dependabot[bot]
6bb6c52e26
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.11.1 to 3.12.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](e468171a9d...8d2750c68a )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 3.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: cdfc5733f0
2026-01-19 17:33:02 -08:00
dependabot[bot]
b8a6e492f9
Bump actions/attest-build-provenance from 3.0.0 to 3.1.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](977bb373ed...00014ed6ed )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: cadbb50bdf
2026-01-19 17:32:56 -08:00
dependabot[bot]
634a62693a
Bump actions/cache from 4.3.0 to 5.0.1
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.3.0 to 5.0.1.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](0057852bfa...9255dc7a25 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 4ac33c824b
2026-01-19 17:32:46 -08:00
dependabot[bot]
acc8f7a409
chore(deps): bump actions/checkout from 5.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...8e8c483db8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: d91228f636
2026-01-19 17:32:25 -08:00
dependabot[bot]
432f2ff7b2
chore(deps): bump docker/metadata-action from 5.9.0 to 5.10.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.9.0 to 5.10.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](318604b99e...c299e40c65 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 5.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 6c3b85bb9a
2026-01-19 17:32:18 -08:00
Owen
fa4217a31d
Add stale bot
...
Former-commit-id: 77d99f1722
2026-01-19 17:11:48 -08:00
Owen
8deb6b226a
Dont run on v tags
...
Former-commit-id: d754cea397
2025-12-23 17:54:31 -05:00
Owen
b87b8c3168
Fix latest tag
...
Former-commit-id: e1ee4dc8f2
2025-12-22 21:32:47 -05:00
Varun Narravula
dfad7d852a
ci: update nix go vendor hash if needed for dependabot PRs
...
Former-commit-id: f9b6f36b4f
2025-12-22 19:43:48 -05:00
Varun Narravula
51dc2ca875
ci: build nix package when go.mod is changed
...
Former-commit-id: baf1b9b972
2025-12-22 19:43:48 -05:00
Owen
0f8ac38b66
Fix makefile cicd binaries
...
Former-commit-id: 6c65cc8e5e
2025-12-21 21:34:56 -05:00
Owen
5d4ec7a52c
Add back release and binaries
...
Former-commit-id: a21a8e90fa
2025-12-21 21:01:04 -05:00
Varun Narravula
7ecd70aa1c
feat(ci): use matrix for building all makefile targets in parallel
...
Former-commit-id: 1dcb68d694
2025-12-12 15:51:53 -08:00
Varun Narravula
f3e59a822c
feat(build): double-tag docker release builds with "latest" and tag name
...
Former-commit-id: 865ac4b682
2025-12-12 15:51:20 -08:00
Owen
f78c900d54
Fix test
...
Former-commit-id: 92fb96f9bd
2025-12-11 23:24:14 -05:00
Owen
ba51b4b5ea
Make sure to process version first
...
Former-commit-id: b96adeaa5b
2025-12-11 19:35:08 -05:00
Owen
a001b372c5
Update cicd
...
Former-commit-id: 533e0b9ca7
2025-12-11 16:40:50 -05:00
Owen
9fcfc6b236
Make cicd create draft
...
Former-commit-id: bd86abe8d5
2025-12-11 16:09:24 -05:00
Owen
545a98928f
Fix formatting?
...
Former-commit-id: 21ffc0ff4b
2025-12-08 15:45:29 -05:00
Owen
911d370173
Revert some to secret
...
Former-commit-id: 13de05eec6
2025-12-08 15:40:52 -05:00
Owen
5275cca272
Set username explicitly
...
Former-commit-id: 0e76b77adc
2025-12-08 15:38:56 -05:00
Owen
1145bb7611
Update to secrets
...
Former-commit-id: f02e29f4dd
2025-12-08 14:12:03 -05:00
Owen Schwartz
01e8b29d48
Merge pull request #182 from fosrl/dependabot/github_actions/actions/setup-go-6.1.0
...
Bump actions/setup-go from 6.0.0 to 6.1.0
Former-commit-id: 37c96d0b3e
2025-12-06 12:00:11 -05:00
Owen Schwartz
7dadba1a09
Merge pull request #181 from fosrl/dependabot/github_actions/github/codeql-action-4.31.5
...
Bump github/codeql-action from 4.31.0 to 4.31.5
Former-commit-id: 78dc39e153
2025-12-06 12:00:05 -05:00
Owen Schwartz
c71dfd848f
Merge pull request #175 from fosrl/dependabot/github_actions/docker/setup-qemu-action-3.7.0
...
Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
Former-commit-id: 71485743ad
2025-12-06 11:59:57 -05:00
Owen Schwartz
653a2eaec1
Merge pull request #174 from fosrl/dependabot/github_actions/docker/metadata-action-5.9.0
...
Bump docker/metadata-action from 5.8.0 to 5.9.0
Former-commit-id: 458912e5be
2025-12-06 11:59:51 -05:00
dependabot[bot]
dd88dffc4e
Bump actions/setup-go from 6.0.0 to 6.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4469467582...4dc6199c7b )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: a38e0b3e98
2025-11-24 10:00:04 +00:00
dependabot[bot]
10b7b156d4
Bump github/codeql-action from 4.31.0 to 4.31.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.0 to 4.31.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](4e94bd11f7...fdbfb4d275 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 6ced7b5af0
2025-11-24 09:59:58 +00:00
dependabot[bot]
8ead2a5182
Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](29109295f8...c7c5346462 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: b1f2fe8283
2025-11-10 11:52:43 +00:00
dependabot[bot]
2290644709
Bump docker/metadata-action from 5.8.0 to 5.9.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.8.0 to 5.9.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](c1e51972af...318604b99e )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 5.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: a1fdb06add
2025-11-10 11:52:40 +00:00
dependabot[bot]
0f95ef108e
Bump softprops/action-gh-release from 2.4.1 to 2.4.2
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](6da8fa9354...5be0e66d93 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 25d5fab02b
2025-11-10 11:52:31 +00:00
Marc Schäfer
e46c79cb97
Added Improvements for CICD Action
...
Former-commit-id: ee3e7d1442
2025-10-28 23:14:40 +01:00
Owen
2a89273d75
Update cicd
...
Former-commit-id: 527321a415
2025-10-27 21:26:14 -07:00
Marc Schäfer
fa1e866dee
ci(actions): change runner from ubuntu-latest to amd64-runner for CI/CD workflows
...
Former-commit-id: a1a3d63fcf
2025-10-21 02:17:49 +02:00
Marc Schäfer
9b8fbe36e7
ci(actions): add GHCR mirroring and cosign signing for Docker images
...
- mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests)
- login to GHCR via docker/login-action for signing/pushing
- install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures
- add required permissions for id-token/packages and reference necessary secrets
Former-commit-id: 2a273dc435
2025-10-21 00:22:32 +02:00
Marc Schäfer
de445fbd74
ci(actions): pin action versions to commit SHAs for security
...
- Pin actions/checkout to SHA for v5.0.0
- Pin docker/setup-qemu-action to SHA for v3.6.0
- Pin docker/setup-buildx-action to SHA for v3.11.1
- Pin docker/login-action to SHA for v3.6.0
- Pin actions/setup-go to SHA for v6.0.0
- Pin actions/upload-artifact to SHA for v4.6.2
Former-commit-id: ec05686523
2025-10-21 00:21:28 +02:00
Marc Schäfer
f3fae9d415
feat(actions): Sync Images from Docker to GHCR
...
Former-commit-id: a729b91ac3
2025-10-20 21:30:31 +02:00
Owen
a44e86e1a7
Update runner
...
Former-commit-id: 7f8ee37c7f
2025-10-16 17:51:25 -07:00
Owen
71756a236d
Merge branch 'main' into dev
...
Former-commit-id: 72a61d0933
2025-09-28 16:27:05 -07:00
Marc Schäfer
2cbc080242
fix(gh-actions): Workflow does not contain permissions
...
Former-commit-id: aff928e60f
2025-09-22 00:22:42 +02:00
dependabot[bot]
a912040f78
Bump actions/setup-go from 5 to 6
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: ba9ca9f097
2025-09-08 10:14:37 +00:00
Owen Schwartz
d1812a4060
Merge pull request #117 from fosrl/dependabot/github_actions/docker/setup-buildx-action-3
...
Bump docker/setup-buildx-action from 2 to 3
Former-commit-id: 9a1fa2c19f
2025-08-30 16:52:06 -07:00
Owen Schwartz
919c2a7616
Merge pull request #118 from fosrl/dependabot/github_actions/actions/setup-go-5
...
Bump actions/setup-go from 4 to 5
Former-commit-id: a6797172ef
2025-08-30 16:51:59 -07:00
Owen Schwartz
158a34b61a
Merge pull request #119 from fosrl/dependabot/github_actions/docker/login-action-3
...
Bump docker/login-action from 2 to 3
Former-commit-id: d373de7fa1
2025-08-30 16:51:52 -07:00
dependabot[bot]
1afdc3de88
Bump actions/checkout from 3 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 54b096e6a7
2025-08-30 22:26:53 +00:00
dependabot[bot]
a304cbe616
Bump docker/login-action from 2 to 3
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: '3'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 10720afd31
2025-08-30 22:26:50 +00:00
dependabot[bot]
2cb438bb6c
Bump actions/setup-go from 4 to 5
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: 0b37f20d5d
2025-08-30 22:26:47 +00:00
dependabot[bot]
6a4c77b359
Bump docker/setup-buildx-action from 2 to 3
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: '3'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Former-commit-id: aa6e54f383
2025-08-30 22:26:43 +00:00
Marvin
1c3fb339d8
Update test.yml
...
Former-commit-id: 3ae4ac23ef
2025-08-28 17:33:59 +02:00
Marvin
532786b567
Update cicd.yml
...
Former-commit-id: 6a98b90b01
2025-08-28 17:33:39 +02:00