00:00
dependabot[bot]andGitHub 1addff927e build(deps): bump alpine from 3.24.0 to 3.24.1
Bumps alpine from 3.24.0 to 3.24.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 17:52:35 +00:00
Jean-Philippe EvrardandGitHub 2a2efd2055 Merge pull request #1364 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.2 2026-06-11 23:24:38 +02:00
dependabot[bot]andGitHub 590101eb5f build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.2.2.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-11 16:29:26 +00:00
Jean-Philippe EvrardandGitHub 0bd7cf300b Merge pull request #1362 from dharsanb/add-goreleaser-linting 2026-06-11 18:28:24 +02:00
Jean-Philippe EvrardandGitHub b037cae2e2 Merge pull request #1361 from dharsanb/fix-registry-image-name 2026-06-11 18:25:11 +02:00
Dharsan Baskar 162eb0a5f3 ci: unify YAML file extension to .yaml across config and workflows
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:57:28 +05:30
Dharsan Baskar 0f5cbf0b03 ci: add GoReleaser config verification on PRs and pushes
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:30:57 +05:30
Dharsan Baskar 5dcdc2874a chore: remove redundant DH_ORG environment variable and add registry as a configurable variable.
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:29:03 +05:30
Jean-Philippe EvrardandGitHub ca5b1015e8 Merge pull request #1358 from kubereboot/dependabot/github_actions/guyarb/golang-test-annoations-0.9.0
build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
2026-06-10 20:17:58 +02:00
Jean-Philippe EvrardandGitHub 6ca6544ff3 Merge pull request #1357 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.1.0
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
2026-06-10 20:17:35 +02:00
Jean-Philippe EvrardandGitHub a325fdcdb9 Merge pull request #1360 from kubereboot/dependabot/docker/alpine-3.24.0
build(deps): bump alpine from 3.23.4 to 3.24.0
2026-06-10 20:09:36 +02:00
Jean-Philippe Evrard 48999c3d86 tests: Cleanup the test matrix for readability
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-10 20:04:41 +02:00
Jean-Philippe Evrard 8830c0bc9d Add github actions linting
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-10 20:04:41 +02:00
dependabot[bot]andGitHub 31a1b86966 build(deps): bump alpine from 3.23.4 to 3.24.0
Bumps alpine from 3.23.4 to 3.24.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 17:52:42 +00:00
dependabot[bot]andGitHub c0db37c164 build(deps): bump guyarb/golang-test-annoations from 0.8.0 to 0.9.0
Bumps [guyarb/golang-test-annoations](https://github.com/guyarb/golang-test-annoations) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/guyarb/golang-test-annoations/releases)
- [Commits](https://github.com/guyarb/golang-test-annoations/compare/2941118d7ef622b1b3771d1ff6eae9e90659eb26...96fc379b171c49932041d6c789e73331a7bdeec1)

---
updated-dependencies:
- dependency-name: guyarb/golang-test-annoations
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 11:40:12 +00:00
dependabot[bot]andGitHub 260a3162af build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 11:40:09 +00:00
Jean-Philippe EvrardandGitHub d5e9a2e912 Merge pull request #1348 from evrardjp/bump-goreleaser 2026-06-10 13:38:24 +02:00
Jean-Philippe EvrardandGitHub 17f61232c9 Merge pull request #1350 from kubereboot/dependabot/go_modules/all-67dfae0cad
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the all group across 1 directory
2026-06-09 11:10:08 +02:00
dependabot[bot]andGitHub bcacba1c95 build(deps): bump github.com/prometheus/common
Bumps the all group with 1 update in the / directory: [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/common` from 0.68.0 to 0.68.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.68.0...v0.68.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-09 08:54:42 +00:00
Jean-Philippe Evrard 315d8e0475 Add github release changelog text generation
Without this, we will not produce text that is basically exactly
what we do.

By using goreleaser github-native method, we will also generate
the usual changelog.

The only remaining part would be to edit it for the extra manual
messages we add.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:49:54 +02:00
Jean-Philippe Evrard 2a23325b81 chore(tests): Cleanup test matrix
There is no point of having a more complex series of jobs.
This puts all the manifests testing cases into one kind of
pipeline, simplifying debugging.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:25:47 +02:00
Jean-Philippe Evrard b91831b9bb Migrate mise config file
Now that we have a .config folder, we can move mise into such
folder, to clean up the root of the directory

We therefore fix the contributing guide link with new location.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:20:08 +02:00
Jean-Philippe Evrard c36ae33c67 fix: stop building main branch containers
Without this, we will continue building and storing artifacts
that are used by less than 10% of our community. This means
maintaining different workflows and complicates goreleaser
for really no reason.

If someone has a strong opposition to this practice, please
tell me, I will revert this commit.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:20:06 +02:00
Jean-Philippe Evrard 51903f1364 cleanup more of the makefile
We remove a step that is now useless.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:19:06 +02:00
Jean-Philippe Evrard e531f64b85 feat(release): let GoReleaser manage artifacts
GoReleaser now builds the multi-arch images,
publishes SBOM/provenance metadata, signs image digests, and attaches
the generated combined Kubernetes manifest to tagged GitHub releases.

This is to have goReleaser as a single point of work for release
automation. With this, so tags and main commits follow one consistent
image pipeline.

We keep the CI and developer image builds intentionally local.
PR, periodic, main, and tag scan jobs build only `kured:dev` and scan that
local image with Trivy, which avoids pushing disposable images and keeps
the tested image identical to the one used by kind-based e2e tests.

Simplify the Makefile around the remaining artifact boundaries: `build` for a
local GoReleaser binary build, `dev-image` for local Docker/e2e/scan use, and
`release` for the GoReleaser publish path. Remove the old manual manifest
target because the release manifest is now generated during the tagged release
flow.

To avoid a mess with all the configuration files, I move everything into
a `.config` folder, for the tools supporting it.

This also meant updating golangci-lint to a valid v2 config, and simplify
the Dockerfile to the layout expected by GoReleaser `dockers_v2`
using `TARGETPLATFORM`.

Handle Prometheus client initialization errors explicitly so the stricter
errcheck configuration keeps the existing fail-closed reboot-blocking behavior,
to fix the golangci-lint issue that appeared.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:19:04 +02:00
Jean-Philippe Evrard 52114a1245 Bump goreleaser
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:16:56 +02:00
Jean-Philippe EvrardandGitHub 20b968b224 Merge pull request #1353 from kubereboot/dependabot/github_actions/docker/login-action-4.2.0
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
2026-06-09 09:12:56 +02:00
Jean-Philippe EvrardandGitHub 3d5d2865c9 Merge pull request #1354 from kubereboot/dependabot/github_actions/actions/checkout-6.0.3
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
2026-06-09 09:11:34 +02:00
Jean-Philippe EvrardandGitHub b1f9863507 Merge pull request #1351 from kubereboot/dependabot/github_actions/jdx/mise-action-4.1.0
build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0
2026-06-09 09:11:05 +02:00
Jean-Philippe EvrardandGitHub 5a73db1268 Merge pull request #1352 from kubereboot/dependabot/github_actions/actions/stale-10.3.0
build(deps): bump actions/stale from 10.2.0 to 10.3.0
2026-06-09 09:10:35 +02:00
dependabot[bot]andGitHub 4b8283b86e build(deps): bump actions/checkout from 6.0.2 to 6.0.3
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 17:52:54 +00:00
dependabot[bot]andGitHub 4f624f7421 build(deps): bump docker/login-action from 4.1.0 to 4.2.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 17:52:45 +00:00
dependabot[bot]andGitHub c5cb3b84a8 build(deps): bump actions/stale from 10.2.0 to 10.3.0
Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 17:52:42 +00:00
dependabot[bot]andGitHub df57174e94 build(deps): bump jdx/mise-action from 4.0.1 to 4.1.0
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jdx/mise-action/compare/1648a7812b9aeae629881980618f079932869151...dba19683ed58901619b14f395a24841710cb4925)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 17:52:38 +00:00
Jean-Philippe EvrardandGitHub f273b466cf Merge pull request #1344 from evrardjp/bump-to-next-kubernetes-version
Update Kured to latest kubernetes modules
2026-06-08 19:43:24 +02:00
Jean-Philippe Evrard b7f127b7ba Update Kured to latest kubernetes modules
Now that a new kind version is released supporting 1.36,
we can use it for our CI testing.

This commit:
- Bumps the kind version and its images to support the 1.36
- Ensure all the API calls are done with client-go 0.36
  (and dependent k8s deps), to allow future 1.37 release.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-08 19:03:13 +02:00
Jean-Philippe EvrardandGitHub 27441b539a Merge pull request #1347 from evrardjp/bump-golangci-lint
Bump golangci lint
2026-06-08 15:55:51 +02:00
Jean-Philippe Evrard 896ee8d183 chore: Quick fix to pass linters
This whole block should be refactored, but this will be done
inside v2.

At the same time, it should not block the golangci-lint, so
I did exactly what the golangci lint wanted to have.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-08 15:19:48 +02:00
Jean-Philippe EvrardandGitHub a344db3f6a Merge pull request #1346 from evrardjp/freeze-mise
Revert "chore: Bump mise"
2026-06-08 15:17:25 +02:00
Jean-Philippe Evrard 45bd82c4ba Bump golangci-lint
This will allow to bump golang to 1.26 without issues.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-08 15:11:37 +02:00
Jean-Philippe Evrard aa5e79531b Revert "chore: Bump mise"
This reverts the implementation of the bump mise, done
with commit 5c8754ceb2.

Instead of unfreezing the mise version completely, which could
expose us to supply chain attacks, we simply bump the version
manually.

It means we will have to fix the drift of mise versions using
another tool, as dependabot does not do it.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-08 14:41:25 +02:00
Jean-Philippe EvrardandGitHub b5fc952a32 Merge pull request #1345 from evrardjp/unfreeze-mise
chore: Bump mise
2026-06-08 14:11:44 +02:00
Jean-Philippe Evrard 5c8754ceb2 chore: Bump mise
Without this, mise will be stuck to a pre-defined version.
This auto bumps mise and will bump versions. It should not
be damaging for CI (quite the opposite, we will benefit
from cache).

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-08 14:02:01 +02:00
Jean-Philippe EvrardandGitHub 5e3699d68d Merge pull request #1343 from kubereboot/prepare-release-1.22.1
chore: update release
1.22.1
2026-06-08 13:16:12 +02:00