dependabot[bot]
ba99ab3eb3
Bump docker/login-action from 4.5.0 to 4.5.1 ( #893 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4.5.0...v4.5.1 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-27 06:53:03 -07:00
dependabot[bot]
40d20cdeb3
Bump regclient/actions/regctl-installer ( #886 )
...
Bumps [regclient/actions/regctl-installer](https://github.com/regclient/actions ) from 39bf30ced4be9d147faaabbde2682e9725fb8bd1 to c48159175b58fb90cccd0f98410927a81e04a166.
- [Release notes](https://github.com/regclient/actions/releases )
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md )
- [Commits](https://github.com/regclient/actions/compare/39bf30ced4be9d147faaabbde2682e9725fb8bd1...c48159175b58fb90cccd0f98410927a81e04a166 )
---
updated-dependencies:
- dependency-name: regclient/actions/regctl-installer
dependency-version: c48159175b58fb90cccd0f98410927a81e04a166
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-24 06:22:15 -07:00
dependabot[bot]
e6d68862f6
Bump docker/login-action from 4.4.0 to 4.5.0 ( #891 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4.4.0...v4.5.0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-24 06:09:48 -07:00
kfox1111
952cbedbff
Broker updates ( #882 )
...
* Broker updates
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-21 18:28:14 -07:00
dependabot[bot]
8deb9ab8b9
Bump actions/checkout from 7.0.0 to 7.0.1 ( #888 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-21 05:38:59 -07:00
dependabot[bot]
f70dc4e4a2
Bump actions/setup-python from 6 to 7 ( #887 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-21 05:24:09 -07:00
dependabot[bot]
b4ba52dbe5
Bump actions/setup-go from 6.5.0 to 7.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v6.5.0...v7.0.0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-16 09:38:29 +02:00
kfox1111
96156f1d9a
Update spire-identity-exchange version ( #878 )
...
* Update spire-identity-exchange version
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected]
2026-07-14 22:05:01 +00:00
kfox1111 and Faisal Memon
f548e05899
Automatically label clusterspiffeids with their class name ( #877 )
...
* Automatically label clusterspiffeids with their class name
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected]
2026-07-14 14:57:46 -07:00
kfox1111 and Matheus Pimenta
bf6b36c807
SPIRE Agent support for Broker API ( #876 )
...
* SPIRE Agent support for Broker API
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-14 13:46:19 -07:00
sabsari and Claude Opus 4.8
cc164bad6b
Add EJBCA UpstreamAuthority plugin support to spire-server chart ( #873 )
...
Add support for the EJBCA UpstreamAuthority plugin, allowing the SPIRE
server to use an EJBCA instance as its upstream CA over mTLS.
- Add upstreamAuthority.ejbca values (hostname, caName, endEntityProfileName,
certificateProfileName, optional endEntityName and accountBindingId).
- Render the ejbca UpstreamAuthority block in the server config and count it
toward the single-upstream-authority guard.
- Mount the mTLS client credentials (and optional CA cert) from a secret,
either chart-created (secret.create) or externally provided.
- Gate ca_cert_path on secret.data.caCert, mirroring the disk plugin's bundle
handling for deterministic rendering.
- Regenerate the chart README and add a unit render test.
Signed-off-by: sabsari <[email protected] [email protected]
2026-07-13 01:14:37 +00:00
kfox1111
0d6894037c
Bump spire to 1.15.2 ( #875 )
...
Signed-off-by: Kevin Fox <[email protected]
2026-07-12 16:44:15 -07:00
dependabot[bot]
c273251dc7
Bump helm.sh/helm/v3 from 3.21.2 to 3.21.3 in /tests
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.21.2 to 3.21.3.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.21.2...v3.21.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.21.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-10 21:10:01 +02:00
kfox1111
daed324325
Fix the spire-identity-exchange stack support ( #872 )
...
Signed-off-by: Kevin Fox <[email protected]
2026-07-08 22:28:01 -07:00
dependabot[bot]
40c0a29018
Bump regclient/actions/regctl-installer ( #870 )
...
Bumps [regclient/actions/regctl-installer](https://github.com/regclient/actions ) from 9a2d4216180dbb3e2dccfa60d2dd4afd98e42ec5 to 39bf30ced4be9d147faaabbde2682e9725fb8bd1.
- [Release notes](https://github.com/regclient/actions/releases )
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md )
- [Commits](https://github.com/regclient/actions/compare/9a2d4216180dbb3e2dccfa60d2dd4afd98e42ec5...39bf30ced4be9d147faaabbde2682e9725fb8bd1 )
---
updated-dependencies:
- dependency-name: regclient/actions/regctl-installer
dependency-version: 39bf30ced4be9d147faaabbde2682e9725fb8bd1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-06 05:58:52 -07:00
dependabot[bot]
8c4e039e0a
Bump docker/login-action from 4.3.0 to 4.4.0 ( #871 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4.3.0...v4.4.0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-06 05:48:41 -07:00
kfox1111
af6533d764
We havent released 0.30.0 yet. Merge notes. ( #869 )
2026-07-05 14:13:45 -07:00
kfox1111
e44f006dde
Experimental support for spire-identity-exchange ( #860 )
...
* Experimental support for spire-identity-exchange
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-05 07:49:12 -07:00
dependabot[bot]
2809df4291
Bump docker/login-action from 4.2.0 to 4.3.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4.2.0...v4.3.0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-03 09:08:12 +02:00
Daniel Schlatter and kfox1111
21bcece2ac
add config to allow disabling jwt svids ( #864 )
...
Signed-off-by: Daniel Schlatter <[email protected] [email protected]
2026-07-02 14:57:29 -07:00
JoelGoh92 and Joel Goh
459cf8ff5b
Add default labels to child-servers clusterSPIFFEIDs for external-root-spire-server-full ( #866 )
...
Signed-off-by: Joel Goh <[email protected] [email protected]
2026-07-02 09:41:01 -07:00
dependabot[bot]
585203462b
Bump regclient/actions/regctl-installer
...
Bumps [regclient/actions/regctl-installer](https://github.com/regclient/actions ) from 4b4db1dcc7dad75ad67a788a380f75a20cc8a040 to 9a2d4216180dbb3e2dccfa60d2dd4afd98e42ec5.
- [Release notes](https://github.com/regclient/actions/releases )
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md )
- [Commits](https://github.com/regclient/actions/compare/4b4db1dcc7dad75ad67a788a380f75a20cc8a040...9a2d4216180dbb3e2dccfa60d2dd4afd98e42ec5 )
---
updated-dependencies:
- dependency-name: regclient/actions/regctl-installer
dependency-version: 9a2d4216180dbb3e2dccfa60d2dd4afd98e42ec5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-29 12:33:41 +02:00
dependabot[bot]
179386da9c
Bump imjasonh/setup-crane from 0.6 to 0.7
...
Bumps [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane ) from 0.6 to 0.7.
- [Release notes](https://github.com/imjasonh/setup-crane/releases )
- [Commits](https://github.com/imjasonh/setup-crane/compare/v0.6...v0.7 )
---
updated-dependencies:
- dependency-name: imjasonh/setup-crane
dependency-version: '0.7'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-29 08:45:46 +02:00
kfox1111
7687339420
Enable easy plugin loading ( #859 )
...
* Enable easy plugin loading
customPluings have to be loaded into the main container somehow. Extend
the existing cel plugin loader to allow users to easily specify an image
to load it from.
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-06-25 22:49:42 -07:00
dependabot[bot]
a8a94544e2
Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 in /tests
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.31.0 to 2.32.0.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.31.0...v2.32.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-version: 2.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-24 14:16:32 +02:00
dependabot[bot]
1012242394
Bump regclient/actions
...
Bumps [regclient/actions](https://github.com/regclient/actions ) from 14f9d37db17b5dc41fefd1ffdd1af4b9e2490560 to 4b4db1dcc7dad75ad67a788a380f75a20cc8a040.
- [Release notes](https://github.com/regclient/actions/releases )
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md )
- [Commits](https://github.com/regclient/actions/compare/14f9d37db17b5dc41fefd1ffdd1af4b9e2490560...4b4db1dcc7dad75ad67a788a380f75a20cc8a040 )
---
updated-dependencies:
- dependency-name: regclient/actions
dependency-version: 4b4db1dcc7dad75ad67a788a380f75a20cc8a040
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-24 14:16:16 +02:00
dependabot[bot]
4c47699e8a
Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 in /tests
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.42.0 to 1.42.1.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.42.0...v1.42.1 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.42.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-24 10:57:11 +02:00
dependabot[bot]
517fdd5692
Bump actions/setup-go from 6.4.0 to 6.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v6.4.0...v6.5.0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-24 10:56:52 +02:00
dependabot[bot]
08fd19f272
Bump helm.sh/helm/v3 from 3.21.1 to 3.21.2 in /tests
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.21.1 to 3.21.2.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.21.1...v3.21.2 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.21.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-22 10:53:19 +02:00
dependabot[bot]
7fc3cf4f8a
Bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-19 09:21:02 +02:00
dependabot[bot]
d7d4f03265
Bump helm.sh/helm/v3 from 3.21.0 to 3.21.1 in /tests
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.21.0 to 3.21.1.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.21.0...v3.21.1 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-15 11:37:35 +02:00
dependabot[bot]
0eaa756379
Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 in /tests
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.30.0 to 2.31.0.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.30.0...v2.31.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-version: 2.31.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-15 11:35:19 +02:00
dependabot[bot]
96dcf10f8f
Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 in /tests
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.41.0 to 1.42.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.41.0...v1.42.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-15 11:26:45 +02:00
Guillermo Gaston and kfox1111
4f8ac5af06
Configure jwt_issuer in SPIRE OIDC Provider ( #829 )
...
The SPIRE OIDC Discovery Provider binary supports a top-level
`jwt_issuer` configuration key. When set, the provider returns that
exact string as the `issuer` field in the OIDC discovery document
(`.well-known/openid-configuration`) regardless of how the request was
routed. When unset, it derives `issuer` from the inbound HTTP Host
header. This chart did not render that key into the OIDC provider
config, leaving the discovery document Host-derived even when the
operator had a fixed issuer in mind.
Why this matters
OpenID Connect Discovery requires the discovery doc's `issuer` to be
byte-equal to the JWT `iss` claim. Conformant verifiers reject the chain
when the two differ. Production OIDC consumers routinely reach the
discovery endpoint at a URL different from the canonical issuer:
- a load balancer, ingress, or NodePort exposes the provider on an
IP or host different from the canonical issuer name;
- TLS terminates at a hostname different from the one advertised to
clients;
- the discovery URL is fetched by an internal service (e.g. the API
server in a private cluster) over a different DNS view than
external clients use;
- a pinned issuer URL is contractually required and must survive
infrastructure changes that move the actual service endpoint.
In all of these the JWT's `iss` claim is a logical, stable URL; the
discovery doc must report that same value, or downstream verifiers
reject the tokens.
Current chart behavior
The chart already has `global.spire.jwtIssuer` (and a subchart-local
`jwtIssuer`), resolved by the `spire-lib.jwt-issuer` helper to
`global.spire.jwtIssuer` -> subchart-local `jwtIssuer` ->
`https://oidc-discovery .<trustDomain>`. The spire-server subchart writes
that helper's result unconditionally as `jwt_issuer:` into the server's
config -- this controls the `iss` claim of every JWT-SVID the server
mints. In the OIDC subchart, however, the same helper was only used for
two things:
1. as the strict-mode assertion gate (fails the render when the
resolved value is the `example.org` default);
2. as the default source for `config.jwtDomain` (the Host
allow-list).
It was never written into the rendered OIDC provider configuration file.
The asymmetry means the chart shipped a structurally invalid OIDC setup
by default: the spire-server signs JWTs with `iss = <resolved issuer>`,
while the OIDC discovery endpoint advertises whatever Host header was
used to reach it. The only way to correct that today is to patch the
rendered ConfigMap out of band (`kubectl patch`, a CMP, a kustomize
post-renderer), which defeats the purpose of the chart.
Backward compatibility and behavior changes
Operators who set `global.spire.jwtIssuer` will see one additional
`jwt_issuer:` line in the rendered OIDC ConfigMap. The discovery doc's
`issuer` will start returning that pinned value instead of being
Host-derived, bringing the chain into spec compliance; this is a fix for
any spec-compliant verifier that previously rejected tokens. Operators
who only set the OIDC subchart-local `jwtIssuer` see the same fix
applied via the helper's fallback chain. Operators with nothing set will
see the new line default to `https://oidc-discovery .<trustDomain>`,
matching what the spire-server config already emits today.
Signed-off-by: Guillermo Gaston <[email protected] [email protected]
2026-06-14 01:25:43 +00:00
Marco Franssen
4c56498e59
Merge pull request #843 from spiffe/dependabot/github_actions/regclient/actions-14f9d37db17b5dc41fefd1ffdd1af4b9e2490560
2026-06-12 21:26:11 +02:00
dependabot[bot]
528cc89f99
Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 in /tests ( #844 )
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.29.0 to 2.30.0.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.29.0...v2.30.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-version: 2.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-12 05:30:08 -07:00
Bronson Mirafuentes and dependabot[bot]
86c60b186f
feat(spire-server): add terminationGracePeriodSeconds ( #835 )
...
* feat(spire-server): add terminationGracePeriodSeconds and lifecycle support
Adds two new top-level values to the spire-server chart:
- `terminationGracePeriodSeconds` (nullable, pod-spec level): overrides the
default 30s termination grace period. Useful when the server is behind a
load balancer that needs time to deregister the target (e.g. AWS NLB with
a deregistration delay > 30s).
- `lifecycle` (object, container level): lifecycle hooks for the spire-server
container. The primary use case is a preStop hook to hold the pod alive
while the load balancer deregisters the target before SIGTERM is sent:
lifecycle:
preStop:
sleep:
seconds: 60
Both fields default to their absent/empty equivalents (null and {}) so
existing deployments are unaffected.
Signed-off-by: Bronson Mirafuentes <[email protected] #836 )
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4.1.0...v4.2.0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-06-11 12:12:33 -07:00
dependabot[bot]
b68bdc38e2
Bump regclient/actions
...
Bumps [regclient/actions](https://github.com/regclient/actions ) from c70ad64367908075211b10dcd2ab9fad4bfa1816 to 14f9d37db17b5dc41fefd1ffdd1af4b9e2490560.
- [Release notes](https://github.com/regclient/actions/releases )
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md )
- [Commits](https://github.com/regclient/actions/compare/c70ad64367908075211b10dcd2ab9fad4bfa1816...14f9d37db17b5dc41fefd1ffdd1af4b9e2490560 )
---
updated-dependencies:
- dependency-name: regclient/actions
dependency-version: 14f9d37db17b5dc41fefd1ffdd1af4b9e2490560
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-11 03:52:41 +00:00
Faisal Memon
734aa653c2
Fix release workflow path trigger ( #842 )
...
Signed-off-by: Faisal Memon <[email protected]
2026-06-06 12:22:35 -07:00
Faisal Memon
5f0f45c728
Add Smallstep repo to release workflow ( #841 )
...
Signed-off-by: Faisal Memon <[email protected]
2026-06-06 12:05:46 -07:00
Faisal Memon and Kevin Fox
98ec4e680b
Bump spire-lib Helm Chart version from 0.1.0 to 0.2.0 ( #822 )
...
* Bump spire-lib and dependent Helm Chart versions (minor)
* 3c1dec30#787 )
Signed-off-by: Faisal Memon <[email protected] [email protected] [email protected] [email protected] [email protected]
2026-06-06 10:33:41 -07:00
kfox1111
1afb4626f1
Update spire-controller-manager ( #840 )
...
Signed-off-by: Kevin Fox <[email protected]
2026-06-04 18:11:03 +00:00
dependabot[bot] and kfox1111
ceece7cde3
Bump imjasonh/setup-crane from 0.5 to 0.6 ( #839 )
...
Bumps [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane ) from 0.5 to 0.6.
- [Release notes](https://github.com/imjasonh/setup-crane/releases )
- [Commits](https://github.com/imjasonh/setup-crane/compare/v0.5...v0.6 )
---
updated-dependencies:
- dependency-name: imjasonh/setup-crane
dependency-version: '0.6'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2026-06-03 19:10:49 -07:00
dependabot[bot]
de4f4a0751
Bump actions/checkout from 6.0.2 to 6.0.3 ( #838 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]
2026-06-03 19:09:22 -07:00
kfox1111
1031167b84
Implement easy Bottom Turtle HA support in the charts ( #816 )
...
* Implement easy Bottom Turtle HA support in the charts
Signed-off-by: Kevin Fox <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-06-03 12:15:28 -07:00
Faisal Memon
a40409ec53
Automate release bumps from the current branch ( #831 )
...
* Automate dependent chart release bumps
Signed-off-by: Faisal Memon <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-05-31 05:29:55 -07:00
dependabot[bot]
ab3164d48e
Bump docker/login-action from 4.1.0 to 4.2.0 ( #836 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4.1.0...v4.2.0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-05-25 12:08:23 -07:00
Bronson Mirafuentes
7c532f10bb
feat(spire-server): add maxAttestedNodeInfoStaleness config option ( #828 )
...
* feat(spire-server): add maxAttestedNodeInfoStaleness configuration option
Wire max_attested_node_info_staleness into the spire-server ConfigMap.
When unset (default ""), the SPIRE server uses its built-in default of 0s.
Signed-off-by: Bronson Mirafuentes <[email protected] [email protected] [email protected]
2026-05-19 08:00:53 -07:00
dependabot[bot]
7f4377f4b0
Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 in /tests
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.40.0...v1.41.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-05-18 19:25:39 +02:00
dependabot[bot]
3f339664b1
Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 in /tests
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.28.3 to 2.29.0.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.3...v2.29.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-version: 2.29.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]
2026-05-18 19:11:01 +02:00
dependabot[bot]