d041432772aa6515667c400df387a1e0c2827bfb
14
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
d041432772
|
feat: deploy to Frostmoln production
schemas / vulnerabilities (pull_request) Successful in 38s
schemas / check (pull_request) Successful in 1m8s
schemas / check-release (pull_request) Successful in 1m7s
pre-commit / pre-commit (pull_request) Successful in 1m17s
schemas / build (pull_request) Successful in 1m36s
schemas / deploy-prod-frostmoln (pull_request) Skipped
The AWS deploy-prod job has failed since CI left AWS (no k8s.unbound.se context on the runners). Deploys now go to the Frostmoln production cluster (namespace schemas), the way the sites do. Frostmoln enforces restricted Pod Security: the pod runs as the image's non-root user with a matching securityContext. The prod-only manifests move to the prod-frostmoln target; the ALB ingress becomes a Traefik one with a Let's Encrypt certificate. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu |
||
|
|
6840a41026 |
chore(deps): update dependency python to 3.15 (#1015)
schemas / vulnerabilities (push) Successful in 37s
Unbound Release / Create Release (push) Skipped
schemas / check (push) Successful in 1m3s
schemas / check-release (push) Successful in 1m7s
Unbound Release / Check Preconditions (push) Successful in 2s
pre-commit / pre-commit (push) Successful in 2m33s
Unbound Release / Create Tag (push) Successful in 4s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 11s
Release / release (push) Successful in 8m17s
schemas / build (push) Successful in 3m11s
schemas / deploy-prod (push) Failing after 9s
|
||
|
|
0b4306d2c0 |
chore(deps): update dependency goreleaser/goreleaser to v2.18.3 (#1009)
schemas / check (push) Successful in 56s
schemas / vulnerabilities (push) Successful in 29s
schemas / check-release (push) Successful in 1m8s
pre-commit / pre-commit (push) Successful in 2m24s
Unbound Release / Check Preconditions (push) Successful in 5s
Unbound Release / Create Release (push) Skipped
schemas / build (push) Successful in 4m4s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 21s
Unbound Release / Create Tag (push) Successful in 6s
Release / release (push) Successful in 43m12s
schemas / deploy-prod (push) Failing after 4s
|
||
|
|
2e63eb00b3 |
fix: release to the Gitea API on its public URL (#997)
schemas / vulnerabilities (push) Successful in 3m22s
schemas / check-release (push) Successful in 3m49s
schemas / check (push) Successful in 3m54s
Unbound Release / Check Preconditions (push) Successful in 48s
Unbound Release / Create Release (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Successful in 46s
pre-commit / pre-commit (push) Successful in 2m34s
Unbound Release / Create Tag (push) Successful in 12s
Release / release (push) Successful in 2m11s
schemas / build (push) Successful in 15m1s
schemas / deploy-prod (push) Failing after 32s
goreleaser's gitea_urls.api still pointed at the AWS in-cluster service (gitea-http.gitea.svc.cluster.local), which does not resolve from the Frostmoln runner. Use https://git.unbound.se/api/v1. Also drop RELEASE_TOKEN_FILE=/runner-secrets/release-token (the AWS runner mount); the Frostmoln runner exports RELEASE_TOKEN_FILE itself. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu Reviewed-on: #997 |
||
|
|
0ef92fe728 |
chore(deps): update dependency goreleaser/goreleaser to v2.18.2 (#965)
Unbound Release / Create Tag (push) Successful in 45s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m12s
Unbound Release / Check Preconditions (push) Successful in 26s
Unbound Release / Create Release (push) Skipped
schemas / vulnerabilities (push) Successful in 1m8s
schemas / check-release (push) Successful in 1m8s
Release / release (push) Successful in 1m44s
schemas / check (push) Successful in 1m45s
pre-commit / pre-commit (push) Successful in 3m35s
schemas / build (push) Successful in 2m1s
schemas / deploy-prod (push) Successful in 1m17s
|
||
|
|
f6b02a9fa6 |
chore(deps): update actions/setup-python action to v7 (#902)
Unbound Release / Check Preconditions (push) Successful in 27s
Unbound Release / Create Release (push) Skipped
pre-commit / pre-commit (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Failing after 38s
Unbound Release / Create Tag (push) Successful in 29s
Release / release (push) Failing after 23m3s
schemas / build (push) Successful in 14m9s
schemas / check-release (push) Successful in 1m6s
schemas / check (push) Successful in 1m43s
schemas / vulnerabilities (push) Successful in 1m3s
schemas / deploy-prod (push) Successful in 1m3s
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://github.com/actions/setup-python/releases/tag/v7.0.0) [Compare Source](https://github.com/actions/setup-python/compare/v7.0.0...v7.0.0) #### What's Changed ##### Enhancements - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​1330](https://github.com/actions/setup-python/pull/1330) - Pin SHA commits and update docs with latest versions by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1338](https://github.com/actions/setup-python/pull/1338) - Remove the pip-install input by [@​gowridurgad](https://github.com/gowridurgad) in [#​1336](https://github.com/actions/setup-python/pull/1336) ##### Bug Fix - Fix to Classify stderr warning messages as warnings instead of errors in annotations by [@​lmvysakh](https://github.com/lmvysakh) in [#​1335](https://github.com/actions/setup-python/pull/1335) - Validate and retry manifest fetch to prevent silent failures by [@​priyagupta108](https://github.com/priyagupta108) in [#​1332](https://github.com/actions/setup-python/pull/1332) ##### Dependency Upgrade - Bump certifi from 2020.6.20 to 2024.7.4 in /**tests**/data by [@​dependabot](https://github.com/dependabot) in [#​1328](https://github.com/actions/setup-python/pull/1328) - Remove EOL Python versions and Bumps numpy text fixture by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​1333](https://github.com/actions/setup-python/pull/1333) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​1337](https://github.com/actions/setup-python/pull/1337) #### New Contributors - [@​lmvysakh](https://github.com/lmvysakh) made their first contribution in [#​1335](https://github.com/actions/setup-python/pull/1335) - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​1337](https://github.com/actions/setup-python/pull/1337) **Full Changelog**: <https://github.com/actions/setup-python/compare/v6...v7.0.0> ### [`v7`](https://github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://github.com/actions/setup-python/compare/v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTcuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ny4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas/pulls/902 Co-authored-by: Renovate Bot <renovate@unbound.se> |
||
|
|
92b2b602bd |
chore(deps): update actions/setup-node action to v7 (#893)
pre-commit / pre-commit (push) Skipped
Unbound Release / Check Preconditions (push) Successful in 26s
Unbound Release / Create Release (push) Skipped
Unbound Release / Create Tag (push) Successful in 30s
Unbound Release / Generate Changelog and Handle PR (push) Failing after 36s
Release / release (push) Failing after 5m11s
schemas / build (push) Canceled after 0s
schemas / deploy-prod (push) Canceled after 0s
schemas / check (push) Successful in 1m40s
schemas / vulnerabilities (push) Successful in 1m4s
schemas / check-release (push) Failing after 1m44s
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://github.com/actions/setup-node) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v7.0.0`](https://github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://github.com/actions/setup-node/compare/v7.0.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://github.com/gowridurgad) in [#​1577](https://github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://github.com/gowridurgad) in [#​1574](https://github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://github.com/gowridurgad) in [#​1558](https://github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://github.com/deiga) in [#​1548](https://github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://github.com/chiranjib-swain) in [#​1536](https://github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​1550](https://github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://github.com/chiranjib-swain) in [#​1567](https://github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​1569](https://github.com/actions/setup-node/pull/1569) ##### New Contributors - [@​chiranjib-swain](https://github.com/chiranjib-swain) made their first contribution in [#​1536](https://github.com/actions/setup-node/pull/1536) - [@​deiga](https://github.com/deiga) made their first contribution in [#​1548](https://github.com/actions/setup-node/pull/1548) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​1569](https://github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v7`](https://github.com/actions/setup-node/compare/v6.5.0...v7.0.0) [Compare Source](https://github.com/actions/setup-node/compare/v6.5.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDMuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas/pulls/893 Co-authored-by: Renovate Bot <renovate@unbound.se> |
||
|
|
b93360e8c8 |
chore(deps): update actions/setup-go action to v7 (#897)
schemas / vulnerabilities (push) Successful in 1m3s
schemas / check (push) Successful in 2m22s
schemas / check-release (push) Successful in 1m28s
Release / release (push) Failing after 41s
pre-commit / pre-commit (push) Successful in 3m23s
schemas / build (push) Successful in 6m59s
schemas / deploy-prod (push) Successful in 1m2s
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v7.0.0`](https://github.com/actions/setup-go/releases/tag/v7.0.0) [Compare Source](https://github.com/actions/setup-go/compare/v7.0.0...v7.0.0) ##### What's Changed - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​763](https://github.com/actions/setup-go/pull/763) - chore(deps): bump [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​771](https://github.com/actions/setup-go/pull/771) ##### New Contributors - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​771](https://github.com/actions/setup-go/pull/771) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v7.0.0> ### [`v7`](https://github.com/actions/setup-go/compare/v6.5.0...v7.0.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.5.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDMuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas/pulls/897 Co-authored-by: Renovate Bot <renovate@unbound.se> Co-committed-by: Renovate Bot <renovate@unbound.se> |
||
|
|
c52fa80449 |
chore(deps): update actions/checkout action to v7 (#868)
schemas / vulnerabilities (push) Successful in 1m41s
Release / release (push) Failing after 1m19s
schemas / check (push) Successful in 2m33s
schemas / check-release (push) Successful in 2m45s
pre-commit / pre-commit (push) Successful in 5m58s
schemas / build (push) Successful in 7m9s
schemas / deploy-prod (push) Successful in 1m31s
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](https://github.com/actions/checkout/pull/2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](https://github.com/actions/checkout/pull/2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](https://github.com/actions/checkout/pull/2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](https://github.com/actions/checkout/pull/2462) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIyMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas/pulls/868 Co-authored-by: Renovate Bot <renovate@unbound.se> Co-committed-by: Renovate Bot <renovate@unbound.se> |
||
|
|
3b4e513653
|
fix(ci): pin goreleaser to v2.13.3 for Gitea SDK compatibility
schemas / vulnerabilities (pull_request) Successful in 2m19s
schemas / check-release (pull_request) Successful in 6m5s
schemas / check (pull_request) Successful in 6m24s
pre-commit / pre-commit (pull_request) Successful in 12m13s
schemas / build (pull_request) Successful in 7m21s
schemas / deploy-prod (pull_request) Has been skipped
GoReleaser v2.14.0 upgraded the Gitea SDK from v0.22.1 to v0.23.2, which fails to parse the Gitea server version during homebrew cask publishing (error: unknown version: daf0483). Pin to v2.13.3 until the Gitea server is updated to a compatible version. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|
|
3c1fc68016 |
chore(deps): update actions/setup-node action to v6
schemas / vulnerabilities (pull_request) Successful in 1m46s
schemas / check-release (pull_request) Successful in 4m33s
schemas / check (pull_request) Successful in 11m3s
pre-commit / pre-commit (pull_request) Successful in 14m11s
schemas / build (pull_request) Successful in 4m31s
schemas / deploy-prod (pull_request) Has been skipped
|
||
|
|
3c43f1bd80
|
chore(deps): update goreleaser/goreleaser-action action to v7
schemas / vulnerabilities (pull_request) Successful in 2m19s
pre-commit / pre-commit (pull_request) Successful in 11m12s
schemas / check-release (pull_request) Successful in 14m14s
schemas / check (pull_request) Successful in 19m52s
schemas / build (pull_request) Successful in 7m24s
schemas / deploy-prod (pull_request) Has been skipped
|
||
|
|
e328ef5a64
|
fix(ci): run build job on tags for Docker images
schemas / vulnerabilities (pull_request) Successful in 1m33s
schemas / check (pull_request) Successful in 2m55s
schemas / check-release (pull_request) Successful in 2m9s
pre-commit / pre-commit (pull_request) Successful in 5m40s
schemas / build (pull_request) Successful in 4m20s
schemas / deploy-prod (pull_request) Has been skipped
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |
||
|
|
73eae98929
|
feat: migrate from GitLab CI to Gitea Actions
schemas / vulnerabilities (pull_request) Successful in 2m15s
schemas / check-release (pull_request) Successful in 2m17s
schemas / check (pull_request) Successful in 4m48s
pre-commit / pre-commit (pull_request) Successful in 5m58s
schemas / build (pull_request) Successful in 3m36s
schemas / deploy-prod (pull_request) Has been skipped
- Update git remote to git.unbound.se - Add Gitea workflows: ci.yaml, pre-commit.yaml, release.yaml, goreleaser.yaml - Delete .gitlab-ci.yml - Update Go module path to gitea.unbound.se/unboundsoftware/schemas - Update all imports to new module path - Update Docker registry to oci.unbound.se - Update .goreleaser.yml for Gitea releases with internal cluster URL - Remove GitLab CI linter from pre-commit config - Use shared release workflow with tag_only for versioning Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |