dependabot[bot]
37da48b641
build(deps): bump codecov/codecov-action from 3.1.4 to 3.1.5 ( #3594 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](eaaf4bedf3...4fe8c5f003 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 21:03:15 -08:00
dependabot[bot]
2db465b337
build(deps): bump the github-actions group with 2 updates ( #3593 )
...
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `actions/upload-artifact` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](694cdabd8b...26f96dfa69 )
Updates `github/codeql-action` from 3.23.1 to 3.23.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](0b21cf2492...b7bf0a3ed3 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 21:02:32 -08:00
dependabot[bot]
1329e10afd
build(deps): bump the github-actions group with 3 updates ( #3576 )
...
Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact ), [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `actions/upload-artifact` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](1eb3cb2b3e...694cdabd8b )
Updates `actions/dependency-review-action` from 3 to 4
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v3...v4 )
Updates `github/codeql-action` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e5f05b81d5...0b21cf2492 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-23 17:29:28 -08:00
dependabot[bot]
3681218c2b
build(deps): bump the github-actions group with 2 updates ( #3570 )
...
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/upload-artifact` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](c7d193f32e...1eb3cb2b3e )
Updates `actions/download-artifact` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](f44cd7b40b...6b208ae046 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 17:31:39 -08:00
dependabot[bot]
e389d9275e
build(deps): bump the github-actions group with 1 update ( #3558 )
...
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action ).
Updates `github/codeql-action` from 3.22.12 to 3.23.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](012739e508...e5f05b81d5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 16:24:11 -08:00
dependabot[bot]
aafcee3ecc
build(deps): bump the github-actions group with 1 update ( #3536 )
...
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action ).
Updates `github/codeql-action` from 3.22.11 to 3.22.12
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b374143c11...012739e508 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-27 22:29:30 -08:00
Julio Lopez
c5733b0b48
chore(ci): upgrade workflows to work with actions/{upload,download}-artifact@v4 ( #3532 )
2023-12-19 23:10:42 -08:00
Julio Lopez
006475213b
chore(deps): upgrade actions/upload-artifact for compatible workflows ( #3531 )
2023-12-19 22:12:43 -08:00
Julio Lopez
725b8e935a
build(deps): downgrade GHA actions/upload-artifact ( #3529 )
...
There was a breaking change in the action and that is causing
various workflows to fail.
https://github.com/actions/toolkit/tree/main/packages/artifact#breaking-changes
Partially reverts commit 276f302d2c
"build(deps): bump the github-actions group with 3 updates (#3525 )"
2023-12-19 13:34:15 -08:00
dependabot[bot]
276f302d2c
build(deps): bump the github-actions group with 3 updates ( #3525 )
...
Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact ), [actions/download-artifact](https://github.com/actions/download-artifact ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `actions/upload-artifact` from 3.1.3 to 4.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](a8a3f3ad30...c7d193f32e )
Updates `actions/download-artifact` from 3.0.2 to 4.1.0
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9bc31d5ccc...f44cd7b40b )
Updates `github/codeql-action` from 2.22.9 to 3.22.11
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](c0d1daa7f7...b374143c11 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-19 04:09:36 +00:00
dependabot[bot]
a258e95cf9
build(deps): bump dawidd6/action-homebrew-bump-formula ( #3526 )
...
Bumps [dawidd6/action-homebrew-bump-formula](https://github.com/dawidd6/action-homebrew-bump-formula ) from 3.10.0 to 3.10.1.
- [Release notes](https://github.com/dawidd6/action-homebrew-bump-formula/releases )
- [Commits](d3667e5ae1...75ed025ff3 )
---
updated-dependencies:
- dependency-name: dawidd6/action-homebrew-bump-formula
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 20:00:31 -08:00
dependabot[bot]
89d0c5e6ae
build(deps): bump the github-actions group with 2 updates ( #3506 )
...
Bumps the github-actions group with 2 updates: [actions/setup-go](https://github.com/actions/setup-go ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `actions/setup-go` from 4.1.0 to 5.0.0
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](93397bea11...0c52d547c9 )
Updates `github/codeql-action` from 2.22.8 to 2.22.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](407ffafae6...c0d1daa7f7 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 03:04:27 +00:00
Julio Lopez
4fba7883e1
chore(deps): upgrade actions/stale and pin to v9.0.0 ( #3496 )
2023-12-08 12:48:17 -08:00
Julio Lopez
8eee29a149
test(providers): add variables for Azure immutability testing ( #3471 )
2023-11-28 14:49:44 -08:00
dependabot[bot]
d2a42e4e77
build(deps): bump github/codeql-action from 2.22.7 to 2.22.8 ( #3470 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.22.7 to 2.22.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](66b90a5db1...407ffafae6 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 18:14:17 -08:00
dependabot[bot]
b848478af1
build(deps): bump github/codeql-action from 2.22.5 to 2.22.7 ( #3458 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.22.5 to 2.22.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](74483a38d3...66b90a5db1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-21 10:11:34 -08:00
dependabot[bot]
ca98ce617b
build(deps): bump actions/checkout from 4.1.0 to 4.1.1 ( #3421 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8ade135a41...b4ffde65f4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 13:32:19 -07:00
dependabot[bot]
50cc5a1690
build(deps): bump github/codeql-action from 2.22.4 to 2.22.5 ( #3420 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.22.4 to 2.22.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](49abf0ba24...74483a38d3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 13:31:43 -07:00
dependabot[bot]
052e7fc29b
build(deps): bump github/codeql-action from 2.22.1 to 2.22.4 ( #3404 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.22.1 to 2.22.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](fdcae64e14...49abf0ba24 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-24 01:12:17 +00:00
dependabot[bot]
65d23411da
build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 ( #3403 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](483ef80eb9...0864cf1902 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 18:01:51 -07:00
dependabot[bot]
dccf6126fc
build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 ( #3378 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](08b4669551...483ef80eb9 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 14:05:24 -07:00
dependabot[bot]
d9f34cb65c
build(deps): bump github/codeql-action from 2.21.9 to 2.22.1 ( #3377 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.21.9 to 2.22.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](ddccb87388...fdcae64e14 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 14:04:52 -07:00
dependabot[bot]
8f68dcf1cb
build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 ( #3369 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.21.8 to 2.21.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](6a28655e3d...ddccb87388 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 22:22:58 -07:00
dependabot[bot]
8e23bc7c66
build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 ( #3355 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.21.7 to 2.21.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](04daf014b5...6a28655e3d )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-26 18:28:03 -07:00
dependabot[bot]
baf220feb3
build(deps): bump actions/checkout from 4.0.0 to 4.1.0 ( #3354 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](3df4ab11eb...8ade135a41 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 19:18:30 -07:00
dependabot[bot]
edfa9ee194
build(deps): bump docker/setup-qemu-action from 2 to 3 ( #3324 )
...
* build(deps): bump docker/setup-qemu-action from 2 to 3
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 2 to 3.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
---
* use commit id to pin setup-qemu-action to v3.0.0
* upgrade setup-buildx-action
* pin actions/download-artifact to v3.0.2 (using commit id)
* pin action-homebrew-bump-formula to v3.10.0
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Julio <1953782+julio-lopez@users.noreply.github.com >
2023-09-19 01:53:47 +00:00
dependabot[bot]
ce15e98a4b
build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 ( #3325 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.21.5 to 2.21.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](00e563ead9...04daf014b5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 23:36:26 +00:00
Julio Lopez
eac341ea3a
chore(deps): use commit id for GH action versions ( #3298 )
...
* deps(gha): use commit id for actions/setup-go version 4.1.0
* deps(gha): add comment with semver for golang/govulncheck-action
* deps(gha): upgrade actions/upload-artifact to v3.1.3
Release notes: https://github.com/actions/upload-artifact/releases
* deps(gha): upgrade codecov-action to 3.1.4
Release notes: https://github.com/codecov/codecov-action/releases/tag/v3.1.4
2023-09-14 14:42:22 -07:00
dependabot[bot]
bd7efef734
build(deps): bump ossf/scorecard-action from 2.1.2 to 2.2.0 ( #3291 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.2 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](e38b1902ae...08b4669551 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Julio Lopez <1953782+julio-lopez@users.noreply.github.com >
2023-09-14 14:11:50 -07:00
dependabot[bot]
3090bb1c18
build(deps): bump github/codeql-action from 2.2.4 to 2.21.5 ( #3292 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.4 to 2.21.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](17573ee1cc...00e563ead9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 14:02:12 -07:00
dependabot[bot]
022478b229
build(deps): bump actions/checkout from 3.1.0 to 4.0.0 ( #3290 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.1.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...3df4ab11eba7bda6032a0b82a6bb43b11571feac )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 16:43:21 -07:00
Julio Lopez
c4a3ddc514
chore(ci): use 'with.go-version-file' in actions/setup-go ( #3282 )
...
This simplifies managing the Go version used in CI, as it will
only require updating the `go.mod` file on a version upgrade.
2023-09-08 17:36:57 -07:00
Jarek Kowalski
8736fca3aa
chore(ci): always use latest patch version of Go ( #3280 )
2023-09-08 07:20:32 -07:00
Jarek Kowalski
f0f0075e21
chore(ci): upgrade golang to 1.21 ( #3277 )
2023-09-07 20:27:25 -07:00
Julio Lopez
c9e8347821
chore(ci): add OSSF Scorecard workflow ( #3260 )
2023-09-05 19:25:46 -07:00
dependabot[bot]
c038839169
build(deps): bump actions/checkout from 3 to 4 ( #3271 )
...
* build(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* pin version for action/checkout
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Julio Lopez <1953782+julio-lopez@users.noreply.github.com >
2023-09-06 01:31:08 +00:00
Julio Lopez
d637814a5a
chore(ci): add govulncheck step to lint workflow ( #3252 )
2023-08-27 23:53:18 -07:00
Jarek Kowalski
1120e4f629
chore(ci): reenable check-locks after the fix was merged upstream ( #3245 )
2023-08-22 19:41:03 -07:00
Jarek Kowalski
986e7df449
fix(ci): fixed notarization, switched to using API keys ( #3236 )
2023-08-19 19:31:09 -07:00
Julio Lopez
36b84edf42
fix(infra): add timeout for make.yml build.Build step ( #3202 )
...
Currently, on MacOS, this step hangs when attempting to notarize
the newly built binary. The job eventually times out after 360 min.
This is a temporary workaround that will terminate the job sooner to avoid
wasting runner cycles. The actual cause of the notarization timeout needs to be
investigated.
Ref: #488 #3168 #3175
2023-08-07 22:07:47 -07:00
Julio Lopez
b0ce67b21b
test(providers): use target ref in repo checkout ( #3159 )
2023-07-18 17:30:26 -07:00
Julio Lopez
78e9aee70c
test(providers): split providers test workflow ( #3158 )
...
* Move core providers test to `providers-core.yml` workflow
* Add workflow for extra providers
* Allow manual runs of the workflows
2023-07-18 17:19:15 -07:00
Julio Lopez
439fbbf022
fix(infra): use correct parameter for message in stale action ( #3126 )
2023-07-05 21:06:13 -07:00
Julio Lopez
392960a2b4
chore(infra): update stale workflow settings ( #3124 )
...
- add message to provide additional information when issues or
PRs are closed.
- exclude PRs and issues with the 'keep-open' label
- run twice a week
2023-07-05 18:54:17 -07:00
Jarek Kowalski
d6aa6c9fbb
chore(ci): restore dependabot removed in PR3017 ( #3102 )
...
This reverts commit f9de453efc .
Turns out Snyk has many more quirks than Dependabot and our dependencies
have not been regularly updated.
2023-07-03 21:06:29 +00:00
Jarek Kowalski
cbc66f936d
chore(ci): upgraded linter to 1.53.3 ( #3079 )
...
* chore(ci): upgraded linter to 1.53.3
This flagged a bunch of unused parameters, so the PR is larger than
usual, but 99% mechanical.
* separate lint CI task
* run Lint in separate CI
2023-06-18 13:26:01 -07:00
Jarek Kowalski
f9de453efc
chore(ci): disable dependabot and replace with Snyk ( #3017 )
...
We are not using dependabot to automatically upgrade our dependencies,
instead we will use Snyk to monitor our dependencies and alert us when
they need to be upgraded.
This should hopefully reduce the noise in our PR process.
2023-05-05 14:48:24 -07:00
Jarek Kowalski
a1eeeeadb3
fix(ci): don't auto-submit HomeBrew pull requests for testing releases ( #2951 )
...
Fixes #2928
2023-04-16 23:48:26 -07:00
Julio Lopez
efae8eee46
chore(infra): do not remove branches on stale workflow ( #2925 )
...
That requires repo content write access.
2023-04-11 19:27:40 -04:00
Julio Lopez
eac7d51371
deps(infra): upgrade actions/stale to v8 ( #2924 )
...
Also, specify 'stale' label
2023-04-11 19:16:13 -04:00