dependabot[bot]
b59e533b76
chore(deps): bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-22 21:33:28 +00:00
dependabot[bot]
e22377124d
chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4dc6199c7b...7a3fe6cf4c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-13 21:33:35 +00:00
dependabot[bot]
09ae0d4f2d
chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.2 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](ea165f8d65...b7c566a772 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-12 21:06:25 +00:00
Matt Farina
8f636b5bd2
Use latest patch release of Go in releases
...
GitHub Actions has a cache of tools, like Go, and it does not update
this cache when a new version comes out. It can take more than a week
for a new version to be available.
This change forces the action to check if a newer version is available
than is in the cache.
Closes #31634
Signed-off-by: Matt Farina <matt.farina@suse.com>
2025-12-11 10:34:42 -05:00
Matt Farina
24a82589f8
Run the vulnerability check on PR that change the file
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
2025-12-09 15:47:56 -05:00
Matt Farina
bc9462f20f
Fix govulncheck in CI
...
govulncheck is having trouble checking out the source due to
multiple Authorization headers. The fix for this is to not
persist the credentials.
Signed-off-by: Matt Farina <matt.farina@suse.com>
2025-12-09 15:29:26 -05:00
Matt Farina
b825a18362
Update the govulncheck.yml to run on change
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
2025-12-09 14:11:08 -05:00
Robert Sirchia
5bab984cef
Merge pull request #31599 from helm/dependabot/github_actions/main/actions/checkout-6.0.1
...
build-test / build (push) Has been cancelled
CodeQL / Analyze (push) Has been cancelled
golangci-lint / golangci-lint (push) Has been cancelled
release / release (push) Has been cancelled
release / canary-release (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
chore(deps): bump actions/checkout from 6.0.0 to 6.0.1
2025-12-04 16:22:51 +01:00
Robert Sirchia
e91cdd6b3e
Merge pull request #31602 from helm/dependabot/github_actions/main/golangci/golangci-lint-action-9.2.0
...
chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0
2025-12-04 16:22:08 +01:00
dependabot[bot]
581ab1afe9
chore(deps): bump actions/stale from 10.1.0 to 10.1.1
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.1.0 to 10.1.1.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](5f858e3efb...997185467f )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-03 21:08:08 +00:00
dependabot[bot]
e62bf7fcc9
chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 9.1.0 to 9.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](e7fa5ac41e...1e7e51e771 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-version: 9.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-03 21:08:04 +00:00
dependabot[bot]
e6b2068afd
chore(deps): bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1af3b93b68...8e8c483db8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-02 21:07:52 +00:00
dependabot[bot]
cb35947ae6
chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](0a35821d5c...e7fa5ac41e )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-version: 9.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-11-21 21:07:43 +00:00
Matt Farina
bd9425c00b
Merge pull request #31550 from helm/dependabot/github_actions/main/actions/setup-go-6.1.0
...
chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0
2025-11-21 15:19:48 -05:00
dependabot[bot]
4fddc64678
chore(deps): bump actions/checkout from 5.0.1 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](93cb6efe18...1af3b93b68 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-11-20 21:07:14 +00:00
dependabot[bot]
b87f2da2f8
chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.5.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](d35c59abb0...4dc6199c7b )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-11-20 21:07:06 +00:00
dependabot[bot]
f6ceae9b74
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...93cb6efe18 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-11-17 21:08:11 +00:00
Robert Sirchia
51a9bc5157
Merge pull request #31473 from TerryHowe/fix-only-run-release-on-helm-helm
...
build-test / build (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
golangci-lint / golangci-lint (push) Waiting to run
release / release (push) Waiting to run
release / canary-release (push) Waiting to run
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
fix: do not run release workflow on forks
2025-11-14 13:11:01 +01:00
Robert Sirchia
9861687ad5
Merge pull request #31474 from helm/dependabot/github_actions/main/golangci/golangci-lint-action-9.0.0
...
build-test / build (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
golangci-lint / golangci-lint (push) Waiting to run
govulncheck / govulncheck (push) Waiting to run
release / release (push) Waiting to run
release / canary-release (push) Waiting to run
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0
2025-11-13 14:46:00 +01:00
George Jenkins
e4353dc8db
Publish Helm v4 -> helm-latest-version
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2025-11-12 09:08:30 -05:00
Matt Farina
76d772af6e
Merge pull request #31318 from helm/gjenkins/fix_helm4_release
...
fix: Helm v4 release distribution & `get-helm-3` script
2025-11-12 07:59:13 -05:00
dependabot[bot]
7a8535810a
chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](4afd733a84...0a35821d5c )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 21:19:02 +00:00
Terry Howe
d93ef03ee4
fix: do not run release workflow on forks
...
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2025-11-10 10:25:16 -06:00
dependabot[bot]
5c16c7d928
chore(deps): bump github/codeql-action from 3 to 4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-10-07 21:08:23 +00:00
dependabot[bot]
3c2c9bbac6
chore(deps): bump actions/stale from 10.0.0 to 10.1.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.0.0 to 10.1.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](3a9db7e6a4...5f858e3efb )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-10-03 21:06:31 +00:00
dependabot[bot]
535f542b3c
chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](05b42c6244...4eaacf0543 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-09-30 21:07:45 +00:00
George Jenkins
d5d1ea3f55
fix: Fix Helm v4 release distribtion/get-helm-3 script
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2025-09-22 17:26:57 -07:00
dependabot[bot]
3e97f216cc
chore(deps): bump actions/stale from 9.1.0 to 10.0.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 9.1.0 to 10.0.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](5bef64f19d...3a9db7e6a4 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-09-04 21:06:24 +00:00
Evans Mungai
5dabfdfb3f
Merge remote-tracking branch 'origin/main' into em/check-go-modules
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
2025-09-01 12:01:11 +01:00
Terry Howe
77bbbbd84f
feature: add stale pr workflow
...
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2025-08-18 09:48:29 -06:00
Terry Howe
d918f919e0
fix: stale issue workflow
...
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2025-08-18 07:27:10 -06:00
Evans Mungai
6752b5e4c3
Merge branch 'main' into em/check-go-modules
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
2025-08-12 11:07:16 -06:00
dependabot[bot]
78436b2d0e
chore(deps): bump actions/checkout from 4.2.2 to 5.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 05:19:39 +00:00
Evans Mungai
af1c9570f5
Rename go mod tidy check task
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
2025-08-07 13:42:27 +01:00
Evans Mungai
0dae3d6e88
chore: check if go modules are tidy before build
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
2025-08-07 12:34:26 +01:00
dependabot[bot]
8706c441c4
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](f49aabe0b5...05b42c6244 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-30 21:34:15 +00:00
Robert Sirchia
b4bc0f1d88
Merge pull request #30872 from benoittgt/fix-30838
...
Bump golangci-lint version to match last golangci-lint-action
2025-05-20 07:14:48 -04:00
dependabot[bot]
7ab768abc0
build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](0aaccfd150...d35c59abb0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 5.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-08 21:48:01 +00:00
dependabot[bot]
c3b83c3c40
build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](1481404843...4afd733a84 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-05 22:29:26 +00:00
Matthieu MOREL
a0c84b9246
fix: govulncheck workflow
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2025-04-22 19:14:35 +02:00
dongjiang
cd19e2a015
Merge branch 'main' into update-golang-version
...
Signed-off-by: dongjiang <dongjiang2010@gmail.com>
2025-04-17 20:40:52 +08:00
Benoit Tigeot
18ed1cf720
Migrate to last golangci-lint and golangci-lint-action
...
Close dependabot https://github.com/helm/helm/pull/30706
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
2025-04-14 10:28:18 +02:00
dongjiang
fcc9468b60
fix comments
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-26 11:10:23 +08:00
Robert Sirchia
a5ec16357d
Merge pull request #30688 from helm/dependabot/github_actions/main/actions/setup-go-5.4.0
...
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0
2025-03-21 13:15:27 -07:00
dependabot[bot]
f95410f66c
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](f111f3307d...0aaccfd150 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-19 21:51:59 +00:00
dependabot[bot]
a45cf1bab9
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](4cec3d8aa0...ea165f8d65 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-19 21:51:55 +00:00
dongjiang
f8e85bf172
change environment varialbe names
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-19 09:39:48 +08:00
dependabot[bot]
d5d75ad0c7
build(deps): bump golangci/golangci-lint-action from 6.5.1 to 6.5.2
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.5.1 to 6.5.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](4696ba8bab...55c2c1448f )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-18 21:41:09 +00:00
dongjiang
af5f730a16
add golangci-lint-version
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-18 15:10:00 +08:00
dongjiang
068a892d27
fix codereview bug
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
2025-03-18 13:55:40 +08:00