renner
93a0ae253d
fix(ci): mitigate code injection in build from repo_organization ( #2991 )
...
* fix(ci): mitigate code injection in build from repo_organization
https://docs.github.com/en/actions/concepts/security/script-injections
* make it global
is pretty reusable
2026-10-07 12:06:15 +00:00
renner
dfd216d50c
refactor: rewrite attach SBOM in just ( #2961 )
...
For consistency and debugability.
2026-10-04 20:36:41 +00:00
ubot-7274[bot]
176fe2479c
chore(deps): update anchore/sbom-action action to v0.24.3 ( #2966 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-04 05:01:15 +00:00
renner
71c3ca2a24
chore(ci): only run scheduled jobs in ublue-os/aurora ( #2972 )
...
This is quite annoying and unneeded in forks.
2026-10-04 04:30:41 +00:00
ubot-7274[bot]
b9ab984496
chore(deps): update korthout/backport-action action to v4.7.0 ( #2973 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-04 04:26:42 +00:00
renner
0ddd3ec7fc
chore(renovate): remove Justfile custom rule ( #2971 )
...
We are not using that right now in Justfiles, we should be using
image-versions.yaml from the org-renovate config [1]
[1] 915bbf3a9a/org-inherited-config.json
2026-10-03 21:51:52 +02:00
ubot-7274[bot]
dbc58acc74
chore(deps): update oras-project/setup-oras action to v2.0.2 ( #2957 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-29 19:31:25 +00:00
renner
75188e997c
chore(ci): use new self-repository syntax for workflows ( #2956 )
...
See: https://docs.zizmor.sh/audits/#self-repository
2026-09-29 17:45:51 +00:00
inffy
a723f1eda8
chore: add autoclose of issues without requested info ( #2955 )
...
* chore: add autoclose of issues without requested info
Same as ba6f78b1afhttps://github.com/get-aurora-dev/common/issues/281
* concurrency and properly named job
* make zizmor happy
---------
Co-authored-by: renner <renner0@posteo.de>
2026-09-29 16:25:39 +02:00
ubot-7274[bot]
69d181f306
chore(deps): update github/codeql-action action to v4.38.2 (main) ( #2936 )
2026-09-27 08:32:59 +03:00
ubot-7274[bot]
bf9c82a69e
chore(deps): update korthout/backport-action action to v4.6.1 ( #2937 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-27 04:43:59 +00:00
inffy
deb5fe42a6
fix(renovate): allow only merge commits to stable branches ( #2923 )
2026-09-24 05:25:46 +00:00
renner
87024745ac
chore(ci): remove container-storage-action ( #2920 )
...
There is no /mnt anymore, this will no longer run and is useless.
Follow-up of 6ce2bb1d9a
2026-09-24 04:28:55 +00:00
ubot-7274[bot]
b5d26de23a
chore(deps): update actions/checkout action to v7.0.1 ( #2897 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-20 07:19:09 +00:00
ubot-7274[bot]
df015525dc
chore(deps): update zizmorcore/zizmor-action action to v0.6.4 ( #2900 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-20 07:17:28 +00:00
ubot-7274[bot]
0564b5ef4c
chore(deps): update github/codeql-action action to v4.38.1 (main) ( #2898 )
2026-09-20 07:43:29 +03:00
renner
1d7aceb03b
chore(ci): stop hardcoding stable-branch ( #2605 )
...
Instead we can define an environment variable for github actions.
For things where we can't, globs/regex is probably good enough.
When we branch/stabilize "stable-f45" then we will delete the old one
anyway, so we shouldn't be in a situation where we'll get spammed with
like 3 PRs.
The only remaining things where it's hardcoded is the pull config and
docs.
2026-09-19 03:09:54 +00:00
inffy
6ce2bb1d9a
chore(ci): move to newer free-disk-space action ( #2884 )
2026-09-17 06:02:15 +00:00
renner
69178efe4a
chore(ci): add zizmor ( #2529 )
...
Thanks Secureblue!
xref: https://github.com/ublue-os/aurora/issues/2528
2026-09-17 03:26:42 +00:00
renner
7993ff0a05
fix(changelogs): handle multiple builds on the same day correctly ( #2879 )
...
In the last release [1] I noticed that instead of comparing XX15.2 and
XX15.1 with each other, the tag from last week got resolved because
only the highest index point of that day was kept. So we compared XX15.2 with XX09.1, that resulted in essentially a lot of duplicate information in that release, instead of just a small addition.
The expected output of the test seems like a typo to me.
[1] https://github.com/ublue-os/aurora/releases/tag/stable-20260915.2
2026-09-16 10:27:19 +02:00
inffy
c4bd716f80
fix(backport-action): keep credentials so backport action works ( #2877 )
2026-09-15 15:16:04 +00:00
ubot-7274[bot]
a0b25b998b
chore(deps): update github/codeql-action action to v4.38.0 (main) ( #2857 )
2026-09-13 09:21:28 +03:00
renner
8f14f678c0
fix(changelogs): don't show kernel in big list ( #2844 )
...
We are already showing the kernel in the major packages list.
This is a follow-up of 1ddf69d039https://github.com/ublue-os/aurora/releases/tag/stable-20260908.1
2026-09-08 14:26:41 +00:00
renner
1ddf69d039
fix(changelogs): use kernel-core instead of kernel ( #2818 )
...
* fix(changelogs): use kernel-core instead of kernel
This happens to work around the fact that kernel in the SBOM collides
with another package. It will now show the correct kernel, however, the
underlying issue is not fixed. Besides that bug, we should probably be
using this package anyway as kernel is just an empty metapackage with no
actual content.
xref: https://github.com/ublue-os/aurora/issues/2817
* chore: sync important blocklisted versions
Essentialy a follow-up of 61764e68ab
2026-09-02 21:05:49 +00:00
ubot-7274[bot]
401ac56b89
chore(deps): update github/codeql-action action to v4.37.9 (main) ( #2796 )
2026-08-30 09:06:19 +03:00
ubot-7274[bot]
2396ec06e0
chore(deps): update anchore/sbom-action action to v0.24.2 ( #2790 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-29 05:32:28 +00:00
ubot-7274[bot]
cf4db1509a
chore(deps): update anchore/sbom-action action to v0.24.1 ( #2783 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-28 04:15:55 +00:00
renner
8bfe5adc4c
docs: mention rebase-helper in changelogs ( #2779 )
...
Doesn't hurt to mention this here as well.
2026-08-26 10:56:56 +00:00
ubot-7274[bot]
bc8c3f6563
chore(deps): update github/codeql-action action to v4.37.8 (main) ( #2752 )
2026-08-23 07:17:28 +03:00
renner
d9a646af97
chore: remove retired ai moderator ( #2747 )
2026-08-21 16:11:35 +03:00
renner
d85c9c22e7
feat: generate changelogs for testing ( #2741 )
...
Currently if we make changes to the changelogs we would only notice them
once they reach the stable branch. This is also consistent what we are
doing with stable and latest.
2026-08-19 19:03:01 +00:00
renner
61764e68ab
feat: add more important packages to changelogs ( #2740 )
...
These are important we should probably just explicitly show them here.
2026-08-19 17:56:38 +00:00
renner
a05b95d732
chore(ci): remove aurora brand name ( #2728 )
2026-08-17 06:48:39 +03:00
ubot-7274[bot]
9a3968312d
chore(deps): update github/codeql-action action to v4.37.7 (main) ( #2723 )
2026-08-16 08:38:05 +03:00
ubot-7274[bot]
552c0bf31b
chore(deps): update dependency sigstore/cosign to v3.1.3 ( #2693 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-09 13:49:58 +00:00
ubot-7274[bot]
f8b97ecdfc
chore(deps): update actions/attest action to v4.2.2 ( #2692 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-09 06:25:41 +00:00
ubot-7274[bot]
7a7ae21a92
chore(deps): update github/codeql-action action to v4.37.6 ( #2696 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-09 09:26:05 +03:00
ubot-7274[bot]
8fd730e0b6
chore(deps): update github/codeql-action action to v4.37.4 (main) ( #2662 )
2026-08-03 08:35:18 +03:00
ubot-7274[bot]
50d424512e
chore(deps): update actions/attest action to v4.2.1 ( #2660 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-02 18:26:54 +00:00
inffy
13fa39879f
chore: update renovate for github-action to weekly ( #2633 )
...
* chore: update renovate for github-action to weekly
* add anchore/sbom-action to ignore list
2026-07-29 17:34:13 +00:00
renner
e6a718f2e1
chore(ci): pin cosign ( #2640 )
...
This is a ticking time bomb, so we don't accidentally use cosign v4 when
it comes out and so on, renovate should pick this up.
2026-07-28 19:34:58 +00:00
ubot-7274[bot]
aad2d52fd4
chore(deps): update ossf/scorecard-action action to v2.4.4 (main) ( #2610 )
2026-07-24 10:36:47 +03:00
inffy
c62ec08ec5
chore(renovate): update upload-sarif only weekly ( #2604 )
2026-07-22 15:11:12 +02:00
ubot-7274[bot]
2753e11968
chore(deps): update github/codeql-action digest to e064762 (main) ( #2595 )
...
* chore(deps): update github/codeql-action digest to e064762
* set proper version
---------
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
2026-07-22 11:02:59 +03:00
inffy
4d9908e3d1
chore(ci): add gh token to release generator ( #2591 )
...
* chore(ci): add gh token to release generator
Seems we need to pass the token to gh cli in workflows too
https://github.com/ublue-os/aurora/actions/runs/29793388914/job/88563341082#step:7:13
* consistency
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-21 11:25:02 +00:00
ubot-7274[bot]
17717edb54
chore(deps): update actions/checkout digest to 3d3c42e (main) ( #2585 )
...
* chore(deps): update actions/checkout digest to 3d3c42e
* chore: use full tags for actions/checkout
---------
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
2026-07-20 16:54:34 +00:00
ubot-7274[bot]
c8dbdca1fa
chore(deps): update actions/checkout action to v7.0.1 (main) ( #2586 )
2026-07-20 18:37:50 +03:00
ubot-7274[bot]
f6ccf721d2
chore(deps): update github/codeql-action digest to 7188fc3 (main) ( #2564 )
2026-07-16 23:25:48 +03:00
ubot-7274[bot]
c8e6cf328a
chore(deps): update actions/attest action to v4.2.0 ( #2566 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-16 18:01:54 +00:00
ubot-7274[bot]
dc837ebddd
chore(deps): update actions/setup-node action to v7 ( #2556 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-14 06:08:40 +00:00
