Commit Graph
262 Commits
Author SHA1 Message Date
dependabot[bot] f2a6f94379 build(deps): bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-30 11:41:08 +02:00
dependabot[bot] 1c7930e91a build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-29 11:21:20 +02:00
dependabot[bot] 69568827a5 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-22 11:55:26 +02:00
dependabot[bot] 358efafdf5 build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/718ea10b132b3b2eba29c1007bb80653f286566b...3d0d9888cb7fd7b750713d6e236d1fcb99157228)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-21 11:27:44 +02:00
dependabot[bot] ec0189c03f build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps the docker-actions group with 1 update: [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder).


Updates `docker/github-builder/.github/workflows/bake.yml` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/c4a1b216d96a8c85b45a9974b37857828274c808...3415a188caae9a0da7fba83bc06985776e0b1790)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-20 11:46:39 +02:00
dependabot[bot] 5bf5a21687 build(deps): bump actions/stale from 10.3.0 to 10.4.0
Bumps [actions/stale](https://github.com/actions/stale) from 10.3.0 to 10.4.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...1e223db275d687790206a7acac4d1a11bd6fe629)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-16 18:05:12 +02:00
dependabot[bot] fd0faf788b build(deps): bump the docker-actions group across 1 directory with 4 updates
Bumps the docker-actions group with 4 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder), [docker/bake-action](https://github.com/docker/bake-action) and [docker/docker-agent-action/.github/workflows/review-pr.yml](https://github.com/docker/docker-agent-action).


Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c)

Updates `docker/github-builder/.github/workflows/bake.yml` from 1.12.0 to 1.13.0
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/5f637c833aa76bc99372a1dc9a6f8bcd8056fb85...c4a1b216d96a8c85b45a9974b37857828274c808)

Updates `docker/bake-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/6614cfa25eff9a0b2b2697efb0b6159e7680d584...d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b)

Updates `docker/docker-agent-action/.github/workflows/review-pr.yml` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/docker/docker-agent-action/releases)
- [Commits](https://github.com/docker/docker-agent-action/compare/e96a4bb40cac114f64358621e1d08346c8eadc8c...774b6e0e60d6c648b0f2dc43bd5221377a0a7420)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/docker-agent-action/.github/workflows/review-pr.yml
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-actions
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-16 16:31:53 +02:00
dependabot[bot] 682a1f65fc build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-16 16:16:18 +02:00
dependabot[bot] f32009d4a2 build(deps): bump actions/checkout from 6.0.2 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:49:14 +02:00
dependabot[bot] f4bc599fdb build(deps): bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 3.36.3 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/411c4c9a36b3fca4d674f06b6396b2c6d23522c6...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:45:50 +02:00
dependabot[bot] 2ed5bf2b61 build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.3 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:45:10 +02:00
dependabot[bot] d32d8c3c76 build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24
Bumps [mxschmitt/action-tmate](https://github.com/mxschmitt/action-tmate) from 3.23 to 3.24.
- [Release notes](https://github.com/mxschmitt/action-tmate/releases)
- [Changelog](https://github.com/mxschmitt/action-tmate/blob/master/RELEASE.md)
- [Commits](https://github.com/mxschmitt/action-tmate/compare/c0afd6f790e3a5564914980036ebf83216678101...35b54afac29c97fb54faba5b513f8fbd1882f113)

---
updated-dependencies:
- dependency-name: mxschmitt/action-tmate
  dependency-version: '3.24'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:38:15 +02:00
dependabot[bot] 774d04dcef build(deps): bump test-summary/action from 2.4 to 2.6
Bumps [test-summary/action](https://github.com/test-summary/action) from 2.4 to 2.6.
- [Release notes](https://github.com/test-summary/action/releases)
- [Commits](https://github.com/test-summary/action/compare/31493c76ec9e7aa675f1585d3ed6f1da69269a86...37b508cfee6d4d080eedd00b5bb240a6a784a6a5)

---
updated-dependencies:
- dependency-name: test-summary/action
  dependency-version: '2.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:37:45 +02:00
dependabot[bot] 2c87234df8 build(deps): bump actions/setup-go from 6.3.0 to 6.5.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...924ae3a1cded613372ab5595356fb5720e22ba16)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:36:51 +02:00
dependabot[bot] d00abb6f94 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:36:16 +02:00
dependabot[bot] 6b2e8d20c3 build(deps): bump the docker-actions group with 3 updates
Bumps the docker-actions group with 3 updates: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) and [docker/bake-action](https://github.com/docker/bake-action).


Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

Updates `docker/github-builder/.github/workflows/bake.yml` from 1.4.0 to 1.12.0
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/70313223e2665c3211b454b3fea6534624e78d64...5f637c833aa76bc99372a1dc9a6f8bcd8056fb85)

Updates `docker/bake-action` from 7.0.0 to 7.2.0
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/82490499d2e5613fcead7e128237ef0b0ea210f7...6614cfa25eff9a0b2b2697efb0b6159e7680d584)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/bake-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:34:25 +02:00
dependabot[bot] 43dc875f65 build(deps): bump actions/stale from 10.2.0 to 10.3.0
Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-07 11:10:54 +02:00
Sebastiaan van Stijn 0e20fb76c6 gha: dependabot: group docker/* actions updates
Signed-off-by: Sebastiaan van Stijn <[email protected]>
2026-07-07 11:09:54 +02:00
Guillaume Lours 69ba683e15 ci: address review feedback on release job
- Replace ncipollo/release-action with softprops/action-gh-release
  (v3.0.1, SHA-pinned), the action used across Docker repositories;
  input mapping is one-to-one.
- Duplicate the artifact listing/type checks into binary-finalize:
  one copy inspects the artifact as assembled, on every push/PR (lost
  when the tag guard moved to job level); the release-job copy still
  inspects what was downloaded and gets attached to the release.
- Set overwrite_files: false so a job re-run never replaces assets
  already uploaded to an existing release: unlike ncipollo, softprops
  updates an existing release instead of failing. A re-run may still
  refresh the release name/notes.

Signed-off-by: Guillaume Lours <[email protected]>
2026-07-07 10:56:13 +02:00
Guillaume Lours 336f21f846 ci: harden GitHub Actions workflows
The pinned codeql-action/upload-sarif v2 (v2.28.1) falls in the
vulnerable range of CVE-2025-24362 and the v2 line has no patched
release, so bump to v3.36.3. Scope the release job to tag refs so its
contents:write token is only minted when a release is actually
created. In merge.yml, drop a dead conditional (workflow only triggers
on push) and pass DOCKERDESKTOP_REPO to github-script via env rather
than inline interpolation, as recommended against script injection.

Signed-off-by: Guillaume Lours <[email protected]>
2026-07-07 10:56:13 +02:00
Sebastiaan van Stijn b9d8a1a3e2 CODEOWNERS: add compose-reviewers
Signed-off-by: Sebastiaan van Stijn <[email protected]>
2026-07-07 10:39:47 +02:00
CrazyMax a666b63a3c ci: fix docs-upstream workflow
Signed-off-by: CrazyMax <[email protected]>
2026-07-06 17:29:12 +02:00
CrazyMax be7b72e0ef fix zizmor findings
Signed-off-by: CrazyMax <[email protected]>
2026-07-06 17:11:24 +02:00
CrazyMax 50bd8945a1 chore: setup dependabot for github actions
Signed-off-by: CrazyMax <[email protected]>
2026-07-06 17:11:24 +02:00
CrazyMax 1c9aa35c21 ci: zizmor workflow
Signed-off-by: CrazyMax <[email protected]>
2026-07-06 17:11:24 +02:00
Sebastiaan van Stijn 26550b0d1f ci: remove unused desktop-edge-test workflow
It's not currently used, and we can probably trigger this from the
desktop repository itself.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
2026-07-06 11:18:38 +02:00
Derek Misler 81e420139a ci: add concurrency group to pr-review-trigger to prevent duplicate reviews
Signed-off-by: Derek Misler <[email protected]>
2026-07-06 10:25:22 +02:00
Docker Agent a3c1c0dc2e chore: migrate to docker-agent-action v2.0.1
- Bump docker-agent-action to v2.0.1 (e96a4bb)
- Add review_requested to pr-review-trigger.yml pull_request types

Signed-off-by: Docker Agent <[email protected]>
2026-06-24 14:51:31 +02:00
Docker Agent 899e88475a chore: migrate cagent-action to docker-agent-action (v2.0.0)
Signed-off-by: Derek Misler <[email protected]>
2026-06-23 22:42:46 +02:00
Sebastiaan van Stijn 79d63a8b84 gha: update docs-upstream to pin workflows by sha
This workflow was updated in 56e2dba366
but it looks to have pinned to a version before the workflows were
pinned; https://github.com/docker/docs/blob/464a44a6e72b37cf1755968477e242a5e5f6ef7d/.github/workflows/validate-upstream.yml

This patch updates the workflow to a version that uses pinned actions;
https://github.com/docker/docs/blob/00aefd5eae73898c4d3bcd7a6fe95a039293706b/.github/workflows/validate-upstream.yml

Signed-off-by: Sebastiaan van Stijn <[email protected]>
2026-06-09 17:57:47 +02:00
securityeng-bot[bot] f3969cdc7f ci: add Dependabot cooldown 2026-06-03 19:18:53 +02:00
derekmisler 60584e72b2 chore: update cagent-action to v1.4.4
Signed-off-by: Derek Misler <[email protected]>
2026-05-05 10:43:37 +02:00
Guillaume Lours 9fd9dc7ca9 ci: remove unused e2e job from merge workflow
The e2e job targets desktop runners (desktop-windows, desktop-macos,
desktop-m1) that are not configured anymore for this project.

Signed-off-by: Guillaume Lours <[email protected]>
2026-04-16 09:23:06 +02:00
Guillaume Lours 977a4310f9 remove 'provenance' attribute'
Signed-off-by: Guillaume Lours <[email protected]>
2026-04-15 15:46:06 +02:00
Guillaume Lours 7a97400bea Fix typo in SECURITY.md
Signed-off-by: Guillaume Lours <[email protected]>
2026-04-15 10:38:54 +02:00
Guillaume Lours d518da2419 build and push Docker Desktop module image on release
Add workflow to build and push docker/compose-desktop-module image
  to Docker Hub on version tag push, used by Docker Desktop's update
  system to deliver the Compose CLI plugin.

Signed-off-by: Guillaume Lours <[email protected]>
2026-04-10 16:12:09 +02:00
Guillaume LoursandClaude Opus 4.6 7aeb90c9a3 Skip PR review workflow for Dependabot PRs
Dependabot PRs don't have access to the secrets required by the
cagent-action reusable workflow (CAGENT_ORG_MEMBERSHIP_TOKEN), causing
the org membership check to fail with "github-token not supplied".

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>
2026-03-31 10:58:45 +02:00
Guillaume LoursandClaude Opus 4.6 0de456bc76 chore: bump GitHub Actions to latest versions
- actions/checkout v4 -> v6
- actions/upload-artifact v4/v6 -> v7
- actions/download-artifact v4/v7 -> v8
- docker/setup-buildx-action v3 -> v4
- docker/bake-action v6 -> v7
- actions/stale v9 -> v10
- actions/create-github-app-token v1 -> v3
- actions/github-script v7 -> v8
- ossf/scorecard-action v2.4.0 -> v2.4.3
- ncipollo/release-action v1.10.0 -> v1.21.0
- mxschmitt/action-tmate v3.11 -> v3.23
- codecov/codecov-action, test-summary/action, github/codeql-action: bump to latest patch

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>
2026-03-25 10:19:36 +01:00
Guillaume Lours 56e2dba366 chore: pin GitHub Actions to commit SHA, remove pr-review workflow
- Pin all action references to full commit SHA instead of mutable
  version tags. Tag retained as inline comment for readability.
- Remove pr-review.yml workflow.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>

# Conflicts:
#	.github/workflows/pr-review.yml
2026-03-25 10:19:36 +01:00
Derek MislerandCopilot 46d75d0bea Update .github/workflows/pr-review.yml
Co-authored-by: Copilot <[email protected]>
Signed-off-by: Derek Misler <[email protected]>
2026-03-25 09:52:29 +01:00
Derek MislerandCopilot bd351d7f96 Update .github/workflows/pr-review.yml
Co-authored-by: Copilot <[email protected]>
Signed-off-by: Derek Misler <[email protected]>
2026-03-25 09:52:29 +01:00
Derek Misler ece1886824 update cagent-action to latest (with better permissions)
Signed-off-by: Derek Misler <[email protected]>
2026-03-25 09:52:29 +01:00
Guillaume Lours 2b9f60ba58 Add AI-powered PR review workflow via docker/cagent-action
Introduce a GitHub Actions workflow that triggers an AI-powered code
  review on pull requests using docker/cagent-action's reusable workflow.

  - Restrict comment-triggered runs to OWNER/MEMBER/COLLABORATOR
  - Gate on github.repository to prevent execution on forks
  - Filter out draft PRs and bot actors
  - Only trigger on PR comments, not plain issue comments
  - Serialize reviews per PR via concurrency group

Signed-off-by: Guillaume Lours <[email protected]>
2026-03-23 17:38:46 +01:00
maks2134 b043368028 Update docker/github-builder to v1.4.0
Fixes template validation error in CI by updating to latest stable version
of docker/github-builder workflow. This resolves the JToken parsing error
in bake.yml@v1 that was causing bin-image-test to fail.

Signed-off-by: maks2134 <[email protected]>
2026-03-18 16:23:34 +01:00
CrazyMax af0029afe1 ci: use bin-image edge tag directly for e2e tests
Signed-off-by: CrazyMax <[email protected]>
2026-02-03 15:11:49 +01:00
CrazyMax b76feb66e1 ci: fix missing dependency on bin-image job
Signed-off-by: CrazyMax <[email protected]>
2026-02-03 15:11:49 +01:00
CrazyMax 9dc7f1e70c ci: use docker/github-builder to build, sign and push bin image
Signed-off-by: CrazyMax <[email protected]>
2026-02-03 14:19:21 +01:00
CrazyMax 03205124fe ci: use docker/github-builder to build, sign binaries
Signed-off-by: CrazyMax <[email protected]>
2026-02-03 14:19:21 +01:00
Salman Muin Kayser Chishti d91fc63813 Upgrade GitHub Actions to latest versions
Signed-off-by: Salman Muin Kayser Chishti <[email protected]>
2026-01-23 15:34:48 +01:00
Austin Vazquez 359d2f076e ci: use .go-version file for actions/setup-go
Signed-off-by: Austin Vazquez <[email protected]>
2025-12-09 20:33:00 +01:00