shuting
|
5bd3faca97
|
chore (deps): bump a couple of deps (#8867)
* bump github.com/distribution/distribution from 2.8.2+incompatible to 2.8.3+incompatible
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* bump sigs.k8s.io/kubectl-validate from 0.0.1 to 0.0.2
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* bump aquasecurity/trivy-action from 0.13.1 to 0.14.0
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* bump sigstore/scaffolding from 838c26c783a08cf497dfff29d95ca90c6eeba3df to 46eb35c1c415d976c7f9d3ee4c936e65c35e8e3e
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2023-11-09 16:25:15 +05:30 |
|
dependabot[bot]
|
12806bb0c7
|
chore(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#8850)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.2 to 3.2.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](11086d2504...1fc5bd396d )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-11-08 14:06:21 +00:00 |
|
dependabot[bot]
|
d397c46616
|
chore(deps): bump aquasecurity/trivy-action from 0.13.0 to 0.13.1 (#8796)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.13.0 to 0.13.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](b77b85c025...f78e9ecf42 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2023-11-07 04:40:35 +00:00 |
|
dependabot[bot]
|
7b13185fb6
|
chore(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.13.0 (#8742)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](fbd16365eb...b77b85c025 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-27 13:19:01 +00:00 |
|
dependabot[bot]
|
865d6e56ad
|
chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#8680)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8ade135a41...b4ffde65f4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-25 04:29:31 +00:00 |
|
dependabot[bot]
|
3af6862f51
|
chore(deps): bump fluxcd/flux2 from 2.1.1 to 2.1.2 (#8640)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](026ab61ba7...a18d4f3450 )
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-24 09:50:32 +00:00 |
|
Charles-Edouard Brétéché
|
20655f5af4
|
fix: cache error in gh workflows (#8518)
* fix: cache error in gh workflows
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* setup caches
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-09-27 08:24:27 +00:00 |
|
dependabot[bot]
|
313c5df2bb
|
chore(deps): bump actions/checkout from 4.0.0 to 4.1.0 (#8523)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](3df4ab11eb...8ade135a41 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-25 07:39:53 +00:00 |
|
Charles-Edouard Brétéché
|
af50fabc6e
|
chore: fix release (#8482)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-09-21 08:24:45 +00:00 |
|
Charles-Edouard Brétéché
|
5eb3ca2d96
|
fix: release archive name template (#8475)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-09-20 22:35:49 +00:00 |
|
Charles-Edouard Brétéché
|
da5496bd64
|
fix: release workflow (#8471)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-09-20 19:46:40 +00:00 |
|
dependabot[bot]
|
8ed197cb51
|
chore(deps): bump fluxcd/flux2 from 2.1.0 to 2.1.1 (#8457)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](22cf986a79...026ab61ba7 )
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-20 07:33:32 +00:00 |
|
dependabot[bot]
|
51fc790aa7
|
chore(deps): bump docker/login-action from 2.2.0 to 3.0.0 (#8372)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2.2.0 to 3.0.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](465a07811f...343f7c4344 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-13 17:29:46 +00:00 |
|
dependabot[bot]
|
a5198e78a9
|
chore(deps): bump goreleaser/goreleaser-action from 4.6.0 to 5.0.0 (#8344)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.6.0 to 5.0.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](5fdedb94ab...7ec5c2b0c6 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-12 10:15:28 +00:00 |
|
dependabot[bot]
|
4449736315
|
chore(deps): bump goreleaser/goreleaser-action from 4.4.0 to 4.6.0 (#8284)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.4.0 to 4.6.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](3fa32b8bb5...5fdedb94ab )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-07 06:43:42 +00:00 |
|
dependabot[bot]
|
7a3a3194eb
|
chore(deps): bump actions/checkout from 3.6.0 to 4.0.0 (#8262)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](f43a0e5ff2...3df4ab11eb )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2023-09-05 09:27:02 +00:00 |
|
dependabot[bot]
|
39fdbb4c38
|
chore(deps): bump aquasecurity/trivy-action from 0.11.2 to 0.12.0 (#8235)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.11.2 to 0.12.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](41f05d9ecf...fbd16365eb )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-09-04 18:40:19 +00:00 |
|
dependabot[bot]
|
e153ead117
|
chore(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#8236)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](6e04d228eb...11086d2504 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-04 12:07:07 +00:00 |
|
Charles-Edouard Brétéché
|
7de8503e87
|
chore: increase setup-build-env timeout (#8187)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-08-30 20:44:51 +00:00 |
|
Charles-Edouard Brétéché
|
147e3197c4
|
chore: add a timeout to setup-build-env action (#8153)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-08-29 08:39:43 +00:00 |
|
dependabot[bot]
|
410c02b36f
|
chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#8119)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](c85c95e3d7...f43a0e5ff2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-25 07:17:21 +00:00 |
|
dependabot[bot]
|
4700566966
|
chore(deps): bump fluxcd/flux2 from 2.0.1 to 2.1.0 (#8118)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 2.0.1 to 2.1.0.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](9b3162495c...22cf986a79 )
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-25 06:46:11 +00:00 |
|
dependabot[bot]
|
58b5d65c85
|
chore(deps): bump slsa-framework/slsa-github-generator (#8093)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.8.0...v1.9.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-23 16:11:32 +08:00 |
|
dependabot[bot]
|
f74c80f57b
|
chore(deps): bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0 (#8001)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](336e29918d...3fa32b8bb5 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-10 07:41:31 +00:00 |
|
dependabot[bot]
|
bc95283b04
|
chore(deps): bump slsa-framework/slsa-github-generator (#7968)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.7.0...v1.8.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-04 11:03:50 +02:00 |
|
dependabot[bot]
|
3b7c938d6f
|
chore(deps): bump svenstaro/upload-release-action from 2.6.1 to 2.7.0 (#7940)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.6.1 to 2.7.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](2b9d2847a9...1beeb572c1 )
---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2023-07-31 10:34:29 +00:00 |
|
dependabot[bot]
|
5577eb8708
|
chore(deps): bump fluxcd/flux2 from 2.0.0 to 2.0.1 (#7814)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](9ea0a535ea...9b3162495c )
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-12 16:33:37 +08:00 |
|
Charles-Edouard Brétéché
|
230d8235e3
|
chore: bump cosign in gh workflows (#7715)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-07-06 12:19:21 +00:00 |
|
dependabot[bot]
|
9db1ea3e21
|
chore(deps): bump fluxcd/flux2 from 0.41.2 to 2.0.0 (#7764)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 0.41.2 to 2.0.0.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](dbda8fbdb8...9ea0a535ea )
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-07-06 09:24:26 +00:00 |
|
Charles-Edouard Brétéché
|
5ea387e372
|
fix: use github token instead of pat (#7727)
* fix: remove jmespath replace directive
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: use github token instead of pat
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 22:55:58 +00:00 |
|
Charles-Edouard Brétéché
|
164fb8059f
|
fix: reduce token permission (#7729)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 15:28:46 +00:00 |
|
Charles-Edouard Brétéché
|
6cb54a475c
|
fix: reduce token permissions (#7721)
* fix: reduce token permissions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: reduce token permissions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 11:44:57 +00:00 |
|
Charles-Edouard Brétéché
|
bec1f94f70
|
fix: release signing (#7711) (#7713)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-29 16:37:45 +00:00 |
|
dependabot[bot]
|
5b9c13ad00
|
chore(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#7689)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d13028333d...6e04d228eb )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-28 07:34:06 +00:00 |
|
dependabot[bot]
|
579bee8286
|
chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#7664)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.5 to 3.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](dd6b2e2b61...d13028333d )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-26 07:39:40 +00:00 |
|
dependabot[bot]
|
0af0944f87
|
chore(deps): bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#7510)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](f82d6c1c34...336e29918d )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-13 08:00:25 +00:00 |
|
dependabot[bot]
|
43d9f64d94
|
chore(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 (#7494)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.11.0 to 0.11.2.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](b43daad0c3...41f05d9ecf )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 09:08:28 +00:00 |
|
dependabot[bot]
|
5f73d2b796
|
chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 (#7493)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8e5e7e5ab8...c85c95e3d7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 08:11:03 +00:00 |
|
Charles-Edouard Brétéché
|
123ba5f9d8
|
feat: sign released artifacts (#7478)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-09 16:05:45 +00:00 |
|
dependabot[bot]
|
baa05b704f
|
chore(deps): bump slsa-framework/slsa-github-generator (#7462)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.6.0...v1.7.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-08 08:23:12 +00:00 |
|
dependabot[bot]
|
4bfe5e3e8d
|
chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#7463)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](f4ef78c080...465a07811f )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-08 07:31:25 +00:00 |
|
dependabot[bot]
|
b4014b4c90
|
chore(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 (#7426)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](e5f43133f6...b43daad0c3 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-06 11:10:36 +00:00 |
|
dependabot[bot]
|
a6786a152e
|
chore(deps): bump svenstaro/upload-release-action from 2.6.0 to 2.6.1 (#7376)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](58d5258088...2b9d2847a9 )
---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-01 08:40:26 +00:00 |
|
dependabot[bot]
|
8160a44400
|
chore(deps): bump svenstaro/upload-release-action from 2.5.0 to 2.6.0 (#7270)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](7319e4733e...58d5258088 )
---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-24 08:23:24 +00:00 |
|
dependabot[bot]
|
addfe22842
|
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#7229)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](03d0fecf17...dd6b2e2b61 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-18 11:04:23 +00:00 |
|
dependabot[bot]
|
e56c795143
|
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#7215)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](204a51a57a...03d0fecf17 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-17 07:28:56 +00:00 |
|
dependabot[bot]
|
1d5bf55903
|
chore(deps): bump slsa-framework/slsa-github-generator (#7160)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-11 08:54:03 +00:00 |
|
dependabot[bot]
|
e0de8c367d
|
chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 (#7012)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](9e9de2292d...204a51a57a )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-26 16:58:02 +08:00 |
|
dependabot[bot]
|
e10e1a7f8d
|
chore(deps): bump aquasecurity/trivy-action from 0.9.2 to 0.10.0 (#6976)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.9.2 to 0.10.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](1f0aa582c8...e5f43133f6 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-19 16:16:26 +08:00 |
|
dependabot[bot]
|
a5e46ca548
|
chore(deps): bump actions/checkout from 3.5.1 to 3.5.2 (#6926)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.1...8e5e7e5ab8b370d6c329ec480221332ada57f0ab)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-14 07:52:25 +00:00 |
|