a247b78178
fix: markdownlint rules and daily releases ( #421 )
...
* fix: disable markdownlint table alignment rule
* fix(ci): daily release only if changes
2026-01-09 02:10:00 +02:00
renovate[bot]
56ff9a511c
chore(deps): update oven-sh/setup-bun action (v2.0.2 → v2.1.0) ( #416 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 10:02:49 +02:00
renovate[bot]
81310f9bd7
chore(deps): update oxsecurity/megalinter action (v9.2.0 → v9.3.0) ( #417 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 10:02:20 +02:00
renovate[bot]
95b8856c3f
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.18 → 0.9.22) ( #418 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 10:01:16 +02:00
renovate[bot]
e69ddbc1e2
chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.496 → 3.2.497) ( #419 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 10:00:55 +02:00
renovate[bot]
28e81adc2b
chore(deps): update pre-commit hook rhysd/actionlint (v1.7.9 → v1.7.10) ( #420 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 10:00:39 +02:00
renovate[bot]
fb25736f7e
chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.495 → 3.2.496) ( #414 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-30 08:39:35 +02:00
54886c3fd5
fix: validate-inputs actions pip installation step ( #413 )
2025-12-24 13:29:18 +02:00
renovate[bot]
fd030b418f
chore(deps): update stefanzweifel/git-auto-commit-action action (v7.0.0 → v7.1.0) ( #411 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-23 13:56:47 +02:00
96c305c557
refactor: centralize validation logic with validate_with helper ( #412 )
...
* chore: sonarcloud fixes
* chore: coderabbit cr fixes
2025-12-23 13:29:37 +02:00
renovate[bot]
5b4e9c8e11
chore(deps): update docker/setup-buildx-action action (v3.11.1 → v3.12.0) ( #410 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 07:42:23 +02:00
renovate[bot]
2d0bff84ad
chore(deps): update github/issue-metrics action (v3.25.4 → v3.25.5) ( #407 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 07:40:20 +02:00
renovate[bot]
98f260793c
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.9 → v0.14.10) ( #408 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 07:39:39 +02:00
renovate[bot]
09ae7517d6
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.17 → 0.9.18) ( #409 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 07:39:17 +02:00
renovate[bot]
61ebe619a8
chore(deps): update github/codeql-action action (v4.31.8 → v4.31.9) ( #406 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 07:38:46 +02:00
renovate[bot]
a1d55ac125
chore(deps)!: update peter-evans/create-pull-request (v7.0.11 → v8.0.0) ( #405 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 03:16:24 +02:00
renovate[bot]
db86bb2f0d
chore(deps)!: update actions/download-artifact (v6.0.0 → v7.0.0) ( #396 )
2025-12-17 23:36:39 +02:00
renovate[bot]
5e7b2fbc11
chore(deps)!: update actions/upload-artifact (v5.0.0 → v6.0.0) ( #397 )
2025-12-17 23:35:53 +02:00
renovate[bot]
43126631c2
chore(deps)!: update actions/cache (v4.3.0 → v5.0.1) ( #395 )
2025-12-17 23:35:26 +02:00
renovate[bot]
f6ed49a6dd
chore(deps): update astral-sh/setup-uv action (v7.1.5 → v7.1.6) ( #398 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 13:06:42 +02:00
renovate[bot]
23ac5dbca3
chore(deps): update github/codeql-action action (v4.31.7 → v4.31.8) ( #399 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 13:05:57 +02:00
renovate[bot]
a8031d3922
chore(deps): update raven-actions/actionlint action (v2.0.1 → v2.1.0) ( #400 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 13:05:24 +02:00
renovate[bot]
30149dd950
chore(deps): update image python to v3.14.2 ( #401 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 09:41:53 +02:00
renovate[bot]
3a3cdcdefe
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.8 → v0.14.9) ( #402 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 09:36:11 +02:00
renovate[bot]
7d28006a83
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.16 → 0.9.17) ( #403 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 09:34:05 +02:00
renovate[bot]
4008db6517
chore(deps): update markdownlint-cli2 (0.19.0 → 0.20.0) ( #404 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 09:18:09 +02:00
renovate[bot]
7aa206a02a
chore(deps): update image python to v3.14.1 ( #391 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 15:03:07 +02:00
renovate[bot]
8481bbb5cd
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.13 → 0.9.16) ( #393 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 15:02:40 +02:00
renovate[bot]
4c0068e6e7
chore(deps): update pre-commit hook davidanson/markdownlint-cli2 (v0.19.1 → v0.20.0) ( #394 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 15:02:19 +02:00
renovate[bot]
5cecfe7cbe
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.7 → v0.14.8) ( #392 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 15:02:01 +02:00
renovate[bot]
0288a1c8b8
chore(deps): update astral-sh/setup-uv action (v7.1.4 → v7.1.5) ( #390 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 07:39:13 +02:00
44a11e9773
chore: update actions, cleanup pr-lint and pre-commit ( #389 )
...
* chore: update actions, cleanup pr-lint
* chore: cleanup pre-commit config, formatting
* chore: revert sigstore/cosign-installer downgrade
* chore: formatting
2025-12-07 02:24:33 +02:00
renovate[bot]
a52399cf74
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.6 → v0.14.7) ( #385 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 18:45:39 +02:00
renovate[bot]
803165db8f
chore(deps): update docker/metadata-action action (v5.9.0 → v5.10.0) ( #387 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 18:45:19 +02:00
renovate[bot]
d69ed9e999
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.11 → 0.9.13) ( #386 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 18:44:55 +02:00
renovate[bot]
8eea6f781b
chore(deps): update pre-commit hook gitleaks/gitleaks (v8.29.1 → v8.30.0) ( #388 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 18:44:21 +02:00
renovate[bot]
4889586a94
chore(deps): update python (3.11.14 → 3.14.0) ( #382 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 09:12:42 +02:00
renovate[bot]
e02ca4d843
chore(deps): update shivammathur/setup-php action (2.35.5 → 2.36.0) ( #383 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 09:10:48 +02:00
renovate[bot]
13ef0db9ba
chore(deps): update oxsecurity/megalinter action (v9.1.0 → v9.2.0) ( #381 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 09:10:23 +02:00
renovate[bot]
c366e99ee3
chore(deps)!: update node (22.21.1 → 24.11.1) ( #380 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 07:50:44 +02:00
fbbb487332
fix(pr-lint): corepack detection, tweaks and yarn fix ( #379 )
2025-11-30 13:46:16 +02:00
abe24f8570
feat(ci): versioning change ( #378 )
...
* chore: remove bylines from actions
* feat: new daily release action
* chore(ci): ignore false positive in codeql, fix others
* fix: cr comments
2025-11-28 10:56:52 +02:00
9aa16a8164
feat: use our own actions in our workflows ( #377 )
...
* feat: use our own actions in our workflows
* fix: add missing inputs to validate-inputs, refactor node
* chore: cr comment fixes
* fix: update-validators formatting
* chore: update validators, add tests, conventions
* feat: validate severity with severity_enum
* feat: add 10 generic validators to improve input validation coverage
Add comprehensive validation system improvements across multiple phases:
Phase 2A - Quick Wins:
- Add multi_value_enum validator for 2-10 value enumerations
- Add exit_code_list validator for Unix/Linux exit codes (0-255)
- Refactor coverage_driver to use multi_value_enum
Phase 2B - High-Value Validators:
- Add key_value_list validator with shell injection prevention
- Add path_list validator with path traversal and glob support
Quick Wins - Additional Enums:
- Add network_mode validator for Docker network modes
- Add language_enum validator for language detection
- Add framework_mode validator for PHP framework modes
- Update boolean pattern to include 'push'
Phase 2C - Specialized Validators:
- Add json_format validator for JSON syntax validation
- Add cache_config validator for Docker BuildKit cache configs
Improvements:
- All validators include comprehensive security checks
- Pattern-based validation with clear error messages
- 23 new test methods with edge case coverage
- Update special case mappings for 20+ inputs
- Fix build-args mapping test expectation
Coverage impact: 22 actions now at 100% validation (88% → 92%)
Test suite: 762 → 785 tests (+23 tests, all passing)
* chore: regenerate rules.yml with improved validator coverage
Regenerate validation rules for all actions with new validators:
- compress-images: 86% → 100% (+1 input: ignore-paths)
- docker-build: 63% → 100% (+4 inputs: cache configs, platform-build-args)
- docker-publish: 73% → 100% (+1 input: build-args)
- language-version-detect: 67% → 100% (+1 input: language)
- php-tests: 89% (fixed framework→framework_mode mapping)
- prettier-lint: 86% → 100% (+2 inputs: file-pattern, plugins)
- security-scan: 86% (maintained coverage)
Overall: 23 of 25 actions now at 100% validation coverage (92%)
* fix: address PR #377 review comments
- Add | None type annotations to 6 optional parameters (PEP 604)
- Standardize injection pattern: remove @# from comma_separated_list validator
(@ and # are not shell injection vectors, allows npm scoped packages)
- Remove dead code: unused value expression in key_value_list validator
- Update tests to reflect injection pattern changes
2025-11-25 23:51:03 +02:00
e58465e5d3
chore(new-release): add prefix v, add security as type ( #376 )
...
* chore(new-release): add prefix v, add security as type
* fix(pr-lint): fix pr-lint workflow
* fix(lint): prettier format
2025-11-25 14:15:55 +02:00
9fe05efeec
chore: update workflows ( #375 )
2025-11-25 13:31:36 +02:00
449669120c
fix: pr-lint UID, use printf instead of echo, tweaks ( #374 )
2025-11-25 13:31:11 +02:00
github-actions[bot]
d9098ddead
chore: update action references to v2025 ( 5cc7373a22) ( #372 )
...
This commit updates all internal action references to point to the latest
v2025 tag SHA.
2025-11-25 12:35:25 +02:00
f37d940c72
fix: remove --verbose flag from PHPUnit command ( #373 )
...
Root Cause:
- PHPUnit 10 and 11 (released 2024) removed the --verbose flag
- Running `vendor/bin/phpunit --verbose` results in "Unknown option" error
- Multiple projects (Debian packages, Laravel) encountered this in 2024
Evidence:
- GitHub issues #5647 in sebastianbergmann/phpunit
- Debian bug reports #1070508 , #1070509 , #1070510
- Laravel framework discussion #46672
Solution:
- Remove --verbose flag from line 457
- PHPUnit's default output is sufficient for parsing
- Output parsing logic (lines 465-486) works with standard format
- Tests confirm action designed for PHPUnit 10+ output format
Impact:
- Fixes compatibility with PHPUnit 10.x and 11.x
- Maintains backward compatibility (flag was informational only)
- No change to test result parsing behavior
2025-11-25 12:25:29 +02:00
renovate[bot]
eea547998d
chore(deps): update docker/build-push-action action (v6.9.0 → v6.18.0) ( #371 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-24 07:58:54 +02:00
renovate[bot]
49159fc895
chore(deps): update actions/setup-go action (v6.0.0 → v6.1.0) ( #370 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-24 07:57:09 +02:00
