Commit Graph

858 Commits

Author SHA1 Message Date
Jeremy
26fde2d649 Merge branch 'feature/beta-release' into renovate/feature/beta-release-actions-attest-sbom-4.x 2026-02-25 22:33:07 -05:00
renovate[bot]
ccdc719501 fix(deps): update non-major-updates 2026-02-26 03:31:33 +00:00
GitHub Actions
ac720f95df fix: implement GHCR and Docker Hub prune scripts with summary reporting 2026-02-26 03:30:02 +00:00
renovate[bot]
a7be6c304d chore(deps): update actions/attest-sbom action to v4 2026-02-26 02:32:55 +00:00
GitHub Actions
fb69f3da12 fix: add debug output for prune script execution in container prune workflow 2026-02-25 19:50:28 +00:00
GitHub Actions
46fe59cf0a fix: add GitHub CLI to tools installation in container prune workflow 2026-02-25 19:21:27 +00:00
GitHub Actions
4a398185c2 fix: remove EthicalCheck workflow due to deprecation and lack of support 2026-02-25 19:13:15 +00:00
Jeremy
5b436a883d Merge pull request #761 from Wikid82/renovate/feature/beta-release-pin-dependencies
chore(deps): pin github/codeql-action action to 4558047 (feature/beta-release)
2026-02-25 14:07:59 -05:00
GitHub Actions
1af04987e0 fix: update protected regex pattern for container pruning scripts and enhance logging details 2026-02-25 17:35:47 +00:00
renovate[bot]
bab8414666 chore(deps): pin github/codeql-action action to 4558047 2026-02-25 16:47:54 +00:00
GitHub Actions
a98c9ed311 chore: add EthicalCheck workflow for automated API security testing 2026-02-25 16:14:43 +00:00
renovate[bot]
ce335ff342 chore(deps): update non-major-updates 2026-02-25 15:50:29 +00:00
GitHub Actions
cb16ac05a2 fix: implement security severity policy and enhance CodeQL checks for blocking findings 2026-02-25 15:05:41 +00:00
renovate[bot]
32f2d25d58 chore(deps): update non-major-updates 2026-02-25 00:43:29 +00:00
renovate[bot]
e13b49cfd2 chore(deps): update github/codeql-action digest to 28737ec 2026-02-24 19:45:29 +00:00
GitHub Actions
7983de9f2a fix: enhance workflow triggers and context handling for security scans 2026-02-24 12:45:25 +00:00
GitHub Actions
65228c5ee8 fix: enhance Docker image loading and tagging in security scan workflow 2026-02-24 12:41:20 +00:00
GitHub Actions
e8a513541f fix: enhance Trivy scan result uploads with conditional checks and category tagging 2026-02-24 06:22:03 +00:00
renovate[bot]
a9c5b5b2d8 chore(deps): update actions/download-artifact digest to 70fc10c 2026-02-23 21:17:50 +00:00
Jeremy
dc1426ae31 Merge pull request #749 from Wikid82/renovate/feature/beta-release-non-major-updates
fix(deps): update non-major-updates (feature/beta-release)
2026-02-23 15:16:07 -05:00
renovate[bot]
72bfca2dc3 fix(deps): update non-major-updates 2026-02-23 20:15:18 +00:00
GitHub Actions
09f9f7eb3d chore: remove Caddy Compatibility Gate workflow 2026-02-23 20:15:12 +00:00
renovate[bot]
8fa0950138 chore(deps): update github/codeql-action digest to a754a57 2026-02-23 14:48:33 +00:00
GitHub Actions
1315d7a3ef chore: Add cache dependency path for Go setup in workflows 2026-02-23 14:41:55 +00:00
GitHub Actions
1f2b4c7d5e chore: Add Caddy compatibility gate workflow and related scripts; update documentation and test cases 2026-02-23 14:41:55 +00:00
renovate[bot]
735b9fdd0e chore(deps): update non-major-updates 2026-02-23 14:15:17 +00:00
GitHub Actions
45458df1bf chore: Add Caddy compatibility gate workflow and related scripts; enhance SMTP settings tests 2026-02-23 13:38:02 +00:00
renovate[bot]
cddec19862 chore(deps): update goreleaser/goreleaser-action action to v7 2026-02-21 17:46:14 +00:00
renovate[bot]
783956cb78 fix(deps): update non-major-updates 2026-02-21 16:43:51 +00:00
renovate[bot]
c48ced8c03 fix(deps): update non-major-updates 2026-02-20 19:26:28 +00:00
GitHub Actions
f4ef79def3 chore: repo cleanup by archiving plans / reports 2026-02-19 16:34:10 +00:00
GitHub Actions
813236e017 fix: specify target branch for push events in workflow configurations 2026-02-19 01:24:24 +00:00
GitHub Actions
03e9698186 fix: Enhance error handling for missing SARIF output directory in CodeQL analysis 2026-02-18 21:26:39 +00:00
GitHub Actions
4f56127147 fix: Update Go version in CodeQL workflow to 1.26.0 for compatibility 2026-02-18 18:00:14 +00:00
renovate[bot]
42155c3b95 fix(deps): update weekly-non-major-updates 2026-02-18 16:13:03 +00:00
GitHub Actions
d66101a349 chore: update CodeQL workflow to verify Go toolchain version and improve SARIF file handling 2026-02-18 08:28:01 +00:00
GitHub Actions
fd95611a25 chore: update CodeQL workflow to include feature and fix branches and enhance JS scan script 2026-02-18 08:13:55 +00:00
GitHub Actions
24509dc84f fix: add allowlist normalization and validation in permissions repair process 2026-02-18 06:31:19 +00:00
renovate[bot]
f87a468748 chore(deps): pin peter-evans/find-comment action to b30e6a3 2026-02-18 06:05:04 +00:00
GitHub Actions
0a8106aed4 chore: update nightly build workflow to use CHARON_CI_TRIGGER_TOKEN and remove quality-checks workflow dispatch trigger 2026-02-18 04:12:31 +00:00
GitHub Actions
cbe2a39f0b chore: add workflow_dispatch trigger to quality-checks and update reference in weekly-nightly-promotion 2026-02-18 03:19:37 +00:00
GitHub Actions
a5c4a3e36c chore: add quality-checks workflow to nightly build process 2026-02-18 02:53:41 +00:00
GitHub Actions
bb79550c33 chore: rename supply chain workflow files for consistency and clarity 2026-02-18 02:11:24 +00:00
GitHub Actions
88553a6fe3 chore: update create-pull-request action to v8.1.0 for GeoLite2 checksum update 2026-02-18 02:00:19 +00:00
GitHub Actions
37a68d8768 chore: update find-comment action to v4.0.0 for improved functionality 2026-02-18 02:00:19 +00:00
renovate[bot]
abd9dc2f70 chore(deps): update github/codeql-action digest to 9e907b5 2026-02-18 01:51:24 +00:00
GitHub Actions
a421a348ca chore: remove quality-checks workflow from nightly build and weekly promotion jobs 2026-02-18 00:55:53 +00:00
GitHub Actions
97dab1ccf4 ---
fix: enforce fresh nightly promotion quality gates

Ensure promotion decisions are based on current nightly HEAD evidence instead of stale workflow history.
Add native CodeQL branch triggers so security analysis runs on nightly/main promotion paths.
Convert nightly and weekly automation to dispatch required checks only when missing for the exact HEAD commit, preventing duplicate/racing runs while guaranteeing check presence.
Harden weekly health verification with retry polling so transient scheduling delays do not produce false negatives.
This reduces false blocking and ensures nightly-to-main promotion uses current, deterministic CI state.
Refs: #712
2026-02-18 00:51:15 +00:00
renovate[bot]
9772f1dbe4 chore(deps): update github/codeql-action digest to 015d8c7 2026-02-17 23:56:23 +00:00
GitHub Actions
f59244d00e chore: add push event detection to workflow trust evaluation 2026-02-17 21:18:54 +00:00