Sanket Sudake and GitHub
87033d7e30
Update SECURITY.md ( #3151 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-23 15:36:32 +05:30
Sanket Sudake and GitHub
0292a2120d
Adopt custom defaulter and validator interface for webhooks intead of deprecated default ( #3152 )
...
* Move webhooks to webhooks package
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* change interface
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Change interface methods
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* comment debug logs for now
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* rename files
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Fix webhook warnings
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Update makefile
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* lint fixes
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-23 15:36:07 +05:30
Sanket Sudake and GitHub
aca9114b75
Duplicate Job names in helm chart templates ( #3150 )
...
Fixes #3127
Update job names in helm chart templates to avoid conflicts.
* Change the `metadata.name` field in `charts/fission-all/templates/analytics/post-install-job.yaml` to `{{ template "fullname" . }}-{{ .Chart.Version }}-post-install`.
* Change the `metadata.name` field in `charts/fission-all/templates/analytics/post-upgrade-job.yaml` to `{{ template "fullname" . }}-{{ .Chart.Version }}-post-upgrade`.
---
For more details, open the [Copilot Workspace session](https://copilot-workspace.githubnext.com/fission/fission/issues/3127?shareId=XXXX-XXXX-XXXX-XXXX ).
2025-01-22 18:12:14 +05:30
5af4ab8f0c
Bump the docker-images group across 5 directories with 1 update ( #3149 )
...
Bumps the docker-images group with 1 update in the /cmd/builder directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fetcher directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fission-bundle directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/preupgradechecks directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/reporter directory: [chainguard/static](https://github.com/chainguard-images/images ).
Updates `chainguard/static` from `7e1e8a0` to `5497b01`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `7e1e8a0` to `5497b01`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `7e1e8a0` to `5497b01`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `7e1e8a0` to `5497b01`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `7e1e8a0` to `5497b01`
- [Commits](https://github.com/chainguard-images/images/commits )
---
updated-dependencies:
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-21 23:18:39 +05:30
002c492b09
Bump the github-actions group with 2 updates ( #3148 )
...
Bumps the github-actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner ) and [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ).
Updates `step-security/harden-runner` from 2.10.3 to 2.10.4
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/c95a14d0e5bab51a9f56296a4eb0e416910cd350...cb605e52c26070c328afc4562f0b4ada7618a84e )
Updates `golangci/golangci-lint-action` from 6.1.1 to 6.2.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/971e284b6050e8a5849b72094c50ab08da042db8...ec5d18412c0aeab7936cb16880d708ba2a64e1ae )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-20 17:21:27 +05:30
795a4225d5
fix: custom runtime container name is invalid ( #3065 )
...
* fix: custom runtime container name is invalid
* lint: pkg/executor/executortype/newdeploy/newdeploy.go
* Custom name for runtime container
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
---------
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
Co-authored-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
2025-01-20 16:41:18 +05:30
Sanket Sudake and GitHub
0894ad08da
Update chart version v1.21.0-rc2 ( #3146 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-19 10:58:03 +05:30
3923b5aaeb
Bump the docker-images group across 5 directories with 1 update ( #3139 )
...
Bumps the docker-images group with 1 update in the /cmd/builder directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fetcher directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fission-bundle directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/preupgradechecks directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/reporter directory: [chainguard/static](https://github.com/chainguard-images/images ).
Updates `chainguard/static` from `f96b5a6` to `7e1e8a0`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f96b5a6` to `7e1e8a0`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f96b5a6` to `7e1e8a0`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f96b5a6` to `7e1e8a0`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f96b5a6` to `7e1e8a0`
- [Commits](https://github.com/chainguard-images/images/commits )
---
updated-dependencies:
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-16 12:50:05 +05:30
Sanket Sudake and GitHub
5e189af471
Use GHCR repo for fetcher image by default ( #3145 )
...
* Use GHCR repo for fetcher image by default
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Fix help template
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Fix all templates used
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-16 12:35:18 +05:30
Sanket Sudake and GitHub
b1973d2d41
Update chart version v1.21.0-rc1 ( #3143 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-13 18:44:50 +05:30
47b93a1051
PR-3051: Fix download deploy package out of k8s cluster ( #3136 )
...
* Fix download deploy package out of k8s cluster
Signed-off-by: LiuXiang <lx1036@126.com >
* Fix pkg getdeploy cli command to fetch pkgs stored in storagesvc and remote pkgs
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
* Instead of Contains, parse url and check path for better validation
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
---------
Signed-off-by: LiuXiang <lx1036@126.com >
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
Co-authored-by: LiuXiang <lx1036@126.com >
2025-01-13 12:55:50 +05:30
cc55011cc6
Bump the github-actions group with 4 updates ( #3140 )
...
Bumps the github-actions group with 4 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner ), [github/codeql-action](https://github.com/github/codeql-action ), [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ).
Updates `step-security/harden-runner` from 2.10.2 to 2.10.3
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/0080882f6c36860b6ba35c610c98ce87d4e2f26f...c95a14d0e5bab51a9f56296a4eb0e416910cd350 )
Updates `github/codeql-action` from 3.28.0 to 3.28.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/48ab28a6f5dbc2a99bf1e0131198dd8f1df78169...b6a472f63d85b9c78a3ac5e89422239fc15e9b3c )
Updates `actions/upload-artifact` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/6f51ac03b9356f520e9adb1b1b7802705f340c2b...65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 )
Updates `docker/setup-qemu-action` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/49b3bc8e6bdd4a60e6116a5414239cba5943d3cf...53851d14592bedcffcf25ea515637cff71ef929a )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-13 10:57:52 +05:30
7c754a9283
Bump the go-dependencies group with 4 updates ( #3141 )
...
Bumps the go-dependencies group with 4 updates: [github.com/IBM/sarama](https://github.com/IBM/sarama ), [github.com/mholt/archives](https://github.com/mholt/archives ), [golang.org/x/net](https://github.com/golang/net ) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ).
Updates `github.com/IBM/sarama` from 1.44.0 to 1.45.0
- [Release notes](https://github.com/IBM/sarama/releases )
- [Changelog](https://github.com/IBM/sarama/blob/main/CHANGELOG.md )
- [Commits](https://github.com/IBM/sarama/compare/v1.44.0...v1.45.0 )
Updates `github.com/mholt/archives` from 0.0.0-20241226194006-fc8400ac3529 to 0.1.0
- [Release notes](https://github.com/mholt/archives/releases )
- [Commits](https://github.com/mholt/archives/commits/v0.1.0 )
Updates `golang.org/x/net` from 0.33.0 to 0.34.0
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.34.0 )
Updates `sigs.k8s.io/controller-runtime` from 0.19.3 to 0.19.4
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.19.3...v0.19.4 )
---
updated-dependencies:
- dependency-name: github.com/IBM/sarama
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/mholt/archives
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-13 10:26:21 +05:30
Sanket Sudake and GitHub
98034a0264
Update k8s versions and set minimum version to 1.27.0 ( #3134 )
...
* Update Kind Kuberntes versions
* Minimum k8s version to 1.27.0
* Pin ubuntu version in actions
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-08 12:49:54 +05:30
Sanket Sudake and GitHub
3070404bf9
Use mholt/archives instead of mholt/archiver ( #3128 )
...
* Use mholt/archives instead of mholt/archiver
* Fix validations
* Fix iszip function
* Fix directory
* Add better path sanitization
* ensure safe dir is passed
* Fix file permissions
* Fix config path
* Sanitize builder source path
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-08 11:00:54 +05:30
Sanket Sudake and GitHub
f798a24f4d
Use controller-gen and code-generator latest version ( #3133 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2025-01-06 23:27:26 +05:30
7d51ea5a73
Bump the go-dependencies group with 3 updates ( #3131 )
...
Bumps the go-dependencies group with 3 updates: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ), [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools ) and [sigs.k8s.io/structured-merge-diff/v4](https://github.com/kubernetes-sigs/structured-merge-diff ).
Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.13.1
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1 )
Updates `sigs.k8s.io/controller-tools` from 0.16.5 to 0.17.0
- [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/envtest-releases.yaml )
- [Commits](https://github.com/kubernetes-sigs/controller-tools/compare/v0.16.5...v0.17.0 )
Updates `sigs.k8s.io/structured-merge-diff/v4` from 4.4.2 to 4.5.0
- [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases )
- [Changelog](https://github.com/kubernetes-sigs/structured-merge-diff/blob/master/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/structured-merge-diff/compare/v4.4.2...v4.5.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/controller-tools
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/structured-merge-diff/v4
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-06 15:51:26 +05:30
1c318d8145
Bump the docker-images group across 5 directories with 1 update ( #3132 )
...
Bumps the docker-images group with 1 update in the /cmd/builder directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fetcher directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fission-bundle directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/preupgradechecks directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/reporter directory: [chainguard/static](https://github.com/chainguard-images/images ).
Updates `chainguard/static` from `f5fe67a` to `f96b5a6`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f5fe67a` to `f96b5a6`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f5fe67a` to `f96b5a6`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f5fe67a` to `f96b5a6`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `f5fe67a` to `f96b5a6`
- [Commits](https://github.com/chainguard-images/images/commits )
---
updated-dependencies:
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-06 15:05:50 +05:30
sofsms and GitHub
bd59b935dd
Update create.go to handle namespace isolation ( #3130 )
2025-01-03 23:28:02 +05:30
Dnowan Methy and GitHub
4fd3d6672f
fix: fix slice init length ( #3064 )
...
Signed-off-by: occupyhabit <wangmengjiao@outlook.com >
2025-01-01 22:26:18 +05:30
LiuXiang and GitHub
76d16e58db
Log only related configmap and secret ( #3049 )
...
Signed-off-by: LiuXiang <lx1036@126.com >
2025-01-01 22:13:36 +05:30
Simon Emms and GitHub
cbeaef3a86
fix: apply kubernetes resources to the webhook-server ( #3084 )
2024-12-30 14:59:56 +05:30
b573627181
Bump the go-dependencies group across 1 directory with 25 updates ( #3125 )
...
* Bump the go-dependencies group across 1 directory with 25 updates
Bumps the go-dependencies group with 13 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [github.com/IBM/sarama](https://github.com/IBM/sarama ) | `1.43.3` | `1.44.0` |
| [github.com/fatih/color](https://github.com/fatih/color ) | `1.17.0` | `1.18.0` |
| [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify ) | `1.7.0` | `1.8.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) | `5.12.0` | `5.13.0` |
| [github.com/influxdata/influxdb](https://github.com/influxdata/influxdb ) | `1.11.6` | `1.11.8` |
| [github.com/kedacore/keda/v2](https://github.com/kedacore/keda ) | `2.15.1` | `2.16.1` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.55.0` | `0.58.0` |
| [go.opentelemetry.io/contrib/propagators/autoprop](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.55.0` | `0.58.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.32.0` | `1.33.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.32.0` | `1.33.0` |
| [k8s.io/api](https://github.com/kubernetes/api ) | `0.31.3` | `0.32.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ) | `0.31.3` | `0.32.0` |
| [k8s.io/metrics](https://github.com/kubernetes/metrics ) | `0.31.3` | `0.32.0` |
Updates `github.com/IBM/sarama` from 1.43.3 to 1.44.0
- [Release notes](https://github.com/IBM/sarama/releases )
- [Changelog](https://github.com/IBM/sarama/blob/main/CHANGELOG.md )
- [Commits](https://github.com/IBM/sarama/compare/v1.43.3...v1.44.0 )
Updates `github.com/fatih/color` from 1.17.0 to 1.18.0
- [Release notes](https://github.com/fatih/color/releases )
- [Commits](https://github.com/fatih/color/compare/v1.17.0...v1.18.0 )
Updates `github.com/fsnotify/fsnotify` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/fsnotify/fsnotify/releases )
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fsnotify/fsnotify/compare/v1.7.0...v1.8.0 )
Updates `github.com/go-git/go-git/v5` from 5.12.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0 )
Updates `github.com/influxdata/influxdb` from 1.11.6 to 1.11.8
- [Release notes](https://github.com/influxdata/influxdb/releases )
- [Commits](https://github.com/influxdata/influxdb/compare/v1.11.6...v1.11.8 )
Updates `github.com/kedacore/keda/v2` from 2.15.1 to 2.16.1
- [Release notes](https://github.com/kedacore/keda/releases )
- [Changelog](https://github.com/kedacore/keda/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kedacore/keda/compare/v2.15.1...v2.16.1 )
Updates `github.com/prometheus/common` from 0.59.1 to 0.61.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md )
- [Commits](https://github.com/prometheus/common/compare/v0.59.1...v0.61.0 )
Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.55.0 to 0.58.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.55.0...zpages/v0.58.0 )
Updates `go.opentelemetry.io/contrib/propagators/autoprop` from 0.55.0 to 0.58.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.55.0...zpages/v0.58.0 )
Updates `go.opentelemetry.io/otel` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.32.0...v1.33.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.32.0...v1.33.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.32.0...v1.33.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.32.0...v1.33.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.32.0...v1.33.0 )
Updates `golang.org/x/net` from 0.30.0 to 0.33.0
- [Commits](https://github.com/golang/net/compare/v0.30.0...v0.33.0 )
Updates `google.golang.org/grpc` from 1.67.1 to 1.69.2
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.1...v1.69.2 )
Updates `k8s.io/api` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/api/compare/v0.31.3...v0.32.0 )
Updates `k8s.io/apiextensions-apiserver` from 0.31.3 to 0.32.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.31.3...v0.32.0 )
Updates `k8s.io/apimachinery` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.3...v0.32.0 )
Updates `k8s.io/client-go` from 0.31.3 to 0.32.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.3...v0.32.0 )
Updates `k8s.io/code-generator` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/code-generator/compare/v0.31.3...v0.32.0 )
Updates `k8s.io/metrics` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/metrics/compare/v0.31.3...v0.32.0 )
Updates `sigs.k8s.io/controller-tools` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/envtest-releases.yaml )
- [Commits](https://github.com/kubernetes-sigs/controller-tools/compare/v0.16.3...v0.16.5 )
Updates `sigs.k8s.io/structured-merge-diff/v4` from 4.4.1 to 4.4.2
- [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases )
- [Changelog](https://github.com/kubernetes-sigs/structured-merge-diff/blob/master/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/structured-merge-diff/compare/v4.4.1...v4.4.2 )
---
updated-dependencies:
- dependency-name: github.com/IBM/sarama
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/fatih/color
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/fsnotify/fsnotify
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/go-git/go-git/v5
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/influxdata/influxdb
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: github.com/kedacore/keda/v2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/contrib/propagators/autoprop
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/code-generator
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: k8s.io/metrics
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/controller-tools
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/structured-merge-diff/v4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
* Lint fixes
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* Few more lint fixes
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-30 14:49:14 +05:30
Sanket Sudake and GitHub
81da25a76f
Update Go version to 1.23.4 ( #3126 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-30 11:21:21 +05:30
Sanket Sudake and GitHub
3550d8d7e2
Fix SBOM and provenance for releases ( #3124 )
...
* Provenance generation fixes
* try sbom flags
* remove unwanted changes
* add container sbom support
* Fix more labels
* Fix env variable
* revert local changes
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-30 09:21:01 +05:30
38228d3577
Bump helm/kind-action from 1.11.0 to 1.12.0 in the github-actions group ( #3122 )
...
Bumps the github-actions group with 1 update: [helm/kind-action](https://github.com/helm/kind-action ).
Updates `helm/kind-action` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/ae94020eaf628e9b9b9f341a10cc0cdcf5c018fb...a1b0e391336a6ee6713a0583f8c6240d70863de3 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-26 12:59:35 +05:30
0e327517fa
Bump the docker-images group across 5 directories with 1 update ( #3121 )
...
Bumps the docker-images group with 1 update in the /cmd/builder directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fetcher directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/fission-bundle directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/preupgradechecks directory: [chainguard/static](https://github.com/chainguard-images/images ).
Bumps the docker-images group with 1 update in the /cmd/reporter directory: [chainguard/static](https://github.com/chainguard-images/images ).
Updates `chainguard/static` from `5ff428f` to `f5fe67a`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `5ff428f` to `f5fe67a`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `5ff428f` to `f5fe67a`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `5ff428f` to `f5fe67a`
- [Commits](https://github.com/chainguard-images/images/commits )
Updates `chainguard/static` from `5ff428f` to `f5fe67a`
- [Commits](https://github.com/chainguard-images/images/commits )
---
updated-dependencies:
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
- dependency-name: chainguard/static
dependency-type: direct:production
dependency-group: docker-images
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-26 12:53:48 +05:30
17df22ff33
Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group ( #3110 )
...
Bumps the go_modules group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto ).
Updates `golang.org/x/crypto` from 0.28.0 to 0.31.0
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-26 12:06:59 +05:30
Sanket Sudake and GitHub
40415ac38e
Update dependabot.yml grouping ( #3119 )
2024-12-26 12:03:49 +05:30
6702f56897
Bump Github Actions versions ( #3118 )
...
Bumps the global group with 9 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.1.1` | `4.2.2` |
| [actions/setup-go](https://github.com/actions/setup-go ) | `5.1.0` | `5.2.0` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.26.9` | `3.28.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action ) | `5.1.1` | `5.1.2` |
| [helm/kind-action](https://github.com/helm/kind-action ) | `1.10.0` | `1.11.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) | `6.0.0` | `6.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `4.4.3` | `4.5.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action ) | `0.17.8` | `0.17.9` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) | `2.3.1` | `2.4.0` |
Updates `actions/checkout` from 4.1.1 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...11bd71901bbe5b1630ceea73d27597364c9af683 )
Updates `actions/setup-go` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed...3041bf56c941b39c61721a86cd11f3bb1338122a )
Updates `github/codeql-action` from 3.26.9 to 3.28.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.26.9...48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 )
Updates `codecov/codecov-action` from 5.1.1 to 5.1.2
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/7f8b4b4bde536c465e797be725718b88c5d95e0e...1e68e06f1dbfde0e4cefc87efeba9e4643565303 )
Updates `helm/kind-action` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/0025e74a8c7512023d06dc019c617aa3cf561fde...ae94020eaf628e9b9b9f341a10cc0cdcf5c018fb )
Updates `goreleaser/goreleaser-action` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/286f3b13b1b49da4ac219696163fb8c1c93e1200...9ed2f89a662bf1735a48bc8557fd212fa902bebf )
Updates `actions/upload-artifact` from 4.4.3 to 4.5.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...6f51ac03b9356f520e9adb1b1b7802705f340c2b )
Updates `anchore/sbom-action` from 0.17.8 to 0.17.9
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](https://github.com/anchore/sbom-action/compare/v0.17.8...v0.17.9 )
Updates `ossf/scorecard-action` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/0864cf19026789058feabb7e87baa5f140aac736...62b2cac7ed8198b15735ed49ab1e5cf35480ba46 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: global
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: global
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: global
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-23 17:21:14 +05:30
Sanket Sudake and GitHub
01f45b3e15
Grouped dependabot updates for dockerfile and github-actions ( #3111 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-23 10:22:04 +05:30
Sanket Sudake and GitHub
2a236711c5
Update dependabot.yml ( #3094 )
2024-12-09 11:54:23 +05:30
Sanket Sudake and GitHub
edb35a380a
Add provenance steps for release ( #3083 )
...
* Add provenance steps for release
* Update release workflow
* Fix branch filters
* Cleanup release code
* Fix attestation steps
* Add SBOM and disable image provenance
* Disable image provenance
* fix sbom install
* Add sboms to goreleaser
* Update SLSA version to v2.0.0
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-09 00:41:24 +05:30
c5bb108cb5
Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 ( #3077 )
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.20.4 to 1.20.5.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.4...v1.20.5 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 13:51:32 +05:30
Sanket Sudake and GitHub
d69bcbc025
Update Go dependencies ( #3081 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-08 12:59:56 +05:30
Sanket Sudake and GitHub
fbb9075622
Skip CI for dependabot PR and remove manual dispatch ( #3080 )
...
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-08 12:06:17 +05:30
fe3504d08d
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 ( #3070 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/aaa42aa0628b4ae2578232a66b541047968fac86...971e284b6050e8a5849b72094c50ab08da042db8 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 11:21:01 +05:30
5cda254ba0
Bump codecov/codecov-action from 4.5.0 to 5.1.1 ( #3071 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4.5.0 to 5.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/e28ff129e5465c2c0dcc6f003fc735cb6ae0c673...7f8b4b4bde536c465e797be725718b88c5d95e0e )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 11:20:38 +05:30
924427cc0b
Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 ( #3072 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/4959ce089c160fddf62f7b42464195ba1a56d382...dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 11:20:11 +05:30
6fd26a53fc
Bump actions/upload-artifact from 4.4.0 to 4.4.3 ( #3073 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.0 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4.4.0...b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 11:19:46 +05:30
4261bd19da
Bump actions/setup-go from 5.0.2 to 5.1.0 ( #3074 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.2 to 5.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32...41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 11:19:16 +05:30
e48d2c5928
Apply best security practices for OpenSSF ( #3069 )
...
* [StepSecurity] Apply security best practices
* Keep needed check in precommit
---------
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
Co-authored-by: StepSecurity Bot <bot@stepsecurity.io >
2024-12-08 11:07:14 +05:30
Sanket Sudake and GitHub
a3e9fc8431
Add OpenSSF scorecard badge ( #3067 )
...
* Add OpenSSF scorecard badge
* Run CodeQL on all commits
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-12-08 09:30:53 +05:30
Sanket Sudake and GitHub
80746c899f
Add OpenSSF Scorecard action ( #3066 )
2024-12-08 09:01:44 +05:30
Sanket Sudake and GitHub
7125268bbf
Add path safety fixes ( #3061 )
...
* Add path safety fixes
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* minor changes
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
* revert test_huge_response test
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
---------
Signed-off-by: Sanket Sudake <sanketsudake@gmail.com >
2024-11-18 12:19:34 +05:30
378d503702
Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 ( #3056 )
...
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt ) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-05 11:06:42 +05:30
soharab-ic and GitHub
d6edf341d8
Remove unreachable code from fission-cli ( #3039 )
...
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
2024-10-11 13:01:36 +05:30
soharab-ic and GitHub
abf2a59ee2
Update K8s version for envtest to 1.30.x ( #3038 )
...
* Update K8s version for envtest to 1.30.x
* Minor change to trigger tests
---------
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
2024-10-10 11:47:36 +05:30
soharab-ic and GitHub
42983ee3d7
Add podSpec to generated environment manifest ( #3033 )
...
* Use builder and container names when creating environment K8s object instead of keeping it empty.
Add skeleton for podSpec field to give user an idea of how to use podSpec field.
* Add a positive test for env podSpec
* Add the test to CI tests
* Remove duplicate wait_for_builder function
* Fix CI tests failure
* Fix CI tests failure
* Add a negative test for env podSpec
* Fix issues with negative test
* Removing negative test as it may break executor which will affect other tests
* Rebase with main as executor issue is fixed.
Add the negative test.
* Fix negative test
---------
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
2024-10-09 11:11:19 +05:30
soharab-ic and GitHub
61ead3b076
Fix cleanup in executortype poolmgr on invalid manifest ( #3034 )
...
The bug breaks the poolmgr service which stops the deletion and creation of new environments.
Signed-off-by: Md Soharab Ansari <soharab.ansari@infracloud.io >
2024-10-08 19:10:08 +05:30