2a35dfbdb0
Define top level Permission for lint-chart.yaml (Chart Lint) workflow
...
Signed-off-by: aditya7302 <aditya7302@gmail.com>
2024-07-04 12:18:45 +05:30
fc20b40c7c
Merge pull request #5080 from aditya7302/fossa-token-permission
...
Define top level Permission for fossa.yml (FOSSA) workflow
2024-07-04 10:13:58 +08:00
5dc7fca205
Define top level Permission for fossa.yml (FOSSA) workflow
...
Signed-off-by: aditya7302 <aditya7302@gmail.com>
2024-07-03 17:48:09 +05:30
b20e00246b
set Minimum GITHUB_TOKEN permissions to github workflow
...
Signed-off-by: zhzhuang-zju <m17799853869@163.com>
2024-07-03 11:09:59 +08:00
7aaea7846d
Merge pull request #5082 from aditya7302/dockerhub-latest-chart-token-permission
...
Define top level Permission for dockerhub-latest-chart.yml (latest chart to Dockerhub) work flow
2024-07-03 10:22:58 +08:00
9d73721f54
set the permissions required for the job in ci-image-scanning.yaml
...
Signed-off-by: zhzhuang-zju <m17799853869@163.com>
2024-07-02 14:21:46 +08:00
5b4fb6346f
Define top level Permission for dockerhub-latest-chart.yml (latest chart to Dockerhub) workflow
...
Signed-off-by: aditya7302 <aditya7302@gmail.com>
2024-07-01 21:01:45 +05:30
66fe40bf99
add sbom to release assests
...
Signed-off-by: zhzhuang-zju <m17799853869@163.com>
2024-06-29 14:42:47 +08:00
1255a08f5d
Update ci 1.10 ( #5083 )
...
* /kind cleanup: Update CI for Karmada 1.10 and remove release-1.7
Signed-off-by: 08AHAD <91091911+08AHAD@users.noreply.github.com>
* /kind cleanup: Update CI for Karmada 1.10 and remove release-1.7 in ci-schedule-compability.yaml
Signed-off-by: 08AHAD <91091911+08AHAD@users.noreply.github.com>
---------
Signed-off-by: 08AHAD <91091911+08AHAD@users.noreply.github.com>
2024-06-24 16:00:50 +08:00
544a7586ae
Bump aquasecurity/trivy-action from 0.22.0 to 0.23.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.22.0...0.23.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-24 05:51:08 +00:00
39a667ed5f
Define top level Permission for lint-chart.yaml (Chart Lint) workflow
...
Signed-off-by: aditya7302 <aditya7302@gmail.com>
2024-06-22 12:40:10 +05:30
c437a18de3
Define top level Permission for ci-image-scanning workflow
...
Signed-off-by: aditya7302 <aditya7302@gmail.com>
2024-06-18 17:57:54 +05:30
90e3c29bc1
Bump aquasecurity/trivy-action from 0.21.0 to 0.22.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.21.0 to 0.22.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.21.0...0.22.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-10 05:32:27 +00:00
d62287fb79
Merge pull request #4984 from RainbowMango/pr_nominate_ownersconfig
...
nominate infra owners
2024-05-28 10:12:26 +08:00
2220124b4d
Merge pull request #4974 from karmada-io/dependabot/github_actions/aquasecurity/trivy-action-0.21.0
...
Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0
2024-05-24 12:06:23 +08:00
073d169931
nominate infra owners
...
Signed-off-by: RainbowMango <qdurenhongcai@gmail.com>
2024-05-24 11:44:35 +08:00
f414fa04b8
Merge pull request #4970 from liangyuanpeng/ci_k8s1.30
...
ci: add kubernetes 1.30
2024-05-24 11:07:24 +08:00
1ae145c7f3
Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.20.0...0.21.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-23 06:40:08 +00:00
33350b2f91
Merge pull request #4932 from liangyuanpeng/auto_bump_docker
...
chore: support auto bump container images with dependabot.
2024-05-23 14:39:23 +08:00
2261224427
ci: add kubernetes 1.30
...
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-05-23 05:58:09 +00:00
26db029915
chore: support auto bump container images with dependabot.
...
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-05-23 05:50:07 +00:00
3d763a84d8
Bump aquasecurity/trivy-action from 0.19.0 to 0.20.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.19.0 to 0.20.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.19.0...0.20.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-13 05:44:29 +00:00
98cb2a91bf
Bump kind to v0.22.0
...
Signed-off-by: whitewindmills <jayfantasyhjh@gmail.com>
2024-05-07 14:19:07 +08:00
167f213c51
Merge pull request #4897 from liangyuanpeng/fix_ghaction_compatibility
...
chore: fix ghaction APIServer compatibility
2024-05-06 21:57:30 +08:00
f11ec8bf94
chore: update APIServer compatibility to using go.mod for setup-go version.
...
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-05-06 13:08:55 +00:00
ddccefe388
fix the action error with no go.sum file
...
Signed-off-by: zhzhuang-zju <m17799853869@163.com>
2024-05-06 17:29:01 +08:00
5e1191ffd7
Merge pull request #4890 from karmada-io/dependabot/github_actions/sigstore/cosign-installer-3.5.0
...
Bump sigstore/cosign-installer from 3.4.0 to 3.5.0
2024-05-05 19:24:10 +08:00
548fe297e9
chore: fix github action upload-artifact name of APIServer compatibility.
...
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-05-04 09:08:08 +00:00
8548985b9a
Merge pull request #4888 from karmada-io/dependabot/github_actions/docker/login-action-3
...
Bump docker/login-action from 2 to 3
2024-05-04 15:06:29 +08:00
f2b079f29f
Merge pull request #4887 from karmada-io/dependabot/github_actions/aquasecurity/trivy-action-0.19.0
...
Bump aquasecurity/trivy-action from 0.12.0 to 0.19.0
2024-05-04 14:25:09 +08:00
02dad486f9
Merge pull request #4886 from karmada-io/dependabot/github_actions/rajatjindal/krew-release-bot-0.0.46
...
Bump rajatjindal/krew-release-bot from 0.0.40 to 0.0.46
2024-05-03 01:01:08 +08:00
55d447a163
Bump sigstore/cosign-installer from 3.4.0 to 3.5.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.4.0...v3.5.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 05:29:59 +00:00
7071e1f9ff
Bump helm/kind-action from 1.9.0 to 1.10.0
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/v1.9.0...v1.10.0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 05:29:55 +00:00
94f20d4e09
Bump docker/login-action from 2 to 3
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 05:29:52 +00:00
19fe5d2436
Bump aquasecurity/trivy-action from 0.12.0 to 0.19.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.12.0 to 0.19.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.12.0...0.19.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 05:29:48 +00:00
ab745eab21
Bump rajatjindal/krew-release-bot from 0.0.40 to 0.0.46
...
Bumps [rajatjindal/krew-release-bot](https://github.com/rajatjindal/krew-release-bot ) from 0.0.40 to 0.0.46.
- [Release notes](https://github.com/rajatjindal/krew-release-bot/releases )
- [Changelog](https://github.com/rajatjindal/krew-release-bot/blob/main/.goreleaser.yml )
- [Commits](https://github.com/rajatjindal/krew-release-bot/compare/v0.0.40...v0.0.46 )
---
updated-dependencies:
- dependency-name: rajatjindal/krew-release-bot
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 05:29:44 +00:00
44cd912a99
upgrade arduino/setup-protoc from v1 to v3
...
Signed-off-by: chaosi-zju <chaosi@zju.edu.cn>
2024-04-28 18:38:54 +08:00
006aff9518
Merge pull request #4857 from karmada-io/dependabot/github_actions/actions/checkout-4
...
Bump actions/checkout from 3 to 4
2024-04-24 20:45:02 +08:00
b38bc266b3
Merge pull request #4854 from karmada-io/dependabot/github_actions/actions/upload-artifact-4
...
Bump actions/upload-artifact from 3 to 4
2024-04-22 20:40:18 +08:00
f6407ca75e
Merge pull request #4858 from karmada-io/dependabot/github_actions/a7ul/tar-action-1.2.0
...
Bump a7ul/tar-action from 1.1.3 to 1.2.0
2024-04-22 18:17:59 +08:00
f489d75a96
Bump a7ul/tar-action from 1.1.3 to 1.2.0
...
Bumps [a7ul/tar-action](https://github.com/a7ul/tar-action ) from 1.1.3 to 1.2.0.
- [Release notes](https://github.com/a7ul/tar-action/releases )
- [Commits](https://github.com/a7ul/tar-action/compare/v1.1.3...v1.2.0 )
---
updated-dependencies:
- dependency-name: a7ul/tar-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 05:23:45 +00:00
24ce7e4da2
Bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 05:23:40 +00:00
19084d5997
Bump docker/setup-buildx-action from 2 to 3
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 05:23:30 +00:00
01c3f9d4be
Bump actions/upload-artifact from 3 to 4
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3 to 4.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 05:23:25 +00:00
3ccbf13682
Adopt gotestsum
...
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
2024-04-20 21:34:13 +07:00
137d13b0f2
Merge pull request #4831 from karmada-io/dependabot/github_actions/nick-fields/retry-3.0.0
...
Bump nick-fields/retry from 2.9.0 to 3.0.0
2024-04-16 08:26:13 +08:00
1b2b56bf35
Merge pull request #4830 from karmada-io/dependabot/github_actions/helm/chart-testing-action-2.6.1
...
Bump helm/chart-testing-action from 2.6.0 to 2.6.1
2024-04-15 23:17:12 +08:00
841ffa682c
Merge pull request #4832 from karmada-io/dependabot/github_actions/azure/setup-helm-4
...
Bump azure/setup-helm from 3 to 4
2024-04-15 21:59:53 +08:00
baad110068
Merge pull request #4833 from karmada-io/dependabot/github_actions/github/codeql-action-3
...
Bump github/codeql-action from 2 to 3
2024-04-15 15:33:13 +08:00
c10b9e5145
Bump codecov/codecov-action from 3 to 4
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 3 to 4.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-15 05:28:05 +00:00
aditya7302
karmada-bot
zhzhuang-zju
08AHAD
dependabot[bot]
RainbowMango
Lan Liang
whitewindmills
chaosi-zju
khanhtc1202