Commit Graph

569 Commits

Author SHA1 Message Date
dependabot[bot]
2b8a7f253d build(deps): bump lycheeverse/lychee-action from 2.2.0 to 2.3.0
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](f796c8b7d4...f613c4a64e)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-10 23:37:59 +00:00
Maksym Pavlenko
ef5118a51e Merge pull request #11332 from containerd/dependabot/github_actions/google-github-actions/auth-2.1.8
build(deps): bump google-github-actions/auth from 2.1.7 to 2.1.8
2025-02-05 03:31:52 +00:00
Maksym Pavlenko
befec68c61 Merge pull request #11334 from containerd/dependabot/github_actions/google-github-actions/upload-cloud-storage-2.2.2
build(deps): bump google-github-actions/upload-cloud-storage from 2.2.1 to 2.2.2
2025-02-05 03:31:35 +00:00
dependabot[bot]
b65f3875ba build(deps): bump google-github-actions/upload-cloud-storage
Bumps [google-github-actions/upload-cloud-storage](https://github.com/google-github-actions/upload-cloud-storage) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/google-github-actions/upload-cloud-storage/releases)
- [Changelog](https://github.com/google-github-actions/upload-cloud-storage/blob/main/CHANGELOG.md)
- [Commits](386ab77f37...7c6e11cb72)

---
updated-dependencies:
- dependency-name: google-github-actions/upload-cloud-storage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-04 00:03:58 +00:00
dependabot[bot]
841ab361c1 build(deps): bump github/codeql-action from 3.28.6 to 3.28.8
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.6 to 3.28.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](17a820bf2e...dd746615b3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-04 00:03:54 +00:00
dependabot[bot]
565b50dbb9 build(deps): bump google-github-actions/auth from 2.1.7 to 2.1.8
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 2.1.7 to 2.1.8.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](6fc4af4b14...71f986410d)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-04 00:03:47 +00:00
Phil Estes
2fda52edee Merge pull request #11315 from containerd/dependabot/github_actions/github/codeql-action-3.28.6
build(deps): bump github/codeql-action from 3.28.1 to 3.28.6
2025-02-03 19:03:28 +00:00
Phil Estes
ee73f33518 Merge pull request #11317 from containerd/dependabot/github_actions/actions/attest-build-provenance-2.2.0
build(deps): bump actions/attest-build-provenance from 2.1.0 to 2.2.0
2025-02-03 19:03:13 +00:00
dependabot[bot]
0c986c332f build(deps): bump actions/attest-build-provenance from 2.1.0 to 2.2.0
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](7668571508...520d128f16)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 23:56:11 +00:00
dependabot[bot]
5752397896 build(deps): bump actions/stale from 9.0.0 to 9.1.0
Bumps [actions/stale](https://github.com/actions/stale) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](28ca103628...5bef64f19d)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 23:56:10 +00:00
dependabot[bot]
48d09104dc build(deps): bump github/codeql-action from 3.28.1 to 3.28.6
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b6a472f63d...17a820bf2e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 23:56:04 +00:00
Akihiro Suda
c8df37f0fc Merge pull request #11277 from akhilerm/go-1.23.5
update to go1.23.5 / go1.22.11
2025-01-22 01:17:42 +00:00
Phil Estes
e0e61b6068 Merge pull request #11287 from containerd/dependabot/github_actions/lycheeverse/lychee-action-2.2.0
build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
2025-01-21 18:54:37 +00:00
Phil Estes
d6ecb6d6c7 Merge pull request #11288 from containerd/dependabot/github_actions/actions/upload-artifact-4.6.0
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
2025-01-21 05:07:01 +00:00
Phil Estes
43ffaa13ee Merge pull request #11289 from containerd/dependabot/github_actions/softprops/action-gh-release-2.2.1
build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
2025-01-21 05:06:24 +00:00
Phil Estes
2a4f369670 Merge pull request #11290 from containerd/dependabot/github_actions/github/codeql-action-3.28.1
build(deps): bump github/codeql-action from 3.27.9 to 3.28.1
2025-01-21 05:05:55 +00:00
dependabot[bot]
53d6f34822 build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](971e284b60...ec5d18412c)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 23:34:22 +00:00
dependabot[bot]
4b77d4e41e build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](7b4da11513...c95fe14893)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 23:34:19 +00:00
dependabot[bot]
22e77720b3 build(deps): bump github/codeql-action from 3.27.9 to 3.28.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.9 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](df409f7d92...b6a472f63d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 23:34:19 +00:00
dependabot[bot]
f572a6db90 build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](f81112d0d2...f796c8b7d4)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 23:34:11 +00:00
dependabot[bot]
36d3888cf7 build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.3 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](b4b15b8c7c...65c4c4a1dd)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 23:34:10 +00:00
Akhil Mohan
157faf65c5 update to go1.23.5 / go1.22.11
- go1.23.5 (released 2025-01-16) includes security fixes to the
crypto/x509 and net/http packages, as well as bug fixes to the compiler,
the runtime, and the net package. See the Go 1.23.5 milestone on our
issue tracker for details.

- go1.22.11 (released 2025-01-16) includes security fixes to the
crypto/x509 and net/http packages, as well as bug fixes to the runtime.
See the Go 1.22.11 milestone on our issue tracker for details.

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
2025-01-18 14:19:11 +05:30
Derek McGowan
23500b8015 Merge pull request #11185 from dmcgowan/update-golangci
Update golangci to 1.60.3
2024-12-20 16:23:51 +00:00
Derek McGowan
26a156f4fd Update golangci to 1.60.3
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-12-19 22:16:28 -08:00
Kazuyoshi Kato
f36ae08600 Merge pull request #11170 from containerd/dependabot/github_actions/softprops/action-gh-release-2.2.0
build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
2024-12-19 23:24:30 +00:00
Akihiro Suda
d84188a6b8 Merge pull request #11171 from containerd/dependabot/github_actions/github/codeql-action-3.27.9
build(deps): bump github/codeql-action from 3.27.6 to 3.27.9
2024-12-18 17:51:37 +00:00
dependabot[bot]
31e1298560 build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.7.1 to 3.8.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](c47758b77c...6524bf65af)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-16 23:15:39 +00:00
dependabot[bot]
d297514248 build(deps): bump github/codeql-action from 3.27.6 to 3.27.9
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.6 to 3.27.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](aa57810251...df409f7d92)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-16 23:15:37 +00:00
dependabot[bot]
a172d2c116 build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](01570a1f39...7b4da11513)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-16 23:15:30 +00:00
Fu Wei
9b89fb989d Merge pull request #11122 from containerd/dependabot/github_actions/actions/attest-build-provenance-2.1.0
build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
2024-12-12 20:22:26 +00:00
Akihiro Suda
f830ba30e4 Merge pull request #11124 from containerd/dependabot/github_actions/actions/cache-4.2.0
build(deps): bump actions/cache from 4.1.2 to 4.2.0
2024-12-12 03:11:53 +00:00
Derek McGowan
840cac6184 Merge pull request #11130 from thaJeztah/bump_xx
update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
2024-12-11 14:57:32 +00:00
Sebastiaan van Stijn
d76f92f240 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
This fixes compatibility with alpine 3.21 and file 5.46+

- Fix additional possible `xx-cc`/`xx-cargo` compatibility issue with Alpine 3.21
- Support for Alpine 3.21
- Fix `xx-verify` with `file` 5.46+
- Fix possible error taking lock in `xx-apk` in latest Alpine without `coreutils`

full diff: https://github.com/tonistiigi/xx/compare/v1.2.1...v1.6.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-12-10 10:22:45 +01:00
dependabot[bot]
9270122437 build(deps): bump actions/cache from 4.1.2 to 4.2.0
Bumps [actions/cache](https://github.com/actions/cache) from 4.1.2 to 4.2.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](6849a64899...1bd1e32a3b)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-09 23:35:10 +00:00
dependabot[bot]
73864c5203 build(deps): bump github/codeql-action from 3.27.5 to 3.27.6
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.27.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f09c1c0a94...aa57810251)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-09 23:35:07 +00:00
dependabot[bot]
afee762fbf build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.4.4 to 2.1.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](ef244123eb...7668571508)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-09 23:35:00 +00:00
Akihiro Suda
2c042ae0de Merge pull request #10930 from AkihiroSuda/fedora41
CI: update Fedora to 41
2024-12-06 00:48:04 +00:00
Akhil Mohan
81780a5dd3 update to go1.23.4 / go1.22.10
- go1.23.4 (released 2024-12-03) includes fixes to the compiler, the runtime,
the trace command, and the syscall package. See the Go 1.23.4 milestone on
our issue tracker for details.
https://github.com/golang/go/issues?q=milestone%3AGo1.23.4+label%3ACherryPickApproved

- go1.22.10 (released 2024-12-03) includes fixes to the runtime and the
syscall package. See the Go 1.22.10 milestone on our issue tracker for details.
https://github.com/golang/go/issues?q=milestone%3AGo1.22.10+label%3ACherryPickApproved

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
2024-12-05 11:56:10 +05:30
Akihiro Suda
6fdc352439 CI: update Fedora to 41
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-12-02 22:01:55 +09:00
dependabot[bot]
ea9397793f build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ea9e4e3799...f09c1c0a94)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-26 00:01:28 +00:00
Austin Vazquez
3961dc9c8c Publish attestation as release artifact
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-25 15:26:17 +00:00
Jin Dong
288001f68c move rocky 9.4 to almalinux/9 in CI
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
2024-11-25 04:12:22 +00:00
dependabot[bot]
f5b2c3a07c build(deps): bump github/codeql-action from 3.27.1 to 3.27.4
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.1 to 3.27.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4f3212b617...ea9e4e3799)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-19 00:04:13 +00:00
Akhil Mohan
1b01f396de Revert "Disable vagrant strict dependency checking"
This reverts commit ae73e30130.

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
2024-11-14 14:23:44 +05:30
Phil Estes
55095508eb Merge pull request #10989 from containerd/dependabot/github_actions/lycheeverse/lychee-action-2.1.0
build(deps): bump lycheeverse/lychee-action from 2.0.2 to 2.1.0
2024-11-12 22:09:14 +00:00
Phil Estes
2cac8d57e3 Merge pull request #10988 from containerd/dependabot/github_actions/github/codeql-action-3.27.1
build(deps): bump github/codeql-action from 3.27.0 to 3.27.1
2024-11-12 21:48:18 +00:00
Derek McGowan
9c925fb8ed Merge pull request #10987 from containerd/dependabot/github_actions/actions/attest-build-provenance-1.4.4
build(deps): bump actions/attest-build-provenance from 1.4.3 to 1.4.4
2024-11-12 04:49:29 +00:00
dependabot[bot]
73ae1c66ff build(deps): bump lycheeverse/lychee-action from 2.0.2 to 2.1.0
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.0.2 to 2.1.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](7cd0af4c74...f81112d0d2)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 23:14:41 +00:00
dependabot[bot]
4bd33276c3 build(deps): bump github/codeql-action from 3.27.0 to 3.27.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.0 to 3.27.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](662472033e...4f3212b617)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 23:14:37 +00:00
dependabot[bot]
d32ed4a560 build(deps): bump actions/attest-build-provenance from 1.4.3 to 1.4.4
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](1c608d11d6...ef244123eb)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 23:14:26 +00:00