enix-renovate[bot] and Thibault VINCENT
53812611ed
chore: update github-actions
2026-08-10 10:38:50 +02:00
enix-renovate[bot] and Thibault VINCENT
aed1c836f1
chore: update dorny/paths-filter digest to ceb8a2b
2026-08-05 17:43:17 +02:00
Thibault VINCENT and Thibault VINCENT
005e3be66d
ci(release): drop stale gitleaks-action permission and secrets passthrough
2026-08-04 20:51:18 +02:00
enix-renovate[bot] and Thibault VINCENT
ff46fde944
chore: update helm to v4.2.3
2026-08-04 19:26:19 +02:00
enix-renovate[bot] and Thibault VINCENT
9f20a83bf4
chore: update dependency goreleaser/goreleaser to v2.17.1
2026-08-04 19:12:27 +02:00
enix-renovate[bot] and Thibault VINCENT
255ddb5399
chore: update github-actions
2026-08-04 18:55:59 +02:00
Thibault VINCENT and Thibault VINCENT
8c9d672792
ci: pin action comments to full versions so Renovate can resolve digests
2026-08-04 18:46:59 +02:00
enix-renovate[bot] and Thibault VINCENT
06406e0830
chore: update github-actions to v7
2026-08-04 16:11:36 +02:00
Thibault VINCENT and Thibault VINCENT
9bafa291d8
fix(ci): push dagger module sync with the App token and let Renovate ignore it
2026-08-04 16:01:26 +02:00
Thibault VINCENT and Thibault VINCENT
bf65ac3c6a
fix(ci): check out the fork repo when syncing the dagger module
2026-08-04 16:01:26 +02:00
Thibault VINCENT and Thibault VINCENT
10b5cc36ec
build(dagger): derive the CLI version from dagger.json everywhere
2026-08-04 16:01:26 +02:00
enix-renovate[bot] and Thibault VINCENT
9f5ff5330b
chore: update github-actions
2026-08-04 15:26:20 +02:00
enix-renovate[bot] and Thibault VINCENT
0332c8dc75
chore: update github-actions
2026-07-06 16:30:39 +02:00
enix-renovate[bot] and Thibault VINCENT
c9525d9e41
chore: update actions/checkout action to v7
2026-06-30 18:41:58 +02:00
enix-renovate[bot] and Thibault VINCENT
0844fcdd0d
chore: update dependency helm/helm to v4.2.2
2026-06-30 18:15:41 +02:00
enix-renovate[bot] and Thibault VINCENT
f04a94a832
chore: update github-actions
2026-06-30 18:08:25 +02:00
Thibault VINCENT and Thibault VINCENT
a1a454659e
ci(security): drop persisted credentials on checkouts, shallow gitleaks fetch
2026-06-16 17:49:18 +02:00
Thibault VINCENT and Thibault VINCENT
1266ec8b74
ci(security): scan secrets via gitleaks CLI in Dagger, not gitleaks-action
2026-06-16 17:49:18 +02:00
Thibault VINCENT and Thibault VINCENT
8b058ba558
ci: bump action versions
2026-06-15 17:30:35 +02:00
enix-renovate[bot] and Thibault VINCENT
69e244467d
chore: update github-actions
2026-06-15 16:57:44 +02:00
enix-renovate[bot] and Thibault VINCENT
e66c84ad1d
chore: update dependency helm/helm to v4.2.1
2026-06-15 16:57:15 +02:00
enix-renovate[bot] and Thibault VINCENT
32ae8bbb84
chore: update github-actions
2026-05-25 11:34:44 +02:00
enix-renovate[bot] and Thibault VINCENT
1b0b5b21ac
chore: update dependency goreleaser/goreleaser to v2.16.0
2026-05-25 11:32:29 +02:00
Thibault VINCENT and Thibault VINCENT
8e3bdfe833
ci(codeql): exclude weak-sensitive-data-hashing for JKS/JCEKS HMAC
...
The JKS/JCEKS wire format mandates SHA-1 in its keyed digest
(com.sun.crypto.provider.JceKeyStore.getPreKeyedHash). The exporter
verifies this digest before parsing — it never derives a key or signs
anything. Project-wide suppression is safe because the codebase has
no other password-hashing surface.
2026-05-15 16:54:25 +02:00
Thibault VINCENT
ca8e314ae8
bump(ci): upgrade actions
2026-05-15 15:41:05 +02:00
Thibault VINCENT
bfdedde05c
ci: update actions/create-github-app-token
2026-05-13 10:40:17 +02:00
enix-renovate[bot] and Thibault VINCENT
73ef68f5be
chore: update github-actions
2026-05-11 11:13:47 +02:00
Thibault VINCENT
abbb9b5fa8
feat(chart): values.schema.json with strict mode + helm-side regression tests
2026-05-06 01:21:22 +02:00
Thibault VINCENT
656f59a86a
ci(lint): validate docs/examples values files against the chart
2026-05-05 23:44:50 +02:00
Thibault VINCENT
3cea78d2e4
ci(release): patch artifacthub.io/prerelease in chart/Chart.yaml from the tag
2026-05-05 16:16:43 +02:00
Thibault VINCENT
36d65e7e42
ci(release): merge chart publish and classic-index update into one job
2026-05-05 16:05:32 +02:00
Thibault VINCENT
c40605674d
ci(release): fix flaky upload of goreleaser assets to Github
2026-05-04 18:44:06 +02:00
Thibault VINCENT
963af055d2
ci(release): fix push path of classic helm index
2026-05-04 17:29:47 +02:00
Thibault VINCENT
58a7aebc47
fix(release): workflow call for classic helm assumes quay.io
2026-05-04 15:48:22 +02:00
Thibault VINCENT
53c788e2f0
ci(release): use the chart dedicated token for Oras
2026-05-04 14:25:54 +02:00
Thibault VINCENT
98eabf7e27
ci(release): add chart release to the classic helm repo
2026-05-04 13:41:08 +02:00
Thibault VINCENT
f4379083cc
chore(renovate): new manager to bump helm in workflows
2026-05-04 13:24:20 +02:00
Thibault VINCENT
5d820d0889
chore(renovate): pin goreleaser version pulled by the action
2026-05-04 10:50:29 +02:00
Thibault VINCENT
679b979a2f
ci(release-please): workflow disabled
2026-05-04 04:06:13 +02:00
Thibault VINCENT
4a84907af9
ci(release): fix cosign chart auth, gate prerelease floating tags, dedup SBOMs
2026-05-04 02:30:23 +02:00
Thibault VINCENT
2515a87172
ci(release): missing registry login for cosign
2026-05-04 01:46:25 +02:00
Thibault VINCENT
1ec92ab53d
ci(release): no need to run e2e tests on release
2026-05-03 17:50:06 +02:00
Thibault VINCENT
fefccd3313
ci(release): make security a prerequisite for lint and test
2026-05-03 17:49:39 +02:00
Thibault VINCENT
15955c20ed
ci(test): allow skipping e2e testing
2026-05-03 17:48:37 +02:00
Thibault VINCENT
b0de8ba894
ci(lint): allow skipping individual lint jobs
2026-05-03 17:48:25 +02:00
Thibault VINCENT
282f6f833f
ci(release): goreleaser needs the workflow token
2026-05-03 17:27:29 +02:00
Thibault VINCENT
991841b387
ci: fix release stuck on lint/security/test detecting no change
2026-05-03 17:04:58 +02:00
Thibault VINCENT
b5e70677e4
ci(release): test workflow inherits non-release secrets
2026-05-03 16:46:08 +02:00
Thibault VINCENT
8fbdd80980
ci(renovate): use the workflow token for github 2/
2026-05-02 18:01:24 +02:00
Thibault VINCENT
23a6c19fe3
ci(renovate): use the workflow token for github
2026-05-02 17:54:24 +02:00
