Quentin Gliech
de9257766e
Run the buildx builder on the host network so it can reach the local registry
2026-07-28 13:30:41 +02:00
Quentin Gliech
a00c0ce809
Start the ESS CI job right away and overlap its setup with the image build
...
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
2026-07-28 13:30:41 +02:00
Quentin Gliech
2c062b0a9c
Use the Docker build cache in the ESS test suite
...
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
2026-07-28 13:30:41 +02:00
Quentin Gliech
f853d96049
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #5790 )
2026-07-02 19:45:30 +02:00
dependabot[bot]
5d8182dd3f
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:17:39 +00:00
dependabot[bot]
8c3f3cc305
build(deps): bump tailscale/github-action from 4.1.1 to 4.1.2
...
Bumps [tailscale/github-action](https://github.com/tailscale/github-action ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/tailscale/github-action/releases )
- [Commits](https://github.com/tailscale/github-action/compare/53acf823325fe9ca47f4cdaa951f90b4b0de5bb9...306e68a486fd2350f2bfc3b19fcd143891a4a2d8 )
---
updated-dependencies:
- dependency-name: tailscale/github-action
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:16:57 +00:00
Quentin Gliech
f46f9a2c1f
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 ( #5778 )
2026-07-02 18:31:23 +02:00
Quentin Gliech
0a0a59773a
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 ( #5776 )
2026-07-02 18:29:33 +02:00
Quentin Gliech
4c92e14e90
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5779 )
2026-07-02 18:27:02 +02:00
Quentin Gliech
99e80494b1
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 ( #5777 )
2026-07-02 18:18:10 +02:00
dependabot[bot]
bcc7f75e4c
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:42 +00:00
dependabot[bot]
b4dab97c88
build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 6.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:31 +00:00
dependabot[bot]
5753b61f3e
build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.82.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:46:27 +00:00
dependabot[bot]
01eada1819
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:22 +00:00
dependabot[bot]
3498a5715a
build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20
...
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action ) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases )
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe )
---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 15:45:08 +00:00
Quentin Gliech
2a12d67854
build(deps): bump docker/login-action from 4.1.0 to 4.2.0 ( #5765 )
2026-07-01 17:39:00 +02:00
Quentin Gliech
a362c371b0
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 ( #5767 )
2026-07-01 17:34:38 +02:00
Quentin Gliech
25d9d559c2
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 ( #5766 )
2026-07-01 17:34:19 +02:00
Quentin Gliech
228dc80187
build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 ( #5764 )
2026-07-01 17:33:46 +02:00
dependabot[bot]
597a4892aa
build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...fb8b3582c8e4def4969c97caa2f19720cb33a72f )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:05:01 +00:00
dependabot[bot]
d180adebc8
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:54 +00:00
dependabot[bot]
0c6100f451
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:44 +00:00
dependabot[bot]
5f315d4611
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:27 +00:00
dependabot[bot]
e0b15fd772
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003...6f9f17788090df1f26f669e9d70d6ae9567deba6 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-01 15:04:26 +00:00
Quentin Gliech
822d4f5c40
CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal
2026-07-01 14:41:09 +02:00
Quentin Gliech
23d0385fa3
Fix ESS test CI job by pinning the setup-ess-cluster-action to the latest version ( #5743 )
2026-06-18 14:00:15 +02:00
Quentin Gliech
a0612f4bde
ci: pin setup-ess-cluster-action to the latest release/v2 commit
...
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
2026-06-18 13:33:02 +02:00
dependabot[bot]
e56dccdd68
build(deps): bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:28:52 +00:00
Quentin Gliech
63ed796441
Use the public registry hostname in release notes ( #5725 )
2026-06-17 17:42:43 +02:00
Quentin Gliech
2452cd88c0
Bump Rust to 1.96.0 and fix clippy lints ( #5733 )
2026-06-17 14:04:45 +02:00
Olivier 'reivilibre
119f5195a8
CI: Test against ESS ( #5582 )
2026-06-17 11:53:33 +01:00
Quentin Gliech
e1f69b8aa6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 ( #5719 )
2026-06-17 10:02:03 +02:00
Quentin Gliech
e76200e7c3
Bump actions/setup-node from 6.3.0 to 6.4.0 ( #5718 )
2026-06-17 10:01:54 +02:00
Quentin Gliech
ffcc793a26
Bump taiki-e/install-action from 2.77.0 to 2.79.2 ( #5716 )
2026-06-17 10:01:31 +02:00
Quentin Gliech
22f3ab685d
Bump Rust to 1.96.0
...
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
Quentin Gliech
7455110877
Use the public registry hostname in release notes
...
The release notes list the Docker image tags straight from the
metadata-action output, which references the internal push registry
(oci-push.vpn.infra.element.io, the only writable endpoint) rather than
the public pull registry (oci.element.io) that users actually pull from.
Rewrite the host when building the release-notes metadata blob, leaving
the tags used for the actual push untouched.
2026-06-04 15:43:55 +02:00
dependabot[bot]
579b0c8dd6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10
...
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action ) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases )
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696 )
---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
dependency-version: 0.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:22 +00:00
dependabot[bot]
de92e3eaac
Bump actions/setup-node from 6.3.0 to 6.4.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:16 +00:00
dependabot[bot]
b59e865b7f
Bump hashicorp/vault-action from 3.4.0 to 4.0.0
...
Bumps [hashicorp/vault-action](https://github.com/hashicorp/vault-action ) from 3.4.0 to 4.0.0.
- [Release notes](https://github.com/hashicorp/vault-action/releases )
- [Changelog](https://github.com/hashicorp/vault-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault-action/compare/4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b...892a26828f195e65540a40b4768ae4571f51ebfc )
---
updated-dependencies:
- dependency-name: hashicorp/vault-action
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:35:02 +00:00
dependabot[bot]
c2ad2b3fbe
Bump taiki-e/install-action from 2.77.0 to 2.79.2
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.77.0 to 2.79.2.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/7ea35f098a7369cd23488403f58be9c491a6c55f...213ccc1a076163c093f914550b94feb90fab916d )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.79.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-02 17:34:56 +00:00
Quentin Gliech
cb043e2cd9
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #5629 )
2026-05-25 13:01:00 +02:00
Quentin Gliech
a02fb6e14f
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #5628 )
2026-05-25 13:00:49 +02:00
Quentin Gliech
6043fa729c
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 ( #5627 )
2026-05-25 13:00:40 +02:00
Quentin Gliech
73060d1819
build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 ( #5626 )
2026-05-25 13:00:27 +02:00
Quentin Gliech
9ae07db85a
Bump all frontend dependencies
2026-05-25 12:36:56 +02:00
Quentin Gliech
f78917ecbf
Merge branch 'main' into quenting/pnpm
2026-05-25 11:12:18 +02:00
Quentin Gliech
eeea952b55
Add a comment about the artefact collection
2026-05-20 15:24:19 +02:00
Quentin Gliech
7834229784
Re-add DOCKER_METADATA_ANNOTATIONS_LEVELS to narrow annotations to the index
...
`docker buildx imagetools create --annotation manifest:KEY=VALUE` errors
out with "manifest annotations are not supported yet". metadata-action
defaults to emitting `manifest:` prefixed entries, so without an explicit
`DOCKER_METADATA_ANNOTATIONS_LEVELS: index` the finalize step blows up
the first time it sees a non-empty annotations list.
2026-05-20 15:22:56 +02:00
Quentin Gliech
63deb0b1fd
Don't specify DOCKER_METADATA_ANNOTATIONS_LEVELS
...
We're injecting annotations manually anyway
2026-05-20 14:42:17 +02:00
Quentin Gliech
d88db7deff
Simplify the injection of annotations in the final manifest
2026-05-20 14:41:53 +02:00