Jean-Philippe Evrard and GitHub
ea4efb1995
Merge pull request #1400 from kubereboot/dependabot/github_actions/docker/login-action-4.5.2
...
build(deps): bump docker/login-action from 4.2.0 to 4.5.2
2026-08-10 11:50:33 +02:00
Jean-Philippe Evrard and GitHub
5d048d7e22
Merge pull request #1402 from kubereboot/dependabot/github_actions/actions/checkout-7.0.1
...
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
2026-08-10 11:49:48 +02:00
Jean-Philippe Evrard and GitHub
ace7ad747a
Merge pull request #1403 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.3
...
build(deps): bump jdx/mise-action from 4.2.0 to 4.2.3
2026-08-10 11:49:32 +02:00
Jean-Philippe Evrard and GitHub
1f3146538e
Merge pull request #1392 from kubereboot/dependabot/go_modules/all-2f702b5347
...
build(deps): bump the all group across 1 directory with 2 updates
2026-08-10 11:49:12 +02:00
dependabot[bot] and GitHub
72769759f2
build(deps): bump the all group across 1 directory with 2 updates
...
Bumps the all group with 1 update in the / directory: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ).
Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.23.2...v1.24.1 )
Updates `github.com/prometheus/common` from 0.69.0 to 0.70.1
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/common/compare/v0.69.0...v0.70.1 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-version: 1.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: github.com/prometheus/common
dependency-version: 0.70.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 17:52:38 +00:00
dependabot[bot] and GitHub
6cf396e51b
build(deps): bump jdx/mise-action from 4.2.0 to 4.2.3
...
Bumps [jdx/mise-action](https://github.com/jdx/mise-action ) from 4.2.0 to 4.2.3.
- [Release notes](https://github.com/jdx/mise-action/releases )
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jdx/mise-action/compare/e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d...9e7f7633ff6f6d6048a9418a68d48f288f50eb14 )
---
updated-dependencies:
- dependency-name: jdx/mise-action
dependency-version: 4.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 06:48:25 +00:00
dependabot[bot] and GitHub
4d985c7c70
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 06:48:18 +00:00
dependabot[bot] and GitHub
6089ee71e9
build(deps): bump docker/login-action from 4.2.0 to 4.5.2
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.2.0 to 4.5.2.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...371161bbe7024a29a25c5e19bfcbc0804fe9ad2c )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.5.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-29 06:48:02 +00:00
Jean-Philippe Evrard and GitHub
1f7f15f25e
Merge pull request #1389 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.20.0
2026-07-29 08:47:37 +02:00
Jean-Philippe Evrard and GitHub
ec37867496
Merge pull request #1398 from evrardjp/coherent-go-mod-and-mise-update
2026-07-29 08:46:47 +02:00
Jean-Philippe Evrard and GitHub
0d6693c653
Merge pull request #1394 from evrardjp/bundle-codeql
2026-07-29 08:46:30 +02:00
dependabot[bot] and GitHub
07d5f1fd21
build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.19.4 to 2.20.0.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/9af89fc71515a100421586dfdb3dc9c984fbf411...bf7454d06d71f1098171f2acdf0cd4708d7b5920 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-28 17:32:54 +00:00
Jean-Philippe Evrard
253038c5d7
Bump codeql together
...
Without this, multiple codeql actions are bumped separately,
and there is a risk of failure like in [0][1][2].
[0]: https://github.com/kubereboot/kured/pull/1381
[1]: https://github.com/kubereboot/kured/pull/1384
[2]: https://github.com/kubereboot/kured/pull/1386
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-07-28 17:51:52 +02:00
Jean-Philippe Evrard
18d163a2b1
Ensure mise and go.mod are aligned
...
go.mod and the tool versions (here, mise) need to be in sync.
This creates a test to verify they are aligned.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-07-28 17:51:27 +02:00
Jean-Philippe Evrard and GitHub
c2c263a646
Merge pull request #1396 from evrardjp/fix-CVE-2026-39822
...
fix CVE-2026-39822
2026-07-28 17:49:09 +02:00
Jean-Philippe Evrard
94806e8856
fix CVE-2026-39822
...
Without this, trivy will fail.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-07-28 11:28:11 +02:00
Jean-Philippe Evrard and GitHub
9a98d90e27
Merge pull request #1385 from evrardjp/update_contributing
...
Fix release process
2026-07-04 11:54:30 +02:00
Jean-Philippe Evrard and GitHub
d70ee2978b
Merge pull request #1382 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-4.2.0
...
build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
2026-07-03 18:56:25 +02:00
Jean-Philippe Evrard
a2cafa4f4d
Fix release process
...
We need to keep the previous process to merge broken manifests,
so that people git cloning at each TAG event will receive the
right manifest.
Without this, the update of the kured-ds and kured-ds-signal
happen by dependabot AFTER the release, so it means the tag
is NOT INCLUDING the right manifest.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-07-03 18:54:29 +02:00
dependabot[bot] and GitHub
e45faee425
build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-03 16:37:30 +00:00
Jean-Philippe Evrard and GitHub
3993e90d6d
Merge pull request #1383 from kubereboot/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.3
...
build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
2026-07-03 18:36:24 +02:00
Jean-Philippe Evrard and GitHub
863ce0a032
Merge pull request #1378 from dharsanb/add-release-footnotes
...
Update GoReleaser config to include footer with contribution details
2026-07-03 18:35:13 +02:00
Jean-Philippe Evrard and GitHub
dd8e760ecd
Merge pull request #1379 from kubereboot/dependabot/docker/kubereboot/kured-1.23.0
...
build(deps): bump kubereboot/kured from 1.22.1 to 1.23.0
2026-07-03 18:34:14 +02:00
Jean-Philippe Evrard and GitHub
4b5b1d0a66
Merge pull request #1380 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-4.2.0
...
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
2026-07-03 18:32:15 +02:00
dependabot[bot] and GitHub
a278d5bee5
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:52:50 +00:00
dependabot[bot] and GitHub
a1baec89fd
build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be40b68a1882f3264fb8 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 17:52:36 +00:00
dependabot[bot] and GitHub
b40c59caa8
build(deps): bump kubereboot/kured from 1.22.1 to 1.23.0
...
Bumps [kubereboot/kured](https://github.com/kubereboot/kured ) from 1.22.1 to 1.23.0.
- [Release notes](https://github.com/kubereboot/kured/releases )
- [Commits](https://github.com/kubereboot/kured/compare/1.22.1...1.23.0 )
---
updated-dependencies:
- dependency-name: kubereboot/kured
dependency-version: 1.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-30 17:52:39 +00:00
Dharsan Baskar
9b1319e1b5
ci: update GoReleaser config to include footer with contribution details
...
Signed-off-by: Dharsan Baskar <git@dharsanb.com >
2026-06-30 17:14:09 +05:30
Jean-Philippe Evrard and GitHub
ef3c90b2bd
Merge pull request #1377 from kubereboot/update-gitignore-for-releases
...
Remove trivy cache from checkout folder
1.23.0
2026-06-30 13:27:32 +02:00
Jean-Philippe Evrard
32c87fc982
Remove trivy cache from checkout folder
...
The release process is producing a local image and scanning it
with trivy before continuing the process.
As trivy is by default having its cache in the checked out folder
for the code, the git repository ends up having content, and
considered dirty by goreleaser.
This is a problem, as goreleaser does not want to release if the
git tree is dirty.
This fixes it by ignoring all changes in .cache folder.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-30 13:11:58 +02:00
Jean-Philippe Evrard and GitHub
b70c02ec3f
Merge pull request #1376 from evrardjp/update_contributing_with_new_process
...
Update CONTRIBUTING guide with new instructions
2026-06-30 13:08:58 +02:00
Jean-Philippe Evrard
49e782a1c0
Update CONTRIBUTING guide with new instructions
...
Since we moved to two supported releases instead of 3, we only
have 2 sets of files for kind testing.
We missed updating the CONTRIBUTING guide for it.
This fixes it.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2026-06-30 12:41:03 +02:00
Jean-Philippe Evrard and GitHub
a21f48bd79
Merge pull request #1374 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
2026-06-29 22:10:56 +02:00
dependabot[bot] and GitHub
cc6f490671
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 18:22:09 +00:00
Jean-Philippe Evrard and GitHub
4800cf13b5
Merge pull request #1375 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
...
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 20:20:13 +02:00
Jean-Philippe Evrard and GitHub
344560b6b3
Merge pull request #1373 from kubereboot/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3
...
build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
2026-06-29 20:19:59 +02:00
dependabot[bot] and GitHub
496c5061b1
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
...
Bumps [jdx/mise-action](https://github.com/jdx/mise-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases )
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jdx/mise-action/compare/v4.1.0...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d )
---
updated-dependencies:
- dependency-name: jdx/mise-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 17:52:56 +00:00
dependabot[bot] and GitHub
2c5e9b5009
build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 7.2.2 to 7.2.3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89...f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-version: 7.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 17:52:27 +00:00
Jean-Philippe Evrard and GitHub
22c0c14e88
Merge pull request #1367 from kubereboot/dependabot/go_modules/kubernetes-5d633567bd
...
build(deps): bump the kubernetes group with 4 updates
2026-06-29 18:58:32 +02:00
Jean-Philippe Evrard and GitHub
45543beb1e
Merge pull request #1369 from kubereboot/dependabot/go_modules/all-a69d9c8a96
...
build(deps): bump github.com/prometheus/common from 0.68.1 to 0.69.0 in the all group
2026-06-29 18:58:00 +02:00
Jean-Philippe Evrard and GitHub
f2c74b3890
Merge pull request #1363 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.19.4
...
build(deps): bump step-security/harden-runner from 2.14.0 to 2.19.4
2026-06-29 18:57:35 +02:00
Jean-Philippe Evrard and GitHub
c775910f6d
Merge pull request #1355 from evrardjp/improve_testing
...
Simplify testing
2026-06-29 18:57:05 +02:00
Jean-Philippe Evrard and GitHub
7c3712cc06
Merge pull request #1368 from kubereboot/dependabot/docker/alpine-3.24.1
...
build(deps): bump alpine from 3.24.0 to 3.24.1
2026-06-29 18:55:49 +02:00
Jean-Philippe Evrard and GitHub
efdb3ab888
Merge pull request #1370 from kubereboot/dependabot/github_actions/jdx/mise-action-4.2.0
...
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
2026-06-29 18:54:45 +02:00
Jean-Philippe Evrard and GitHub
31236bcec1
Merge pull request #1371 from kubereboot/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
2026-06-29 18:54:22 +02:00
dependabot[bot] and GitHub
5e19c8ac21
build(deps): bump actions/checkout from 6.0.1 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-18 17:52:46 +00:00
dependabot[bot] and GitHub
a9d8f3cf8e
build(deps): bump jdx/mise-action from 4.1.0 to 4.2.0
...
Bumps [jdx/mise-action](https://github.com/jdx/mise-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/jdx/mise-action/releases )
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jdx/mise-action/compare/dba19683ed58901619b14f395a24841710cb4925...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d )
---
updated-dependencies:
- dependency-name: jdx/mise-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-18 17:52:24 +00:00
dependabot[bot] and GitHub
27101f28e5
build(deps): bump github.com/prometheus/common in the all group
...
Bumps the all group with 1 update: [github.com/prometheus/common](https://github.com/prometheus/common ).
Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:52:39 +00:00
dependabot[bot] and GitHub
1addff927e
build(deps): bump alpine from 3.24.0 to 3.24.1
...
Bumps alpine from 3.24.0 to 3.24.1.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.24.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-16 17:52:35 +00:00
dependabot[bot] and GitHub
3ebe1b05d0
build(deps): bump the kubernetes group with 4 updates
...
Bumps the kubernetes group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api ), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ), [k8s.io/client-go](https://github.com/kubernetes/client-go ) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl ).
Updates `k8s.io/api` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2 )
Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2 )
Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2 )
Updates `k8s.io/kubectl` from 0.36.1 to 0.36.2
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.36.1...v0.36.2 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
- dependency-name: k8s.io/client-go
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
- dependency-name: k8s.io/kubectl
dependency-version: 0.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: kubernetes
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-15 17:53:10 +00:00