Owen
fc66394243
Merge branch 'main' into dev
2026-02-25 14:18:22 -08:00
Owen Schwartz
055bed8a07
Merge pull request #2338 from fosrl/dependabot/github_actions/actions/checkout-6.0.2
...
Bump actions/checkout from 6.0.1 to 6.0.2
2026-02-25 11:00:55 -08:00
Owen Schwartz
5d8a55f08c
Merge pull request #2415 from fosrl/dependabot/github_actions/aws-actions/configure-aws-credentials-6
...
Bump aws-actions/configure-aws-credentials from 5 to 6
2026-02-25 10:58:18 -08:00
dependabot[bot]
9c42458fa5
Bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 01:31:48 +00:00
Laurence
9460e28c7b
ehance(installer): use ldflags to inject versions
...
Instead of the CI/CD using sed to replace the 'replaceme' text we can instead use ldflags which can inject variables at build time to the versions. The makefile had a bunch of workarounds for dev so these have been removed to cleanup etc etc and fetchs versions from the gh api directly if the variables are not injected like the CI/CD does
2026-02-18 09:43:41 +00:00
dependabot[bot]
971c375398
Bump docker/login-action from 3.6.0 to 3.7.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](5e57cd1181...c94ce9fb46 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-15 19:12:16 +00:00
dependabot[bot]
ac4439c5ae
Bump aws-actions/configure-aws-credentials from 5 to 6
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 5 to 6.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-15 19:12:05 +00:00
Owen
843b13ed57
Try to fix cicd
2026-02-13 15:00:17 -08:00
Owen
6496763aae
Cap retention days
2026-02-12 12:18:42 -08:00
Owen
ba7239ac08
Verify everything we can
2026-02-11 17:30:21 -08:00
Owen
cb569ff14d
Properly insert PANGOLIN_SETUP_TOKEN into db
...
Fixes #2361
2026-01-28 15:03:31 -08:00
Owen
37c4a7b690
Retry verify
2026-01-24 11:55:32 -08:00
Owen
0a7564acb6
Fix not detecting rc release in sign and package
2026-01-21 16:14:00 -08:00
dependabot[bot]
1b756ef9a0
Bump aws-actions/configure-aws-credentials from 2 to 5
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 2 to 5.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/v2...v5 )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-19 17:38:03 -08:00
dependabot[bot]
ceda06f9ae
Bump actions/setup-go from 6.1.0 to 6.2.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4dc6199c7b...7a3fe6cf4c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-19 17:37:55 -08:00
Owen
29a683a815
Copy all tags to github reg
2026-01-11 14:19:38 -08:00
Owen
7e48cbe1aa
Set file location
2025-12-21 21:16:57 -05:00
Owen
4b2c570e73
Fix bad rc check
2025-12-21 21:15:22 -05:00
Owen
972febf0ea
Fix regex
2025-12-21 20:36:19 -05:00
Owen
e320f9f16e
Handle the rc
2025-12-21 17:23:35 -05:00
Owen
11200b99d3
Use image tools to combine the tags
2025-12-21 17:17:02 -05:00
Owen
130c890678
Merge branch 'main' into dev
2025-12-21 16:58:13 -05:00
dependabot[bot]
3a6fbb67a5
Bump actions/upload-artifact from 5.0.0 to 6.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](330a01c490...b7c566a772 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-20 15:35:15 -05:00
Owen
25fed23758
Speed up build
2025-12-13 12:13:33 -05:00
miloschwartz
b3ec9dfda2
split builds based on arch
2025-12-12 15:56:42 -05:00
dependabot[bot]
00765c1faf
Bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1af3b93b68...8e8c483db8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 01:16:59 +00:00
Owen Schwartz
b9c0089fac
Merge pull request #1913 from fosrl/dependabot/github_actions/actions/setup-go-6.1.0
...
Bump actions/setup-go from 6.0.0 to 6.1.0
2025-12-06 11:17:30 -05:00
Owen Schwartz
b2f78c9149
Merge pull request #1914 from fosrl/dependabot/github_actions/actions/checkout-6.0.0
...
Bump actions/checkout from 5.0.0 to 6.0.0
2025-12-06 11:17:23 -05:00
Marc Schäfer
6217086cd5
Add login step for GitHub Container Registry
...
Added GitHub Container Registry login step for cosign.
2025-12-05 15:54:59 +01:00
dependabot[bot]
a8d11d78fc
Bump actions/checkout from 5.0.0 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...1af3b93b68 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 01:27:21 +00:00
dependabot[bot]
e16aa6e90b
Bump actions/setup-go from 6.0.0 to 6.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4469467582...4dc6199c7b )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 01:27:15 +00:00
dependabot[bot]
c6611471b1
Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](29109295f8...c7c5346462 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-10 01:37:59 +00:00
Owen
43590896e9
Add fosrl
2025-11-02 18:56:46 -08:00
Owen Schwartz
3547c4832b
Revert "Refactor CI/CD workflow for improved release process"
2025-11-02 18:56:46 -08:00
Marc Schäfer
1cd098252e
Refactor CI/CD workflow for improved release process
...
Updated CI/CD workflow to include new permissions, job definitions, and steps for version validation, tagging, and artifact management.
2025-11-02 18:56:46 -08:00
Owen
1db5d76ef1
Merge branch 'main' into dev
2025-10-29 14:43:18 -07:00
Owen
85e4b649db
Update cicd: allow to run on rc
2025-10-27 11:14:56 -07:00
Owen
73a3335148
Update cicd: login to ghcr
2025-10-27 11:13:05 -07:00
dependabot[bot]
09ba018493
Bump actions/upload-artifact from 4.6.2 to 5.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](ea165f8d65...330a01c490 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 01:41:35 +00:00
Owen
e77909d498
Change runs on
2025-10-20 21:45:40 -07:00
Marc Schäfer
bc430546bc
ci(actions): add GHCR mirroring and cosign signing for Docker images
...
- mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests)
- login to GHCR via docker/login-action for signing/pushing
- install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures
- add required permissions for id-token/packages and reference necessary secrets
2025-10-21 02:07:26 +02:00
Marc Schäfer
bfb5b2864d
ci(actions): add permissions section to workflows
2025-10-21 01:59:52 +02:00
Marc Schäfer
0e39704b3a
ci(actions): pin action versions to commit SHAs for security
...
- Pin actions/checkout to SHA for v5.0.0
- Pin docker/setup-qemu-action to SHA for v3.6.0
- Pin docker/setup-buildx-action to SHA for v3.11.1
- Pin docker/login-action to SHA for v3.6.0
- Pin actions/setup-go to SHA for v6.0.0
- Pin actions/upload-artifact to SHA for v4.6.2
- Pin actions/setup-node to SHA for v6.0.0
- Pin actions/stale to SHA for v10.1.0
2025-10-21 01:53:20 +02:00
Owen
c4a5fae28f
Update workflow and add runner
2025-10-14 17:34:47 -07:00
Owen
40a3eac704
Adjust tag match to exclude s.
2025-10-06 11:28:26 -07:00
dependabot[bot]
d3e6decef9
Bump actions/setup-go from 5 to 6
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-08 01:32:10 +00:00
Owen
88277976c6
Merge branch 'main' into dev
2025-08-23 15:21:32 -07:00
dependabot[bot]
7dd586e31d
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-18 02:32:20 +00:00
Marvin
529d1c9f66
modified: .github/workflows/cicd.yml
2025-08-01 18:37:08 +00:00
dependabot[bot]
838af30a38
Bump docker/setup-buildx-action from 2 to 3
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: '3'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-06 17:02:46 +00:00