dependabot[bot]
9b31f3d40b
Bump helm/chart-testing-action from 2.6.0 to 2.6.1
...
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action ) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/helm/chart-testing-action/releases )
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.6.0...v2.6.1 )
---
updated-dependencies:
- dependency-name: helm/chart-testing-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2023-11-05 23:21:35 -08:00
dependabot[bot]
2dce90f44e
Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 ( #75 )
...
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases )
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-11-02 23:12:20 -07:00
kfox1111
6a6aa1c850
Cosign download fix ( #72 )
2023-10-31 16:44:52 +00:00
dependabot[bot] and Faisal Memon
cf226a73d5
Bump actions/checkout from 4.1.0 to 4.1.1 ( #42 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2023-10-18 21:17:40 +00:00
56445c4f94
Spire controller manager upgrade ( #8 )
...
Co-authored-by: Faisal Memon <[email protected] [email protected]
2023-10-17 19:54:12 +00:00
kfox1111
8aca48f14c
Push the changes that update-tags creates ( #19 )
...
* Exit code from diff indicating changes should not block commit.
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2023-10-05 10:40:32 -07:00
Faisal Memon
c23e6cb3b1
Fix issue with version checker not running
...
Signed-off-by: Faisal Memon <[email protected]
2023-10-03 09:00:20 +02:00
dependabot[bot]
51c20b1ec2
Bump actions/checkout from 4.0.0 to 4.1.0 ( #9 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-10-02 21:12:05 -07:00
kfox1111 and Faisal Memon
21db1e4b9a
Add a test to ensure upgrades work ( #6 )
...
* Add a test to ensure upgrades work
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2023-10-02 17:05:25 -07:00
dependabot[bot]
712a0f6fbe
Bump actions/checkout from 4.0.0 to 4.1.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-09-25 19:54:27 +02:00
dependabot[bot]
1aac2d483d
Bump docker/login-action from 2 to 3
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-09-13 17:59:54 +02:00
dependabot[bot]
48adb8869f
Bump actions/checkout from 3.6.0 to 4.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2023-09-05 18:05:51 +02:00
dependabot[bot]
d1f52d6995
Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 ( #473 )
2023-09-04 06:52:44 +00:00
dependabot[bot]
b05175e2b6
Bump actions/checkout from 3.5.3 to 3.6.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...v3.6.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-08-25 16:31:52 +02:00
Marco Franssen
71ac5afa11
Split steps in check-versions wf for easier debugging ( #467 )
2023-08-22 19:11:57 +00:00
kfox1111 and Marco Franssen
d91403af3a
Scan for updates to new images ( #466 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-08-22 12:05:44 -07:00
dependabot[bot]
eb1ad75d7f
Bump imjasonh/setup-crane from 0.1 to 0.3 ( #460 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 01:03:56 -07:00
dependabot[bot]
3d307a2ebf
Bump actions/setup-go from 4.0.0 to 4.1.0 ( #459 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 01:03:40 -07:00
kfox1111 and Marco Franssen
77fe43f37d
Cron job to check for and update images ( #249 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-08-18 09:49:50 +02:00
Faisal Memon
0124f633e8
Bypass example-test for docs only changes ( #449 )
2023-08-16 16:23:32 +02:00
dependabot[bot]
a167ce6890
Bump actions/setup-go from 4.0.1 to 4.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-08-09 17:52:39 +02:00
dependabot[bot]
7ce67c624c
Bump actions/checkout from 3.5.2 to 3.5.3 ( #395 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 07:30:54 -07:00
dependabot[bot]
b85ba64dea
Bump helm/kind-action from 1.7.0 to 1.8.0 ( #396 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 07:29:08 -07:00
Marco Franssen
e426bc06e9
Downgrade chart-testing tool to 3.8.0
...
Unfortunatily it fails on linting
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:54:04 +02:00
Marco Franssen
09b466466a
Utilize ct install --github-groups in ci workflow
...
https://github.com/helm/chart-testing/pull/556
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:54:04 +02:00
Marco Franssen
42086bd66a
Run example tests also on all k8s versions
...
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:49:25 +02:00
Marco Franssen
54ed71f969
Add back tests for examples
...
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:49:22 +02:00
Marco Franssen
06ddb7cd3f
Use chart-testing ci/*-values.yaml for testing
...
This also enables the refactor to have multiple root level charts.
Resolves #100
Signed-off-by: Marco Franssen <[email protected]
2023-07-19 22:48:19 +02:00
kfox1111 and Marco Franssen
a4c1de7b30
Add basic unit test framework ( #390 )
...
Co-authored-by: Marco Franssen <[email protected]
2023-07-19 18:36:07 +00:00
dependabot[bot]
0197621fa4
Bump helm/kind-action from 1.7.0 to 1.8.0 ( #384 )
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.7.0
to 1.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/helm/kind-action/releases ">helm/kind-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li><a
href="https://redirect.github.com/helm/kind-action/issues/54 ">#54</a>
ignore the occasional post delete cluster by <a
href="https://github.com/jerry153fish "><code>@jerry153fish</code></a>
in <a
href="https://redirect.github.com/helm/kind-action/pull/79 ">helm/kind-action#79</a></li>
<li>bump kind to v0.20.0 and script cleanup by <a
href="https://github.com/cpanato "><code>@cpanato</code></a> in <a
href="https://redirect.github.com/helm/kind-action/pull/88 ">helm/kind-action#88</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/jerry153fish "><code>@jerry153fish</code></a>
made their first contribution in <a
href="https://redirect.github.com/helm/kind-action/pull/79 ">helm/kind-action#79</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0 ">https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/helm/kind-action/commit/dda0770415bac9fc20092cacbc54aa298604d140 "><code>dda0770</code></a>
bump kind to v0.20.0 and script cleanup (<a
href="https://redirect.github.com/helm/kind-action/issues/88 ">#88</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/a2c862bdb666af911f88f48ba22f76a4f33c4588 "><code>a2c862b</code></a>
<a href="https://redirect.github.com/helm/kind-action/issues/54 ">#54</a>
ignore the occasional post delete cluster (<a
href="https://redirect.github.com/helm/kind-action/issues/79 ">#79</a>)</li>
<li><a
href="https://github.com/helm/kind-action/commit/1307bb2fdec64b9400f7865196ea57b0f2efb30f "><code>1307bb2</code></a>
Bump actions/checkout from 3.5.2 to 3.5.3 (<a
href="https://redirect.github.com/helm/kind-action/issues/87 ">#87</a>)</li>
<li>See full diff in <a
href="https://github.com/helm/kind-action/compare/v1.7.0...v1.8.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]
2023-07-12 09:01:07 -07:00
dependabot[bot] and Marco Franssen
731c8b45b5
Bump sigstore/cosign-installer from 3.1.0 to 3.1.1 ( #373 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Franssen <[email protected]
2023-06-28 08:40:55 -07:00
Marco Franssen
f4c421afa0
Ensure the released OCI artifact is also captured in rekor
...
Signed-off-by: Marco Franssen <[email protected]
2023-06-27 09:30:09 +02:00
dependabot[bot] and Marco Franssen
386e736e78
Bump sigstore/cosign-installer from 3.0.5 to 3.1.0 ( #368 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Franssen <[email protected]
2023-06-26 08:54:42 -07:00
Marco Franssen
9cf6049afd
Allow contributors to run linting easily on local
...
Signed-off-by: Marco Franssen <[email protected]
2023-06-17 03:42:41 +02:00
dependabot[bot]
b66077eff1
Bump peter-evans/create-pull-request from 5.0.1 to 5.0.2 ( #349 )
...
Bumps
[peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request )
from 5.0.1 to 5.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peter-evans/create-pull-request/releases ">peter-evans/create-pull-request's
releases</a>.</em></p>
<blockquote>
<h2>Create Pull Request v5.0.2</h2>
<p>⚙️ Fixes an issue that occurs when using <code>push-to-fork</code>
and both base and head repositories are in the same org/user
account.</p>
<h2>What's Changed</h2>
<ul>
<li>fix: specify head repo by <a
href="https://github.com/peter-evans "><code>@peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/2044 ">peter-evans/create-pull-request#2044</a></li>
<li>20 dependency updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/peter-evans/create-pull-request/compare/v5.0.1...v5.0.2 ">https://github.com/peter-evans/create-pull-request/compare/v5.0.1...v5.0.2 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/153407881ec5c347639a548ade7d8ad1d6740e38 "><code>1534078</code></a>
fix: specify head repo (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2044 ">#2044</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/143be5d671929f35a2d146afde2bbf411a1cdae7 "><code>143be5d</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
5.59.9 to 5.59.11 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2048 ">#2048</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/51e8ca23403d80681e9ee4d3a6f2a7749650103f "><code>51e8ca2</code></a>
build(deps-dev): bump <code>@types/node</code> from 18.16.16 to
18.16.18 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2047 ">#2047</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/712add83f26c1e359c046a6ca3dd677fb7017626 "><code>712add8</code></a>
build(deps-dev): bump <code>@types/jest</code> from 29.5.1 to 29.5.2
(<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2026 ">#2026</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/a9e8aabc8b4513752b51efcb32d166e65979b3e5 "><code>a9e8aab</code></a>
build(deps-dev): bump eslint from 8.41.0 to 8.42.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2024 ">#2024</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/37be4ffd941e930a6dc8d42c5a893e62760a6105 "><code>37be4ff</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
5.59.8 to 5.59.9 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2023 ">#2023</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/a5f0e5dc8e47c41b694db6acd592fb79ff9be31f "><code>a5f0e5d</code></a>
build(deps-dev): bump eslint-plugin-github from 4.7.0 to 4.8.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2025 ">#2025</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/9ef70ee495af6d0ff9825b3e6050f304a290283a "><code>9ef70ee</code></a>
build(deps-dev): bump <code>@types/node</code> from 18.16.14 to
18.16.16 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2009 ">#2009</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/0a287739d3c2d8485ed6e8be96cba0ab8ce870ee "><code>0a28773</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
5.59.7 to 5.59.8 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/2008 ">#2008</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/4ddb8c8fe7f58d02d4d1d62359fd91fe4d54361d "><code>4ddb8c8</code></a>
build: update distribution (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/1986 ">#1986</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/peter-evans/create-pull-request/compare/v5.0.1...v5.0.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]
2023-06-15 09:53:51 -07:00
kfox1111
4c0a1d52c5
Allow overriding test images ( #186 )
2023-06-14 21:17:08 +02:00
Drew Wells
5d8c9079a1
Dropping k8s versions in CI older than 3, as per readme ( #344 )
2023-06-13 11:54:30 -07:00
dependabot[bot]
ea09199196
Bump actions/checkout from 3.5.0 to 3.5.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.0 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.5.0...v3.5.3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2023-06-12 10:11:23 +02:00
Marco Franssen
71d110e730
Bump python + helm in CI workflow ( #325 )
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-05-30 09:12:22 -07:00
Marco Franssen and Faisal Memon
ed172e41ae
Bump k8s versions to latest patches ( #317 )
...
@faisal-memon we will need to update the required checks in branch
protection to use the new version
---------
Signed-off-by: Marco Franssen <[email protected] [email protected] [email protected]
2023-05-26 21:41:53 -07:00
Marco Franssen
05629460ef
Removed pull_request edited event from ci workflow ( #318 )
...
Edited event is only useful if you want a workflow to act on a PR
description or title or labels and such, we are not doing that in this
workflow.
Removing the edited type from the event doesn't unnecessarily run the
workflow again when title, description and such are changed.
Signed-off-by: Marco Franssen <[email protected]
2023-05-26 08:13:45 -07:00
Kevin Fox
4fb549e954
Remove 1.21.x testing
...
Signed-off-by: Kevin Fox <[email protected]
2023-05-23 08:57:07 -07:00
kfox1111
00c2c1a533
Fix the generated pr so that it runs jobs too ( #303 )
2023-05-23 12:14:40 +02:00
Edwin Buck
7809637424
Merge pull request #296 from spiffe/dependabot/github_actions/helm/kind-action-1.7.0
...
Bump helm/kind-action from 1.6.0 to 1.7.0
2023-05-18 10:25:28 -05:00
dependabot[bot]
7bb7ece123
Bump helm/kind-action from 1.6.0 to 1.7.0
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/v1.6.0...v1.7.0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2023-05-18 01:05:53 +00:00
dependabot[bot]
f1623a59bb
Bump sigstore/cosign-installer from 3.0.4 to 3.0.5
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.4...v3.0.5 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2023-05-18 01:05:50 +00:00
Marco Franssen
a2da94374c
Remove manual dispatch from dummy workflow ( #288 )
2023-05-17 09:25:15 -05:00
dependabot[bot]
807558bb9c
Bump helm/kind-action from 1.5.0 to 1.6.0 ( #285 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-17 10:39:35 +02:00
dependabot[bot]
3df67dbbc0
Bump sigstore/cosign-installer from 3.0.3 to 3.0.4 ( #286 )
...
Bumps
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer )
from 3.0.3 to 3.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases ">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.4</h2>
<ul>
<li>Include fix for <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/124 ">sigstore/cosign-installer#124</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/03d0fecf172873164a163bbc64bed0f3bf114ed7 "><code>03d0fec</code></a>
Fix unsafe evaluation of inputs.use-sudo (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/124 ">#124</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/46b5db744906311fb5af96dec633d262d16dfb5b "><code>46b5db7</code></a>
use intermediate environment variables to avoid risks of script
injection (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/122 ">#122</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/84448ba515b2a5ac9853582a471184394c67631b "><code>84448ba</code></a>
we should rely upon the digests not the tags, typos (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/121 ">#121</a>)</li>
<li>See full diff in <a
href="https://github.com/sigstore/cosign-installer/compare/v3.0.3...v3.0.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]
2023-05-17 01:04:16 -07:00
Faisal Memon and Marco Franssen
72596aea8d
Skip tests for docs folders ( #281 )
...
Our mandatory checks will fail if there are docs only changes. The
helm-chart-ci.yaml skips these files, so the workflows never run, and
the mandatory checks are stuck waiting for results.
This adds a parallel workflow that runs fake tests for docs changes. So
that docs only changes can pass the required status checks. It uses
`paths-ignore` instead of `paths`. This is documented
[here](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/troubleshooting-required-status-checks#handling-skipped-but-required-checks ).
---------
Signed-off-by: Faisal Memon <[email protected] [email protected]
2023-05-16 10:21:44 -07:00
dependabot[bot]