Commit Graph
247 Commits
Author SHA1 Message Date
dependabot[bot]andGitHub e7cb472bc8 build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.20 to 2.1.1.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/bb137d7af7e4fb67e5f82a49c4fce4fad40782fe...3c6349835b2b7b196a839186cb8b78e02f7b5f25)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-07 08:03:01 +00:00
dependabot[bot]andGitHub 54d8cfcc45 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-05 11:08:05 +00:00
Quentin Gliech de9257766e Run the buildx builder on the host network so it can reach the local registry 2026-07-28 13:30:41 +02:00
Quentin Gliech a00c0ce809 Start the ESS CI job right away and overlap its setup with the image build
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
2026-07-28 13:30:41 +02:00
Quentin Gliech 2c062b0a9c Use the Docker build cache in the ESS test suite
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
2026-07-28 13:30:41 +02:00
Quentin GliechandGitHub f46f9a2c1f build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 (#5778) 2026-07-02 18:31:23 +02:00
Quentin GliechandGitHub 4c92e14e90 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5779) 2026-07-02 18:27:02 +02:00
Quentin GliechandGitHub 99e80494b1 build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 (#5777) 2026-07-02 18:18:10 +02:00
dependabot[bot]andGitHub bcc7f75e4c build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 15:46:42 +00:00
dependabot[bot]andGitHub b4dab97c88 build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 15:46:31 +00:00
dependabot[bot]andGitHub 5753b61f3e build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 15:46:27 +00:00
dependabot[bot]andGitHub 3498a5715a build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 15:45:08 +00:00
dependabot[bot]andGitHub 5f315d4611 build(deps): bump actions/checkout from 6.0.2 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-01 15:04:27 +00:00
Quentin Gliech 822d4f5c40 CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal 2026-07-01 14:41:09 +02:00
Quentin Gliech a0612f4bde ci: pin setup-ess-cluster-action to the latest release/v2 commit
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
2026-06-18 13:33:02 +02:00
Quentin GliechandGitHub 2452cd88c0 Bump Rust to 1.96.0 and fix clippy lints (#5733) 2026-06-17 14:04:45 +02:00
Olivier 'reivilibreandGitHub 119f5195a8 CI: Test against ESS (#5582) 2026-06-17 11:53:33 +01:00
Quentin GliechandGitHub e1f69b8aa6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 (#5719) 2026-06-17 10:02:03 +02:00
Quentin GliechandGitHub e76200e7c3 Bump actions/setup-node from 6.3.0 to 6.4.0 (#5718) 2026-06-17 10:01:54 +02:00
Quentin Gliech 22f3ab685d Bump Rust to 1.96.0
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
dependabot[bot]andGitHub 579b0c8dd6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696)

---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-02 17:35:22 +00:00
dependabot[bot]andGitHub de92e3eaac Bump actions/setup-node from 6.3.0 to 6.4.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-02 17:35:16 +00:00
dependabot[bot]andGitHub c2ad2b3fbe Bump taiki-e/install-action from 2.77.0 to 2.79.2
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.77.0 to 2.79.2.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/7ea35f098a7369cd23488403f58be9c491a6c55f...213ccc1a076163c093f914550b94feb90fab916d)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-02 17:34:56 +00:00
Quentin GliechandGitHub cb043e2cd9 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5629) 2026-05-25 13:01:00 +02:00
Quentin GliechandGitHub f78917ecbf Merge branch 'main' into quenting/pnpm 2026-05-25 11:12:18 +02:00
dependabot[bot]andGitHub e3c7375ca4 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-13 14:10:09 +00:00
Andrew Morgan 451761c39c Note that clippy is synced to the Dockerfile Rust version 2026-05-13 12:50:21 +02:00
Andrew Morgan ea9f324e75 Use --override to set default toolchain
And remove now unnecessary rustup default calls.
2026-05-13 12:45:49 +02:00
Andrew Morgan 49ad5c79e1 Use Rust 1.93.0 for clippy CI job
Revert from stable (1.95.0), which introduced new lints. We'll tackle those in a separate PR.
2026-05-13 10:58:26 +02:00
Quentin Gliech aa34d9ebe5 Specify the node version in a .node-version file
This should fix the Cloudflare Pages build
2026-05-12 16:51:15 +02:00
Quentin Gliech 4bd083e81d ci: install pnpm via pnpm/action-setup, move CLI tools to root devDeps
All workflows that previously ran `npm ci` + a frontend script now install
pnpm via pnpm/action-setup (which honors the `packageManager` field in the
root package.json) and run scripts through `pnpm --filter mas-frontend`.
setup-node gets `cache: "pnpm"` so the pnpm store survives between runs.

The @localazy/cli and semver CLIs used by the release/translation workflows
move from ad-hoc `npm install -g` / `npx --yes` invocations to root
devDependencies, so the version is locked in pnpm-lock.yaml and a single
`pnpm install --frozen-lockfile` makes both available as `pnpm exec`.

misc/build-docs.sh (used by the docs workflow and Cloudflare Pages) is
updated to call `corepack enable` on Cloudflare Pages and to run storybook
through `pnpm --filter mas-frontend exec`.
2026-05-12 12:51:20 +02:00
Andrew Morgan d1a1ef7341 Install rustfmt component 2026-05-06 16:36:58 +01:00
Andrew Morgan 0ca5040e3d Make nightly the default toolchain for cargo fmt job 2026-05-06 15:58:21 +01:00
Andrew Morgan 647b5a79ac Revert "WIP disable caching in release workflows"
This reverts commit 72e5ae40b0.

Let's do this in a follow-up PR.
2026-05-05 20:27:13 +01:00
Andrew Morgan 72e5ae40b0 WIP disable caching in release workflows 2026-05-05 13:16:29 +01:00
Andrew Morgan 34153e03ac Switch rust install GH action to rustup 2026-05-05 12:55:12 +01:00
Andrew Morgan fdf8dde38a Tell actions/checkout not to persist credentials
Recommended by `zizmor`. See https://docs.zizmor.sh/audits/#artipacked
for an explanation.
2026-05-05 12:34:58 +01:00
Andrew Morgan b99023662a Pin versions of github actions using zizmor
To eliminate risk of supply chain attacks.
2026-05-05 12:32:07 +01:00
dependabot[bot]andGitHub 671a676dfd build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.15 to 2.0.16
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.15 to 2.0.16.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/v2.0.15...v2.0.16)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-10 13:54:03 +00:00
Gaël Goinvic 2955f63553 collect ess logs 2026-03-27 11:11:58 +01:00
Gaël Goinvic 566bb07799 dont pull the chart with pytest-ess 2026-03-27 10:34:27 +01:00
Gaël Goinvic 58bd0dcf0b upload failed logs 2026-03-27 10:34:27 +01:00
Gaël Goinvic c6cb413f2d target the same branch as ess-helm if it is available 2026-03-27 10:34:27 +01:00
Gaël Goinvic 2e60713f3b CI: Test against ESS 2026-03-27 10:34:27 +01:00
Quentin GliechandGitHub ff20ae6bfe build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#5529) 2026-03-17 15:20:40 +01:00
Quentin GliechandGitHub 12fbd97bcd build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#5540) 2026-03-17 15:19:45 +01:00
dependabot[bot]andGitHub 16a1790e1a build(deps): bump actions/setup-node from 6.2.0 to 6.3.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.2.0...v6.3.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-04 13:54:46 +00:00
dependabot[bot]andGitHub 99a17d7ac6 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 13:54:09 +00:00
dependabot[bot]andGitHub 5f881b3d2d build(deps): bump actions/download-artifact from 7 to 8
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 13:54:01 +00:00
Quentin Gliech 207c526f00 Upgrade Rust, opa, regal, cargo-auditable and Node 2026-02-04 18:35:43 +01:00