dependabot[bot] and GitHub
e7cb472bc8
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.20 to 2.1.1.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/bb137d7af7e4fb67e5f82a49c4fce4fad40782fe...3c6349835b2b7b196a839186cb8b78e02f7b5f25 )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-07 08:03:01 +00:00
dependabot[bot] and GitHub
54d8cfcc45
build(deps): bump actions/setup-node from 6.4.0 to 7.0.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-05 11:08:05 +00:00
Quentin Gliech
de9257766e
Run the buildx builder on the host network so it can reach the local registry
2026-07-28 13:30:41 +02:00
Quentin Gliech
a00c0ce809
Start the ESS CI job right away and overlap its setup with the image build
...
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
2026-07-28 13:30:41 +02:00
Quentin Gliech
2c062b0a9c
Use the Docker build cache in the ESS test suite
...
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
2026-07-28 13:30:41 +02:00
Quentin Gliech and GitHub
f46f9a2c1f
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 ( #5778 )
2026-07-02 18:31:23 +02:00
Quentin Gliech and GitHub
4c92e14e90
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5779 )
2026-07-02 18:27:02 +02:00
Quentin Gliech and GitHub
99e80494b1
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 ( #5777 )
2026-07-02 18:18:10 +02:00
dependabot[bot] and GitHub
bcc7f75e4c
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:42 +00:00
dependabot[bot] and GitHub
b4dab97c88
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 6.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:31 +00:00
dependabot[bot] and GitHub
5753b61f3e
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.82.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:27 +00:00
dependabot[bot] and GitHub
3498a5715a
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:08 +00:00
dependabot[bot] and GitHub
5f315d4611
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:27 +00:00
Quentin Gliech
822d4f5c40
CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal
2026-07-01 14:41:09 +02:00
Quentin Gliech
a0612f4bde
ci: pin setup-ess-cluster-action to the latest release/v2 commit
...
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
2026-06-18 13:33:02 +02:00
Quentin Gliech and GitHub
2452cd88c0
Bump Rust to 1.96.0 and fix clippy lints ( #5733 )
2026-06-17 14:04:45 +02:00
Olivier 'reivilibre and GitHub
119f5195a8
CI: Test against ESS ( #5582 )
2026-06-17 11:53:33 +01:00
Quentin Gliech and GitHub
e1f69b8aa6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 ( #5719 )
2026-06-17 10:02:03 +02:00
Quentin Gliech and GitHub
e76200e7c3
Bump actions/setup-node from 6.3.0 to 6.4.0 ( #5718 )
2026-06-17 10:01:54 +02:00
Quentin Gliech
22f3ab685d
Bump Rust to 1.96.0
...
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
dependabot[bot] and GitHub
579b0c8dd6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10
...
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action ) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases )
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696 )
---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
dependency-version: 0.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:22 +00:00
dependabot[bot] and GitHub
de92e3eaac
Bump actions/setup-node from 6.3.0 to 6.4.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:16 +00:00
dependabot[bot] and GitHub
c2ad2b3fbe
Bump taiki-e/install-action from 2.77.0 to 2.79.2
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.77.0 to 2.79.2.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/7ea35f098a7369cd23488403f58be9c491a6c55f...213ccc1a076163c093f914550b94feb90fab916d )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.79.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:34:56 +00:00
Quentin Gliech and GitHub
cb043e2cd9
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5629 )
2026-05-25 13:01:00 +02:00
Quentin Gliech and GitHub
f78917ecbf
Merge branch 'main' into quenting/pnpm
2026-05-25 11:12:18 +02:00
dependabot[bot] and GitHub
e3c7375ca4
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 14:10:09 +00:00
Andrew Morgan
451761c39c
Note that clippy is synced to the Dockerfile Rust version
2026-05-13 12:50:21 +02:00
Andrew Morgan
ea9f324e75
Use --override to set default toolchain
...
And remove now unnecessary rustup default calls.
2026-05-13 12:45:49 +02:00
Andrew Morgan
49ad5c79e1
Use Rust 1.93.0 for clippy CI job
...
Revert from stable (1.95.0), which introduced new lints. We'll tackle those in a separate PR.
2026-05-13 10:58:26 +02:00
Quentin Gliech
aa34d9ebe5
Specify the node version in a .node-version file
...
This should fix the Cloudflare Pages build
2026-05-12 16:51:15 +02:00
Quentin Gliech
4bd083e81d
ci: install pnpm via pnpm/action-setup, move CLI tools to root devDeps
...
All workflows that previously ran `npm ci` + a frontend script now install
pnpm via pnpm/action-setup (which honors the `packageManager` field in the
root package.json) and run scripts through `pnpm --filter mas-frontend`.
setup-node gets `cache: "pnpm"` so the pnpm store survives between runs.
The @localazy/cli and semver CLIs used by the release/translation workflows
move from ad-hoc `npm install -g` / `npx --yes` invocations to root
devDependencies, so the version is locked in pnpm-lock.yaml and a single
`pnpm install --frozen-lockfile` makes both available as `pnpm exec`.
misc/build-docs.sh (used by the docs workflow and Cloudflare Pages) is
updated to call `corepack enable` on Cloudflare Pages and to run storybook
through `pnpm --filter mas-frontend exec`.
2026-05-12 12:51:20 +02:00
Andrew Morgan
d1a1ef7341
Install rustfmt component
2026-05-06 16:36:58 +01:00
Andrew Morgan
0ca5040e3d
Make nightly the default toolchain for cargo fmt job
2026-05-06 15:58:21 +01:00
Andrew Morgan
647b5a79ac
Revert "WIP disable caching in release workflows"
...
This reverts commit 72e5ae40b0 .
Let's do this in a follow-up PR.
2026-05-05 20:27:13 +01:00
Andrew Morgan
72e5ae40b0
WIP disable caching in release workflows
2026-05-05 13:16:29 +01:00
Andrew Morgan
34153e03ac
Switch rust install GH action to rustup
2026-05-05 12:55:12 +01:00
Andrew Morgan
fdf8dde38a
Tell actions/checkout not to persist credentials
...
Recommended by `zizmor`. See https://docs.zizmor.sh/audits/#artipacked
for an explanation.
2026-05-05 12:34:58 +01:00
Andrew Morgan
b99023662a
Pin versions of github actions using zizmor
...
To eliminate risk of supply chain attacks.
2026-05-05 12:32:07 +01:00
dependabot[bot] and GitHub
671a676dfd
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.15 to 2.0.16
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.15 to 2.0.16.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/v2.0.15...v2.0.16 )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.0.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-10 13:54:03 +00:00
Gaël Goinvic
2955f63553
collect ess logs
2026-03-27 11:11:58 +01:00
Gaël Goinvic
566bb07799
dont pull the chart with pytest-ess
2026-03-27 10:34:27 +01:00
Gaël Goinvic
58bd0dcf0b
upload failed logs
2026-03-27 10:34:27 +01:00
Gaël Goinvic
c6cb413f2d
target the same branch as ess-helm if it is available
2026-03-27 10:34:27 +01:00
Gaël Goinvic
2e60713f3b
CI: Test against ESS
2026-03-27 10:34:27 +01:00
Quentin Gliech and GitHub
ff20ae6bfe
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #5529 )
2026-03-17 15:20:40 +01:00
Quentin Gliech and GitHub
12fbd97bcd
build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 ( #5540 )
2026-03-17 15:19:45 +01:00
dependabot[bot] and GitHub
16a1790e1a
build(deps): bump actions/setup-node from 6.2.0 to 6.3.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.2.0...v6.3.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-04 13:54:46 +00:00
dependabot[bot] and GitHub
99a17d7ac6
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6.0.0...v7.0.0 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-27 13:54:09 +00:00
dependabot[bot] and GitHub
5f881b3d2d
build(deps): bump actions/download-artifact from 7 to 8
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-27 13:54:01 +00:00
Quentin Gliech
207c526f00
Upgrade Rust, opa, regal, cargo-auditable and Node
2026-02-04 18:35:43 +01:00