Commit Graph
7852 Commits
Author SHA1 Message Date
6543 f36a8272be Frontport release 3.14.1 (#6568) (#6570) 2026-05-12 13:32:20 +02:00
6543 908d793652 server: for grpc store extracted agentID in context (#6569)
long term fix for: #6541

simple backport is found at #6567
2026-05-12 13:22:45 +02:00
renovate[bot]andlnx01 a80cc21bdf Update web npm deps non-major (#6446)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 12:37:44 +02:00
renovate[bot]andlnx01 a76997796b Update module gitlab.com/gitlab-org/api/client-go/v2 to v2.25.0 (#6566)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 08:09:32 +02:00
qwerty287 3a0a551185 Translated using Weblate (German)
Currently translated at 100.0% (450 of 450 strings)

Translation: Woodpecker CI/UI
Translate-URL: https://translate.woodpecker-ci.org/projects/woodpecker-ci/ui/de/
2026-05-11 17:59:08 +00:00
23260bc7b9 Group logs by command in step logs UI and make them collapsible (#6398)
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2026-05-11 13:02:01 +02:00
renovate[bot]andlnx01 d9c25cd601 Update module github.com/google/go-github/v85 to v86 (#6560)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 12:55:51 +02:00
renovate[bot]andlnx01 7f3dc3d3ed Lock file maintenance (#6563)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 02:41:13 +02:00
renovate[bot]andlnx01 cf419b721c Update golang-packages (#6562)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 02:33:01 +02:00
cbb43406c8 Update docs npm deps non-major (#6555)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <qwerty287@posteo.de>
Co-authored-by: 6543 <6543@obermui.de>
2026-05-10 17:25:14 +02:00
6543 3d119ddbb4 Pin pnpm to v10.33.4 (#6559) 2026-05-09 23:30:04 +03:00
renovate[bot]andlnx01 12006788a9 Update dependency mvdan/gofumpt to v0.10.0 (#6558)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-09 10:22:15 +02:00
renovate[bot]andlnx01 2938fb076b Update dependency golangci/golangci-lint to v2.12.2 (#6556)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-09 07:17:04 +02:00
renovate[bot]andlnx01 ed59b63d23 Update pre-commit hook golangci/golangci-lint to v2.12.2 (#6557)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-09 07:11:59 +02:00
renovate[bot]andlnx01 bc074b88a0 Update dependency golang to v1.26.3 (#6554)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-09 03:54:33 +02:00
6543 094c8a7b8f golangci: upgrade gomodguard to gomodguard_2 (#6549) 2026-05-07 15:05:49 +02:00
6543 9130c497d4 Expose step type to step env (#4290) 2026-05-07 13:08:54 +02:00
renovate[bot]andlnx01 ff5c84874f Update golang-packages (#6548)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-07 02:23:26 +02:00
wucm667 a7a123dc8b fix(agent): persist agent ID after auth to prevent crashloop duplicates (#6543)
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
2026-05-07 02:12:15 +02:00
qwerty287 98b0140b75 Add 3rd party secret extensions list (#6546) 2026-05-07 01:53:05 +02:00
renovate[bot]andlnx01 28450371ef Update module gitlab.com/gitlab-org/api/client-go/v2 to v2.24.1 (#6545)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-06 03:38:17 +02:00
Edward SalterandClaude Opus 4.7 97eae443c6 fix(gitlab): preserve private flag when webhook payload omits project visibility (#6544)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-06 00:25:30 +02:00
renovate[bot]andlnx01 db63579df6 Update golang-packages (#6542)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-05 09:17:27 +02:00
為什麼不加空格 065e65040a Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 53.7% (241 of 448 strings)

Translation: Woodpecker CI/UI
Translate-URL: https://translate.woodpecker-ci.org/projects/woodpecker-ci/ui/zh_Hant/
2026-05-04 17:17:35 +00:00
renovate[bot]andlnx01 d78c843c42 Lock file maintenance (#6540)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-04 03:40:39 +02:00
為什麼不加空格 5bbb09e937 Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 48.2% (216 of 448 strings)

Translation: Woodpecker CI/UI
Translate-URL: https://translate.woodpecker-ci.org/projects/woodpecker-ci/ui/zh_Hant/
2026-05-03 13:24:26 +00:00
renovate[bot]andlnx01 110592eed6 Update module github.com/docker/cli to v29.4.2+incompatible (#6539)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-03 02:15:39 +00:00
renovate[bot]andlnx01 f19b210531 Update dependency axios to v1.16.0 (#6538)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 19:42:19 +02:00
renovate[bot]andlnx01 a0022224c3 Update golangci/golangci-lint Docker tag to v2.12.1 (#6537)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 15:17:26 +02:00
renovate[bot]andlnx01 4f774c8853 Update dependency yaml to v2.8.4 (#6536)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 15:09:25 +02:00
renovate[bot]andlnx01 f863977f9d Update pre-commit hook golangci/golangci-lint to v2.12.1 (#6535)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 11:08:21 +02:00
renovate[bot]andlnx01 0b9d813347 Update docker.io/woodpeckerci/plugin-docker-buildx Docker tag to v6.1.0 (#6534)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 11:05:47 +02:00
renovate[bot]andlnx01 37c2999eac Update dependency golangci/golangci-lint to v2.12.0 (#6533)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 10:57:33 +02:00
renovate[bot]andlnx01 7f44472f33 Update dependency isomorphic-dompurify to v3.12.0 (#6532)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 07:16:22 +02:00
renovate[bot]andlnx01 2b209d33b2 Update woodpeckerci/plugin-release Docker tag to v0.3.1 (#6531)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 07:08:49 +02:00
renovate[bot]andlnx01 8c3233bc8a Update docs npm deps non-major (#6530)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 03:39:47 +02:00
renovate[bot]andlnx01 00c9b48cd0 Update docker.io/lycheeverse/lychee Docker tag to v0.24.2 (#6529)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 03:37:23 +02:00
Anbool c718b03b74 Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 100.0% (448 of 448 strings)

Translation: Woodpecker CI/UI
Translate-URL: https://translate.woodpecker-ci.org/projects/woodpecker-ci/ui/zh_Hans/
2026-05-01 21:49:30 +00:00
6543 7cef7a8a15 pipeline runtime: move setting step environment variables into own func and add CI_PIPELINE_STATUS back (#6516) 2026-05-01 15:40:52 +02:00
6543 63fccbed96 Refactor agent rpc retry (#6515) 2026-05-01 12:49:40 +02:00
woodpecker-botand6543 af313aad34 🎉 Release 3.14.0 (#6514)
Co-authored-by: 6543 <6543@obermui.de>
v3.14.0
2026-05-01 11:24:44 +02:00
6543andqwerty287 9d55d0bf07 Create Docs for v3.14.0 (#6163)
Co-authored-by: qwerty287 <qwerty287@posteo.de>
2026-05-01 11:01:28 +02:00
f3e3b83e37 Update golang-packages (#6524)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <qwerty287@posteo.de>
2026-05-01 08:05:29 +02:00
wucm667 1ffa588f87 fix(web): escape HTML in commit messages to prevent XSS (#6523)
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
2026-05-01 03:07:20 +02:00
6543 9c0b2e7a4b docs: better description for when.status filter (#6517) 2026-04-30 18:06:20 +02:00
Ryan Finnie 6ca7159df9 docs: Add woodpecker-shellcheck lint to awesome list (#6521) 2026-04-30 07:24:29 +02:00
Anbool c1aea9c4ec Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 100.0% (448 of 448 strings)

Translation: Woodpecker CI/UI
Translate-URL: https://translate.woodpecker-ci.org/projects/woodpecker-ci/ui/zh_Hans/
2026-04-29 05:55:08 +00:00
6543 01e377e731 Translated using Weblate (Norwegian Bokmål)
Currently translated at 94.4% (423 of 448 strings)

Translation: Woodpecker CI/UI
Translate-URL: https://translate.woodpecker-ci.org/projects/woodpecker-ci/ui/nb_NO/
2026-04-29 04:19:50 +00:00
renovate[bot]andlnx01 54413bf325 Update golang-packages (#6519)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-29 02:43:33 +02:00
Alex Caston 85c71fb01e Kubernetes: precreate workingDir as nonroot when required (#6322)
### Problem
When the working directory is set to a directory that doesn't exists (for example, as `plugin-git` does), kubelet will pre-create it with ownership set to `root:root` and permissions `0755` . This makes pods running as non-root unable to write to it, causing permission errors.

### Solution
Added a `podInitContainer` function that conditionally creates an init container to pre-create the working directory with the correct permissions before the main step container starts.

### Behavior
- If the pod runs as root (`RunAsUser == 0` or unset), no init container is created. Kubelet handles directory creation automatically
- If the working directory matches a volume mount path exactly, no init container is needed. `FSGroupChangePolicy` handles permissions
- An init container is only created when the working directory is nested within a volume mount path
- The init container uses `busybox:stable-musl` with minimal resource limits (5m CPU, 5Mi memory) and drops all capabilities.

### Related issues and PRs
- Solves the error mentioned in https://github.com/woodpecker-ci/woodpecker/issues/5346#issuecomment-3211408746 without requiring a previous step.
- In addition to #6307 and #6310, this will make it easier to run woodpecker ci workloads in a namespace that enforces [Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/)
2026-04-28 17:21:45 +02:00