Commit graph

189 commits

Author SHA1 Message Date
Matthieu MOREL
a0c84b9246 fix: govulncheck workflow
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2025-04-22 19:14:35 +02:00
dongjiang
cd19e2a015
Merge branch 'main' into update-golang-version
Signed-off-by: dongjiang <dongjiang2010@gmail.com>
2025-04-17 20:40:52 +08:00
Benoit Tigeot
18ed1cf720
Migrate to last golangci-lint and golangci-lint-action
Close dependabot https://github.com/helm/helm/pull/30706

Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
2025-04-14 10:28:18 +02:00
dongjiang
fcc9468b60
fix comments
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-26 11:10:23 +08:00
Robert Sirchia
a5ec16357d
Merge pull request #30688 from helm/dependabot/github_actions/main/actions/setup-go-5.4.0
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0
2025-03-21 13:15:27 -07:00
dependabot[bot]
f95410f66c
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](f111f3307d...0aaccfd150)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-19 21:51:59 +00:00
dependabot[bot]
a45cf1bab9
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](4cec3d8aa0...ea165f8d65)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-19 21:51:55 +00:00
dongjiang
f8e85bf172
change environment varialbe names
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-19 09:39:48 +08:00
dependabot[bot]
d5d75ad0c7
build(deps): bump golangci/golangci-lint-action from 6.5.1 to 6.5.2
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.5.1 to 6.5.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](4696ba8bab...55c2c1448f)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-18 21:41:09 +00:00
dongjiang
af5f730a16
add golangci-lint-version
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-18 15:10:00 +08:00
dongjiang
068a892d27
fix codereview bug
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-18 13:55:40 +08:00
dongjiang
b1000ba5d7
update golang to v1.24
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-17 20:01:28 +08:00
dependabot[bot]
fd547184f1
build(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.5.0 to 6.5.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](2226d7cb06...4696ba8bab)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-12 21:36:54 +00:00
George Jenkins
a0c281c14d
Merge pull request #30568 from helm/dependabot/github_actions/main/ossf/scorecard-action-2.4.1
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
2025-02-23 19:31:08 -08:00
dependabot[bot]
3d35e786c7
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](65c4c4a1dd...4cec3d8aa0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-21 21:59:44 +00:00
dependabot[bot]
5c648151d5
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](62b2cac7ed...f49aabe0b5)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-21 21:59:40 +00:00
dependabot[bot]
50be8ae64b
build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.3.2 to 6.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](051d919338...2226d7cb06)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-17 21:08:38 +00:00
dependabot[bot]
9498994ab5
build(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.2
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.3.0 to 6.3.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](e60da84bfa...051d919338)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-10 21:15:38 +00:00
dependabot[bot]
5f64fe6663
build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.0
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](ec5d18412c...e60da84bfa)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-04 21:17:19 +00:00
Robert Sirchia
0d66425d9a
Merge pull request #13651 from helm/dependabot/github_actions/main/actions/setup-go-5.3.0
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
2025-01-24 15:23:21 -05:00
Matt Farina
093b9ee382
Merge pull request #13650 from helm/dependabot/github_actions/main/actions/stale-9.1.0
build(deps): bump actions/stale from 9.0.0 to 9.1.0
2025-01-24 15:11:57 -05:00
dependabot[bot]
5bf47fb21b
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](3041bf56c9...f111f3307d)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-21 21:56:24 +00:00
dependabot[bot]
b73c514a78
build(deps): bump actions/stale from 9.0.0 to 9.1.0
Bumps [actions/stale](https://github.com/actions/stale) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](28ca103628...5bef64f19d)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-21 21:56:24 +00:00
dependabot[bot]
d005334579
Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](971e284b60...ec5d18412c)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-16 21:07:24 +00:00
dependabot[bot]
ec12a61337
Bump actions/upload-artifact from 4.4.3 to 4.6.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.3 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](b4b15b8c7c...65c4c4a1dd)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-14 21:07:10 +00:00
Andrew Block
fb54996b00
Merge pull request #13489 from helm/dependabot/github_actions/actions/upload-artifact-4.4.3
Bump actions/upload-artifact from 3.2.1.pre.node20 to 4.4.3
2025-01-13 20:16:44 -06:00
George Jenkins
bfada38aa9 Run build-test action on dev-v3 branch
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2024-12-20 12:54:39 -08:00
Matt Farina
66f84e510e
Update golangci-lint version
Signed-off-by: Matt Farina <matt.farina@suse.com>
2024-12-19 13:54:44 -05:00
Matt Farina
5727f56a96
Update to Go 1.23
Multiple changes were made to pass linting. Some Go built-in names
are being used for variables (e.g., min). This happens in the Go
source itself including the Go standard library and is not always
a bad practice.

To handle allowing some built-in names to be used the linter config
is updated to allow (via opt-in) some names to pass. This allows us
to still check for re-use of Go built-in names and opt-in to any
new uses.

There were also several cases where a value was checked for nil
before checking its length when this is already handled by len()
or the types default value. These were cleaned up.

The license validation was updated because it was checking everything
in the .git directory including all remote content that was local.
The previous vendor directory was from a time prior to Go modules
when Helm handled dependencies differently. It was no longer needed.

Signed-off-by: Matt Farina <matt.farina@suse.com>
2024-12-19 10:27:38 -05:00
dependabot[bot]
08487907d9
Bump actions/setup-go from 5.1.0 to 5.2.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](41dfa10bad...3041bf56c9)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-11 21:20:11 +00:00
George Jenkins
5202e67d26
Update .github/workflows/scorecards.yml
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2024-11-30 21:57:47 -08:00
dependabot[bot]
caa8d322ee
Bump actions/upload-artifact from 3.2.1.pre.node20 to 4.4.3
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.2.1.pre.node20 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](c24449f33c...b4b15b8c7c)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-27 21:38:33 +00:00
Matt Farina
d1e9c022c6
Merge pull request #13332 from helm/dependabot/github_actions/actions/upload-artifact-c24449f33cd45d4826c6702db7e49f7cdb9b551d
Bump actions/upload-artifact from 97a0fba1372883ab732affbe8f94b823f91727db to c24449f33cd45d4826c6702db7e49f7cdb9b551d
2024-11-27 16:17:37 +01:00
George Jenkins
1baef77c44
Update .github/workflows/scorecards.yml
Co-authored-by: Terry Howe <terrylhowe@gmail.com>
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2024-11-18 21:05:01 -08:00
Matt Farina
b5a83ea821 Adding CI for dev-v3 branch
When the main branch is for Helm v4, the dev-v3 branch is for Helm v3.

Note, the canary release is setup for helm v4 once the v3 branch is created
and there is no canary release for v3.

Signed-off-by: Matt Farina <matt.farina@suse.com>
2024-11-11 06:17:45 -07:00
Matt Farina
261233caec
Merge pull request #12620 from helm/dependabot/github_actions/actions/stale-9.0.0
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
2024-11-01 15:25:26 -04:00
Matt Farina
029e983241
Increasing the size of the runner used for releases.
Note, this runner is provided as part of the CNCF access to GitHub
Enterprise runners.

Signed-off-by: Matt Farina <matt.farina@suse.com>
2024-11-01 12:16:59 -04:00
dependabot[bot]
f983342597
Bump actions/checkout from 4.2.1 to 4.2.2
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](eef61447b9...11bd71901b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-25 19:04:08 +00:00
dependabot[bot]
c867af8e11
Bump actions/setup-go from 5.0.2 to 5.1.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.2 to 5.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](0a12ed9d6a...41dfa10bad)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-24 21:31:32 +00:00
dependabot[bot]
140a376539
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
Bumps [actions/stale](https://github.com/actions/stale) from 3.0.14 to 9.0.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v3.0.14...v9.0.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-09 19:55:48 +00:00
dependabot[bot]
d517450a11
Bump actions/checkout from 4.2.0 to 4.2.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](d632683dd7...eef61447b9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-07 21:46:29 +00:00
dependabot[bot]
9e192b28eb
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](aaa42aa062...971e284b60)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 21:52:53 +00:00
dependabot[bot]
79257331c2
Bump golang/govulncheck-action from 1.0.3 to 1.0.4
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/golang/govulncheck-action/releases)
- [Commits](dd0578b371...b625fbe08f)

---
updated-dependencies:
- dependency-name: golang/govulncheck-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-01 21:38:55 +00:00
Matt Farina
b2286c4caa
Merge pull request #13328 from robertsirc/adjusting-go-setup-check-latest
adding check-latest:true
2024-10-01 14:58:10 +02:00
dependabot[bot]
2cd8d54c83
Bump actions/checkout from 4.1.7 to 4.2.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](692973e3d9...d632683dd7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-25 21:28:37 +00:00
Robert Sirchia
a8750f4ce9
adding toplevel permissions to workflows missing them
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-24 10:14:38 -04:00
Robert Sirchia
62069eb7b5
removing testing trigger from govulncheck action
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-13 16:27:53 -04:00
Robert Sirchia
114db17898
adding top-level permissions
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-13 16:24:36 -04:00
Matt Farina
3a3e3846ca
Merge pull request #13331 from helm/dependabot/github_actions/ossf/scorecard-action-2.4.0
Bump ossf/scorecard-action from 2.3.1 to 2.4.0
2024-09-13 15:44:20 -04:00
Matt Farina
334f5ed87e
Merge pull request #13330 from helm/dependabot/github_actions/actions/checkout-4.1.7
Bump actions/checkout from 4.1.1 to 4.1.7
2024-09-13 15:37:32 -04:00