Andrew Nesbitt
88f22cc440
Merge pull request #615 from simonchrz/ci/monthly-minor-on-breaking
...
Release a new minor version when breaking changes were merged
2026-10-30 08:48:34 +00:00
Simon Chrzanowski
7a3b79b10a
Skip the monthly release while the last one is a draft
...
Building on a draft's tag would release its breaking changes as a patch
release, without the upgrade notes the draft waits for.
2026-10-28 14:07:33 +01:00
Simon Chrzanowski
4094b0fca9
Create breaking monthly releases as drafts
...
A breaking release gets upgrade notes before it goes out. release.yml
creates it as a draft and publish.yml isn't started; publishing the
draft by hand starts publish.yml for the images and the chart.
2026-10-27 12:16:50 +01:00
Ondrej Kokes
1887b124cf
Add extraVolumes, extraVolumeMounts and extraInitContainers to Helm chart
...
The pod only ever got the config, data and tmp volumes, so there was no
way to mount a private CA certificate, file-based credentials or a
projected token, or to run init containers. All three values default to
empty, leaving the rendered Deployment unchanged.
Render the new blocks in CI and document the private CA setup in the
README.
Closes #614
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 09:14:28 +01:00
Simon Chrzanowski
7e2bf15e00
Release a new minor version when breaking changes were merged
...
The monthly release skipped the month when a pull request labelled
breaking had merged, leaving the release to be cut by hand. It now
cuts a new minor version instead (a new major version from 1.0 on).
2026-10-26 18:35:17 +01:00
Simon Chrzanowski
b907ef0abf
Run the Postgres tests in CI
...
The tests gated on PROXY_DATABASE_URL were always skipped in CI. A new job
runs them against a Postgres 17 service container.
2026-10-23 16:23:54 +02:00
Simon Chrzanowski
d28c0befbf
Build with Go 1.27.3 everywhere
...
CI, the release binaries and swagger take their Go version from go.mod,
which pinned 1.26.7 and so missed the stdlib fixes in 1.26.8 to 1.26.10.
A toolchain line now sets 1.27.3 for them, and the Docker builder uses
the same version. The go line stays at 1.26.7, so source builds with an
older local Go still work.
golangci-lint 2.13.1 can't read Go 1.27.2+ export data, so CI moves to
2.15.0. Its errcheck flags two test cleanups that dropped the server's
exit error; they now check it.
2026-10-23 09:57:37 +02:00
Andrew Nesbitt
37bef64bca
Merge pull request #553 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.7.1
...
Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1
2026-10-22 16:57:43 +01:00
dependabot[bot]
d154757ca3
Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.6.4 to 0.7.1.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](cc914d7f37...85b2b9fb8e
2026-10-22 15:13:43 +00:00
dependabot[bot]
c08c25fd04
Bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 7.2.3 to 7.3.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](f06c13b6b1...a4f02ab535
2026-10-22 15:13:38 +00:00
Simon Chrzanowski
d4addfe26e
Cut a patch release on the 1st of each month
...
A scheduled workflow tags the next patch version when main is green,
something has merged since the last tag and no pull request labelled
breaking was merged. It dispatches release.yml and publish.yml on the
new tag, since a tag created with GITHUB_TOKEN doesn't start them.
Scheduled runs are dry runs until the MONTHLY_RELEASE variable is true.
Closes #532
2026-10-21 15:43:32 +02:00
Andrew Nesbitt
76db94552f
Install development tools directly in CI ( #398 )
2026-10-01 19:48:27 +01:00
Andrew Nesbitt
e26c2d13a7
Merge pull request #370 from git-pkgs/dependabot/github_actions/docker/build-push-action-7.4.0
...
build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0
2026-09-24 16:56:43 +01:00
Andrew Nesbitt
a7cccff3bc
Merge pull request #369 from git-pkgs/dependabot/github_actions/docker/setup-qemu-action-4.4.0
...
build(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0
2026-09-24 16:55:20 +01:00
dependabot[bot]
d14b240654
build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](53b7df96c9...c3c9e263c2
2026-09-24 15:13:54 +00:00
dependabot[bot]
15d5ac09b8
build(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](1f40c72289...9901266195
2026-09-24 15:13:45 +00:00
dependabot[bot]
3724c93626
build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.3.0 to 4.4.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](37fe631027...f87e5991a6
2026-09-24 15:13:32 +00:00
Andrew Nesbitt
c1f420aafe
Add and align CI security and dependency automation
2026-09-23 10:53:57 +01:00
dependabot[bot]
b83bc0eed2
Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 ( #354 )
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](70fb788f84...cc914d7f37
2026-09-17 20:00:05 +01:00
dependabot[bot]
8d3dacf68b
Bump azure/setup-helm from 4.3.1 to 5.0.1 ( #332 )
...
Bumps [azure/setup-helm](https://github.com/azure/setup-helm ) from 4.3.1 to 5.0.1.
- [Release notes](https://github.com/azure/setup-helm/releases )
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md )
- [Commits](1a275c3b69...9bc31f4ebc
2026-09-10 16:34:26 -04:00
dependabot[bot]
f0580d9fb1
Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 ( #331 )
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](96fe6ef7f3...1f40c72289
2026-09-10 16:33:58 -04:00
dependabot[bot]
7e4b13ce52
Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 ( #333 )
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](3dc1ecc9bc...70fb788f84
2026-09-10 16:33:49 -04:00
Andrew Nesbitt
230fa7b193
Add Helm chart ( #250 )
...
* Add Helm chart
* Fail early on ingress without hosts and document replica/mount coupling
2026-09-04 10:52:43 +01:00
dependabot[bot]
5b92e441db
Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 ( #284 )
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](bb05f3f551...37fe631027
2026-08-27 16:21:58 +01:00
Andrew Nesbitt
f0e6e11e8c
Upgrade to Go 1.26.6 ( #246 )
...
* Upgrade to Go 1.26.5
* Use go.mod to select Go 1.26.6
2026-08-16 18:22:26 +01:00
dependabot[bot]
ed540053fa
Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 ( #251 )
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](6fc4b00623...3dc1ecc9bc
2026-08-14 09:15:33 +01:00
Andrew Nesbitt
a17bdc7c89
Sign published container images ( #227 )
...
* Sign published container images
* Attest per-platform SPDX SBOMs with cosign
Extract each platform's SPDX document from the BuildKit SBOM attestation
and sign it as a cosign spdxjson attestation against the manifest-list
digest, so downstream consumers (e.g. Kyverno image-verification policies)
can verify the predicate signature rather than relying on the unsigned
BuildKit attachment.
2026-08-10 16:42:52 +01:00
Ondrej Kokes
bc1ea307f3
Multi-platform build (linux/amd64 and linux/arm64) ( #230 )
...
* wip
* pin to latest version, not commit
* test run
* Revert "test run"
This reverts commit 355e8f867e
2026-08-06 22:03:20 +01:00
dependabot[bot]
5f993e3961
Bump docker/login-action from 4.5.0 to 4.6.0 ( #232 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](06fb636fac...dbcb813823
2026-08-06 21:59:52 +01:00
dependabot[bot]
1057ee926e
Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 ( #217 )
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](6599ee8b7a...6fc4b00623
2026-07-30 17:55:16 +01:00
dependabot[bot]
b56a1fed65
Bump docker/login-action from 4.4.0 to 4.5.0 ( #220 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](af1e73f918...06fb636fac
2026-07-30 17:52:35 +01:00
dependabot[bot]
a5d456790d
Bump actions/checkout from 7.0.0 to 7.0.1 ( #218 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](9c091bb21b...3d3c42e5aa
2026-07-30 17:14:36 +01:00
Andrew Nesbitt
4737777e80
Merge pull request #212 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.6.0
...
Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0
2026-07-23 16:52:51 +01:00
dependabot[bot]
d9b7a30294
Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.5.7 to 0.6.0.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](192e21d79a...6599ee8b7a
2026-07-23 15:13:53 +00:00
dependabot[bot]
60c72be65e
Bump actions/setup-go from 6.5.0 to 7.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](924ae3a1cd...b7ad1dad31
2026-07-23 15:13:49 +00:00
dependabot[bot]
df997e5825
Bump docker/login-action from 4.3.0 to 4.4.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](c99871dec2...af1e73f918
2026-07-16 15:14:14 +00:00
Andrew Nesbitt
95bb9d897a
Merge pull request #193 from git-pkgs/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3
...
Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
2026-07-09 17:19:29 +01:00
Andrew Nesbitt
16e778970f
Merge pull request #192 from git-pkgs/dependabot/github_actions/docker/login-action-4.3.0
...
Bump docker/login-action from 4.2.0 to 4.3.0
2026-07-09 16:41:34 +01:00
Andrew Nesbitt
c4f2b89290
Merge pull request #190 from git-pkgs/dependabot/github_actions/docker/build-push-action-7.3.0
...
Bump docker/build-push-action from 7.2.0 to 7.3.0
2026-07-09 16:40:19 +01:00
dependabot[bot]
383d2089cf
Bump docker/metadata-action from 6.1.0 to 6.2.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](80c7e94dd9...dc80280410
2026-07-09 15:14:26 +00:00
dependabot[bot]
defe1ec96d
Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 7.2.2 to 7.2.3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](5daf1e915a...f06c13b6b1
2026-07-09 15:14:16 +00:00
dependabot[bot]
ea4eea4b11
Bump docker/login-action from 4.2.0 to 4.3.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](650006c6eb...c99871dec2
2026-07-09 15:14:07 +00:00
dependabot[bot]
df3ad91848
Bump docker/build-push-action from 7.2.0 to 7.3.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 7.2.0 to 7.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](f9f3042f7e...53b7df96c9
2026-07-09 15:13:56 +00:00
Andrew Nesbitt
95318dedff
Merge pull request #181 from git-pkgs/dependabot/github_actions/actions/setup-go-6.5.0
...
Bump actions/setup-go from 6.4.0 to 6.5.0
2026-07-02 16:44:01 +01:00
dependabot[bot]
a8c0562c97
Bump actions/setup-go from 6.4.0 to 6.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4a3601121d...924ae3a1cd
2026-07-02 15:13:48 +00:00
dependabot[bot]
81d19b7632
Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.5.6 to 0.5.7.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](5f14fd08f7...192e21d79a
2026-07-02 15:13:19 +00:00
dependabot[bot]
795edb4f91
Bump actions/checkout from 6.0.3 to 7.0.0 ( #175 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...9c091bb21b
2026-06-25 11:28:18 -04:00
dependabot[bot]
cb18df5bac
Bump actions/checkout from 6.0.2 to 6.0.3 ( #163 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...df4cb1c069
2026-06-11 16:26:10 +01:00
dependabot[bot]
e5fbd6ef69
Bump docker/login-action from 4.1.0 to 4.2.0 ( #160 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](4907a6ddec...650006c6eb
2026-06-05 09:36:59 +01:00
dependabot[bot]
6fa2d95f73
Bump docker/metadata-action from 6.0.0 to 6.1.0 ( #158 )
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](030e881283...80c7e94dd9
2026-06-05 09:36:36 +01:00
