Quentin Gliech
f853d96049
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #5790 )
2026-07-02 19:45:30 +02:00
dependabot[bot]
5d8182dd3f
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:17:39 +00:00
dependabot[bot]
8c3f3cc305
build(deps): bump tailscale/github-action from 4.1.1 to 4.1.2
...
Bumps [tailscale/github-action](https://github.com/tailscale/github-action ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/tailscale/github-action/releases )
- [Commits](https://github.com/tailscale/github-action/compare/53acf823325fe9ca47f4cdaa951f90b4b0de5bb9...306e68a486fd2350f2bfc3b19fcd143891a4a2d8 )
---
updated-dependencies:
- dependency-name: tailscale/github-action
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:16:57 +00:00
Quentin Gliech
f46f9a2c1f
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 ( #5778 )
2026-07-02 18:31:23 +02:00
Quentin Gliech
0a0a59773a
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 ( #5776 )
2026-07-02 18:29:33 +02:00
Quentin Gliech
4c92e14e90
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5779 )
2026-07-02 18:27:02 +02:00
Quentin Gliech
99e80494b1
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 ( #5777 )
2026-07-02 18:18:10 +02:00
dependabot[bot]
bcc7f75e4c
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:42 +00:00
dependabot[bot]
b4dab97c88
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 6.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:31 +00:00
dependabot[bot]
5753b61f3e
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.82.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:27 +00:00
dependabot[bot]
01eada1819
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:22 +00:00
dependabot[bot]
3498a5715a
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:08 +00:00
Quentin Gliech
2a12d67854
build(deps): bump docker/login-action from 4.1.0 to 4.2.0 ( #5765 )
2026-07-01 17:39:00 +02:00
Quentin Gliech
a362c371b0
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 ( #5767 )
2026-07-01 17:34:38 +02:00
Quentin Gliech
25d9d559c2
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 ( #5766 )
2026-07-01 17:34:19 +02:00
Quentin Gliech
228dc80187
build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 ( #5764 )
2026-07-01 17:33:46 +02:00
dependabot[bot]
597a4892aa
build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...fb8b3582c8e4def4969c97caa2f19720cb33a72f )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:05:01 +00:00
dependabot[bot]
d180adebc8
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:54 +00:00
dependabot[bot]
0c6100f451
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:44 +00:00
dependabot[bot]
5f315d4611
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:27 +00:00
dependabot[bot]
e0b15fd772
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003...6f9f17788090df1f26f669e9d70d6ae9567deba6 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:26 +00:00
Quentin Gliech
822d4f5c40
CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal
2026-07-01 14:41:09 +02:00
Quentin Gliech
23d0385fa3
Fix ESS test CI job by pinning the setup-ess-cluster-action to the latest version ( #5743 )
2026-06-18 14:00:15 +02:00
Quentin Gliech
a0612f4bde
ci: pin setup-ess-cluster-action to the latest release/v2 commit
...
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
2026-06-18 13:33:02 +02:00
dependabot[bot]
e56dccdd68
build(deps): bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:28:52 +00:00
Quentin Gliech
63ed796441
Use the public registry hostname in release notes ( #5725 )
2026-06-17 17:42:43 +02:00
Quentin Gliech
2452cd88c0
Bump Rust to 1.96.0 and fix clippy lints ( #5733 )
2026-06-17 14:04:45 +02:00
Olivier 'reivilibre
119f5195a8
CI: Test against ESS ( #5582 )
2026-06-17 11:53:33 +01:00
Quentin Gliech
e1f69b8aa6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 ( #5719 )
2026-06-17 10:02:03 +02:00
Quentin Gliech
e76200e7c3
Bump actions/setup-node from 6.3.0 to 6.4.0 ( #5718 )
2026-06-17 10:01:54 +02:00
Quentin Gliech
ffcc793a26
Bump taiki-e/install-action from 2.77.0 to 2.79.2 ( #5716 )
2026-06-17 10:01:31 +02:00
Quentin Gliech
22f3ab685d
Bump Rust to 1.96.0
...
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
Quentin Gliech
7455110877
Use the public registry hostname in release notes
...
The release notes list the Docker image tags straight from the
metadata-action output, which references the internal push registry
(oci-push.vpn.infra.element.io, the only writable endpoint) rather than
the public pull registry (oci.element.io) that users actually pull from.
Rewrite the host when building the release-notes metadata blob, leaving
the tags used for the actual push untouched.
2026-06-04 15:43:55 +02:00
dependabot[bot]
579b0c8dd6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10
...
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action ) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases )
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696 )
---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
dependency-version: 0.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:22 +00:00
dependabot[bot]
de92e3eaac
Bump actions/setup-node from 6.3.0 to 6.4.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:16 +00:00
dependabot[bot]
b59e865b7f
Bump hashicorp/vault-action from 3.4.0 to 4.0.0
...
Bumps [hashicorp/vault-action](https://github.com/hashicorp/vault-action ) from 3.4.0 to 4.0.0.
- [Release notes](https://github.com/hashicorp/vault-action/releases )
- [Changelog](https://github.com/hashicorp/vault-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault-action/compare/4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b...892a26828f195e65540a40b4768ae4571f51ebfc )
---
updated-dependencies:
- dependency-name: hashicorp/vault-action
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:02 +00:00
dependabot[bot]
c2ad2b3fbe
Bump taiki-e/install-action from 2.77.0 to 2.79.2
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.77.0 to 2.79.2.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/7ea35f098a7369cd23488403f58be9c491a6c55f...213ccc1a076163c093f914550b94feb90fab916d )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.79.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:34:56 +00:00
Quentin Gliech
cb043e2cd9
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5629 )
2026-05-25 13:01:00 +02:00
Quentin Gliech
a02fb6e14f
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #5628 )
2026-05-25 13:00:49 +02:00
Quentin Gliech
6043fa729c
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 ( #5627 )
2026-05-25 13:00:40 +02:00
Quentin Gliech
73060d1819
build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 ( #5626 )
2026-05-25 13:00:27 +02:00
Quentin Gliech
9ae07db85a
Bump all frontend dependencies
2026-05-25 12:36:56 +02:00
Quentin Gliech
f78917ecbf
Merge branch 'main' into quenting/pnpm
2026-05-25 11:12:18 +02:00
Quentin Gliech
eeea952b55
Add a comment about the artefact collection
2026-05-20 15:24:19 +02:00
Quentin Gliech
7834229784
Re-add DOCKER_METADATA_ANNOTATIONS_LEVELS to narrow annotations to the index
...
`docker buildx imagetools create --annotation manifest:KEY=VALUE` errors
out with "manifest annotations are not supported yet". metadata-action
defaults to emitting `manifest:` prefixed entries, so without an explicit
`DOCKER_METADATA_ANNOTATIONS_LEVELS: index` the finalize step blows up
the first time it sees a non-empty annotations list.
2026-05-20 15:22:56 +02:00
Quentin Gliech
63deb0b1fd
Don't specify DOCKER_METADATA_ANNOTATIONS_LEVELS
...
We're injecting annotations manually anyway
2026-05-20 14:42:17 +02:00
Quentin Gliech
d88db7deff
Simplify the injection of annotations in the final manifest
2026-05-20 14:41:53 +02:00
Quentin Gliech
c2dc7c11a9
Split multi-arch Docker build into parallel jobs
...
- Modify Dockerfile to build single architecture based on TARGETARCH instead of cross-compiling both targets in one run
- Replace single build-image job with matrix job (amd64, arm64)
- Add finalize-image job that creates multi-arch manifests using `docker buildx imagetools create` and signs the final images
- Each architecture gets its own build cache
This enables parallel builds of each architecture, reducing total build time by running both simultaneously rather than sequentially.
2026-05-20 12:57:22 +02:00
Quentin Gliech
750de33486
Push MAS docker images to Element OCI Registry ( #5459 )
2026-05-20 11:58:11 +02:00
Quentin Gliech
6946e57ffd
Fix the release notes reference to the image
2026-05-20 10:58:01 +02:00