Commit Graph

151 Commits

Author SHA1 Message Date
dependabot[bot]
37da48b641 build(deps): bump codecov/codecov-action from 3.1.4 to 3.1.5 (#3594)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](eaaf4bedf3...4fe8c5f003)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 21:03:15 -08:00
dependabot[bot]
2db465b337 build(deps): bump the github-actions group with 2 updates (#3593)
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/upload-artifact` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](694cdabd8b...26f96dfa69)

Updates `github/codeql-action` from 3.23.1 to 3.23.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0b21cf2492...b7bf0a3ed3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 21:02:32 -08:00
dependabot[bot]
1329e10afd build(deps): bump the github-actions group with 3 updates (#3576)
Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/dependency-review-action](https://github.com/actions/dependency-review-action) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/upload-artifact` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](1eb3cb2b3e...694cdabd8b)

Updates `actions/dependency-review-action` from 3 to 4
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v3...v4)

Updates `github/codeql-action` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e5f05b81d5...0b21cf2492)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-23 17:29:28 -08:00
dependabot[bot]
3681218c2b build(deps): bump the github-actions group with 2 updates (#3570)
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](c7d193f32e...1eb3cb2b3e)

Updates `actions/download-artifact` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](f44cd7b40b...6b208ae046)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 17:31:39 -08:00
dependabot[bot]
e389d9275e build(deps): bump the github-actions group with 1 update (#3558)
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.22.12 to 3.23.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](012739e508...e5f05b81d5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 16:24:11 -08:00
dependabot[bot]
aafcee3ecc build(deps): bump the github-actions group with 1 update (#3536)
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.22.11 to 3.22.12
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b374143c11...012739e508)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-27 22:29:30 -08:00
Julio Lopez
c5733b0b48 chore(ci): upgrade workflows to work with actions/{upload,download}-artifact@v4 (#3532) 2023-12-19 23:10:42 -08:00
Julio Lopez
006475213b chore(deps): upgrade actions/upload-artifact for compatible workflows (#3531) 2023-12-19 22:12:43 -08:00
Julio Lopez
725b8e935a build(deps): downgrade GHA actions/upload-artifact (#3529)
There was a breaking change in the action and that is causing
various workflows to fail.

https://github.com/actions/toolkit/tree/main/packages/artifact#breaking-changes

Partially reverts commit 276f302d2c
"build(deps): bump the github-actions group with 3 updates (#3525)"
2023-12-19 13:34:15 -08:00
dependabot[bot]
276f302d2c build(deps): bump the github-actions group with 3 updates (#3525)
Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/upload-artifact` from 3.1.3 to 4.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](a8a3f3ad30...c7d193f32e)

Updates `actions/download-artifact` from 3.0.2 to 4.1.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](9bc31d5ccc...f44cd7b40b)

Updates `github/codeql-action` from 2.22.9 to 3.22.11
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](c0d1daa7f7...b374143c11)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-19 04:09:36 +00:00
dependabot[bot]
a258e95cf9 build(deps): bump dawidd6/action-homebrew-bump-formula (#3526)
Bumps [dawidd6/action-homebrew-bump-formula](https://github.com/dawidd6/action-homebrew-bump-formula) from 3.10.0 to 3.10.1.
- [Release notes](https://github.com/dawidd6/action-homebrew-bump-formula/releases)
- [Commits](d3667e5ae1...75ed025ff3)

---
updated-dependencies:
- dependency-name: dawidd6/action-homebrew-bump-formula
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 20:00:31 -08:00
dependabot[bot]
89d0c5e6ae build(deps): bump the github-actions group with 2 updates (#3506)
Bumps the github-actions group with 2 updates: [actions/setup-go](https://github.com/actions/setup-go) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/setup-go` from 4.1.0 to 5.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](93397bea11...0c52d547c9)

Updates `github/codeql-action` from 2.22.8 to 2.22.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](407ffafae6...c0d1daa7f7)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 03:04:27 +00:00
Julio Lopez
4fba7883e1 chore(deps): upgrade actions/stale and pin to v9.0.0 (#3496) 2023-12-08 12:48:17 -08:00
Julio Lopez
8eee29a149 test(providers): add variables for Azure immutability testing (#3471) 2023-11-28 14:49:44 -08:00
dependabot[bot]
d2a42e4e77 build(deps): bump github/codeql-action from 2.22.7 to 2.22.8 (#3470)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.7 to 2.22.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](66b90a5db1...407ffafae6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 18:14:17 -08:00
dependabot[bot]
b848478af1 build(deps): bump github/codeql-action from 2.22.5 to 2.22.7 (#3458)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.5 to 2.22.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](74483a38d3...66b90a5db1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-21 10:11:34 -08:00
dependabot[bot]
ca98ce617b build(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#3421)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8ade135a41...b4ffde65f4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 13:32:19 -07:00
dependabot[bot]
50cc5a1690 build(deps): bump github/codeql-action from 2.22.4 to 2.22.5 (#3420)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.4 to 2.22.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](49abf0ba24...74483a38d3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 13:31:43 -07:00
dependabot[bot]
052e7fc29b build(deps): bump github/codeql-action from 2.22.1 to 2.22.4 (#3404)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.1 to 2.22.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](fdcae64e14...49abf0ba24)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-24 01:12:17 +00:00
dependabot[bot]
65d23411da build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#3403)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](483ef80eb9...0864cf1902)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 18:01:51 -07:00
dependabot[bot]
dccf6126fc build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#3378)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](08b4669551...483ef80eb9)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 14:05:24 -07:00
dependabot[bot]
d9f34cb65c build(deps): bump github/codeql-action from 2.21.9 to 2.22.1 (#3377)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.9 to 2.22.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ddccb87388...fdcae64e14)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 14:04:52 -07:00
dependabot[bot]
8f68dcf1cb build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 (#3369)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.8 to 2.21.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](6a28655e3d...ddccb87388)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 22:22:58 -07:00
dependabot[bot]
8e23bc7c66 build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 (#3355)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.7 to 2.21.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](04daf014b5...6a28655e3d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-26 18:28:03 -07:00
dependabot[bot]
baf220feb3 build(deps): bump actions/checkout from 4.0.0 to 4.1.0 (#3354)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](3df4ab11eb...8ade135a41)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 19:18:30 -07:00
dependabot[bot]
edfa9ee194 build(deps): bump docker/setup-qemu-action from 2 to 3 (#3324)
* build(deps): bump docker/setup-qemu-action from 2 to 3

Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

---

* use commit id to pin setup-qemu-action to v3.0.0
* upgrade setup-buildx-action
* pin actions/download-artifact to v3.0.2 (using commit id)
* pin action-homebrew-bump-formula to v3.10.0

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Julio <1953782+julio-lopez@users.noreply.github.com>
2023-09-19 01:53:47 +00:00
dependabot[bot]
ce15e98a4b build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 (#3325)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.5 to 2.21.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](00e563ead9...04daf014b5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 23:36:26 +00:00
Julio Lopez
eac341ea3a chore(deps): use commit id for GH action versions (#3298)
* deps(gha): use commit id for actions/setup-go version 4.1.0
* deps(gha): add comment with semver for golang/govulncheck-action
* deps(gha): upgrade actions/upload-artifact to v3.1.3
  Release notes: https://github.com/actions/upload-artifact/releases
* deps(gha): upgrade codecov-action to 3.1.4
  Release notes: https://github.com/codecov/codecov-action/releases/tag/v3.1.4
2023-09-14 14:42:22 -07:00
dependabot[bot]
bd7efef734 build(deps): bump ossf/scorecard-action from 2.1.2 to 2.2.0 (#3291)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.2 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](e38b1902ae...08b4669551)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Julio Lopez <1953782+julio-lopez@users.noreply.github.com>
2023-09-14 14:11:50 -07:00
dependabot[bot]
3090bb1c18 build(deps): bump github/codeql-action from 2.2.4 to 2.21.5 (#3292)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.4 to 2.21.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](17573ee1cc...00e563ead9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 14:02:12 -07:00
dependabot[bot]
022478b229 build(deps): bump actions/checkout from 3.1.0 to 4.0.0 (#3290)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...3df4ab11eba7bda6032a0b82a6bb43b11571feac)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 16:43:21 -07:00
Julio Lopez
c4a3ddc514 chore(ci): use 'with.go-version-file' in actions/setup-go (#3282)
This simplifies managing the Go version used in CI, as it will
only require updating the `go.mod` file on a version upgrade.
2023-09-08 17:36:57 -07:00
Jarek Kowalski
8736fca3aa chore(ci): always use latest patch version of Go (#3280) 2023-09-08 07:20:32 -07:00
Jarek Kowalski
f0f0075e21 chore(ci): upgrade golang to 1.21 (#3277) 2023-09-07 20:27:25 -07:00
Julio Lopez
c9e8347821 chore(ci): add OSSF Scorecard workflow (#3260) 2023-09-05 19:25:46 -07:00
dependabot[bot]
c038839169 build(deps): bump actions/checkout from 3 to 4 (#3271)
* build(deps): bump actions/checkout from 3 to 4

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* pin version for action/checkout

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Julio Lopez <1953782+julio-lopez@users.noreply.github.com>
2023-09-06 01:31:08 +00:00
Julio Lopez
d637814a5a chore(ci): add govulncheck step to lint workflow (#3252) 2023-08-27 23:53:18 -07:00
Jarek Kowalski
1120e4f629 chore(ci): reenable check-locks after the fix was merged upstream (#3245) 2023-08-22 19:41:03 -07:00
Jarek Kowalski
986e7df449 fix(ci): fixed notarization, switched to using API keys (#3236) 2023-08-19 19:31:09 -07:00
Julio Lopez
36b84edf42 fix(infra): add timeout for make.yml build.Build step (#3202)
Currently, on MacOS, this step hangs when attempting to notarize
the newly built binary. The job eventually times out after 360 min.

This is a temporary workaround that will terminate the job sooner to avoid
wasting runner cycles. The actual cause of the notarization timeout needs to be
investigated.

Ref: #488 #3168 #3175
2023-08-07 22:07:47 -07:00
Julio Lopez
b0ce67b21b test(providers): use target ref in repo checkout (#3159) 2023-07-18 17:30:26 -07:00
Julio Lopez
78e9aee70c test(providers): split providers test workflow (#3158)
* Move core providers test to `providers-core.yml` workflow
* Add workflow for extra providers
* Allow manual runs of the workflows
2023-07-18 17:19:15 -07:00
Julio Lopez
439fbbf022 fix(infra): use correct parameter for message in stale action (#3126) 2023-07-05 21:06:13 -07:00
Julio Lopez
392960a2b4 chore(infra): update stale workflow settings (#3124)
- add message to provide additional information when issues or
  PRs are closed.
- exclude PRs and issues with the 'keep-open' label
- run twice a week
2023-07-05 18:54:17 -07:00
Jarek Kowalski
d6aa6c9fbb chore(ci): restore dependabot removed in PR3017 (#3102)
This reverts commit f9de453efc.

Turns out Snyk has many more quirks than Dependabot and our dependencies
have not been regularly updated.
2023-07-03 21:06:29 +00:00
Jarek Kowalski
cbc66f936d chore(ci): upgraded linter to 1.53.3 (#3079)
* chore(ci): upgraded linter to 1.53.3

This flagged a bunch of unused parameters, so the PR is larger than
usual, but 99% mechanical.

* separate lint CI task

* run Lint in separate CI
2023-06-18 13:26:01 -07:00
Jarek Kowalski
f9de453efc chore(ci): disable dependabot and replace with Snyk (#3017)
We are not using dependabot to automatically upgrade our dependencies,
instead we will use Snyk to monitor our dependencies and alert us when
they need to be upgraded.

This should hopefully reduce the noise in our PR process.
2023-05-05 14:48:24 -07:00
Jarek Kowalski
a1eeeeadb3 fix(ci): don't auto-submit HomeBrew pull requests for testing releases (#2951)
Fixes #2928
2023-04-16 23:48:26 -07:00
Julio Lopez
efae8eee46 chore(infra): do not remove branches on stale workflow (#2925)
That requires repo content write access.
2023-04-11 19:27:40 -04:00
Julio Lopez
eac7d51371 deps(infra): upgrade actions/stale to v8 (#2924)
Also, specify 'stale' label
2023-04-11 19:16:13 -04:00