dependabot[bot]
40d5fefcfe
Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 ( #267 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.0...v6.0.1 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2024-02-27 20:22:58 -08:00
dependabot[bot]
ae800c432c
Bump helm/kind-action from 1.8.0 to 1.9.0 ( #256 )
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/v1.8.0...v1.9.0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2024-02-21 00:56:44 -08:00
kfox1111
a4e91c6ba8
Add support for integration tests in the tests/integration dir ( #253 )
...
* Add support for integration tests in the tests/integration dir
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2024-02-20 08:16:16 -08:00
dependabot[bot]
13af653e3e
Bump helm/kind-action from 1.8.0 to 1.9.0 ( #245 )
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/v1.8.0...v1.9.0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2024-02-12 13:27:17 +00:00
40b5cc3601
Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 ( #228 )
...
* Bump sigstore/cosign-installer from 3.3.0 to 3.4.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.3.0...v3.4.0 )
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] [email protected]
2024-02-01 09:46:58 -08:00
kfox1111
35215aee33
Add missing upgrade test bypass ( #231 )
...
* Add missing upgrade test bypass
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2024-02-01 09:28:20 -08:00
dependabot[bot]
c1783f639c
Bump peter-evans/create-pull-request from 5.0.2 to 6.0.0
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 5.0.2 to 6.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v5.0.2...v6.0.0 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2024-02-01 09:20:34 +01:00
kfox1111 and Faisal Memon
f8327657cd
Add a test and example for federation support ( #169 )
...
* SPIFFE OIDC Discovery Provider Rework
Fixes: https://github.com/spiffe/helm-charts-hardened/issues/151
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] https://github.com/rancher/kubectl/pull/94
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2024-01-17 15:09:32 -08:00
kfox1111
cb7e7e82c0
Remove 1.29.0 until deps catch up. ( #159 )
...
Related issue: https://github.com/rancher/kubectl/pull/94
Signed-off-by: Kevin Fox <[email protected]
2023-12-19 19:00:41 -08:00
Marco Franssen
2496c71164
Bump k8s versions for ci workflow ( #156 )
2023-12-19 15:52:45 +01:00
Marco Franssen
94498c0a31
Bump cosign to v2.2.2
...
Signed-off-by: Marco Franssen <[email protected]
2023-12-13 08:56:31 +01:00
dependabot[bot]
b7e98c4c95
Bump sigstore/cosign-installer from 3.2.0 to 3.3.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-13 08:56:31 +01:00
Marco Franssen
6e997d4f47
Bump cosign to v2.2.2
...
Signed-off-by: Marco Franssen <[email protected]
2023-12-12 12:53:15 +01:00
dependabot[bot]
9d483e276e
Bump sigstore/cosign-installer from 3.2.0 to 3.3.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-12 12:53:15 +01:00
kfox1111
8615cb0840
Add devcontainer support to the repo ( #98 )
2023-12-12 12:50:32 +01:00
dependabot[bot]
c017d82594
Bump actions/setup-python from 4 to 5 ( #137 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-07 12:40:31 +00:00
dependabot[bot]
6fda639237
Bump actions/setup-go from 4.1.0 to 5.0.0 ( #136 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4.1.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4.1.0...v5.0.0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-12-07 04:32:42 -08:00
dependabot[bot]
edf2381aad
Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 ( #85 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.1.2 to 3.2.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.1.2...v3.2.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-11-07 22:56:47 -08:00
dependabot[bot]
9b31f3d40b
Bump helm/chart-testing-action from 2.6.0 to 2.6.1
...
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action ) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/helm/chart-testing-action/releases )
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.6.0...v2.6.1 )
---
updated-dependencies:
- dependency-name: helm/chart-testing-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2023-11-05 23:21:35 -08:00
dependabot[bot]
2dce90f44e
Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 ( #75 )
...
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases )
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-11-02 23:12:20 -07:00
kfox1111
6a6aa1c850
Cosign download fix ( #72 )
2023-10-31 16:44:52 +00:00
dependabot[bot] and Faisal Memon
cf226a73d5
Bump actions/checkout from 4.1.0 to 4.1.1 ( #42 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2023-10-18 21:17:40 +00:00
56445c4f94
Spire controller manager upgrade ( #8 )
...
Co-authored-by: Faisal Memon <[email protected] [email protected]
2023-10-17 19:54:12 +00:00
kfox1111
8aca48f14c
Push the changes that update-tags creates ( #19 )
...
* Exit code from diff indicating changes should not block commit.
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2023-10-05 10:40:32 -07:00
Faisal Memon
c23e6cb3b1
Fix issue with version checker not running
...
Signed-off-by: Faisal Memon <[email protected]
2023-10-03 09:00:20 +02:00
dependabot[bot]
51c20b1ec2
Bump actions/checkout from 4.0.0 to 4.1.0 ( #9 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-10-02 21:12:05 -07:00
kfox1111 and Faisal Memon
21db1e4b9a
Add a test to ensure upgrades work ( #6 )
...
* Add a test to ensure upgrades work
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2023-10-02 17:05:25 -07:00
dependabot[bot]
712a0f6fbe
Bump actions/checkout from 4.0.0 to 4.1.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-09-25 19:54:27 +02:00
dependabot[bot]
1aac2d483d
Bump docker/login-action from 2 to 3
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-09-13 17:59:54 +02:00
dependabot[bot]
48adb8869f
Bump actions/checkout from 3.6.0 to 4.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-09-05 18:05:51 +02:00
dependabot[bot]
d1f52d6995
Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 ( #473 )
2023-09-04 06:52:44 +00:00
dependabot[bot]
b05175e2b6
Bump actions/checkout from 3.5.3 to 3.6.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-08-25 16:31:52 +02:00
Marco Franssen
71ac5afa11
Split steps in check-versions wf for easier debugging ( #467 )
2023-08-22 19:11:57 +00:00
kfox1111 and Marco Franssen
d91403af3a
Scan for updates to new images ( #466 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-08-22 12:05:44 -07:00
dependabot[bot]
eb1ad75d7f
Bump imjasonh/setup-crane from 0.1 to 0.3 ( #460 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 01:03:56 -07:00
dependabot[bot]
3d307a2ebf
Bump actions/setup-go from 4.0.0 to 4.1.0 ( #459 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 01:03:40 -07:00
kfox1111 and Marco Franssen
77fe43f37d
Cron job to check for and update images ( #249 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-08-18 09:49:50 +02:00
Faisal Memon
0124f633e8
Bypass example-test for docs only changes ( #449 )
2023-08-16 16:23:32 +02:00
dependabot[bot]
a167ce6890
Bump actions/setup-go from 4.0.1 to 4.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-08-09 17:52:39 +02:00
dependabot[bot]
7ce67c624c
Bump actions/checkout from 3.5.2 to 3.5.3 ( #395 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 07:30:54 -07:00
dependabot[bot]
b85ba64dea
Bump helm/kind-action from 1.7.0 to 1.8.0 ( #396 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 07:29:08 -07:00
Marco Franssen
e426bc06e9
Downgrade chart-testing tool to 3.8.0
...
Unfortunatily it fails on linting
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:54:04 +02:00
Marco Franssen
09b466466a
Utilize ct install --github-groups in ci workflow
...
https://github.com/helm/chart-testing/pull/556
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:54:04 +02:00
Marco Franssen
42086bd66a
Run example tests also on all k8s versions
...
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:49:25 +02:00
Marco Franssen
54ed71f969
Add back tests for examples
...
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:49:22 +02:00
Marco Franssen
06ddb7cd3f
Use chart-testing ci/*-values.yaml for testing
...
This also enables the refactor to have multiple root level charts.
Resolves #100
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:48:19 +02:00
kfox1111 and Marco Franssen
a4c1de7b30
Add basic unit test framework ( #390 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-07-19 18:36:07 +00:00
dependabot[bot]
0197621fa4
Bump helm/kind-action from 1.7.0 to 1.8.0 ( #384 )
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.7.0
to 1.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/helm/kind-action/releases ">helm/kind-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li><a
href="https://redirect.github.com/helm/kind-action/issues/54 ">#54</a>
ignore the occasional post delete cluster by <a
href="https://github.com/jerry153fish "><code>@jerry153fish</code></a>
in <a
href="https://redirect.github.com/helm/kind-action/pull/79 ">helm/kind-action#79</a></li>
<li>bump kind to v0.20.0 and script cleanup by <a
href="https://github.com/cpanato "><code>@cpanato</code></a> in <a
href="https://redirect.github.com/helm/kind-action/pull/88 ">helm/kind-action#88</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/jerry153fish "><code>@jerry153fish</code></a>
made their first contribution in <a
href="https://redirect.github.com/helm/kind-action/pull/79 ">helm/kind-action#79</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0 ">https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/helm/kind-action/commit/dda0770415bac9fc20092cacbc54aa298604d140 "><code>dda0770</code></a>
bump kind to v0.20.0 and script cleanup (<a
href="https://redirect.github.com/helm/kind-action/issues/88 ">#88</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/a2c862bdb666af911f88f48ba22f76a4f33c4588 "><code>a2c862b</code></a>
<a href="https://redirect.github.com/helm/kind-action/issues/54 ">#54</a>
ignore the occasional post delete cluster (<a
href="https://redirect.github.com/helm/kind-action/issues/79 ">#79</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/1307bb2fdec64b9400f7865196ea57b0f2efb30f "><code>1307bb2</code></a>
Bump actions/checkout from 3.5.2 to 3.5.3 (<a
href="https://redirect.github.com/helm/kind-action/issues/87 ">#87</a>)</li>
<li>See full diff in <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]
2023-07-12 09:01:07 -07:00
dependabot[bot] and Marco Franssen
731c8b45b5
Bump sigstore/cosign-installer from 3.1.0 to 3.1.1 ( #373 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Franssen <[email protected]
2023-06-28 08:40:55 -07:00
Marco Franssen
f4c421afa0
Ensure the released OCI artifact is also captured in rekor
...
Signed-off-by: Marco Franssen <[email protected]
2023-06-27 09:30:09 +02:00
dependabot[bot]