596 Commits

Author SHA1 Message Date
Letro Bot
cf2a21de15 ignore image sbom for now 2026-04-30 17:57:46 +03:30
Letro Bot
107a95a100 pull before trivy 2026-04-30 14:18:00 +03:30
Letro Bot
5f0d31ae59 fix build 2026-04-30 13:41:09 +03:30
Letro Bot
430cb7eadc rename fork divergence file and add sbom generating 2026-04-30 13:01:04 +03:30
Letro Bot
080b64d7fa added a short delay before auto-merge 2026-04-28 17:22:43 +03:30
Letro Bot
6fbb313b43 added token for checkouts 2026-04-28 15:39:29 +03:30
Letro Bot
05ed3724bd added build artifacts to releases 2026-04-28 15:39:08 +03:30
Letro Bot
e06a07b65c start fresh 2026-04-26 14:28:22 +03:30
Letro Bot
733e21b366 separate letro relese workflows 2026-04-26 14:13:05 +03:30
Letro Bot
b740f24e71 fix: pass bake metadata via env var to avoid shell injection 2026-04-26 13:16:20 +03:30
Letro Bot
ad6e18d13d align versioning to letro semantics 2026-04-26 13:01:16 +03:30
Letro Bot
cda3259cd9 build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-26 12:23:58 +03:30
Letro Bot
83db937ec2 build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.15 to 2.0.16
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.15 to 2.0.16.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/v2.0.15...v2.0.16)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-26 12:23:58 +03:30
Letro Bot
7e20dd6f6a build(deps): bump docker/login-action from 4.0.0 to 4.1.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-26 12:23:58 +03:30
Letro Bot
8a85f40e06 Revert "update token name"
This reverts commit eff245d51a.
2026-04-08 15:49:04 +03:30
Letro Bot
eff245d51a update token name 2026-04-08 10:22:58 +03:30
Letro Bot
093d584fc9 remove platforms unneeded 2026-04-08 09:36:07 +03:30
Letro Bot
b80e0c3c4b simplify docker build to build only for amd64 2026-04-08 09:32:54 +03:30
Letro Bot
a152c28202 Revert "lets try self hosted runner"
This reverts commit 37e95f8b3e.
2026-04-07 21:32:56 +03:30
Letro Bot
37e95f8b3e lets try self hosted runner 2026-04-07 21:24:26 +03:30
Letro Bot
eb6f9e3d34 minimal build action 2026-04-07 18:36:53 +03:30
Letro Bot
add4cd67a3 remove arch build causing runner exhaustion 2026-04-07 14:26:57 +03:30
Letro Bot
5b708acd47 remove cancellation logic to allow docker build 2026-04-07 01:05:32 +03:30
Letro Bot
2e163af910 fix: rename docker repo name 2026-04-02 16:52:25 +03:30
Quentin Gliech
f6e1fdd927 build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#5585) 2026-03-31 12:08:09 +02:00
Quentin Gliech
ff4e5449e8 build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#5584) 2026-03-31 12:06:41 +02:00
dependabot[bot]
9f97a54219 build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.2 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v5.5.2...v6.0.0)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 14:02:32 +00:00
dependabot[bot]
fd683e7e5c build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 14:02:19 +00:00
dependabot[bot]
014d705959 build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](https://github.com/actions/deploy-pages/compare/v4.0.5...v5.0.0)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 14:02:16 +00:00
Quentin Gliech
94eed96768 build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 (#5558) 2026-03-24 11:47:28 +01:00
Quentin Gliech
b7ef5232f9 build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#5559) 2026-03-24 11:47:11 +01:00
dependabot[bot]
96fcaabdd0 build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.5.0 to 2.6.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/v2.5.0...v2.6.1)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-18 13:54:56 +00:00
dependabot[bot]
7482828ff4 build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-18 13:54:50 +00:00
dependabot[bot]
b310f97522 build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/v5.10.0...v6.0.0)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-18 13:54:43 +00:00
Quentin Gliech
af40679f94 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#5529) 2026-03-17 15:20:40 +01:00
Quentin Gliech
ed6b85c98f build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#5540) 2026-03-17 15:19:45 +01:00
Quentin Gliech
0af380caea build(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#5539) 2026-03-17 15:19:35 +01:00
Quentin Gliech
d53a2defa2 build(deps): bump actions/download-artifact from 7 to 8 (#5528) 2026-03-17 15:19:26 +01:00
dependabot[bot]
0a9863d869 build(deps): bump docker/bake-action from 6.10.0 to 7.0.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 6.10.0 to 7.0.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v6.10.0...v7.0.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-17 13:54:11 +00:00
dependabot[bot]
fb3b9c9058 build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3.12.0...v4.0.0)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-05 13:54:20 +00:00
dependabot[bot]
6613c2dc95 build(deps): bump actions/setup-node from 6.2.0 to 6.3.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.2.0...v6.3.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-04 13:54:46 +00:00
dependabot[bot]
9a77bb5749 build(deps): bump docker/login-action from 3.7.0 to 4.0.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.0.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3.7.0...v4.0.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-04 13:54:38 +00:00
dependabot[bot]
bb102ff259 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 13:54:09 +00:00
dependabot[bot]
d82cb3985b build(deps): bump actions/download-artifact from 7 to 8
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 13:54:01 +00:00
Quentin Gliech
3d98df79df Upgrade Rust, opa, regal, cargo-auditable and Node 2026-02-04 18:35:43 +01:00
Quentin Gliech
75e6258815 build(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#5457) 2026-02-04 17:03:10 +01:00
Quentin Gliech
2da2f1d655 build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#5420) 2026-02-04 16:50:47 +01:00
dependabot[bot]
8e883b1975 build(deps): bump docker/login-action from 3.6.0 to 3.7.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3.6.0...v3.7.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-28 13:54:26 +00:00
dependabot[bot]
26cd63c626 build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v8.0.0...v8.1.0)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-22 13:54:16 +00:00
dependabot[bot]
9fb90145d0 build(deps): bump actions/setup-node from 6.1.0 to 6.2.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.1.0...v6.2.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-15 13:54:35 +00:00