Skip to content

Latest commit

 

History

History
333 lines (306 loc) · 16.3 KB

File metadata and controls

333 lines (306 loc) · 16.3 KB

GitHub Workflows Release Notes

0.0.3-dev - 2026-04-15

Features

  • python workflow: ensure python version consistency (PR #246 by @chicco785)
  • add-to-project wf: add stale issues bot (PR #231 by @chicco785)
  • support ALL for deployment (PR #222 by @chicco785)
  • Support secret injection via .env during docker image build (PR #220 by @chicco785)
  • license workflow: support python licence check (PR #211 by @chicco785)
  • workflows: use official action to create github app tokens and support additional repositories scoping (PR #207 by @chicco785)
  • python workflow: load python version from pyproject.yaml (PR #202 by @chicco785)
  • Add linter for github actions (PR #193 by @chicco785)
  • python workflow: add option to upload output as artefact (PR #190 by @chicco785)
  • Python workflow: add poetry.lock and pyproject.toml to change list (PR #178 by @chicco785)
  • Approve-and-merge workflow: rebase before approval (PR #179 by @chicco785)
  • Add python workflow (PR #174 by @chicco785)
  • approve-and-merge: add workflow that automatically approve and merge PRs by dependabot (PR #170 by @chicco785)
  • docker workflow: pass token to prebuild step (PR #169 by @chicco785)
  • golang workflow: support dvc data pulling for tests (PR #165 by @hiimjako)
  • Pass Github Token to Docker build process (PR #157 by @chicco785)
  • docker workflow: support private repository checkout (PR #156 by @chicco785)
  • docker workflow: support submodules initialisation (PR #155 by @gtauzin)
  • Use linkspector to check links (PR #148 by @chicco785)
  • docker workflow: add javascript mode for cache (PR #146 by @chicco785)
  • Add workflow to create a new release (PR #145 by @chicco785)
  • golang workflow: include .sql and .docker/*.yml files in golang changes filter (PR #142 by @chicco785)
  • Golang & Docker workflows: add db caching to trivy (PR #138 by @chicco785)
  • Support Customer Label (PR #136 by @chicco785)
  • docker wf: support concurrent image builds (PR #121 by @chicco785)
  • license, docker, golang, release notes workflows: support SBOM generation, license compatibility check and vulnerability check (PR #116 by @chicco785)
  • Add the deployment workflow (PR #115 by @cosimomeli)
  • markdown workflow: Use quiet mode for link checker (PR #112 by @chicco785)
  • golang workflow: add input variable for alert threshold (PR #101 by @chicco785)
  • docker workflow: execute only if the pr actor is not dependabot or labels contains docker (PR #99 by @chicco785)
  • golang workflow: skip code coverage if the actor is dependabot (PR #100 by @cosimomeli)
  • markdown workflow: run spellcheck only on actually changed *.md files (PR #96 by @chicco785)
  • Support different grammar check modalities (local and online) in the script (PR #89 by @chicco785)

Bug Fixes

  • python workflow: fix missing registry login to fetch private images (PR #281 by @chicco785)
  • Fix DVC version 3.66.1 (PR #278 by @cosimomeli)
  • Minor fixes: python / auto-approve wf (PR #272 by @chicco785)
  • markdown: Enable Corepack for modern package managers (PR #271 by @chicco785)
  • approve-and-merge: fix continuous approval loops (PR #215 by @chicco785)
  • Temporary fix for dvc boto3 import issue (PR #228 by @chicco785)
  • deployment: fix app token scope (PR #209 by @cosimomeli)
  • release notes: fix not progressive releases and detached head commits (PR #206 by @chicco785)
  • docker workflow: updated tags type priority values (PR #201 by @frank-flour24)
  • new-release workflow: resolves issues (PR #195 by @kwitekrac)
  • Run Docker Build after Dependabot merged PR (PR #171 by @cosimomeli)
  • Release notes workflow: fix sbom generation (PR #166 by @chicco785)
  • Fix link check for vendor folders in subdirectories (PR #147 by @chicco785)
  • deployment workflow: fix yaml-update-action@v1 is not available (PR #139 by @chicco785)
  • deployment workflow: fix tag version extraction (PR #137 by @cosimomeli)
  • Fix vulnerability-scan typo (PR #133 by @cosimomeli)
  • golang workflow: fix changes check (PR #130 by @chicco785)
  • Fix deployment workflow on PRs (PR #120 by @cosimomeli)

Continuous Integration

  • Separate issue management from project management (PR #236 by @chicco785)
  • new-release workflow: delegate to makefile the update of project files (PR #192 by @kwitekrac)
  • docker workflow: support golang build caching (PR #124 by @chicco785)
  • Move sonarcloud checks to test job (PR #119 by @chicco785)

Security

  • Workflow hardening: markdown / python / license / deployment / golang / release-note / new-release (PR #268 by @chicco785)
  • Workflow hardening: check-pr / docker / add-to-project (PR #269 by @chicco785)
  • Fix trivy action to a secure version (PR #266 by @chicco785)
  • add-to-project wf: add job to sync priority in projects with labels for Vanta (PR #229 by @chicco785)
  • Pass github token to docker build as secret (PR #163 by @chicco785)

Dependencies

  • Bump SonarSource/sonarqube-scan-action from 7.0.0 to 7.1.0 (PR #279 by @dependabot[bot])
  • Bump stefanzweifel/git-auto-commit-action from 5 to 7 (PR #273 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 22 to 23 (PR #275 by @dependabot[bot])
  • Bump actions/download-artifact from 4 to 8 (PR #274 by @dependabot[bot])
  • Bump oras-project/setup-oras from 1 to 2 (PR #280 by @dependabot[bot])
  • Bump actions/github-script from 7 to 8 (PR #276 by @dependabot[bot])
  • Support dvc[s3]==3.67.0 (PR #277 by @chicco785)
  • Bump EndBug/add-and-commit from 9 to 10 (PR #264 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 18 to 19 (PR #265 by @dependabot[bot])
  • Bump actions/create-github-app-token from 2 to 3 (PR #261 by @dependabot[bot])
  • Bump dorny/paths-filter from 3 to 4 (PR #259 by @dependabot[bot])
  • Bump docker/login-action from 3 to 4 (PR #262 by @dependabot[bot])
  • Bump mikepenz/action-gh-release from 1 to 2 (PR #260 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 16 to 18 (PR #263 by @dependabot[bot])
  • Bump docker/setup-qemu-action from 3 to 4 (PR #255 by @dependabot[bot])
  • Bump aquasecurity/trivy-action from 0.34.0 to 0.35.0 (PR #257 by @dependabot[bot])
  • Bump docker/metadata-action from 5 to 6 (PR #256 by @dependabot[bot])
  • Bump docker/build-push-action from 6 to 7 (PR #254 by @dependabot[bot])
  • Bump docker/setup-buildx-action from 3 to 4 (PR #258 by @dependabot[bot])
  • Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (PR #247 by @dependabot[bot])
  • Bump reproducible-containers/buildkit-cache-dance from 3.3.1 to 3.3.2 (PR #252 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 15 to 16 (PR #251 by @dependabot[bot])
  • Bump actions/upload-artifact from 6 to 7 (PR #253 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 14 to 15 (PR #250 by @dependabot[bot])
  • Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 in /.github/workflows (PR #249 by @dependabot[bot])
  • Bump actions/cache from 4 to 5 (PR #248 by @dependabot[bot])
  • Bump reproducible-containers/buildkit-cache-dance from 3.3.0 to 3.3.1 (PR #244 by @dependabot[bot])
  • Bump WyriHaximus/github-action-get-previous-tag from 1 to 2 (PR #245 by @dependabot[bot])
  • Bump aws-actions/configure-aws-credentials from 5 to 6 (PR #243 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 12 to 14 (PR #241 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 11 to 12 (PR #227 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 6.0.0 to 7.0.0 (PR #225 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 21 to 22 (PR #223 by @dependabot[bot])
  • Bump actions/upload-artifact from 5 to 6 (PR #226 by @dependabot[bot])
  • Bump actions/cache from 4 to 5 (PR #224 by @dependabot[bot])
  • Bump actions/checkout from 5 to 6 (PR #219 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 20 to 21 (PR #218 by @dependabot[bot])
  • Bump golangci/golangci-lint-action from 8 to 9 (PR #217 by @dependabot[bot])
  • Bump mikepenz/release-changelog-builder-action from 5 to 6 (PR #216 by @dependabot[bot])
  • Bump actions/upload-artifact from 4 to 5 (PR #214 by @dependabot[bot])
  • Bump apache/skywalking-eyes from 0.7.0 to 0.8.0 (PR #212 by @dependabot[bot])
  • Bump actions/setup-node from 5 to 6 (PR #213 by @dependabot[bot])
  • Bump stefanzweifel/git-auto-commit-action from 6 to 7 (PR #210 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 5.3.1 to 6.0.0 (PR #203 by @dependabot[bot])
  • Bump actions/setup-python from 5 to 6 (PR #198 by @dependabot[bot])
  • Bump actions/setup-go from 5 to 6 (PR #200 by @dependabot[bot])
  • Bump aws-actions/configure-aws-credentials from 4 to 5 (PR #197 by @dependabot[bot])
  • Bump actions/github-script from 7 to 8 (PR #196 by @dependabot[bot])
  • Bump actions/setup-node from 4 to 5 (PR #199 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 5.3.0 to 5.3.1 (PR #191 by @dependabot[bot])
  • Bump actions/checkout from 4 to 5 (PR #189 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 5.2.0 to 5.3.0 (PR #188 by @dependabot[bot])
  • Bump reproducible-containers/buildkit-cache-dance from 3.2.0 to 3.3.0 (PR #186 by @dependabot[bot])
  • Bump stefanzweifel/git-auto-commit-action from 5 to 6 (PR #182 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 10 to 11 (PR #183 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 9 to 10 (PR #180 by @dependabot[bot])
  • Bump fjogeleit/yaml-update-action from 0.16.0 to 0.16.1 (PR #177 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 19 to 20 (PR #176 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 5.1.0 to 5.2.0 (PR #175 by @dependabot[bot])
  • Bump reproducible-containers/buildkit-cache-dance from 3.1.2 to 3.2.0 (PR #172 by @dependabot[bot])
  • Bump golangci/golangci-lint-action from 7 to 8 (PR #173 by @dependabot[bot])
  • Bump golangci/golangci-lint-action from 6 to 7 (PR #167 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 5.0.0 to 5.1.0 (PR #168 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 8 to 9 (PR #164 by @dependabot[bot])
  • Bump apache/skywalking-eyes from 0.6.0 to 0.7.0 (PR #161 by @dependabot[bot])
  • Bump SonarSource/sonarqube-scan-action from 4.2.1 to 5.0.0 (PR #162 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 7 to 8 (PR #158 by @dependabot[bot])
  • golang and docker workflows: Update trivy configuration to last github action version (PR #140 by @chicco785)
  • Use SonarSource/sonarqube-scan-action (PR #153 by @chicco785)
  • Bump DavidAnson/markdownlint-cli2-action from 18 to 19 (PR #152 by @dependabot[bot])
  • Bump fjogeleit/yaml-update-action from 0.15.0 to 0.16.0 (PR #151 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 6 to 7 (PR #143 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 17 to 18 (PR #141 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 16 to 17 (PR #134 by @dependabot[bot])
  • Bump mikepenz/release-changelog-builder-action from 4 to 5 (PR #132 by @dependabot[bot])
  • Bump reproducible-containers/buildkit-cache-dance from 3.1.1 to 3.1.2 (PR #129 by @dependabot[bot])
  • Bump docker/build-push-action from 5 to 6 (PR #125 by @dependabot[bot])
  • Bump actions/add-to-project from 1.0.1 to 1.0.2 (PR #127 by @dependabot[bot])
  • Bump reproducible-containers/buildkit-cache-dance from 3.1.0 to 3.1.1 (PR #128 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 5 to 6 (PR #126 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 4 to 5 (PR #123 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 3 to 4 (PR #122 by @dependabot[bot])
  • Bump fjogeleit/yaml-update-action from 0.14.0 to 1 (PR #118 by @dependabot[bot])
  • Bump golangci/golangci-lint-action from 5 to 6 (PR #117 by @dependabot[bot])
  • Bump golangci/golangci-lint-action from 4 to 5 (PR #110 by @dependabot[bot])
  • Bump mikepenz/action-gh-release from 0.2.0.pre.a03 to 1 (PR #106 by @dependabot[bot])
  • Bump actions/add-to-project from 1.0.0 to 1.0.1 (PR #107 by @dependabot[bot])
  • Bump DavidAnson/markdownlint-cli2-action from 15 to 16 (PR #105 by @dependabot[bot])
  • Bump apache/skywalking-eyes from 0.5.0 to 0.6.0 (PR #104 by @dependabot[bot])
  • Bump actions/add-to-project from 0.6.0 to 1.0.0 (PR #103 by @dependabot[bot])
  • Bump actions/add-to-project from 0.5.0 to 0.6.0 (PR #97 by @dependabot[bot])
  • Bump golangci/golangci-lint-action from 3 to 4 (PR #91 by @dependabot[bot])
  • Bump EndBug/add-and-commit from 4 to 9 (PR #93 by @dependabot[bot])
  • Bump dawidd6/action-download-artifact from 2 to 3 (PR #94 by @dependabot[bot])
  • Bump stefanzweifel/git-auto-commit-action from 4 to 5 (PR #92 by @dependabot[bot])

Refactoring

  • Replace PAT secrets with github app tokens (PR #204 by @chicco785)
  • Reduce number of wf run when pr are in draft mode (PR #160 by @chicco785)

0.0.2 - 2024-02-09

Features

  • Run release note, license management and markdown workflows only on ready for review PRs (PR #72 by @chicco785)
  • golang: remove code coverage annotations (PR #76 by @hiimjako)
  • markdown workflow: extend link checker configuration example to allow 429 status (PR #62 by @chicco785)
  • golang: add docker login on test and benchmark workflows (PR #64 by @cosimomeli)
  • docker workflow: add git and build information as build arguments (PR #63 by @cosimomeli)
  • add workflow to support license management (PR #58 by @chicco785)
  • docker workflow: add pre-build step (PR #57 by @cosimomeli)
  • markdown workflow: add optional spell checker (PR #44 by @chicco785)
  • add-to-project workflow: add support to assign multiple teams as reviewers (comma separated without space) (PR #42 by @chicco785)
  • Add Docker, Golang and Docker Clean Up workflows (PR #54 by @cosimomeli)
  • markdown workflow: run jobs only when there are changes to markdown related files (PR #52 by @chicco785)
  • add-to-project workflow: set PR on creation to 🏗 In progress and when ready to 🔖 Ready (PR #50 by @chicco785)
  • markdown workflow: exclude vendor folder from links check (PR #47 by @tejo)
  • markdown workflow: exclude vendor folder from checks (PR #46 by @tejo)
  • add-to-project workflow: automatically add reviewers without need of CODEOWNERS (PR #37 by @chicco785)
  • add-to-project workflow: automatically assign PR to its creator (PR #36 by @chicco785)
  • add-to-project workflow: make project URL configurable as input parameter (PR #33 by @chicco785)
  • add-to-project workflow: make labels configurable as inputs (PR #27 by @chicco785)
  • Markdown workflow: use customised prettier action (PR #19 by @chicco785)

Bug Fixes

  • Compute correctly PR number in the case of PR review (PR #88 by @chicco785)
  • golang workflow: use current branch if base_ref not available (PR #74 by @cosimomeli)
  • markdown workflow: support correctly .prettierignore (PR #65 by @chicco785)
  • pr-check workflow: pass correctly input.labels (PR #67 by @chicco785)
  • markdown workflow: fix check to enable/disable spellchecker (PR #55 by @chicco785)
  • golang workflow: add shell configuration to enable pipefail for benchmark job (PR #56 by @cosimomeli)
  • add-to-project workflow: Fix assignment of reviewers also when PR is still in draft mode (PR #40 by @chicco785)
  • Release-notes workflow: fix default configuration to include only current PR among open PRs (PR #34 by @chicco785)
  • Markdown workflow: support both .md and .MD extension for markdown files (PR #24 by @chicco785)
  • Markdown workflow: include a step using a sed script to remove the added - by stefanzweifel/changelog-updater-action@v1 (PR #20 by @chicco785)
  • Clean up storage workflow: Add jq to artefact clean up script (PR #12 by @chicco785)

Continuous Integration

  • Add dependabot (PR #81 by @chicco785)
  • Lower annotation pollution on PRs (PR #68 by @hiimjako)
  • use new action for markdown (PR #15 by @chicco785)
  • Add job to clean up artefacts on PR closure (PR #9 by @chicco785)
  • Add workflow to clean-up action cache on PR closure (PR #8 by @chicco785)

Dependencies

  • Bump actions/setup-go from 4 to 5 (PR #86 by @dependabot[bot])
  • Bump actions/upload-artifact from 3 to 4 (PR #82 by @dependabot[bot])

Refactoring

  • replace check speller with npx gramma (PR #80 by @chicco785)
  • release notes workflow: remove work around to fix broken lists (PR #28 by @chicco785)

0.0.1 - 2023-06-21

Documentation

  • fix workflows to work on github-workflows repository (PR #2 by @chicco785)