308 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
renovate	85613860c2	chore(deps): update nginxinc/nginx-unprivileged docker tag to v1.31.7 (#245)	2026-10-14 20:16:55 +00:00
argoyle	283852c438	feat: deploy to Frostmoln production (#243) ... Moves the production deploy from AWS to the Frostmoln production cluster (namespace `sites`). - `deploy-prod` (AWS) has failed since CI left AWS: the runners have no `k8s.unbound.se` context, so the site on AWS still runs an older image. It's replaced by `deploy-prod-frostmoln`, the same pattern as Shiny's `deploy-frostmoln-staging`: `FROSTMOLN_PRODUCTION_DEPLOY_KEY` + `FROSTMOLN_PRODUCTION_CLUSTER_ID` (org), `BUILDTOOLS_FROSTMOLN_PRODUCTION` (org, target `prod-frostmoln`), `deploy prod-frostmoln -n sites`. - Frostmoln enforces restricted Pod Security: the served image is `nginxinc/nginx-unprivileged` (uid 101, port 8080), with a matching securityContext; the Service is ClusterIP. - `ingress-prod.yaml` (ALB) → `ingress-prod-frostmoln.yaml` (Traefik, Let's Encrypt). Checked locally: the image serves `/health` and `/` (200) as uid 101 with all capabilities dropped. **Merge after** infra's `feat/frostmoln-production-sites` is applied (namespace + org secret). The hostnames keep pointing at AWS until the Route 53 switch, a separate step; the certificate is issued after that. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu Reviewed-on: #243	2026-10-14 17:53:12 +00:00
renovate	b8b30a4fbe	chore(deps): update babel monorepo to v8.0.7 (#242)	2026-10-10 11:32:56 +00:00
argoyle	b8c7b0c6f7	chore(k8s): take the image reference from build-tools (#241) ... ## Summary `k8s/deploy.yaml` takes the image from build-tools: `image: ${IMAGE}` instead of the hard-coded `oci.unbound.se/unboundsoftware/unbound-site:${COMMIT}`. `deploy` substitutes `${IMAGE}` with `<registry>/<owner>/<name>:<tag>`, where the registry comes from the build-tools config and the tag is the value `${COMMIT}` gets today. The rendered reference is unchanged. Moving off `oci.unbound.se` later becomes one change in infra. Validated on shiny/time-service#864: merged and deployed to AWS staging and Frostmoln staging with the same image. Prerequisites, all merged: - unboundsoftware/infra#1808: registry in `BUILDTOOLS_FROSTMOLN_STAGING` - shiny/acctest#952: acctest pins build-tools to the Gitea registry 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://gitea.unbound.se/unboundsoftware/unbound-site/pulls/241	2026-10-02 22:39:55 +00:00
renovate	2673630916	chore(deps): update cibuilds/hugo docker tag to v0.167 (#240)	2026-10-01 19:16:01 +00:00
renovate	08f13af663	chore(deps): update nginx:1.31.6-alpine docker digest to 5f4b1cb (#239)	2026-09-23 00:20:03 +00:00
renovate	2f97b78392	chore(deps): update babel monorepo to v8.0.6 (#238)	2026-09-21 14:52:14 +00:00
renovate	06cf832eb1	chore(deps): update nginx:1.31.6-alpine docker digest to 50636a3 (#237)	2026-09-18 01:14:05 +00:00
renovate	18179c8de0	chore(deps): update cibuilds/hugo docker tag to v0.166 (#236)	2026-09-16 22:11:23 +00:00
renovate	f3dcf73cf9	chore(deps): update nginx docker tag to v1.31.6 (#235)	2026-09-16 01:14:53 +00:00
renovate	beddce6a07	chore(deps): update babel monorepo to v8.0.5 (#234)	2026-09-13 23:10:47 +00:00
renovate	f731d9146d	chore(deps): update nginx docker tag to v1.31.5 (#233)	2026-09-02 23:10:54 +00:00
renovate	7a7277f853	chore(deps): update nginx docker tag to v1.31.4 (#232)	2026-08-19 21:41:18 +00:00
renovate	47be78df48	chore(deps): update cibuilds/hugo docker tag to v0.165 (#231)	2026-08-15 22:14:09 +00:00
renovate	d6726b3099	chore(deps): update dependency core-js to v3.50.0 (#230)	2026-08-08 09:14:59 +00:00
renovate	1aaee5f575	chore(deps): update nginx docker tag to v1.31.3 (#229)	2026-07-19 02:14:45 +00:00
renovate	c05452778b	chore(deps): update dependency @babel/cli to v8.0.4 (#228)	2026-07-12 09:13:18 +00:00
renovate	c7a93be4f2	chore(deps): update cibuilds/hugo docker tag to v0.164 (#227)	2026-07-09 19:15:27 +00:00
renovate	be315b52d7	chore(deps): update nginx:1.31.2-alpine docker digest to 20a282b (#226)	2026-06-22 23:09:54 +00:00
renovate	fa185f65c2	chore(deps): update babel monorepo to v8.0.2 (#225)	2026-06-21 14:17:13 +00:00
renovate	d4e3ab3a0b	chore(deps): update nginx docker tag to v1.31.2 (#224)	2026-06-21 01:13:50 +00:00
renovate	547aad899f	chore(deps): update actions/checkout action to v7 (#223) ... This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | `v7.0.0` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2461](https://github.com/actions/checkout/pull/2461) - Bump [@&#8203;actions/core](https://github.com/actions/core) and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2462](https://github.com/actions/checkout/pull/2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2461](https://github.com/actions/checkout/pull/2461) - Bump [@&#8203;actions/core](https://github.com/actions/core) and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2462](https://github.com/actions/checkout/pull/2462) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIyMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.unbound.se/unboundsoftware/unbound-site/pulls/223 Co-authored-by: Renovate Bot <renovate@unbound.se> Co-committed-by: Renovate Bot <renovate@unbound.se>	2026-06-20 19:30:50 +00:00
renovate	65b155e26d	chore(deps): update babel monorepo to v8.0.1 (#222)	2026-06-20 10:14:45 +00:00
renovate	d5eb9a7c04	chore(deps): update babel monorepo to v8 (#221) ... This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@babel/cli](https://babel.dev/docs/babel-cli) ([source](https://github.com/babel/babel/tree/HEAD/packages/babel-cli)) | [`7.29.7` → `8.0.0`](https://renovatebot.com/diffs/npm/@babel%2fcli/7.29.7/8.0.0) |  |  | | [@babel/core](https://babel.dev/docs/en/next/babel-core) ([source](https://github.com/babel/babel/tree/HEAD/packages/babel-core)) | [`7.29.7` → `8.0.0`](https://renovatebot.com/diffs/npm/@babel%2fcore/7.29.7/8.0.0) |  |  | | [@babel/preset-env](https://babel.dev/docs/en/next/babel-preset-env) ([source](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env)) | [`7.29.7` → `8.0.0`](https://renovatebot.com/diffs/npm/@babel%2fpreset-env/7.29.7/8.0.0) |  |  | --- ### Release Notes <details> <summary>babel/babel (@&#8203;babel/cli)</summary> ### [`v8.0.0`](https://github.com/babel/babel/blob/HEAD/CHANGELOG.md#v800-2026-06-16) [Compare Source](https://github.com/babel/babel/compare/v7.29.7...v8.0.0) ##### 👓 Spec Compliance - `babel-core` - [#&#8203;18039](https://github.com/babel/babel/pull/18039) perf: Only extract source map comments at the end of the file ([@&#8203;liuxingbaoyu](https://github.com/liuxingbaoyu)) ##### 💥 Breaking Change - `babel-cli`, `babel-node`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-classes`, `babel-plugin-transform-function-name`, `babel-plugin-transform-modules-commonjs`, `babel-plugin-transform-object-rest-spread`, `babel-plugin-transform-parameters`, `babel-plugin-transform-react-constant-elements`, `babel-plugin-transform-regenerator`, `babel-preset-env`, `babel-register` - [#&#8203;18069](https://github.com/babel/babel/pull/18069) Fallback to assuming ESM support with `modules: auto` ([@&#8203;nicolo-ribaudo](https://github.com/nicolo-ribaudo)) - `babel-plugin-transform-runtime`, `babel-runtime-corejs3`, `babel-runtime` - [#&#8203;18036](https://github.com/babel/babel/pull/18036) Remove corejs exports for `@babe/runtime-corejs3` ([@&#8203;liuxingbaoyu](https://github.com/liuxingbaoyu)) - `babel-parser` - [#&#8203;18034](https://github.com/babel/babel/pull/18034) Remove `locations: "packed"` ([@&#8203;liuxingbaoyu](https://github.com/liuxingbaoyu)) ##### 🐛 Bug Fix - `babel-generator` - [#&#8203;18046](https://github.com/babel/babel/pull/18046) fix(generator): improve new callee parens check ([@&#8203;JLHwung](https://github.com/JLHwung)) - `babel-plugin-transform-modules-systemjs` - [#&#8203;18032](https://github.com/babel/babel/pull/18032) fix(systemjs): support **proto** as an export name ([@&#8203;JLHwung](https://github.com/JLHwung)) ##### 📝 Documentation - [#&#8203;18070](https://github.com/babel/babel/pull/18070) Add EOL date for Babel 7 (end of June 2027) to SECURITY.md ([@&#8203;nicolo-ribaudo](https://github.com/nicolo-ribaudo)) ##### 🏠 Internal - [#&#8203;18018](https://github.com/babel/babel/pull/18018) ci: enforce yarn integrity ([@&#8203;JLHwung](https://github.com/JLHwung)) ##### :running\_woman: Performance - `babel-core` - [#&#8203;18039](https://github.com/babel/babel/pull/18039) perf: Only extract source map comments at the end of the file ([@&#8203;liuxingbaoyu](https://github.com/liuxingbaoyu)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIyMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.unbound.se/unboundsoftware/unbound-site/pulls/221 Co-authored-by: Renovate Bot <renovate@unbound.se> Co-committed-by: Renovate Bot <renovate@unbound.se>	2026-06-19 16:36:09 +00:00
renovate	01e99528ba	chore(deps): update cibuilds/hugo:0.163 docker digest to 008d365 (#220)	2026-06-19 01:10:58 +00:00
renovate	5967e2d041	chore(deps): update cibuilds/hugo:0.163 docker digest to 4e3fab9 (#219)	2026-06-15 16:12:52 +00:00
renovate	226b08aa53	chore(deps): update cibuilds/hugo docker tag to v0.163 (#218)	2026-06-14 19:13:33 +00:00
renovate	c0b39580d9	chore(deps): update cibuilds/hugo docker tag to v0.162 (#217)	2026-06-01 13:18:26 +00:00
renovate	2739744529	chore(deps): update babel monorepo to v7.29.7 (#216)	2026-05-28 12:14:16 +00:00
renovate	8eb0e3189d	chore(deps): update nginx docker tag to v1.31.1 (#215)	2026-05-25 19:13:50 +00:00
renovate	362bfa4996	chore(deps): update nginx:1.31.0-alpine docker digest to f0addaa (#214)	2026-05-19 22:12:16 +00:00
renovate	2684a3d53d	chore(deps): update nginx docker tag to v1.31.0 (#213)	2026-05-16 22:11:58 +00:00
renovate	33b877b42e	chore(deps): update dependency @babel/preset-env to v7.29.5 (#212)	2026-05-08 16:11:21 +00:00
renovate	cf7c040dee	chore(deps): update dependency @babel/preset-env to v7.29.3 (#211)	2026-05-03 23:15:36 +00:00
renovate	c83b1c62f8	chore(deps): update cibuilds/hugo docker tag to v0.161 (#210)	2026-05-02 15:12:29 +00:00
renovate	50551bec95	chore(deps): update nginx docker tag to v1.30.0 (#209)	2026-04-18 23:11:45 +00:00
renovate	96e6a8ca02	chore(deps): update nginx:1.29.8-alpine docker digest to d4e09bf (#208)	2026-04-15 23:10:19 +00:00
renovate	f112b392fa	chore(deps): update nginx docker tag to v1.29.8 (#207)	2026-04-10 18:22:54 +00:00
renovate	9d122bac28	chore(deps): update cibuilds/hugo:0.160 docker digest to e0f489b (#206)	2026-04-08 15:13:50 +00:00
renovate	7bb0b34fbb	chore(deps): update cibuilds/hugo docker tag to v0.160 (#205)	2026-04-07 18:18:24 +00:00
renovate	9cb5a3e7a6	chore(deps): update cibuilds/hugo:0.159 docker digest to 71e1fda (#204)	2026-04-01 19:08:58 +00:00
renovate	ec15e59428	chore(deps): update cibuilds/hugo:0.159 docker digest to 52ef681 (#203)	2026-03-26 21:12:00 +00:00
renovate	e8d3b999d6	chore(deps): update nginx docker tag to v1.29.7 (#202)	2026-03-25 02:09:32 +00:00
renovate	eb518de902	chore(deps): update cibuilds/hugo docker tag to v0.159 (#201)	2026-03-23 19:38:14 +00:00
renovate	39246e5e6f	chore(deps): update dependency @babel/preset-env to v7.29.2 (#200)	2026-03-16 23:16:47 +00:00
renovate	4a386f3d49	chore(deps): update dependency core-js to v3.49.0 (#199)	2026-03-16 22:16:44 +00:00
renovate	2d4800c314	chore(deps): update cibuilds/hugo docker tag to v0.158 (#198)	2026-03-16 20:14:50 +00:00
renovate	82e1619ec3	chore(deps): update nginx docker tag to v1.29.6 (#197)	2026-03-11 00:09:48 +00:00
renovate	9268190f03	chore(deps): update nginx:1.29.5-alpine docker digest to 1583242 (#196)	2026-03-10 22:09:24 +00:00
argoyle	20e96e4cee	Merge pull request 'fix(k8s): remove CPU limits to resolve KubeCPUOvercommit alert' (#195) from remove-cpu-limits into main ... Reviewed-on: https://gitea.unbound.se/unboundsoftware/unbound-site/pulls/195	2026-03-01 11:25:14 +00:00