dependabot[bot]
f2a6f94379
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-30 11:41:08 +02:00
dependabot[bot]
1c7930e91a
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.37.0 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-29 11:21:20 +02:00
dependabot[bot]
69568827a5
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-22 11:55:26 +02:00
dependabot[bot]
358efafdf5
build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/718ea10b132b3b2eba29c1007bb80653f286566b...3d0d9888cb7fd7b750713d6e236d1fcb99157228 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-21 11:27:44 +02:00
dependabot[bot]
ec0189c03f
build(deps): bump docker/github-builder/.github/workflows/bake.yml
...
Bumps the docker-actions group with 1 update: [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ).
Updates `docker/github-builder/.github/workflows/bake.yml` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](https://github.com/docker/github-builder/compare/c4a1b216d96a8c85b45a9974b37857828274c808...3415a188caae9a0da7fba83bc06985776e0b1790 )
---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-20 11:46:39 +02:00
dependabot[bot]
5bf5a21687
build(deps): bump actions/stale from 10.3.0 to 10.4.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.3.0 to 10.4.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...1e223db275d687790206a7acac4d1a11bd6fe629 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-16 18:05:12 +02:00
dependabot[bot]
fd0faf788b
build(deps): bump the docker-actions group across 1 directory with 4 updates
...
Bumps the docker-actions group with 4 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ), [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ), [docker/bake-action](https://github.com/docker/bake-action ) and [docker/docker-agent-action/.github/workflows/review-pr.yml](https://github.com/docker/docker-agent-action ).
Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c )
Updates `docker/github-builder/.github/workflows/bake.yml` from 1.12.0 to 1.13.0
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](https://github.com/docker/github-builder/compare/5f637c833aa76bc99372a1dc9a6f8bcd8056fb85...c4a1b216d96a8c85b45a9974b37857828274c808 )
Updates `docker/bake-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/6614cfa25eff9a0b2b2697efb0b6159e7680d584...d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b )
Updates `docker/docker-agent-action/.github/workflows/review-pr.yml` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/docker/docker-agent-action/releases )
- [Commits](https://github.com/docker/docker-agent-action/compare/e96a4bb40cac114f64358621e1d08346c8eadc8c...774b6e0e60d6c648b0f2dc43bd5221377a0a7420 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
- dependency-name: docker/docker-agent-action/.github/workflows/review-pr.yml
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: docker-actions
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
- dependency-name: docker/setup-buildx-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-16 16:31:53 +02:00
dependabot[bot]
682a1f65fc
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-16 16:16:18 +02:00
dependabot[bot]
f32009d4a2
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:49:14 +02:00
dependabot[bot]
f4bc599fdb
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 3.36.3 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/411c4c9a36b3fca4d674f06b6396b2c6d23522c6...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:45:50 +02:00
dependabot[bot]
2ed5bf2b61
build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.3 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...fb8b3582c8e4def4969c97caa2f19720cb33a72f )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:45:10 +02:00
dependabot[bot]
d32d8c3c76
build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24
...
Bumps [mxschmitt/action-tmate](https://github.com/mxschmitt/action-tmate ) from 3.23 to 3.24.
- [Release notes](https://github.com/mxschmitt/action-tmate/releases )
- [Changelog](https://github.com/mxschmitt/action-tmate/blob/master/RELEASE.md )
- [Commits](https://github.com/mxschmitt/action-tmate/compare/c0afd6f790e3a5564914980036ebf83216678101...35b54afac29c97fb54faba5b513f8fbd1882f113 )
---
updated-dependencies:
- dependency-name: mxschmitt/action-tmate
dependency-version: '3.24'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:38:15 +02:00
dependabot[bot]
774d04dcef
build(deps): bump test-summary/action from 2.4 to 2.6
...
Bumps [test-summary/action](https://github.com/test-summary/action ) from 2.4 to 2.6.
- [Release notes](https://github.com/test-summary/action/releases )
- [Commits](https://github.com/test-summary/action/compare/31493c76ec9e7aa675f1585d3ed6f1da69269a86...37b508cfee6d4d080eedd00b5bb240a6a784a6a5 )
---
updated-dependencies:
- dependency-name: test-summary/action
dependency-version: '2.6'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:37:45 +02:00
dependabot[bot]
2c87234df8
build(deps): bump actions/setup-go from 6.3.0 to 6.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...924ae3a1cded613372ab5595356fb5720e22ba16 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:36:51 +02:00
dependabot[bot]
d00abb6f94
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:36:16 +02:00
dependabot[bot]
6b2e8d20c3
build(deps): bump the docker-actions group with 3 updates
...
Bumps the docker-actions group with 3 updates: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ), [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) and [docker/bake-action](https://github.com/docker/bake-action ).
Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 )
Updates `docker/github-builder/.github/workflows/bake.yml` from 1.4.0 to 1.12.0
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](https://github.com/docker/github-builder/compare/70313223e2665c3211b454b3fea6534624e78d64...5f637c833aa76bc99372a1dc9a6f8bcd8056fb85 )
Updates `docker/bake-action` from 7.0.0 to 7.2.0
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/82490499d2e5613fcead7e128237ef0b0ea210f7...6614cfa25eff9a0b2b2697efb0b6159e7680d584 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
- dependency-name: docker/bake-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-actions
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:34:25 +02:00
dependabot[bot]
43dc875f65
build(deps): bump actions/stale from 10.2.0 to 10.3.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-07-07 11:10:54 +02:00
Sebastiaan van Stijn
0e20fb76c6
gha: dependabot: group docker/* actions updates
...
Signed-off-by: Sebastiaan van Stijn <[email protected] >
2026-07-07 11:09:54 +02:00
Guillaume Lours
69ba683e15
ci: address review feedback on release job
...
- Replace ncipollo/release-action with softprops/action-gh-release
(v3.0.1, SHA-pinned), the action used across Docker repositories;
input mapping is one-to-one.
- Duplicate the artifact listing/type checks into binary-finalize:
one copy inspects the artifact as assembled, on every push/PR (lost
when the tag guard moved to job level); the release-job copy still
inspects what was downloaded and gets attached to the release.
- Set overwrite_files: false so a job re-run never replaces assets
already uploaded to an existing release: unlike ncipollo, softprops
updates an existing release instead of failing. A re-run may still
refresh the release name/notes.
Signed-off-by: Guillaume Lours <[email protected] >
2026-07-07 10:56:13 +02:00
Guillaume Lours
336f21f846
ci: harden GitHub Actions workflows
...
The pinned codeql-action/upload-sarif v2 (v2.28.1) falls in the
vulnerable range of CVE-2025-24362 and the v2 line has no patched
release, so bump to v3.36.3. Scope the release job to tag refs so its
contents:write token is only minted when a release is actually
created. In merge.yml, drop a dead conditional (workflow only triggers
on push) and pass DOCKERDESKTOP_REPO to github-script via env rather
than inline interpolation, as recommended against script injection.
Signed-off-by: Guillaume Lours <[email protected] >
2026-07-07 10:56:13 +02:00
Sebastiaan van Stijn
b9d8a1a3e2
CODEOWNERS: add compose-reviewers
...
Signed-off-by: Sebastiaan van Stijn <[email protected] >
2026-07-07 10:39:47 +02:00
CrazyMax
a666b63a3c
ci: fix docs-upstream workflow
...
Signed-off-by: CrazyMax <[email protected] >
2026-07-06 17:29:12 +02:00
CrazyMax
be7b72e0ef
fix zizmor findings
...
Signed-off-by: CrazyMax <[email protected] >
2026-07-06 17:11:24 +02:00
CrazyMax
50bd8945a1
chore: setup dependabot for github actions
...
Signed-off-by: CrazyMax <[email protected] >
2026-07-06 17:11:24 +02:00
CrazyMax
1c9aa35c21
ci: zizmor workflow
...
Signed-off-by: CrazyMax <[email protected] >
2026-07-06 17:11:24 +02:00
Sebastiaan van Stijn
26550b0d1f
ci: remove unused desktop-edge-test workflow
...
It's not currently used, and we can probably trigger this from the
desktop repository itself.
Signed-off-by: Sebastiaan van Stijn <[email protected] >
2026-07-06 11:18:38 +02:00
Derek Misler
81e420139a
ci: add concurrency group to pr-review-trigger to prevent duplicate reviews
...
Signed-off-by: Derek Misler <[email protected] >
2026-07-06 10:25:22 +02:00
Docker Agent
a3c1c0dc2e
chore: migrate to docker-agent-action v2.0.1
...
- Bump docker-agent-action to v2.0.1 (e96a4bb)
- Add review_requested to pr-review-trigger.yml pull_request types
Signed-off-by: Docker Agent <[email protected] >
2026-06-24 14:51:31 +02:00
Docker Agent
899e88475a
chore: migrate cagent-action to docker-agent-action (v2.0.0)
...
Signed-off-by: Derek Misler <[email protected] >
2026-06-23 22:42:46 +02:00
Sebastiaan van Stijn
79d63a8b84
gha: update docs-upstream to pin workflows by sha
...
This workflow was updated in 56e2dba366
but it looks to have pinned to a version before the workflows were
pinned; https://github.com/docker/docs/blob/464a44a6e72b37cf1755968477e242a5e5f6ef7d/.github/workflows/validate-upstream.yml
This patch updates the workflow to a version that uses pinned actions;
https://github.com/docker/docs/blob/00aefd5eae73898c4d3bcd7a6fe95a039293706b/.github/workflows/validate-upstream.yml
Signed-off-by: Sebastiaan van Stijn <[email protected] >
2026-06-09 17:57:47 +02:00
securityeng-bot[bot]
f3969cdc7f
ci: add Dependabot cooldown
2026-06-03 19:18:53 +02:00
derekmisler
60584e72b2
chore: update cagent-action to v1.4.4
...
Signed-off-by: Derek Misler <[email protected] >
2026-05-05 10:43:37 +02:00
Guillaume Lours
9fd9dc7ca9
ci: remove unused e2e job from merge workflow
...
The e2e job targets desktop runners (desktop-windows, desktop-macos,
desktop-m1) that are not configured anymore for this project.
Signed-off-by: Guillaume Lours <[email protected] >
2026-04-16 09:23:06 +02:00
Guillaume Lours
977a4310f9
remove 'provenance' attribute'
...
Signed-off-by: Guillaume Lours <[email protected] >
2026-04-15 15:46:06 +02:00
Guillaume Lours
7a97400bea
Fix typo in SECURITY.md
...
Signed-off-by: Guillaume Lours <[email protected] >
2026-04-15 10:38:54 +02:00
Guillaume Lours
d518da2419
build and push Docker Desktop module image on release
...
Add workflow to build and push docker/compose-desktop-module image
to Docker Hub on version tag push, used by Docker Desktop's update
system to deliver the Compose CLI plugin.
Signed-off-by: Guillaume Lours <[email protected] >
2026-04-10 16:12:09 +02:00
Guillaume Lours and Claude Opus 4.6
7aeb90c9a3
Skip PR review workflow for Dependabot PRs
...
Dependabot PRs don't have access to the secrets required by the
cagent-action reusable workflow (CAGENT_ORG_MEMBERSHIP_TOKEN), causing
the org membership check to fail with "github-token not supplied".
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected] >
Signed-off-by: Guillaume Lours <[email protected] >
2026-03-31 10:58:45 +02:00
Guillaume Lours and Claude Opus 4.6
0de456bc76
chore: bump GitHub Actions to latest versions
...
- actions/checkout v4 -> v6
- actions/upload-artifact v4/v6 -> v7
- actions/download-artifact v4/v7 -> v8
- docker/setup-buildx-action v3 -> v4
- docker/bake-action v6 -> v7
- actions/stale v9 -> v10
- actions/create-github-app-token v1 -> v3
- actions/github-script v7 -> v8
- ossf/scorecard-action v2.4.0 -> v2.4.3
- ncipollo/release-action v1.10.0 -> v1.21.0
- mxschmitt/action-tmate v3.11 -> v3.23
- codecov/codecov-action, test-summary/action, github/codeql-action: bump to latest patch
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected] >
Signed-off-by: Guillaume Lours <[email protected] >
2026-03-25 10:19:36 +01:00
Guillaume Lours
56e2dba366
chore: pin GitHub Actions to commit SHA, remove pr-review workflow
...
- Pin all action references to full commit SHA instead of mutable
version tags. Tag retained as inline comment for readability.
- Remove pr-review.yml workflow.
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected] >
Signed-off-by: Guillaume Lours <[email protected] >
# Conflicts:
# .github/workflows/pr-review.yml
2026-03-25 10:19:36 +01:00
Derek Misler and Copilot
46d75d0bea
Update .github/workflows/pr-review.yml
...
Co-authored-by: Copilot <[email protected] >
Signed-off-by: Derek Misler <[email protected] >
2026-03-25 09:52:29 +01:00
Derek Misler and Copilot
bd351d7f96
Update .github/workflows/pr-review.yml
...
Co-authored-by: Copilot <[email protected] >
Signed-off-by: Derek Misler <[email protected] >
2026-03-25 09:52:29 +01:00
Derek Misler
ece1886824
update cagent-action to latest (with better permissions)
...
Signed-off-by: Derek Misler <[email protected] >
2026-03-25 09:52:29 +01:00
Guillaume Lours
2b9f60ba58
Add AI-powered PR review workflow via docker/cagent-action
...
Introduce a GitHub Actions workflow that triggers an AI-powered code
review on pull requests using docker/cagent-action's reusable workflow.
- Restrict comment-triggered runs to OWNER/MEMBER/COLLABORATOR
- Gate on github.repository to prevent execution on forks
- Filter out draft PRs and bot actors
- Only trigger on PR comments, not plain issue comments
- Serialize reviews per PR via concurrency group
Signed-off-by: Guillaume Lours <[email protected] >
2026-03-23 17:38:46 +01:00
maks2134
b043368028
Update docker/github-builder to v1.4.0
...
Fixes template validation error in CI by updating to latest stable version
of docker/github-builder workflow. This resolves the JToken parsing error
in bake.yml@v1 that was causing bin-image-test to fail.
Signed-off-by: maks2134 <[email protected] >
2026-03-18 16:23:34 +01:00
CrazyMax
af0029afe1
ci: use bin-image edge tag directly for e2e tests
...
Signed-off-by: CrazyMax <[email protected] >
2026-02-03 15:11:49 +01:00
CrazyMax
b76feb66e1
ci: fix missing dependency on bin-image job
...
Signed-off-by: CrazyMax <[email protected] >
2026-02-03 15:11:49 +01:00
CrazyMax
9dc7f1e70c
ci: use docker/github-builder to build, sign and push bin image
...
Signed-off-by: CrazyMax <[email protected] >
2026-02-03 14:19:21 +01:00
CrazyMax
03205124fe
ci: use docker/github-builder to build, sign binaries
...
Signed-off-by: CrazyMax <[email protected] >
2026-02-03 14:19:21 +01:00
Salman Muin Kayser Chishti
d91fc63813
Upgrade GitHub Actions to latest versions
...
Signed-off-by: Salman Muin Kayser Chishti <[email protected] >
2026-01-23 15:34:48 +01:00
Austin Vazquez
359d2f076e
ci: use .go-version file for actions/setup-go
...
Signed-off-by: Austin Vazquez <[email protected] >
2025-12-09 20:33:00 +01:00