dholbach
e60c8b730b
Merge pull request #1054 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-3.3.0
...
build(deps): bump docker/setup-qemu-action from 3.2.0 to 3.3.0
2025-01-10 19:47:50 +01:00
dholbach
55357c9c65
Merge pull request #1053 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.10.3
...
build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.3
2025-01-10 19:47:20 +01:00
dholbach
3e082ef0f1
Merge pull request #1052 from kubereboot/dependabot/github_actions/lycheeverse/lychee-action-2.2.0
...
build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
2025-01-10 19:46:50 +01:00
dholbach
f1d5ddc3e2
Merge pull request #1055 from kubereboot/dependabot/github_actions/docker/build-push-action-6.11.0
...
build(deps): bump docker/build-push-action from 6.10.0 to 6.11.0
2025-01-10 19:46:27 +01:00
dependabot[bot]
b6af0a1d5f
build(deps): bump docker/build-push-action from 6.10.0 to 6.11.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.10.0 to 6.11.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](48aba3b46d...b32b51a8ed )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-10 17:48:19 +00:00
dependabot[bot]
9206ff0d91
build(deps): bump docker/setup-qemu-action from 3.2.0 to 3.3.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](49b3bc8e6b...53851d1459 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-10 17:48:16 +00:00
dependabot[bot]
b2ee3e3cdd
build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.3
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](0080882f6c...c95a14d0e5 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-10 17:48:13 +00:00
dependabot[bot]
2a8dcac3d3
build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
...
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases )
- [Commits](f81112d0d2...f796c8b7d4 )
---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-10 17:48:07 +00:00
Jean-Philippe Evrard
455b3df0dc
improve tests ( #1021 )
...
* Add e2e test concurrency w/ signal
This will help make sure the big refactoring does not break
the main features.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
* Add podblocker test
Extends test coverage to ensure nothing breaks
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
* Rename "version" with "variant" in tests
For tests not running in different kubernetes versions,
but have different tests subcases/variants, rephrase the wording
"versions" as it is confusing.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
* Fix Staticcheck's SA1024 (subset with dupe chars)
This will replace trim, taking a cutset, with Replace.
This clarifies the intent to remove a substring.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
* Fix Staticcheck's ST1005
According to staticcheck, Error strings should not be capitalized (ST1005).
This changes the cases for our errors.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
* Fix incorrect string prints
A few strings have evolved to eventually remove all the templating
part of their strings, yet kept the formatting features.
This is incorrect, and will not pass staticcheck SA1006 and S1039.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
* Add staticcheck in make tests
Without this, people like myself will forget to run staticcheck.
This fixes it by making it part of make tests, which will run
with all the fast tests in CI.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
---------
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2025-01-09 14:42:28 -08:00
Jean-Philippe Evrard
856c1b6950
Merge pull request #1051 from kubereboot/dependabot/docker/alpine-3.21.2
...
build(deps): bump alpine from 3.20.3 to 3.21.2
2025-01-09 23:23:24 +01:00
Jean-Philippe Evrard
565fea9d62
Merge pull request #1050 from kubereboot/dependabot/github_actions/actions/upload-artifact-4.6.0
...
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
2025-01-09 23:22:35 +01:00
Jean-Philippe Evrard
5397501441
Merge pull request #1047 from kubereboot/dependabot/github_actions/helm/kind-action-1.12.0
...
build(deps): bump helm/kind-action from 1.10.0 to 1.12.0
2025-01-09 23:21:03 +01:00
Jean-Philippe Evrard
5d5310b509
Merge pull request #1046 from kubereboot/dependabot/github_actions/github/codeql-action-3.28.0
...
build(deps): bump github/codeql-action from 3.27.6 to 3.28.0
2025-01-09 23:20:17 +01:00
Jean-Philippe Evrard
2415937578
Merge pull request #1042 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-3.8.0
...
build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0
2025-01-09 23:19:36 +01:00
Jean-Philippe Evrard
6dce6d44e0
Merge pull request #1040 from kubereboot/dependabot/github_actions/actions/setup-go-5.2.0
...
build(deps): bump actions/setup-go from 5.1.0 to 5.2.0
2025-01-09 23:18:47 +01:00
Jean-Philippe Evrard
d0f9fa4647
Merge pull request #1037 from kubereboot/dependabot/go_modules/github.com/prometheus/common-0.61.0
...
build(deps): bump github.com/prometheus/common from 0.60.1 to 0.61.0
2025-01-09 23:17:59 +01:00
dependabot[bot]
6527ca3b6e
build(deps): bump helm/kind-action from 1.10.0 to 1.12.0
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.10.0 to 1.12.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](0025e74a8c...a1b0e39133 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:11:29 +00:00
dependabot[bot]
b2933fab75
build(deps): bump github/codeql-action from 3.27.6 to 3.28.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.6 to 3.28.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](aa57810251...48ab28a6f5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:11:09 +00:00
dependabot[bot]
248242da5b
build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.7.1 to 3.8.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](c47758b77c...6524bf65af )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:10:16 +00:00
dependabot[bot]
d94087afad
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.3 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b4b15b8c7c...65c4c4a1dd )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:09:58 +00:00
dependabot[bot]
465a6cceab
build(deps): bump alpine from 3.20.3 to 3.21.2
...
Bumps alpine from 3.20.3 to 3.21.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:09:37 +00:00
dependabot[bot]
51dc738292
build(deps): bump actions/setup-go from 5.1.0 to 5.2.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](41dfa10bad...3041bf56c9 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:09:30 +00:00
dependabot[bot]
36f38825b9
build(deps): bump github.com/prometheus/common from 0.60.1 to 0.61.0
...
Bumps [github.com/prometheus/common](https://github.com/prometheus/common ) from 0.60.1 to 0.61.0.
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md )
- [Commits](https://github.com/prometheus/common/compare/v0.60.1...v0.61.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-09 22:09:19 +00:00
Jean-Philippe Evrard
de77a0f44c
Merge pull request #1045 from dholbach/update
...
Update k8s and x/net dependencies
2025-01-09 23:08:01 +01:00
Jean-Philippe Evrard
628a8ae590
Fix CVE-2024-45338 and bump k8s.
...
Without this, we'll stay in k8s 0.29, and a vulnerable golang/net.
This contains other bumps, like bumps to golang.org/x/text, which is
flagged by FOSSA as CC licensed.
As these CC-licensed code snippets are used in other CNCF projects
(like kubernetes), this is fine to bump and will be excluded
in our license scans in the future.
Closes : #1049
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2025-01-09 22:53:16 +01:00
Daniel Holbach
dd5a303113
update test infra as well
...
Signed-off-by: Daniel Holbach <daniel.holbach@gmail.com >
2025-01-09 22:20:18 +01:00
dholbach
72e39575c2
Merge pull request #1036 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.6
...
build(deps): bump github/codeql-action from 3.27.5 to 3.27.6
2024-12-03 19:50:35 +01:00
dependabot[bot]
ab1673a72a
build(deps): bump github/codeql-action from 3.27.5 to 3.27.6
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.5 to 3.27.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f09c1c0a94...aa57810251 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-03 17:33:54 +00:00
dholbach
c2fbb8f849
Merge pull request #1034 from kubereboot/dependabot/go_modules/github.com/stretchr/testify-1.10.0
...
build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
2024-11-27 10:23:18 +01:00
dholbach
473beb873c
Merge pull request #1035 from kubereboot/dependabot/github_actions/docker/build-push-action-6.10.0
...
build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
2024-11-27 10:23:00 +01:00
dependabot[bot]
b8bdb5e00a
build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.9.0 to 6.10.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](4f58ea7922...48aba3b46d )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-26 17:19:33 +00:00
dependabot[bot]
a9676db6c3
build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-25 17:17:31 +00:00
Jean-Philippe Evrard
9848deb283
Merge pull request #1029 from kubereboot/dependabot/github_actions/docker/metadata-action-5.6.1
...
build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1
2024-11-22 12:00:26 +01:00
Jean-Philippe Evrard
15b451ee04
Merge pull request #1030 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.10.2
...
build(deps): bump step-security/harden-runner from 2.10.1 to 2.10.2
2024-11-22 11:59:53 +01:00
Jean-Philippe Evrard
8b14073176
Merge pull request #1033 from kubereboot/dependabot/github_actions/actions/dependency-review-action-4.5.0
...
build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0
2024-11-22 11:59:20 +01:00
dependabot[bot]
1b5d01ee8c
build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](4081bf99e2...3b139cfc5f )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-21 17:53:46 +00:00
Jean-Philippe Evrard
b37bf39a74
Merge pull request #1031 from kubereboot/dependabot/github_actions/aquasecurity/trivy-action-0.29.0
...
build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0
2024-11-21 14:08:52 +01:00
Jean-Philippe Evrard
c768c7c8d5
Merge pull request #1032 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.5
...
build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
2024-11-21 14:08:09 +01:00
dependabot[bot]
5530ab0db1
build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](ea9e4e3799...f09c1c0a94 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-20 17:56:27 +00:00
dependabot[bot]
8f9af5c1dd
build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](915b19bbe7...18f2510ee3 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-20 17:56:21 +00:00
dependabot[bot]
31551a2c23
build(deps): bump step-security/harden-runner from 2.10.1 to 2.10.2
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.10.1 to 2.10.2.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](91182cccc0...0080882f6c )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-19 17:44:39 +00:00
dependabot[bot]
91ef335394
build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.5.1 to 5.6.1.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](8e5442c4ef...369eb591f4 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-19 17:44:35 +00:00
dholbach
e5f01ce172
Merge pull request #1028 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.4
...
build(deps): bump github/codeql-action from 3.27.3 to 3.27.4
2024-11-14 21:24:19 +01:00
dependabot[bot]
9a24d9ddab
build(deps): bump github/codeql-action from 3.27.3 to 3.27.4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.3 to 3.27.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](396bb3e453...ea9e4e3799 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-14 17:55:42 +00:00
dholbach
56f2b97045
Merge pull request #1027 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.3
...
build(deps): bump github/codeql-action from 3.27.1 to 3.27.3
2024-11-14 06:41:55 +01:00
dependabot[bot]
cbb1d5702b
build(deps): bump github/codeql-action from 3.27.1 to 3.27.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.1 to 3.27.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](4f3212b617...396bb3e453 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-13 17:36:00 +00:00
dholbach
888964c17a
Merge pull request #1022 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.1
...
build(deps): bump github/codeql-action from 3.27.0 to 3.27.1
2024-11-09 17:44:09 +01:00
dholbach
83eca94075
Merge pull request #1023 from kubereboot/dependabot/github_actions/actions/checkout-4.2.2
...
build(deps): bump actions/checkout from 4.1.1 to 4.2.2
2024-11-09 17:39:39 +01:00
dependabot[bot]
390fe1e742
build(deps): bump actions/checkout from 4.1.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...11bd71901bbe5b1630ceea73d27597364c9af683 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-08 17:27:48 +00:00
dependabot[bot]
785a8efdf4
build(deps): bump github/codeql-action from 3.27.0 to 3.27.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.0 to 3.27.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](662472033e...4f3212b617 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-08 17:27:44 +00:00