ubot-7274[bot]
f27c96fefd
chore(deps): update zizmorcore/zizmor-action action to v0.8.1 ( #3137 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-03 04:47:21 +00:00
ubot-7274[bot]
a9fcc79966
chore(deps): update dependency sigstore/cosign to v3.1.4 ( #3111 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:59:21 +00:00
ubot-7274[bot]
cc0676b10b
chore(deps): update zizmorcore/zizmor-action action to v0.8.0 ( #3114 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:52:10 +00:00
ubot-7274[bot]
c38c174c6a
chore(deps): update oras-project/setup-oras action to v2.0.3 ( #3113 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:46:59 +00:00
ubot-7274[bot]
45a1f73c1c
chore(deps): update github/codeql-action action to v4.39.1 ( #3112 )
2026-10-28 18:25:09 +02:00
inffy
0f7d21d2c5
fix(renovate): add cosign to exclusion rules and remove cooldown ( #3110 )
...
* fix(renovate): add cosign to exclusion rules
* remove cooldown for now
* also add zizmor to excludes
2026-10-28 17:13:27 +01:00
inffy
04f1bfe77f
fix(ci): fix blankiet installation permissions for backport action ( #3060 )
2026-10-19 16:26:08 +02:00
inffy
c15ef2cd16
feat(renovate): delay renovate for 3 days ( #3059 )
...
* feat(renovate): delay renovate for 3 days
* add comment + link
2026-10-19 15:41:52 +02:00
renner
293ddd493b
fix(renovate): trigger automerge for stable branch for kinoite ( #3054 )
...
We had to enable it manually, not sure when this broke.
2026-10-19 04:01:24 +00:00
ubot-7274[bot]
37fde370b1
chore(deps): update zizmorcore/zizmor-action action to v0.7.1 ( #3045 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 06:31:00 +00:00
ubot-7274[bot]
e1e8e88f5c
chore(deps): update actions/create-github-app-token digest to 64ab729 ( #3041 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 06:28:55 +00:00
ubot-7274[bot]
905b5d868a
chore(deps): update ossf/scorecard-action action to v2.5.0 (main) ( #3044 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 09:29:56 +03:00
ubot-7274[bot]
4c4181720a
chore(deps): update github/codeql-action action to v4.39.0 (main) ( #3042 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 09:29:29 +03:00
ubot-7274[bot]
ecaac936ff
chore(deps): update actions/upload-artifact action to v7.0.2 ( #3005 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-11 05:50:46 +00:00
ubot-7274[bot]
1e63e4b836
chore(deps): update actions/setup-node action to v7.1.0 ( #3009 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-11 05:50:21 +00:00
ubot-7274[bot]
b298cef9ef
chore(deps): update github/codeql-action action to v4.38.3 (main) ( #3006 )
2026-10-11 08:51:19 +03:00
renner
93a0ae253d
fix(ci): mitigate code injection in build from repo_organization ( #2991 )
...
* fix(ci): mitigate code injection in build from repo_organization
https://docs.github.com/en/actions/concepts/security/script-injections
* make it global
is pretty reusable
2026-10-07 12:06:15 +00:00
renner
dfd216d50c
refactor: rewrite attach SBOM in just ( #2961 )
...
For consistency and debugability.
2026-10-04 20:36:41 +00:00
ubot-7274[bot]
176fe2479c
chore(deps): update anchore/sbom-action action to v0.24.3 ( #2966 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-04 05:01:15 +00:00
renner
71c3ca2a24
chore(ci): only run scheduled jobs in ublue-os/aurora ( #2972 )
...
This is quite annoying and unneeded in forks.
2026-10-04 04:30:41 +00:00
ubot-7274[bot]
b9ab984496
chore(deps): update korthout/backport-action action to v4.7.0 ( #2973 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-04 04:26:42 +00:00
renner
0ddd3ec7fc
chore(renovate): remove Justfile custom rule ( #2971 )
...
We are not using that right now in Justfiles, we should be using
image-versions.yaml from the org-renovate config [1]
[1] 915bbf3a9a/org-inherited-config.json
2026-10-03 21:51:52 +02:00
ubot-7274[bot]
dbc58acc74
chore(deps): update oras-project/setup-oras action to v2.0.2 ( #2957 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-29 19:31:25 +00:00
renner
75188e997c
chore(ci): use new self-repository syntax for workflows ( #2956 )
...
See: https://docs.zizmor.sh/audits/#self-repository
2026-09-29 17:45:51 +00:00
inffy
a723f1eda8
chore: add autoclose of issues without requested info ( #2955 )
...
* chore: add autoclose of issues without requested info
Same as ba6f78b1af
- autocloses issues 14 days after the issue was labeled with NEEDSINFO label and now update (comment)
example of it can be seen here: https://github.com/get-aurora-dev/common/issues/281
* concurrency and properly named job
* make zizmor happy
---------
Co-authored-by: renner <renner0@posteo.de>
2026-09-29 16:25:39 +02:00
ubot-7274[bot]
69d181f306
chore(deps): update github/codeql-action action to v4.38.2 (main) ( #2936 )
2026-09-27 08:32:59 +03:00
ubot-7274[bot]
bf9c82a69e
chore(deps): update korthout/backport-action action to v4.6.1 ( #2937 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-27 04:43:59 +00:00
inffy
deb5fe42a6
fix(renovate): allow only merge commits to stable branches ( #2923 )
2026-09-24 05:25:46 +00:00
renner
87024745ac
chore(ci): remove container-storage-action ( #2920 )
...
There is no /mnt anymore, this will no longer run and is useless.
Follow-up of 6ce2bb1d9a .
2026-09-24 04:28:55 +00:00
ubot-7274[bot]
b5d26de23a
chore(deps): update actions/checkout action to v7.0.1 ( #2897 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-20 07:19:09 +00:00
ubot-7274[bot]
df015525dc
chore(deps): update zizmorcore/zizmor-action action to v0.6.4 ( #2900 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-20 07:17:28 +00:00
ubot-7274[bot]
0564b5ef4c
chore(deps): update github/codeql-action action to v4.38.1 (main) ( #2898 )
2026-09-20 07:43:29 +03:00
renner
1d7aceb03b
chore(ci): stop hardcoding stable-branch ( #2605 )
...
Instead we can define an environment variable for github actions.
For things where we can't, globs/regex is probably good enough.
When we branch/stabilize "stable-f45" then we will delete the old one
anyway, so we shouldn't be in a situation where we'll get spammed with
like 3 PRs.
The only remaining things where it's hardcoded is the pull config and
docs.
2026-09-19 03:09:54 +00:00
inffy
6ce2bb1d9a
chore(ci): move to newer free-disk-space action ( #2884 )
2026-09-17 06:02:15 +00:00
renner
69178efe4a
chore(ci): add zizmor ( #2529 )
...
Thanks Secureblue!
xref: https://github.com/ublue-os/aurora/issues/2528
2026-09-17 03:26:42 +00:00
renner
7993ff0a05
fix(changelogs): handle multiple builds on the same day correctly ( #2879 )
...
In the last release [1] I noticed that instead of comparing XX15.2 and
XX15.1 with each other, the tag from last week got resolved because
only the highest index point of that day was kept. So we compared XX15.2 with XX09.1, that resulted in essentially a lot of duplicate information in that release, instead of just a small addition.
The expected output of the test seems like a typo to me.
[1] https://github.com/ublue-os/aurora/releases/tag/stable-20260915.2
2026-09-16 10:27:19 +02:00
inffy
c4bd716f80
fix(backport-action): keep credentials so backport action works ( #2877 )
2026-09-15 15:16:04 +00:00
ubot-7274[bot]
a0b25b998b
chore(deps): update github/codeql-action action to v4.38.0 (main) ( #2857 )
2026-09-13 09:21:28 +03:00
renner
8f14f678c0
fix(changelogs): don't show kernel in big list ( #2844 )
...
We are already showing the kernel in the major packages list.
This is a follow-up of 1ddf69d039 .
Seen in [1].
[1] https://github.com/ublue-os/aurora/releases/tag/stable-20260908.1
2026-09-08 14:26:41 +00:00
renner
1ddf69d039
fix(changelogs): use kernel-core instead of kernel ( #2818 )
...
* fix(changelogs): use kernel-core instead of kernel
This happens to work around the fact that kernel in the SBOM collides
with another package. It will now show the correct kernel, however, the
underlying issue is not fixed. Besides that bug, we should probably be
using this package anyway as kernel is just an empty metapackage with no
actual content.
xref: https://github.com/ublue-os/aurora/issues/2817
* chore: sync important blocklisted versions
Essentialy a follow-up of 61764e68ab .
2026-09-02 21:05:49 +00:00
ubot-7274[bot]
401ac56b89
chore(deps): update github/codeql-action action to v4.37.9 (main) ( #2796 )
2026-08-30 09:06:19 +03:00
ubot-7274[bot]
2396ec06e0
chore(deps): update anchore/sbom-action action to v0.24.2 ( #2790 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-29 05:32:28 +00:00
ubot-7274[bot]
cf4db1509a
chore(deps): update anchore/sbom-action action to v0.24.1 ( #2783 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-28 04:15:55 +00:00
renner
8bfe5adc4c
docs: mention rebase-helper in changelogs ( #2779 )
...
Doesn't hurt to mention this here as well.
2026-08-26 10:56:56 +00:00
ubot-7274[bot]
bc8c3f6563
chore(deps): update github/codeql-action action to v4.37.8 (main) ( #2752 )
2026-08-23 07:17:28 +03:00
renner
d9a646af97
chore: remove retired ai moderator ( #2747 )
2026-08-21 16:11:35 +03:00
renner
d85c9c22e7
feat: generate changelogs for testing ( #2741 )
...
Currently if we make changes to the changelogs we would only notice them
once they reach the stable branch. This is also consistent what we are
doing with stable and latest.
2026-08-19 19:03:01 +00:00
renner
61764e68ab
feat: add more important packages to changelogs ( #2740 )
...
These are important we should probably just explicitly show them here.
2026-08-19 17:56:38 +00:00
renner
a05b95d732
chore(ci): remove aurora brand name ( #2728 )
2026-08-17 06:48:39 +03:00
ubot-7274[bot]
9a3968312d
chore(deps): update github/codeql-action action to v4.37.7 (main) ( #2723 )
2026-08-16 08:38:05 +03:00