9498994ab5
build(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.2
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.3.0 to 6.3.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](e60da84bfa...051d919338
8 months ago
5f64fe6663
build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](ec5d18412c...e60da84bfa
8 months ago
0d66425d9a
Merge pull request #13651 from helm/dependabot/github_actions/main/actions/setup-go-5.3.0
...
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
9 months ago
093b9ee382
Merge pull request #13650 from helm/dependabot/github_actions/main/actions/stale-9.1.0
...
build(deps): bump actions/stale from 9.0.0 to 9.1.0
9 months ago
5bf47fb21b
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](3041bf56c9...f111f3307d
9 months ago
b73c514a78
build(deps): bump actions/stale from 9.0.0 to 9.1.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](28ca103628...5bef64f19d
9 months ago
d005334579
Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](971e284b60...ec5d18412c
9 months ago
ec12a61337
Bump actions/upload-artifact from 4.4.3 to 4.6.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.3 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b4b15b8c7c...65c4c4a1dd
9 months ago
fb54996b00
Merge pull request #13489 from helm/dependabot/github_actions/actions/upload-artifact-4.4.3
...
Bump actions/upload-artifact from 3.2.1.pre.node20 to 4.4.3
9 months ago
bfada38aa9
Run `build-test` action on `dev-v3` branch
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
10 months ago
eee046f704
Fix `dependabot.yml`
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
10 months ago
66f84e510e
Update golangci-lint version
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
10 months ago
5727f56a96
Update to Go 1.23
...
Multiple changes were made to pass linting. Some Go built-in names
are being used for variables (e.g., min). This happens in the Go
source itself including the Go standard library and is not always
a bad practice.
To handle allowing some built-in names to be used the linter config
is updated to allow (via opt-in) some names to pass. This allows us
to still check for re-use of Go built-in names and opt-in to any
new uses.
There were also several cases where a value was checked for nil
before checking its length when this is already handled by len()
or the types default value. These were cleaned up.
The license validation was updated because it was checking everything
in the .git directory including all remote content that was local.
The previous vendor directory was from a time prior to Go modules
when Helm handled dependencies differently. It was no longer needed.
Signed-off-by: Matt Farina <matt.farina@suse.com>
10 months ago
08487907d9
Bump actions/setup-go from 5.1.0 to 5.2.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](41dfa10bad...3041bf56c9
10 months ago
2cdc77a2ef
Dependabot update `dev-v3` branch go modules
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
10 months ago
5202e67d26
Update .github/workflows/scorecards.yml
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
10 months ago
caa8d322ee
Bump actions/upload-artifact from 3.2.1.pre.node20 to 4.4.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.2.1.pre.node20 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](c24449f33c...b4b15b8c7c
10 months ago
d1e9c022c6
Merge pull request #13332 from helm/dependabot/github_actions/actions/upload-artifact-c24449f33cd45d4826c6702db7e49f7cdb9b551d
...
Bump actions/upload-artifact from 97a0fba1372883ab732affbe8f94b823f91727db to c24449f33cd45d4826c6702db7e49f7cdb9b551d
10 months ago
1baef77c44
Update .github/workflows/scorecards.yml
...
Co-authored-by: Terry Howe <terrylhowe@gmail.com>
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
11 months ago
b5a83ea821
Adding CI for dev-v3 branch
...
When the main branch is for Helm v4, the dev-v3 branch is for Helm v3.
Note, the canary release is setup for helm v4 once the v3 branch is created
and there is no canary release for v3.
Signed-off-by: Matt Farina <matt.farina@suse.com>
11 months ago
261233caec
Merge pull request #12620 from helm/dependabot/github_actions/actions/stale-9.0.0
...
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
11 months ago
029e983241
Increasing the size of the runner used for releases.
...
Note, this runner is provided as part of the CNCF access to GitHub
Enterprise runners.
Signed-off-by: Matt Farina <matt.farina@suse.com>
11 months ago
f983342597
Bump actions/checkout from 4.2.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](eef61447b9...11bd71901b
12 months ago
c867af8e11
Bump actions/setup-go from 5.0.2 to 5.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.2 to 5.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](0a12ed9d6a...41dfa10bad
12 months ago
140a376539
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 3.0.14 to 9.0.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/v3.0.14...v9.0.0 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
d517450a11
Bump actions/checkout from 4.2.0 to 4.2.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](d632683dd7...eef61447b9
1 year ago
9e192b28eb
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](aaa42aa062...971e284b60
1 year ago
79257331c2
Bump golang/govulncheck-action from 1.0.3 to 1.0.4
...
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action ) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/golang/govulncheck-action/releases )
- [Commits](dd0578b371...b625fbe08f
1 year ago
b2286c4caa
Merge pull request #13328 from robertsirc/adjusting-go-setup-check-latest
...
adding check-latest:true
1 year ago
2cd8d54c83
Bump actions/checkout from 4.1.7 to 4.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](692973e3d9...d632683dd7
1 year ago
a8750f4ce9
adding toplevel permissions to workflows missing them
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
62069eb7b5
removing testing trigger from govulncheck action
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
114db17898
adding top-level permissions
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
3a3e3846ca
Merge pull request #13331 from helm/dependabot/github_actions/ossf/scorecard-action-2.4.0
...
Bump ossf/scorecard-action from 2.3.1 to 2.4.0
1 year ago
334f5ed87e
Merge pull request #13330 from helm/dependabot/github_actions/actions/checkout-4.1.7
...
Bump actions/checkout from 4.1.1 to 4.1.7
1 year ago
8642225be3
Fixing the action trigger
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
5217ea8f18
testing permissing for codeql
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
a1c0318480
Bump actions/upload-artifact
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 97a0fba1372883ab732affbe8f94b823f91727db to c24449f33cd45d4826c6702db7e49f7cdb9b551d.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](97a0fba137...c24449f33c
1 year ago
9134b9edab
Bump ossf/scorecard-action from 2.3.1 to 2.4.0
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](0864cf1902...62b2cac7ed
1 year ago
144e7b0287
Bump actions/checkout from 4.1.1 to 4.1.7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...692973e3d937129bcbf40652eb9f2f61becf3332 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
611fae3d7d
adding check-latest:true
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
ef2719448b
Merge pull request #13233 from harshitasao/issue-13131
...
Added the scorecard github action and its badge
1 year ago
1a55457375
Merge pull request #13259 from harshitasao/scorecard-checks-fix
...
fix: fixed the token-permission and pinned-dependencies issue
1 year ago
e7b25bab6f
bumping version to 1.22.7
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
5326d79d3e
refectoring to ONE GH action
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
d91188159e
adding new lines at the end of each files
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
1aa640fe1d
changing the trigger file
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
3ef6dd4036
changing trigger file from go.sum to go.mod
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
5f15f53e2e
removing govulncheck from build-test
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
4df7d5628b
adding new workflows for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
1 year ago
dependabot[bot]
Robert Sirchia
Matt Farina
Andrew Block
George Jenkins
Joe Julian