1
0
mirror of https://github.com/siderolabs/kres.git synced 2026-02-05 09:45:35 +01:00
Commit Graph

412 Commits

Author SHA1 Message Date
Oguz Kilcan
8b6181bc88 feat: support setting condition for extra jobs under gh workflow
Support setting condition for extra jobs under gh workflow

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2026-01-13 20:17:10 +01:00
Noel Georgi
0e8da31df6 chore: bump dependencies
Bump dependencies and rekres.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-08 12:19:35 +05:30
Noel Georgi
6592a3a47f feat: support environment variables for image
Support setting environment variables for image.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-08 12:03:44 +05:30
Noel Georgi
8a4aebfb00 feat: support buildx debug build
Support build debug builds.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-12-31 14:59:43 +05:30
Andrey Smirnov
26be706c3c feat: update dependencies
Update actions, go modules, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-17 15:22:07 +04:00
Edward Sammut Alessi
4b09af78f7 chore: include frontend e2e folder for linting
Copy the the frontend e2e folder to the docker container so that it is also checked with linters

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-12-09 13:26:53 +01:00
Andrey Smirnov
4c99abe35f feat: implement TAG_SUFFIX
Allow to customize image tag via a suffix, e.g. to push different
versions of the image.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-08 21:28:07 +04:00
Andrey Smirnov
5e26a1d61a feat: support custom build tags
Refactor make variables for build tags to allow multiple tags to be
enabled in the Makefile.

Allow custom build tags to be defined with respective make variables.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-08 19:56:32 +04:00
Andrey Smirnov
9fb16fe451 feat: update dependencies
Update to the latest versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-05 19:37:20 +04:00
Andrey Smirnov
571923f1bc chore: setup renovate to track refs/digests of actions
Update renovate expressions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-02 15:17:29 +04:00
Andrey Smirnov
a1a34ff9f1 feat: update dependencies, pin actions
Pin actions to the specific hash matching a release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-01 14:12:22 +04:00
Laura Brehm
e1d6dac313 chore: set default for Repository.ConformMaximumOfOneCommit to false
This patch changes the default value of
`common.Repository.ConformMaximumOfOneCommit` from `false` to `true`.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2025-11-13 16:22:52 +01:00
Noel Georgi
911d166ce5 feat: bump deps
Bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-11-07 14:25:54 +05:30
Noel Georgi
4ba9b0cf54 fix: docker annoying warnings
By setting a default as `scratch` we silence the docker annoying warnings, this also ensures that an override is set from makefile.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-11-05 19:08:18 +05:30
Edward Sammut Alessi
cd5a93870c chore: update node to latest LTS
Upgrade node version to the latest LTS version 24.11.0

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-10-29 11:05:46 +01:00
Utku Ozdemir
46e133df28 feat: allow overriding needs of custom gh action jobs
Using `needsOverride`, we can now define a custom dependency graph in the gh workflow jobs of custom steps.

An example: an integration test takes a long time, occupies a build runner: do not run them in parallel with `unit-tests` and `lint`, and make it depend on them instead.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2025-10-16 22:26:24 +02:00
Andrey Smirnov
7a9d88c90b feat: allow custom jobs to run only on main
Add a custom condition to limit push-latest.

Kres-generated push-latest is already correctly limited to main branch.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-15 19:01:38 +04:00
Utku Ozdemir
d315fc03f2 chore: bump Go and deps
Bump Go to 1.25.3 and the other dependencies/versions.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2025-10-15 10:21:03 +02:00
Oguz Kilcan
063080a99f chore: bump go to 1.25.2
See groups.google.com/g/golang-nuts/c/Gxn25BP4MXk/m/3KrM-XBOBAAJ

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-10-08 11:05:24 +02:00
Noel Georgi
97ccf82705 fix: upload .bundle files from cosign
Upload `.bundle` files from Cosign instead of `.sig`

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-07 16:43:33 +05:30
Noel Georgi
e329305180 fix: cosign generated bundle
Fixes: #580

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-07 16:27:45 +05:30
Edward Sammut Alessi
bc281a97f2 chore: update kres to include .gitignore and .storybook
Update kres to include .gitignore and .storybook for linting use

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-30 18:36:10 +02:00
Mateusz Urbanek
301c24dcd8 feat: add inputs to gh_workflow
Allow defining inputs by name in the dispatchable workflows.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-09-29 16:06:00 +02:00
Mateusz Urbanek
df5079ad7d feat: add dispatchable actions
Allow defining GH Action Workflow jobs as dispatchable
meaning they will run only on a workflow_dispatch event.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-09-29 13:33:57 +02:00
Edward Sammut Alessi
fdbc9fcb3a chore: fix invalid version scheme for node version
Fix invalid version scheme for node version

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-22 13:00:32 +02:00
Edward Sammut Alessi
24989ad5c7 chore: only use lts node
Only use LTS versions of node

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-21 21:30:19 +02:00
Edward Sammut Alessi
d7ffba2b0e chore: add frontend/msw directory to docker
Add the frontend/msw directory to docker containers

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-21 20:44:14 +02:00
Edward Sammut Alessi
80c0e43bab chore: remove frontend test dir
Remove frontend test dir as tests will be co-located

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-19 16:37:33 +02:00
Noel Georgi
065ec4ca67 fix: make sure sops steps are added for parallel jobs if enabled
Make sure to insert the SOPS steps only once if enabled.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-18 20:38:32 +05:30
Noel Georgi
ce14887199 feat: support workflow dispatch
Support `workflow_dispatch` trigger for GitHub actions.
Allow overriding `on` for custom jobs.

Also bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-16 23:19:34 +05:30
Oguz Kilcan
bcd0935be6 fix: always retrieve PR labels on default job
Always retrieve PR labels on default job

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-09-16 11:42:17 +02:00
Andrey Smirnov
06e6a5f4fb feat: implement update-checksums flow for pkgs
Based on https://github.com/siderolabs/bldr/pull/207, provide a simple
make target to quickly update checksums.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-15 20:45:35 +04:00
Andrey Smirnov
7918c5de44 fix: don't enforce lint context always
It might be that we create the target, but never consume it.

Ensure that the context is only enforced if lint is active.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-15 20:01:25 +04:00
Andrey Smirnov
d1c95db095 feat: support parallel job runs for some steps
For example: linting, unit-tests, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-11 17:06:14 +04:00
Noel Georgi
953994cf35 feat: use runner groups
Use runner groups for GitHub action to work with GHA runner scale sets.

Support `string`, `array` and `object` types for `runs-on` github action workflow syntax.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-11 14:02:00 +05:30
Andrey Smirnov
ba566731c8 fix: make JS frontend target attach to the build
Previously it was attached to the `base`, so it got into steps like
`golangci-lint` which don't care about it, but also it gets exported
back to the source tree via `make lint-golangci-lint-fmt`.

Re-attach it to the build step (where we actually need it).

Another solution is to make it part of `make generate` and keep it part
of the source tree.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-09 16:55:40 +04:00
Andrey Smirnov
83a9eb6f70 feat: add lint-fmt target
It runs all linters which can format code in a row.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-09 15:58:10 +04:00
Edward Sammut Alessi
9ebde93969 chore: add lint-eslint-fmt command to makefile/docker
Add lint-eslint-fmt command to makefile/docker to auto-fix issues

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-09 14:35:31 +04:00
Andrey Smirnov
cc456116f7 feat: update bldr to generate package dependencies in SVG
Also bump bldr to v0.5.3 enable build args.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-04 20:45:04 +04:00
Mikhail Chichvarin
784fa1ff0d feat: add support for non-GitHub remotes in DetectGit
Extend remote URL regex to handle generic git hosts, not only github.com.
Now DetectGit works for any host with a standard URL format,
while still restricting config generation to GitHub repos when required.

Signed-off-by: Misha Chichvarin <desertfury@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-28 18:14:50 +04:00
Andrey Smirnov
4a927f766c fix: disable ML-KEM/X25519 in FIPS-140 strict mode
See https://github.com/golang/go/issues/75166

This is a workaround for now with Go 1.25, a proper fix might come from
the Go side.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-27 18:38:07 +04:00
Andrey Smirnov
058c60fe06 fix: generate hack/govulncheck.sh always
Fix logical error with early exit.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-27 14:25:59 +04:00
Andrey Smirnov
4a0b905b34 feat: update bldr to v0.5.2
See https://github.com/siderolabs/bldr/releases/tag/v0.5.2

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-26 20:59:00 +04:00
Oguz Kilcan
62621167f5 fix: rollack actions-system-info GH action to previous version
Rollback `kenchan0130/actions-system-info` to v1.3.1 from v1.4.0.
Reason for this is: with v1.4.0 this action started using `node` 24 and this was causing intermittent issues on CI runs.

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-21 09:58:51 +02:00
Oguz Kilcan
18c31cfe2c chore: remove default synctest value from GOEXPERIMENT
Remove default synctest value from GOEXPERIMENT

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-20 10:44:29 +02:00
Oguz Kilcan
d1ef7680f0 fix: update dockerfile instruction order for govulncheck
Update dockerfile instruction order for govulncheck.sh

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-19 12:23:02 +02:00
Oguz Kilcan
ff3b493042 chore: update deps
Bump deps:
- github.com/uber-go/mock to v0.6.0
- github.com/google/go-github/v72 to github.com/google/go-github/v74

Rollback deps:
- Node container image to 22-alpine (LTS)

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-19 10:50:24 +02:00
Oguz Kilcan
8d5a3f68b4 chore: bump deps
Bump deps:
- Go to 1.25.0
- golangci-lint to 2.4.0
- goimports to 0.36.0
- node container image to 24-alpine
- oven/bun container image to 1.2.20-alpine
- google.golang.org/protobuf/cmd/protoc-gen-go to v1.36.7
- golang.org/x/mod to v0.27.0
- github.com/siderolabs/deep-copy to v0.5.8
- github.com/siderolabs/gen to v0.8.5
- github.com/siderolabs/pkgs to v1.11.0
- actions/checkout to v5
- kenchan0130/actions-system-info to v1.4.0

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-18 11:06:51 +02:00
Mateusz Urbanek
696c7c7796 feat: add govulncheck wrapper
This wrapper enables excluding vulnerabilities to pass scans, if we are unaffected.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-08-14 12:05:16 +02:00
Andrey Smirnov
9f63e23bda feat: add a target to run golangci-lint formatter and linter
Allows to easily fix up files in the working directory.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
Co-authored-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-08-12 21:09:08 +04:00