Dominik Schulz
8940e95657
[fix] Fix clipboard issues ( #3267 )
...
This commit pulls in fixes from gopasspw/clipboard.
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-10-05 12:34:47 +02:00
dependabot[bot]
1678788b9c
chore(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 ( #3255 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.9.2 to 3.10.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](d58896d6a1...d7543c93d8 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 13:05:03 +02:00
dependabot[bot]
0ce8f71139
chore(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 ( #3256 )
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](ec9f2d5744...f4a75cfd61 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.13.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:24:41 +02:00
dependabot[bot]
34a704a823
chore(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6 ( #3258 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.5 to 0.20.6.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](da167eac91...f8bdd1d8ac )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:24:32 +02:00
dependabot[bot]
4330e3c36d
chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 ( #3260 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](184bdaa072...5e57cd1181 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:22:04 +02:00
dependabot[bot]
720b90fd36
chore(deps): bump msys2/setup-msys2 from 2.28.0 to 2.29.0 ( #3257 )
...
Bumps [msys2/setup-msys2](https://github.com/msys2/setup-msys2 ) from 2.28.0 to 2.29.0.
- [Release notes](https://github.com/msys2/setup-msys2/releases )
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md )
- [Commits](40677d36a5...fb197b72ce )
---
updated-dependencies:
- dependency-name: msys2/setup-msys2
dependency-version: 2.29.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:21:51 +02:00
dependabot[bot]
f439f8cdfc
chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 ( #3259 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](05b42c6244...4eaacf0543 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:21:40 +02:00
dependabot[bot]
39cff7ecb9
chore(deps): bump github/codeql-action from 3.30.0 to 3.30.5 ( #3261 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.0 to 3.30.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](2d92b76c45...3599b3baa1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:21:30 +02:00
dependabot[bot]
637e9b1852
chore(deps): bump anchore/scan-action from 6.5.1 to 7.0.0 ( #3264 )
...
Bumps [anchore/scan-action](https://github.com/anchore/scan-action ) from 6.5.1 to 7.0.0.
- [Release notes](https://github.com/anchore/scan-action/releases )
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md )
- [Commits](1638637db6...f6601287cd )
---
updated-dependencies:
- dependency-name: anchore/scan-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:21:18 +02:00
dependabot[bot]
dcfc3dc31f
chore(deps): bump actions/cache from 4.2.4 to 4.3.0 ( #3263 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.4 to 4.3.0.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](0400d5f644...0057852bfa )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 09:21:06 +02:00
Dominik Schulz
c18c862a31
[fix] Enable Windows builders ( #3237 )
...
Fixes #3205
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-09-19 16:58:29 +02:00
Dominik Schulz
5c56885ade
[chore] Automatically approve and merge dependabot PRs ( #3220 )
...
If they build successfully we end up merging them anyway.
Based on https://carlosbecker.com/posts/dependabot-automerge/
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-09-14 14:22:43 +02:00
dependabot[bot]
413a7caf15
chore(deps): bump anchore/scan-action from 6.5.0 to 6.5.1 ( #3209 )
...
Bumps [anchore/scan-action](https://github.com/anchore/scan-action ) from 6.5.0 to 6.5.1.
- [Release notes](https://github.com/anchore/scan-action/releases )
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md )
- [Commits](df395807f4...1638637db6 )
---
updated-dependencies:
- dependency-name: anchore/scan-action
dependency-version: 6.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-13 20:25:08 +02:00
dependabot[bot]
d2c8570fc3
chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 ( #3210 )
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](9c156ee8a1...e435ccd777 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-13 20:24:58 +02:00
dependabot[bot]
eec815756e
chore(deps): bump actions/cache from 4.2.3 to 4.2.4 ( #3211 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.3 to 4.2.4.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](5a3ec84eff...0400d5f644 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 4.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-13 20:24:48 +02:00
dependabot[bot]
66ab1205de
chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 ( #3212 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.4 to 0.20.5.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](7b36ad622f...da167eac91 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 10:25:06 +02:00
dependabot[bot]
f56d6fe27b
chore(deps): bump github/codeql-action from 3.29.7 to 3.30.0 ( #3213 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.7 to 3.30.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](51f77329af...2d92b76c45 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 10:24:30 +02:00
dependabot[bot]
891768b1ba
chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 ( #3214 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 10:23:56 +02:00
dependabot[bot]
51c217af05
chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 ( #3215 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](74a5d14239...184bdaa072 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 10:23:30 +02:00
Dominik Schulz
f893378261
[fix] Disable Windows tests ( #3204 )
...
We have some strange test failures on Windows and I can not identify any
root cause in this repo. It does look like either a Go or a GHA Windows
builder regression and I currently don't have the resources to properly
debug those. If you care about Windows, please help. Otherwise I have
to turn these off for now to unblock PR which are perfectly find on
other platforms.
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-08-19 20:19:52 +02:00
Dominik Schulz
8c8fa212b6
Create AI Agent instructions ( #3201 )
...
This create configuration files and hierachical instructional context
for both GitHub Copilot as well as Gemini CLI. The main instructions
are provided in a vendor agnostic AGENTS.md while the Copilot
instructions reference this file and Gemini CLI is configured
to use it instead of GEMINI.md.
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-08-18 21:57:45 +02:00
dependabot[bot]
afbddf56b7
chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 ( #3192 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.2 to 0.20.4.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](cee1b8e05a...7b36ad622f )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 07:42:19 +02:00
dependabot[bot]
d1c1423e95
chore(deps): bump anchore/scan-action from 6.3.0 to 6.5.0 ( #3190 )
...
Bumps [anchore/scan-action](https://github.com/anchore/scan-action ) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/anchore/scan-action/releases )
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md )
- [Commits](be7a22da4f...df395807f4 )
---
updated-dependencies:
- dependency-name: anchore/scan-action
dependency-version: 6.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 14:34:51 +02:00
dependabot[bot]
7d292f6fd8
chore(deps): bump github/codeql-action from 3.29.2 to 3.29.5 ( #3191 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.2 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](181d5eefc2...51f77329af )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 14:34:34 +02:00
dependabot[bot]
6e8a1d7f55
chore(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 ( #3193 )
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.12.2 to 2.13.0.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](6c439dc8bd...ec9f2d5744 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 14:33:56 +02:00
dependabot[bot]
42ad98007d
chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 ( #3194 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.9.1 to 3.9.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](398d4b0eee...d58896d6a1 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.9.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 14:33:39 +02:00
dependabot[bot]
40075a8cdd
chore(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 ( #3189 )
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.7.0 to 5.8.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](902fa8ec7d...c1e51972af )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 5.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 10:01:24 +02:00
Dominik Schulz
b86474604b
[chore] Fix hardened runner ( #3196 )
...
Allow additional outgoing connections to new GitHub endpoints.
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-08-11 09:13:30 +02:00
dependabot[bot]
a1e18984d6
chore(deps): bump step-security/harden-runner from 2.12.0 to 2.12.2 ( #3179 )
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.12.0 to 2.12.2.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](0634a2670c...6c439dc8bd )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-06 17:00:22 +02:00
dependabot[bot]
0215ef179d
chore(deps): bump msys2/setup-msys2 from 2.27.0 to 2.28.0 ( #3178 )
...
Bumps [msys2/setup-msys2](https://github.com/msys2/setup-msys2 ) from 2.27.0 to 2.28.0.
- [Release notes](https://github.com/msys2/setup-msys2/releases )
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md )
- [Commits](61f9e5e925...40677d36a5 )
---
updated-dependencies:
- dependency-name: msys2/setup-msys2
dependency-version: 2.28.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-06 16:59:38 +02:00
dependabot[bot]
adae3f4898
chore(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 ( #3180 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.0 to 0.20.1.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](e11c554f70...9246b90769 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-06 16:59:15 +02:00
dependabot[bot]
9e6a2369ed
chore(deps): bump anchore/scan-action from 6.2.0 to 6.3.0 ( #3181 )
...
Bumps [anchore/scan-action](https://github.com/anchore/scan-action ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/anchore/scan-action/releases )
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md )
- [Commits](2c901ab737...be7a22da4f )
---
updated-dependencies:
- dependency-name: anchore/scan-action
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-06 16:58:03 +02:00
dependabot[bot]
75cd65361b
chore(deps): bump github/codeql-action from 3.28.18 to 3.29.2 ( #3182 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.18 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](ff0a06e83c...181d5eefc2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-06 16:57:28 +02:00
dependabot[bot]
03bb1fc512
chore(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.1 ( #3183 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.8.2 to 3.9.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](3454372f43...398d4b0eee )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.9.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-06 16:56:50 +02:00
dependabot[bot]
3478f291a5
chore(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 ( #3165 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.19.0 to 0.20.0.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](9f73021414...e11c554f70 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 14:57:14 +02:00
dependabot[bot]
4e96c7e5bc
chore(deps): bump github/codeql-action from 3.28.16 to 3.28.18 ( #3166 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.16 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](28deaeda66...ff0a06e83c )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 14:56:58 +02:00
dependabot[bot]
49b8a176de
chore(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 ( #3167 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](1481404843...4afd733a84 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 14:53:59 +02:00
dependabot[bot]
916ea725b7
chore(deps): bump docker/build-push-action from 6.16.0 to 6.18.0 ( #3168 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.16.0 to 6.18.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](14487ce63c...263435318d )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 6.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 14:53:37 +02:00
dependabot[bot]
aac5dd9a1c
chore(deps): bump actions/setup-go from 5.4.0 to 5.5.0 ( #3169 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](0aaccfd150...d35c59abb0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 5.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 14:53:15 +02:00
dependabot[bot]
4844b75e75
chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 ( #3170 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](f49aabe0b5...05b42c6244 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 10:07:25 +02:00
dependabot[bot]
7abc83c34f
chore(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 ( #3143 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.18.0 to 0.19.0.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](f325610c9f...9f73021414 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-02 11:12:40 +02:00
dependabot[bot]
17309133a3
chore(deps): bump anchore/scan-action from 6.1.0 to 6.2.0 ( #3145 )
...
Bumps [anchore/scan-action](https://github.com/anchore/scan-action ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/anchore/scan-action/releases )
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md )
- [Commits](7c05671ae9...2c901ab737 )
---
updated-dependencies:
- dependency-name: anchore/scan-action
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-02 11:12:33 +02:00
dependabot[bot]
4cb6fab4c7
chore(deps): bump github/codeql-action from 3.28.13 to 3.28.16 ( #3147 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.13 to 3.28.16.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](1b549b9259...28deaeda66 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-02 11:12:26 +02:00
dependabot[bot]
d0dd5ceccc
chore(deps): bump step-security/harden-runner from 2.11.1 to 2.12.0 ( #3146 )
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.11.1 to 2.12.0.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](c6295a65d1...0634a2670c )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-02 11:12:13 +02:00
dependabot[bot]
b150df408c
chore(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 ( #3144 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.15.0 to 6.16.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](471d1dc4e0...14487ce63c )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 6.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-02 11:12:03 +02:00
dependabot[bot]
595727ecac
chore(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 ( #3142 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.8.1 to 3.8.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](d7d6bc7722...3454372f43 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-02 11:09:37 +02:00
Dominik Schulz
7d2e9ce5ad
[chore] Update Go versions ( #3139 )
...
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-22 19:17:28 +02:00
Dominik Schulz
7b35864b13
[chore] Do not run linters twice ( #3119 )
...
We already have a golangci-lint GHA but we still run it in the linux
tests. This often creates inconsistent findings. Let's not do that
and only run the linter once in it's own action. Also rename the
test targets that were created for Travis CI a long time ago.
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 08:50:04 +02:00
Dominik Schulz
7281ca8ab4
[chore] Migrate to golangci-lint v2 ( #3104 )
...
* [chore] Migrate to golangci-lint v2
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [chore] Fix more lint issues
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [chore] Fix more lint issue
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [chore] Fix more lint issues
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [chore] Add more package comments.
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [chore] Fix golangci-lint config and the remaining checks
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [fix] Use Go 1.24
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [fix] Fix container builds
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* Fix more failing tests
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* Fix test failure
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* Fix another len assertion
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* Move location tests
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [fix] Fix most remaining lint issues
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [fix] Only run XDG specific tests on linux
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
* [fix] Attempt to address on source of flaky failures
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
---------
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 08:05:43 +02:00
Dominik Schulz
3a05d06b12
Allow connections to Ubuntu repository hosts ( #3113 )
...
* Allow connections to Ubuntu repository hosts
I'm not 100% sure where these connections are being initiated, but this is an Ubuntu image and those are legit Ubuntu hosts.
* Update build.yml
---------
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-16 10:12:48 +02:00