Carlos Tadeu Panato Junior
1819a645a4
Merge pull request #1136 from ko-build/dependabot/github_actions/actions/checkout-4.0.0
...
Bump actions/checkout from 3.6.0 to 4.0.0
2023-09-11 16:36:23 +02:00
dependabot[bot]
4d029a97b2
Bump actions/upload-artifact from 3.1.2 to 3.1.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/0b7f8abb1508181956e8e162db84b466c27e18ce...a8a3f3ad30e3422c9c7b888a15615d19a852ae32 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-11 14:30:33 +00:00
dependabot[bot]
e82563e2e5
Bump actions/checkout from 3.6.0 to 4.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/f43a0e5ff2bd294095638e18286ca9a3d1956744...3df4ab11eba7bda6032a0b82a6bb43b11571feac )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-11 14:29:54 +00:00
cpanato
e993a4662e
fix env variables for go env
...
Signed-off-by: cpanato <ctadeu@gmail.com >
2023-09-11 16:29:33 +02:00
Jason Hall
047989802f
fix test broken by lint fix ( #1143 )
...
Signed-off-by: Jason Hall <jason@chainguard.dev >
2023-09-11 16:29:01 +02:00
Jason Hall
d58b51e50d
handle newfound lint errors ( #1142 )
...
Signed-off-by: Jason Hall <jason@chainguard.dev >
2023-09-11 09:41:49 -04:00
Jason Hall
65a3fe4d46
Update e2e.yaml ( #1141 )
2023-09-11 15:16:09 +02:00
Carlos Tadeu Panato Junior
2dd8c85dd5
Use go1.21, clean up ci and drop go1.19 ( #1137 )
...
* remove pull_request-target and make registry job only postsubmit
Signed-off-by: cpanato <ctadeu@gmail.com >
* update config for dependabot
Signed-off-by: cpanato <ctadeu@gmail.com >
* drop go1.19, use go1.21 as default for ci and release
Signed-off-by: cpanato <ctadeu@gmail.com >
* add golangci-lint job
Signed-off-by: cpanato <ctadeu@gmail.com >
* use go1.21 as base image
Signed-off-by: cpanato <ctadeu@gmail.com >
* update go module to require minimum go1.20
Signed-off-by: cpanato <ctadeu@gmail.com >
* use go version set in the matrix
Signed-off-by: cpanato <ctadeu@gmail.com >
* update chainguard-dev/actions/setup-kind
Signed-off-by: cpanato <ctadeu@gmail.com >
* make explicit the bash options
Signed-off-by: cpanato <ctadeu@gmail.com >
---------
Signed-off-by: cpanato <ctadeu@gmail.com >
2023-09-11 12:53:41 +00:00
Jason Hall
daab1ac9dc
include go build output in build error ( #1127 )
...
Signed-off-by: Jason Hall <jason@chainguard.dev >
2023-09-07 09:45:32 -04:00
Carlos Tadeu Panato Junior
29d66fdd61
Merge pull request #1125 from ko-build/dependabot/github_actions/sigstore/cosign-installer-3.1.2
2023-09-04 07:20:02 +02:00
dependabot[bot]
a8f57efa51
Bump sigstore/cosign-installer from 3.1.1 to 3.1.2
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/6e04d228eb30da1757ee4e1dd75a0ec73a653e06...11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-04 01:29:12 +00:00
Carlos Tadeu Panato Junior
ec46995ead
Merge pull request #1123 from ko-build/dependabot/github_actions/actions/checkout-3.6.0
...
Bump actions/checkout from 3.5.3 to 3.6.0
2023-08-28 09:13:21 +02:00
Carlos Tadeu Panato Junior
d36eefcdf6
Merge pull request #1122 from ko-build/dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.1
...
Bump aws-actions/configure-aws-credentials from 2.2.0 to 3.0.1
2023-08-28 09:13:03 +02:00
Carlos Tadeu Panato Junior
58605f484a
Merge pull request #1121 from ko-build/dependabot/github_actions/slsa-framework/slsa-github-generator-1.9.0
...
Bump slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0
2023-08-28 09:12:33 +02:00
dependabot[bot]
9a19903f27
Bump actions/checkout from 3.5.3 to 3.6.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/c85c95e3d7251135ab7dc9ce3241c5835cc595a9...f43a0e5ff2bd294095638e18286ca9a3d1956744 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-28 01:46:57 +00:00
dependabot[bot]
99f2a32b0e
Bump aws-actions/configure-aws-credentials from 2.2.0 to 3.0.1
...
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) from 2.2.0 to 3.0.1.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/5fd3084fc36e372ff1fff382a39b10d03659f355...04b98b3f9e85f563fb061be8751a0352327246b0 )
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-28 01:46:50 +00:00
dependabot[bot]
05af4a49ca
Bump slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0
...
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator ) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases )
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.8.0...v1.9.0 )
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-28 01:46:47 +00:00
Pascal Gru
a1030b7741
Update install.md ( #1118 )
2023-08-27 07:07:51 -04:00
guangwu
d4a1cc961c
chore: remove refs to deprecated io/ioutil ( #1092 )
...
* chore: remove refs to deprecated io/ioutil
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com >
* fix: gofmt check
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com >
---------
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com >
2023-08-23 13:24:04 -04:00
Carlos Tadeu Panato Junior
495411ad89
Merge pull request #1111 from ko-build/dependabot/github_actions/actions/setup-go-4.1.0
...
Bump actions/setup-go from 4.0.1 to 4.1.0
2023-08-14 09:56:14 +02:00
Carlos Tadeu Panato Junior
80de53496b
Merge pull request #1112 from ko-build/dependabot/github_actions/goreleaser/goreleaser-action-4.4.0
...
Bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0
2023-08-14 09:55:55 +02:00
Carlos Tadeu Panato Junior
7c5dec0c73
Merge pull request #1113 from ko-build/dependabot/go_modules/golang.org/x/tools-0.12.0
...
Bump golang.org/x/tools from 0.11.1 to 0.12.0
2023-08-14 09:55:30 +02:00
dependabot[bot]
78097d99bf
Bump golang.org/x/tools from 0.11.1 to 0.12.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.11.1 to 0.12.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.11.1...v0.12.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-14 01:48:45 +00:00
dependabot[bot]
afde5efc66
Bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/336e29918d653399e599bfca99fadc1d7ffbc9f7...3fa32b8bb5620a2c1afe798654bbad59f9da4906 )
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-14 01:35:32 +00:00
dependabot[bot]
2f896c96b3
Bump actions/setup-go from 4.0.1 to 4.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/fac708d6674e30b6ba41289acaab6d4b75aa0753...93397bea11091df50f3d7e59dc26a7711a8bcfbe )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-14 01:35:28 +00:00
Jason Hall
ecc9812ab8
ci: add govulncheck ( #1110 )
...
Signed-off-by: Jason Hall <jason@chainguard.dev >
2023-08-10 15:20:40 -04:00
Lars Lehtonen
83589fd520
pkg/commands: fix dropped errors ( #1109 )
2023-08-10 18:39:48 +00:00
Carlos Tadeu Panato Junior
77c116bc60
Merge pull request #1106 from ko-build/dependabot/go_modules/golang.org/x/tools-0.11.1
...
Bump golang.org/x/tools from 0.11.0 to 0.11.1
2023-08-08 10:36:00 +02:00
Carlos Tadeu Panato Junior
3b9dd519e9
Merge pull request #1108 from ko-build/dependabot/github_actions/slsa-framework/slsa-github-generator-1.8.0
...
Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.8.0
2023-08-08 10:35:39 +02:00
dependabot[bot]
27bfec1ed7
Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.8.0
...
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator ) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases )
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.7.0...v1.8.0 )
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-07 01:59:12 +00:00
dependabot[bot]
16b2750d84
Bump golang.org/x/tools from 0.11.0 to 0.11.1
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.11.0 to 0.11.1.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.11.0...v0.11.1 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-07 01:31:43 +00:00
Carlos Tadeu Panato Junior
5742ca84ab
Merge pull request #1105 from samlaf/patch-1
...
fixed typo in configuration.md
2023-08-06 09:58:35 +02:00
Carlos Tadeu Panato Junior
098a54ab58
Merge pull request #1104 from ko-build/dependabot/go_modules/github.com/docker/docker-24.0.5incompatible
...
Bump github.com/docker/docker from 24.0.4+incompatible to 24.0.5+incompatible
2023-08-06 09:25:04 +02:00
Jon Johnson
81c1c704e1
implement dumb cache for images ( #1102 )
...
Signed-off-by: Jon Johnson <jon.johnson@chainguard.dev >
2023-07-31 15:14:32 -07:00
Samuel Laferriere
220da75446
fixed typo in configuration.md
2023-07-31 11:38:53 -04:00
dependabot[bot]
1ec76ce477
Bump github.com/docker/docker
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 24.0.4+incompatible to 24.0.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v24.0.4...v24.0.5 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-31 01:25:48 +00:00
Carlos Tadeu Panato Junior
621f7a405a
Merge pull request #1100 from ko-build/dependabot/go_modules/go.uber.org/automaxprocs-1.5.3
...
Bump go.uber.org/automaxprocs from 1.5.2 to 1.5.3
2023-07-24 10:09:33 +02:00
Carlos Tadeu Panato Junior
00c2e0278a
Merge pull request #1101 from ko-build/dependabot/go_modules/k8s.io/apimachinery-0.27.4
...
Bump k8s.io/apimachinery from 0.27.3 to 0.27.4
2023-07-24 10:03:56 +02:00
dependabot[bot]
a787b54f94
Bump k8s.io/apimachinery from 0.27.3 to 0.27.4
...
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) from 0.27.3 to 0.27.4.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.27.3...v0.27.4 )
---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-24 01:16:04 +00:00
dependabot[bot]
291789905f
Bump go.uber.org/automaxprocs from 1.5.2 to 1.5.3
...
Bumps [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs ) from 1.5.2 to 1.5.3.
- [Release notes](https://github.com/uber-go/automaxprocs/releases )
- [Changelog](https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uber-go/automaxprocs/compare/v1.5.2...v1.5.3 )
---
updated-dependencies:
- dependency-name: go.uber.org/automaxprocs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-24 01:15:38 +00:00
Carlos Tadeu Panato Junior
c258e9c389
Merge pull request #1097 from ko-build/dependabot/github_actions/actions/setup-python-4.7.0
...
Bump actions/setup-python from 4.6.1 to 4.7.0
2023-07-17 09:26:52 +02:00
dependabot[bot]
0cda9a4a2c
Bump actions/setup-python from 4.6.1 to 4.7.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.6.1 to 4.7.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/bd6b4b6205c4dbad673328db7b31b7fab9e241c0...61a6322f88396a6271a6ee3565807d608ecaddd1 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-17 01:16:39 +00:00
Carlos Tadeu Panato Junior
fdc4c041cc
Merge pull request #1093 from ko-build/dependabot/go_modules/golang.org/x/tools-0.11.0
...
Bump golang.org/x/tools from 0.10.0 to 0.11.0
2023-07-10 09:59:36 +02:00
Carlos Tadeu Panato Junior
8c94b59f7e
Merge pull request #1094 from ko-build/dependabot/go_modules/github.com/docker/docker-24.0.4incompatible
2023-07-10 07:48:31 +02:00
dependabot[bot]
8ff1c3c7ef
Bump github.com/docker/docker
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 24.0.2+incompatible to 24.0.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v24.0.2...v24.0.4 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-10 01:30:37 +00:00
dependabot[bot]
cb196e66b6
Bump golang.org/x/tools from 0.10.0 to 0.11.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.10.0...v0.11.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-10 01:30:21 +00:00
Carlos Tadeu Panato Junior
61d8f6b476
Merge pull request #1089 from ko-build/dependabot/go_modules/github.com/opencontainers/image-spec-1.1.0-rc4
...
Bump github.com/opencontainers/image-spec from 1.1.0-rc3 to 1.1.0-rc4
2023-07-07 14:56:50 +02:00
Carlos Tadeu Panato Junior
9fb7067b90
Merge pull request #1087 from ko-build/dependabot/github_actions/sigstore/cosign-installer-3.1.1
...
Bump sigstore/cosign-installer from 3.1.0 to 3.1.1
2023-07-07 14:48:31 +02:00
dependabot[bot]
b50074fff2
Bump github.com/opencontainers/image-spec from 1.1.0-rc3 to 1.1.0-rc4
...
Bumps [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec ) from 1.1.0-rc3 to 1.1.0-rc4.
- [Release notes](https://github.com/opencontainers/image-spec/releases )
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md )
- [Commits](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc3...v1.1.0-rc4 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/image-spec
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-07 12:46:41 +00:00
Carlos Tadeu Panato Junior
2f39322c56
Merge pull request #1088 from ko-build/dependabot/go_modules/github.com/sigstore/cosign/v2-2.1.1
...
Bump github.com/sigstore/cosign/v2 from 2.1.0 to 2.1.1
2023-07-07 14:45:20 +02:00
Carlos Tadeu Panato Junior
dependabot[bot]
Jason Hall
Pascal Gru
guangwu
Lars Lehtonen
Jon Johnson
Samuel Laferriere