c27e7577e3
chore(deps): bump ossf/scorecard-action in the github-actions group ( #32461 )
...
Bumps the github-actions group with 1 update: [ossf/scorecard-action](https://github.com/ossf/scorecard-action ).
Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](4eaacf0543...2d1146689b
5 days ago
7cd01254d3
chore(deps): bump the github-actions group with 4 updates
...
Bumps the github-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.2 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fahttps://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fahttps://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fahttps://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e0647621c2...e4fba868fa
6 days ago
2ada254ad1
Merge pull request #32445 from helm/dependabot/github_actions/dev-v3/github/codeql-action/init-4.37.2
...
chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2
7 days ago
4836fbc1e9
Merge pull request #32447 from helm/dependabot/github_actions/dev-v3/github/codeql-action/autobuild-4.37.2
...
chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2
7 days ago
44a4202f38
Merge pull request #32448 from helm/dependabot/github_actions/dev-v3/github/codeql-action/analyze-4.37.2
...
chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2
7 days ago
79330fceb9
chore(deps): bump github/codeql-action/upload-sarif ( #32449 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](7188fc3636...e0647621c2
1 week ago
b29c7309f1
chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 ( #32446 )
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](b8dd2d9be0...bf12e9b00b
1 week ago
973bb346b8
chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2
...
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action ) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](7188fc3636...e0647621c2
1 week ago
e25efcf283
chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2
...
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action ) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](7188fc3636...e0647621c2
1 week ago
98e547f8ed
chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2
...
Bumps [github/codeql-action/init](https://github.com/github/codeql-action ) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](7188fc3636...e0647621c2
1 week ago
7f4b72a711
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 ( #32412 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](9c091bb21b...3d3c42e5aa
1 week ago
2cf1437c20
chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 ( #32381 )
...
* chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action ) from 4.37.0 to 4.37.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](99df26d4f1...7188fc3636
2 weeks ago
270f73b2df
chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 ( #32383 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](924ae3a1cd...b7ad1dad31
2 weeks ago
9e3a0100a9
chore(deps): bump github/codeql-action/upload-sarif ( #32382 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.0 to 4.37.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](99df26d4f1...7188fc3636
2 weeks ago
c9ed0caeba
ci: auto-label PRs targeting dev-v3 ( #32340 )
...
* ci: auto-label PRs targeting dev-v3
Use actions/labeler to apply a "dev-v3" label on PRs
opened against the `dev-v3` branch.
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* ci: bump actions/labeler to v6.2.0
https://github.com/actions/labeler/releases/tag/v6.2.0
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Benoit Tigeot <benoittgt@users.noreply.github.com>
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* ci: reuse existing v3.x label for dev-v3 PRs
Avoid creating a new label since v3.x already exists in the repo
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
---------
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Signed-off-by: Benoit Tigeot <benoittgt@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2 weeks ago
f2f6bf6e99
chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 ( #32357 )
...
* chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action ) from 3.26.6 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](4dd16135b6...99df26d4f1
2 weeks ago
69f70a8674
chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 ( #32368 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...9c091bb21b
2 weeks ago
c95222ab5a
chore(deps): bump actions/stale from 9.0.0 to 10.4.0 ( #32369 )
...
Bumps [actions/stale](https://github.com/actions/stale ) from 9.0.0 to 10.4.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](28ca103628...1e223db275
2 weeks ago
fc71f51069
chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 ( #32358 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.1.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](41dfa10bad...924ae3a1cd
2 weeks ago
6596318b34
chore(deps): bump github/codeql-action/upload-sarif ( #32360 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 3.35.1 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5c8a8a642e...99df26d4f1
2 weeks ago
5d9943ca09
chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 ( #32359 )
...
Bumps [github/codeql-action/init](https://github.com/github/codeql-action ) from 3.26.6 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](4dd16135b6...99df26d4f1
2 weeks ago
a3d7a6c50a
chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 ( #32356 )
...
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action ) from 1.0.4 to 1.1.0.
- [Release notes](https://github.com/golang/govulncheck-action/releases )
- [Commits](b625fbe08f...032d45514a
2 weeks ago
8e199708cc
chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 ( #32354 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.1 to 9.3.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](971e284b60...ba0d7d2ec0
2 weeks ago
24ef09ac19
chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 ( #32353 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.0 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](62b2cac7ed...4eaacf0543
2 weeks ago
ceb9a62ec0
Update .github/env
...
Co-authored-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2 months ago
0ed92f0696
ci: bump golangci-lint to v2.11.3 for go 1.26
...
golangci-lint v2.5.0 is built with go1.25 and refuses to lint a module targeting go 1.26.0. Bump to v2.11.3 (matching main) and apply the new staticcheck QF1012 fixes it surfaces in jsonschema.go.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2 months ago
c678c0c9c0
chore: bump go to 1.26
...
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2 months ago
ec05dd5f04
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
...
Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
4 months ago
0ae8e4f2cb
[dev-v3] Bump Go v1.25, `golangci-lint` v2
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
7 months ago
930ba6fc13
Use latest patch release of Go in releases
...
GitHub Actions has a cache of tools, like Go, and it does not update
this cache when a new version comes out. It can take more than a week
for a new version to be available.
This change forces the action to check if a newer version is available
than is in the cache.
Closes #31634
Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 8f636b5bd2
8 months ago
01dc6cc2cd
Remove dev-v3 `helm-latest-version` publish
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
9 months ago
bd337b46bc
[backport] fix: get-helm-3 script use helm3-latest-version
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
10 months ago
6b15f26bd4
fix: govulncheck workflow
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
1 year ago
2a5f83b960
backport #30677to dev3
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
1 year ago
037c18af35
Update golangci-lint version
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 66f84e510e
2 years ago
9f620b857a
Update to Go 1.23
...
Multiple changes were made to pass linting. Some Go built-in names
are being used for variables (e.g., min). This happens in the Go
source itself including the Go standard library and is not always
a bad practice.
To handle allowing some built-in names to be used the linter config
is updated to allow (via opt-in) some names to pass. This allows us
to still check for re-use of Go built-in names and opt-in to any
new uses.
There were also several cases where a value was checked for nil
before checking its length when this is already handled by len()
or the types default value. These were cleaned up.
The license validation was updated because it was checking everything
in the .git directory including all remote content that was local.
The previous vendor directory was from a time prior to Go modules
when Helm handled dependencies differently. It was no longer needed.
Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 5727f56a96
2 years ago
2042f7d35a
Run `build-test` action on `dev-v3` branch
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
(cherry picked from commit bfada38aa9
2 years ago
b5a83ea821
Adding CI for dev-v3 branch
...
When the main branch is for Helm v4, the dev-v3 branch is for Helm v3.
Note, the canary release is setup for helm v4 once the v3 branch is created
and there is no canary release for v3.
Signed-off-by: Matt Farina <matt.farina@suse.com>
2 years ago
261233caec
Merge pull request #12620 from helm/dependabot/github_actions/actions/stale-9.0.0
...
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
2 years ago
029e983241
Increasing the size of the runner used for releases.
...
Note, this runner is provided as part of the CNCF access to GitHub
Enterprise runners.
Signed-off-by: Matt Farina <matt.farina@suse.com>
2 years ago
f983342597
Bump actions/checkout from 4.2.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](eef61447b9...11bd71901b
2 years ago
c867af8e11
Bump actions/setup-go from 5.0.2 to 5.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.2 to 5.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](0a12ed9d6a...41dfa10bad
2 years ago
140a376539
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 3.0.14 to 9.0.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/v3.0.14...v9.0.0 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
d517450a11
Bump actions/checkout from 4.2.0 to 4.2.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](d632683dd7...eef61447b9
2 years ago
9e192b28eb
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](aaa42aa062...971e284b60
2 years ago
79257331c2
Bump golang/govulncheck-action from 1.0.3 to 1.0.4
...
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action ) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/golang/govulncheck-action/releases )
- [Commits](dd0578b371...b625fbe08f
2 years ago
b2286c4caa
Merge pull request #13328 from robertsirc/adjusting-go-setup-check-latest
...
adding check-latest:true
2 years ago
2cd8d54c83
Bump actions/checkout from 4.1.7 to 4.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](692973e3d9...d632683dd7
2 years ago
a8750f4ce9
adding toplevel permissions to workflows missing them
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
62069eb7b5
removing testing trigger from govulncheck action
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
dependabot[bot]
Terry Howe
Benoit Tigeot
Terry Howe
George Jenkins
Matt Farina
Matthieu MOREL
dongjiang
Robert Sirchia