dependabot[bot] and GitHub
e7cb472bc8
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.20 to 2.1.1.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/bb137d7af7e4fb67e5f82a49c4fce4fad40782fe...3c6349835b2b7b196a839186cb8b78e02f7b5f25 )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-07 08:03:01 +00:00
Quentin Gliech and GitHub
a5800983b8
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 ( #5888 )
2026-08-05 13:37:38 +02:00
Quentin Gliech and GitHub
b58efe2a73
build(deps): bump docker/login-action from 4.2.0 to 4.4.0 ( #5889 )
2026-08-05 13:28:31 +02:00
Quentin Gliech and GitHub
9dcd8ad254
build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 ( #5890 )
2026-08-05 13:25:16 +02:00
dependabot[bot] and GitHub
54d8cfcc45
build(deps): bump actions/setup-node from 6.4.0 to 7.0.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-05 11:08:05 +00:00
dependabot[bot] and GitHub
e47779f8ef
build(deps): bump docker/login-action from 4.2.0 to 4.4.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-05 11:07:36 +00:00
dependabot[bot] and GitHub
cbf91149d5
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-05 11:07:17 +00:00
dependabot[bot] and GitHub
6e77139c37
build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-05 11:07:07 +00:00
Quentin Gliech
de9257766e
Run the buildx builder on the host network so it can reach the local registry
2026-07-28 13:30:41 +02:00
Quentin Gliech
a00c0ce809
Start the ESS CI job right away and overlap its setup with the image build
...
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
2026-07-28 13:30:41 +02:00
Quentin Gliech
2c062b0a9c
Use the Docker build cache in the ESS test suite
...
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
2026-07-28 13:30:41 +02:00
Quentin Gliech and GitHub
f853d96049
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #5790 )
2026-07-02 19:45:30 +02:00
dependabot[bot] and GitHub
5d8182dd3f
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:17:39 +00:00
dependabot[bot] and GitHub
8c3f3cc305
build(deps): bump tailscale/github-action from 4.1.1 to 4.1.2
...
Bumps [tailscale/github-action](https://github.com/tailscale/github-action ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/tailscale/github-action/releases )
- [Commits](https://github.com/tailscale/github-action/compare/53acf823325fe9ca47f4cdaa951f90b4b0de5bb9...306e68a486fd2350f2bfc3b19fcd143891a4a2d8 )
---
updated-dependencies:
- dependency-name: tailscale/github-action
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:16:57 +00:00
Quentin Gliech and GitHub
f46f9a2c1f
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 ( #5778 )
2026-07-02 18:31:23 +02:00
Quentin Gliech and GitHub
0a0a59773a
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 ( #5776 )
2026-07-02 18:29:33 +02:00
Quentin Gliech and GitHub
4c92e14e90
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5779 )
2026-07-02 18:27:02 +02:00
Quentin Gliech and GitHub
99e80494b1
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 ( #5777 )
2026-07-02 18:18:10 +02:00
dependabot[bot] and GitHub
bcc7f75e4c
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:42 +00:00
dependabot[bot] and GitHub
b4dab97c88
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 6.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:31 +00:00
dependabot[bot] and GitHub
5753b61f3e
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.82.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:27 +00:00
dependabot[bot] and GitHub
01eada1819
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:22 +00:00
dependabot[bot] and GitHub
3498a5715a
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:08 +00:00
Quentin Gliech and GitHub
2a12d67854
build(deps): bump docker/login-action from 4.1.0 to 4.2.0 ( #5765 )
2026-07-01 17:39:00 +02:00
Quentin Gliech and GitHub
a362c371b0
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 ( #5767 )
2026-07-01 17:34:38 +02:00
Quentin Gliech and GitHub
25d9d559c2
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 ( #5766 )
2026-07-01 17:34:19 +02:00
Quentin Gliech and GitHub
228dc80187
build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 ( #5764 )
2026-07-01 17:33:46 +02:00
dependabot[bot] and GitHub
597a4892aa
build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...fb8b3582c8e4def4969c97caa2f19720cb33a72f )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:05:01 +00:00
dependabot[bot] and GitHub
d180adebc8
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:54 +00:00
dependabot[bot] and GitHub
0c6100f451
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:44 +00:00
dependabot[bot] and GitHub
5f315d4611
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:27 +00:00
dependabot[bot] and GitHub
e0b15fd772
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003...6f9f17788090df1f26f669e9d70d6ae9567deba6 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:26 +00:00
Quentin Gliech
822d4f5c40
CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal
2026-07-01 14:41:09 +02:00
Quentin Gliech and GitHub
23d0385fa3
Fix ESS test CI job by pinning the setup-ess-cluster-action to the latest version ( #5743 )
2026-06-18 14:00:15 +02:00
Quentin Gliech
a0612f4bde
ci: pin setup-ess-cluster-action to the latest release/v2 commit
...
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
2026-06-18 13:33:02 +02:00
dependabot[bot] and GitHub
e56dccdd68
build(deps): bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:28:52 +00:00
Quentin Gliech and GitHub
63ed796441
Use the public registry hostname in release notes ( #5725 )
2026-06-17 17:42:43 +02:00
Quentin Gliech and GitHub
2452cd88c0
Bump Rust to 1.96.0 and fix clippy lints ( #5733 )
2026-06-17 14:04:45 +02:00
Olivier 'reivilibre and GitHub
119f5195a8
CI: Test against ESS ( #5582 )
2026-06-17 11:53:33 +01:00
Quentin Gliech and GitHub
e1f69b8aa6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 ( #5719 )
2026-06-17 10:02:03 +02:00
Quentin Gliech and GitHub
e76200e7c3
Bump actions/setup-node from 6.3.0 to 6.4.0 ( #5718 )
2026-06-17 10:01:54 +02:00
Quentin Gliech and GitHub
ffcc793a26
Bump taiki-e/install-action from 2.77.0 to 2.79.2 ( #5716 )
2026-06-17 10:01:31 +02:00
Quentin Gliech
22f3ab685d
Bump Rust to 1.96.0
...
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
Quentin Gliech
7455110877
Use the public registry hostname in release notes
...
The release notes list the Docker image tags straight from the
metadata-action output, which references the internal push registry
(oci-push.vpn.infra.element.io, the only writable endpoint) rather than
the public pull registry (oci.element.io) that users actually pull from.
Rewrite the host when building the release-notes metadata blob, leaving
the tags used for the actual push untouched.
2026-06-04 15:43:55 +02:00
dependabot[bot] and GitHub
579b0c8dd6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10
...
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action ) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases )
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696 )
---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
dependency-version: 0.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:22 +00:00
dependabot[bot] and GitHub
de92e3eaac
Bump actions/setup-node from 6.3.0 to 6.4.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:16 +00:00
dependabot[bot] and GitHub
b59e865b7f
Bump hashicorp/vault-action from 3.4.0 to 4.0.0
...
Bumps [hashicorp/vault-action](https://github.com/hashicorp/vault-action ) from 3.4.0 to 4.0.0.
- [Release notes](https://github.com/hashicorp/vault-action/releases )
- [Changelog](https://github.com/hashicorp/vault-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault-action/compare/4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b...892a26828f195e65540a40b4768ae4571f51ebfc )
---
updated-dependencies:
- dependency-name: hashicorp/vault-action
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:02 +00:00
dependabot[bot] and GitHub
c2ad2b3fbe
Bump taiki-e/install-action from 2.77.0 to 2.79.2
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.77.0 to 2.79.2.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/7ea35f098a7369cd23488403f58be9c491a6c55f...213ccc1a076163c093f914550b94feb90fab916d )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.79.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:34:56 +00:00
Quentin Gliech and GitHub
cb043e2cd9
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5629 )
2026-05-25 13:01:00 +02:00
Quentin Gliech and GitHub
a02fb6e14f
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #5628 )
2026-05-25 13:00:49 +02:00