c7cc133da5
chore(deps): update containerbase/internal-tools action to v4.6.23 (main) ( #43244 )
...
chore(deps): update containerbase/internal-tools action to v4.6.23
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.17 | v4.6.23 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 18:24:57 +00:00
89ea48a3e7
chore(deps): update containerbase/internal-tools action to v4.6.17 (main) ( #43239 )
...
chore(deps): update containerbase/internal-tools action to v4.6.17
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.16 | v4.6.17 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 13:31:03 +00:00
951082ba2b
chore(deps): update dependency pdm to v2.26.9 (main) ( #43215 )
...
chore(deps): update dependency pdm to v2.26.9
| datasource | package | from | to |
| ---------- | ------- | ------ | ------ |
| pypi | pdm | 2.26.8 | 2.26.9 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-10 08:24:22 +00:00
96f01b076b
chore(deps): update containerbase/internal-tools action to v4.6.16 (main) ( #43202 )
...
chore(deps): update containerbase/internal-tools action to v4.6.16
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.15 | v4.6.16 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-09 01:25:17 +00:00
3081b782f9
chore(deps): update sigstore/cosign-installer action to v4.1.2 (main) ( #43143 )
...
chore(deps): update sigstore/cosign-installer action to v4.1.2
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| github-tags | sigstore/cosign-installer | v4.1.1 | v4.1.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-07 02:25:00 +00:00
26fbd8be68
chore(deps): update containerbase/internal-tools action to v4.6.15 (main) ( #43095 )
...
chore(deps): update containerbase/internal-tools action to v4.6.15
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.14 | v4.6.15 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-04 23:27:56 +00:00
cbe8da723b
chore(deps): update containerbase/internal-tools action to v4.6.14 (main) ( #43081 )
...
chore(deps): update containerbase/internal-tools action to v4.6.14
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.13 | v4.6.14 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-04 10:29:17 +00:00
cef0e5522e
chore(deps): update containerbase/internal-tools action to v4.6.13 (main) ( #43070 )
...
chore(deps): update containerbase/internal-tools action to v4.6.13
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.11 | v4.6.13 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-04 01:26:32 +00:00
1475300a66
chore(deps): update containerbase/internal-tools action to v4.6.11 (main) ( #43061 )
...
chore(deps): update containerbase/internal-tools action to v4.6.11
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.6.10 | v4.6.11 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-03 00:24:33 +00:00
c336e7bc3d
chore(deps): update containerbase/internal-tools action to v4.6.10 (main) ( #43060 )
...
chore(deps): update containerbase/internal-tools action to v4.6.10
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------- |
| github-tags | containerbase/internal-tools | v4.6.9 | v4.6.10 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-02 20:24:48 +00:00
dd7c8750f9
chore(deps): update slackapi/slack-github-action action to v3.0.3 (main) ( #43053 )
...
chore(deps): update slackapi/slack-github-action action to v3.0.3
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | slackapi/slack-github-action | v3.0.2 | v3.0.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-01 22:25:41 +00:00
bcbea421ec
chore(deps): update containerbase/internal-tools action to v4.6.9 (main) ( #43028 )
...
chore(deps): update containerbase/internal-tools action to v4.6.9
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.8 | v4.6.9 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-30 22:27:38 +00:00
90bf0f9e41
chore(deps): update containerbase/internal-tools action to v4.6.8 (main) ( #43008 )
...
chore(deps): update containerbase/internal-tools action to v4.6.8
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.7 | v4.6.8 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-30 12:30:16 +00:00
7f44a861b4
chore(deps): update containerbase/internal-tools action to v4.6.7 (main) ( #43006 )
...
chore(deps): update containerbase/internal-tools action to v4.6.7
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.6 | v4.6.7 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-30 09:27:01 +00:00
8c9c0ef230
ci: validate docker build succeeds ( #42962 )
...
Co-authored-by: Copilot <copilot@github.com >
2026-04-28 08:56:35 +00:00
28c3144400
ci: set repo context for gh cli ( #42954 )
...
Co-authored-by: Copilot <copilot@github.com >
2026-04-28 06:28:04 +00:00
858e708510
ci: use explicit repo URL for checking commits ( #42939 )
...
Instead of needing to check out the repo, we can specify the URL
explicitly.
2026-04-27 15:24:46 +01:00
dcabdfd6ae
ci: never cancel in-progress release jobs ( #42817 )
...
* ci: never cancel in-progress release jobs
We currently try not to cancel a release when it's already running, but
we sometimes do end up with it being cancelled part-way through due to
our current `cancel-in-progress`.
We can adapt this to only trigger that case when in a PR/Merge Group
event, and then provide custom logic to cancel the release job (at the
start of the job and right before `semantic-release` runs) when we're
not the latest commit.
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
* fixup! ci: never cancel in-progress release jobs
Fixing issues from `zizmor`.
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
* fixup! fix(versioning/github-actions): treat floating tags as equal (#42809 )
As it leads to a possible template expansion, let's remove it.
---------
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
2026-04-27 14:01:47 +00:00
dccc6ac673
chore(deps): update containerbase/internal-tools action to v4.6.6 (main) ( #42916 )
...
chore(deps): update containerbase/internal-tools action to v4.6.6
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.4 | v4.6.6 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-27 02:30:38 +00:00
8816d08e44
chore(deps): update containerbase/internal-tools action to v4.6.4 (main) ( #42895 )
...
chore(deps): update containerbase/internal-tools action to v4.6.4
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.2 | v4.6.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-24 23:28:01 +00:00
7be9b66228
chore(deps): update containerbase/internal-tools action to v4.6.2 (main) ( #42869 )
...
chore(deps): update containerbase/internal-tools action to v4.6.2
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.1 | v4.6.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-24 09:42:04 +00:00
88098b9379
chore: ensure that pnpm also enforces minimumReleaseAge ( #40476 )
...
On top of our Renovate configuration[0] not allowing Renovate to prepare
updates until npm packages have been available for 7 days, we can
provide "defence in depth" by also wiring in pnpm's configuration.
This takes the rules from [0] and applies them to explicitly allowlist
our packages, as well as set the limit to 7 days.
To make sure our E2E tests still operate, we can - in a slightly hacky
manner - disable `minimumReleaseAge` by deleting the
`pnpm-workspace.yaml`, as it doesn't seem to be possible to
`--ignore-workspace` while using `minimumReleaseAge`, as it still
requires the `minimumReleaseAge` to pass.
[0]: https://github.com/renovatebot/.github/blob/095f454e8b1141edb1045dd389bee4c59c51613e/default.json
2026-04-23 15:13:49 +00:00
a5d2832ef9
chore(deps): update slackapi/slack-github-action action to v3.0.2 (main) ( #42833 )
...
chore(deps): update slackapi/slack-github-action action to v3.0.2
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | slackapi/slack-github-action | v3.0.1 | v3.0.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-23 07:32:23 +00:00
05d36b73b3
chore(deps): update containerbase/internal-tools action to v4.6.1 (main) ( #42804 )
...
chore(deps): update containerbase/internal-tools action to v4.6.1
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.6.0 | v4.6.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-21 20:34:37 +00:00
ac4837b258
chore(deps): update dependency pdm to v2.26.8 (main) ( #42776 )
...
chore(deps): update dependency pdm to v2.26.8
| datasource | package | from | to |
| ---------- | ------- | ------ | ------ |
| pypi | pdm | 2.26.7 | 2.26.8 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-21 04:27:47 +00:00
0d1efad9fe
chore(deps): update containerbase/internal-tools action to v4.6.0 (main) ( #42763 )
...
chore(deps): update containerbase/internal-tools action to v4.6.0
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------ |
| github-tags | containerbase/internal-tools | v4.5.28 | v4.6.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 10:10:42 +00:00
3e01ba659e
chore(deps): update containerbase/internal-tools action to v4.5.28 (main) ( #42755 )
...
chore(deps): update containerbase/internal-tools action to v4.5.28
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.27 | v4.5.28 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 04:28:10 +00:00
da017729d2
chore(deps): update containerbase/internal-tools action to v4.5.27 (main) ( #42752 )
...
chore(deps): update containerbase/internal-tools action to v4.5.27
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.26 | v4.5.27 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 03:28:05 +00:00
b4736d0471
chore(deps): update containerbase/internal-tools action to v4.5.26 (main) ( #42750 )
...
chore(deps): update containerbase/internal-tools action to v4.5.26
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.25 | v4.5.26 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 02:28:53 +00:00
469c2a32d6
chore(deps): update containerbase/internal-tools action to v4.5.25 (main) ( #42731 )
...
chore(deps): update containerbase/internal-tools action to v4.5.25
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.24 | v4.5.25 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-18 00:29:01 +00:00
19a2409ece
chore(deps): update containerbase/internal-tools action to v4.5.24 (main) ( #42665 )
...
chore(deps): update containerbase/internal-tools action to v4.5.24
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.22 | v4.5.24 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 09:06:00 +00:00
9e33c20510
chore(deps): update containerbase/internal-tools action to v4.5.22 (main) ( #42658 )
...
chore(deps): update containerbase/internal-tools action to v4.5.22
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.21 | v4.5.22 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 16:20:23 +00:00
3891a11514
chore(deps): update containerbase/internal-tools action to v4.5.21 (main) ( #42654 )
...
chore(deps): update containerbase/internal-tools action to v4.5.21
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.20 | v4.5.21 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 15:22:52 +00:00
61947e273f
chore(deps): update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) ( #42642 )
...
chore(deps): update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1
| datasource | package | from | to |
| ---------- | ------------------------- | ------ | ------ |
| docker | ghcr.io/zizmorcore/zizmor | 1.23.1 | 1.24.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 08:49:11 +00:00
d2d8297148
chore(deps): update slackapi/slack-github-action action to v3 (main) ( #42619 )
...
chore(deps): update slackapi/slack-github-action action to v3
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | slackapi/slack-github-action | v2.1.1 | v3.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:04:40 +00:00
cf79688e1e
chore(deps): update actions/upload-pages-artifact action to v5 (main) ( #42614 )
...
chore(deps): update actions/upload-pages-artifact action to v5
| datasource | package | from | to |
| ----------- | ----------------------------- | ------ | ------ |
| github-tags | actions/upload-pages-artifact | v4.0.0 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:02:12 +00:00
c815d30c53
chore(deps): update zizmorcore/zizmor-action action to v0.5.3 (main) ( #42607 )
...
chore(deps): update zizmorcore/zizmor-action action to v0.5.3
| datasource | package | from | to |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | zizmorcore/zizmor-action | v0.5.2 | v0.5.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 23:28:35 +00:00
d2131a7e1a
chore(deps): update containerbase/internal-tools action to v4.5.20 (main) ( #42602 )
...
chore(deps): update containerbase/internal-tools action to v4.5.20
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.19 | v4.5.20 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 17:26:34 +00:00
a808338132
chore(deps): update actions/cache action to v5.0.5 (main) ( #42598 )
...
chore(deps): update actions/cache action to v5.0.5
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.4 | v5.0.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 16:30:03 +00:00
f31e3d4d4b
chore(deps): update containerbase/internal-tools action to v4.5.19 (main) ( #42574 )
...
chore(deps): update containerbase/internal-tools action to v4.5.19
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.17 | v4.5.19 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 02:30:01 +00:00
dc158ab03b
chore(deps): update containerbase/internal-tools action to v4.5.17 (main) ( #42560 )
...
chore(deps): update containerbase/internal-tools action to v4.5.17
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.15 | v4.5.17 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-12 08:26:17 +00:00
87cbb93cb2
chore(deps): update containerbase/internal-tools action to v4.5.15 (main) ( #42551 )
...
chore(deps): update containerbase/internal-tools action to v4.5.15
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.14 | v4.5.15 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 21:29:09 +00:00
501e7b9bc3
chore(deps): update actions/upload-artifact action to v7.0.1 (main) ( #42538 )
...
chore(deps): update actions/upload-artifact action to v7.0.1
| datasource | package | from | to |
| ----------- | ----------------------- | ------ | ------ |
| github-tags | actions/upload-artifact | v7.0.0 | v7.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 18:30:56 +00:00
2605d956f2
chore(deps): update containerbase/internal-tools action to v4.5.14 (main) ( #42484 )
...
chore(deps): update containerbase/internal-tools action to v4.5.14
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.13 | v4.5.14 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-08 16:32:30 +00:00
ab3157f6be
chore(deps): update codecov/codecov-action action to v6 (main) ( #42431 )
...
chore(deps): update codecov/codecov-action action to v6
| datasource | package | from | to |
| ----------- | ---------------------- | ------ | ------ |
| github-tags | codecov/codecov-action | v5.5.4 | v6.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-07 15:43:28 +00:00
6c194045cf
chore(deps): update actions/deploy-pages action to v5 (main) ( #42430 )
...
chore(deps): update actions/deploy-pages action to v5
| datasource | package | from | to |
| ----------- | -------------------- | ------ | ------ |
| github-tags | actions/deploy-pages | v4.0.5 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-07 15:42:40 +00:00
a67a96eab5
refactor(lint): Switch to Oxlint ( #42384 )
...
* refactor(lint): Switch to Oxlint
* Update .oxlintrc.json
* Fix CI
---------
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2026-04-07 14:42:23 +00:00
eff00fb695
ci: add Zizmor for GitHub Actions linting ( #42346 )
...
Although we're generally in a positive place with our Actions, we also
do currently have some findings from Zizmor.
We should integrate it into our CI for better visibility.
We can pin to a specific version of Zizmor to ensure that we get updates
through `minimumReleaseAge` compliant means, rather than always pulling
`latest`.
This feeds findings into GitHub Advanced Security's Security tab by
default.
2026-04-07 11:16:16 +00:00
a97e0d60e0
chore(deps): update containerbase/internal-tools action to v4.5.13 (main) ( #42390 )
...
chore(deps): update containerbase/internal-tools action to v4.5.13
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.12 | v4.5.13 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-06 02:29:23 +00:00
5e6a921dae
chore(deps): update containerbase/internal-tools action to v4.5.12 (main) ( #42382 )
...
chore(deps): update containerbase/internal-tools action to v4.5.12
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.11 | v4.5.12 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-05 23:26:25 +00:00
renovate[bot]