renovate[bot]
|
cbfddb2433
|
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.22 → 0.9.24) (#424)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2026.01.13
|
2026-01-13 07:15:16 +02:00 |
|
renovate[bot]
|
5664cdbfbf
|
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.10 → v0.14.11) (#423)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2026-01-13 07:14:48 +02:00 |
|
renovate[bot]
|
e740f9d893
|
chore(deps): update astral-sh/setup-uv action (v7.1.6 → v7.2.0) (#422)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2026.01.12
|
2026-01-12 16:35:21 +02:00 |
|
|
|
a247b78178
|
fix: markdownlint rules and daily releases (#421)
* fix: disable markdownlint table alignment rule
* fix(ci): daily release only if changes
v2026.01.09
|
2026-01-09 02:10:00 +02:00 |
|
renovate[bot]
|
56ff9a511c
|
chore(deps): update oven-sh/setup-bun action (v2.0.2 → v2.1.0) (#416)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2026.01.08
v2026.01.07
|
2026-01-07 10:02:49 +02:00 |
|
renovate[bot]
|
81310f9bd7
|
chore(deps): update oxsecurity/megalinter action (v9.2.0 → v9.3.0) (#417)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2026-01-07 10:02:20 +02:00 |
|
renovate[bot]
|
95b8856c3f
|
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.18 → 0.9.22) (#418)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2026-01-07 10:01:16 +02:00 |
|
renovate[bot]
|
e69ddbc1e2
|
chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.496 → 3.2.497) (#419)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2026-01-07 10:00:55 +02:00 |
|
renovate[bot]
|
28e81adc2b
|
chore(deps): update pre-commit hook rhysd/actionlint (v1.7.9 → v1.7.10) (#420)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2026-01-07 10:00:39 +02:00 |
|
renovate[bot]
|
fb25736f7e
|
chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.495 → 3.2.496) (#414)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2026.01.05
v2026.01.04
v2025.12.30
v2025.12.31
v2026.01.01
v2026.01.02
v2026.01.03
v2026.01.06
|
2025-12-30 08:39:35 +02:00 |
|
|
|
54886c3fd5
|
fix: validate-inputs actions pip installation step (#413)
v2025.12.28
v2025.12.29
v2025.12.27
v2025.12.26
v2025.12.25
v2025.12.24
|
2025-12-24 13:29:18 +02:00 |
|
renovate[bot]
|
fd030b418f
|
chore(deps): update stefanzweifel/git-auto-commit-action action (v7.0.0 → v7.1.0) (#411)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2025.12.23
|
2025-12-23 13:56:47 +02:00 |
|
|
|
96c305c557
|
refactor: centralize validation logic with validate_with helper (#412)
* chore: sonarcloud fixes
* chore: coderabbit cr fixes
|
2025-12-23 13:29:37 +02:00 |
|
renovate[bot]
|
5b4e9c8e11
|
chore(deps): update docker/setup-buildx-action action (v3.11.1 → v3.12.0) (#410)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2025.12.22
|
2025-12-22 07:42:23 +02:00 |
|
renovate[bot]
|
2d0bff84ad
|
chore(deps): update github/issue-metrics action (v3.25.4 → v3.25.5) (#407)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-22 07:40:20 +02:00 |
|
renovate[bot]
|
98f260793c
|
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.9 → v0.14.10) (#408)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-22 07:39:39 +02:00 |
|
renovate[bot]
|
09ae7517d6
|
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.17 → 0.9.18) (#409)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-22 07:39:17 +02:00 |
|
renovate[bot]
|
61ebe619a8
|
chore(deps): update github/codeql-action action (v4.31.8 → v4.31.9) (#406)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-22 07:38:46 +02:00 |
|
renovate[bot]
|
a1d55ac125
|
chore(deps)!: update peter-evans/create-pull-request (v7.0.11 → v8.0.0) (#405)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-22 03:16:24 +02:00 |
|
renovate[bot]
|
db86bb2f0d
|
chore(deps)!: update actions/download-artifact (v6.0.0 → v7.0.0) (#396)
v2025.12.20
v2025.12.21
v2025.12.19
v2025.12.18
|
2025-12-17 23:36:39 +02:00 |
|
renovate[bot]
|
5e7b2fbc11
|
chore(deps)!: update actions/upload-artifact (v5.0.0 → v6.0.0) (#397)
|
2025-12-17 23:35:53 +02:00 |
|
renovate[bot]
|
43126631c2
|
chore(deps)!: update actions/cache (v4.3.0 → v5.0.1) (#395)
|
2025-12-17 23:35:26 +02:00 |
|
renovate[bot]
|
f6ed49a6dd
|
chore(deps): update astral-sh/setup-uv action (v7.1.5 → v7.1.6) (#398)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2025.12.16
v2025.12.17
|
2025-12-16 13:06:42 +02:00 |
|
renovate[bot]
|
23ac5dbca3
|
chore(deps): update github/codeql-action action (v4.31.7 → v4.31.8) (#399)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-16 13:05:57 +02:00 |
|
renovate[bot]
|
a8031d3922
|
chore(deps): update raven-actions/actionlint action (v2.0.1 → v2.1.0) (#400)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-16 13:05:24 +02:00 |
|
renovate[bot]
|
30149dd950
|
chore(deps): update image python to v3.14.2 (#401)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-16 09:41:53 +02:00 |
|
renovate[bot]
|
3a3cdcdefe
|
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.8 → v0.14.9) (#402)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-16 09:36:11 +02:00 |
|
renovate[bot]
|
7d28006a83
|
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.16 → 0.9.17) (#403)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-16 09:34:05 +02:00 |
|
renovate[bot]
|
4008db6517
|
chore(deps): update markdownlint-cli2 (0.19.0 → 0.20.0) (#404)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-16 09:18:09 +02:00 |
|
renovate[bot]
|
7aa206a02a
|
chore(deps): update image python to v3.14.1 (#391)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2025.12.11
v2025.12.13
v2025.12.15
v2025.12.14
v2025.12.12
v2025.12.10
v2025.12.08
v2025.12.09
|
2025-12-08 15:03:07 +02:00 |
|
renovate[bot]
|
8481bbb5cd
|
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.13 → 0.9.16) (#393)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-08 15:02:40 +02:00 |
|
renovate[bot]
|
4c0068e6e7
|
chore(deps): update pre-commit hook davidanson/markdownlint-cli2 (v0.19.1 → v0.20.0) (#394)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-08 15:02:19 +02:00 |
|
renovate[bot]
|
5cecfe7cbe
|
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.7 → v0.14.8) (#392)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-08 15:02:01 +02:00 |
|
renovate[bot]
|
0288a1c8b8
|
chore(deps): update astral-sh/setup-uv action (v7.1.4 → v7.1.5) (#390)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-08 07:39:13 +02:00 |
|
|
|
44a11e9773
|
chore: update actions, cleanup pr-lint and pre-commit (#389)
* chore: update actions, cleanup pr-lint
* chore: cleanup pre-commit config, formatting
* chore: revert sigstore/cosign-installer downgrade
* chore: formatting
v2025.12.07
|
2025-12-07 02:24:33 +02:00 |
|
renovate[bot]
|
a52399cf74
|
chore(deps): update pre-commit hook astral-sh/ruff-pre-commit (v0.14.6 → v0.14.7) (#385)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
v2025.12.06
v2025.12.04
v2025.12.05
v2025.12.02
v2025.12.01
v2025.12.03
|
2025-12-01 18:45:39 +02:00 |
|
renovate[bot]
|
803165db8f
|
chore(deps): update docker/metadata-action action (v5.9.0 → v5.10.0) (#387)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 18:45:19 +02:00 |
|
renovate[bot]
|
d69ed9e999
|
chore(deps): update pre-commit hook astral-sh/uv-pre-commit (0.9.11 → 0.9.13) (#386)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 18:44:55 +02:00 |
|
renovate[bot]
|
8eea6f781b
|
chore(deps): update pre-commit hook gitleaks/gitleaks (v8.29.1 → v8.30.0) (#388)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 18:44:21 +02:00 |
|
renovate[bot]
|
4889586a94
|
chore(deps): update python (3.11.14 → 3.14.0) (#382)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 09:12:42 +02:00 |
|
renovate[bot]
|
e02ca4d843
|
chore(deps): update shivammathur/setup-php action (2.35.5 → 2.36.0) (#383)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 09:10:48 +02:00 |
|
renovate[bot]
|
13ef0db9ba
|
chore(deps): update oxsecurity/megalinter action (v9.1.0 → v9.2.0) (#381)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 09:10:23 +02:00 |
|
renovate[bot]
|
c366e99ee3
|
chore(deps)!: update node (22.21.1 → 24.11.1) (#380)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2025-12-01 07:50:44 +02:00 |
|
|
|
fbbb487332
|
fix(pr-lint): corepack detection, tweaks and yarn fix (#379)
v2025.11.30
|
2025-11-30 13:46:16 +02:00 |
|
|
|
abe24f8570
|
feat(ci): versioning change (#378)
* chore: remove bylines from actions
* feat: new daily release action
* chore(ci): ignore false positive in codeql, fix others
* fix: cr comments
v2025.11.28
v2025.11.29
|
2025-11-28 10:56:52 +02:00 |
|
|
|
9aa16a8164
|
feat: use our own actions in our workflows (#377)
* feat: use our own actions in our workflows
* fix: add missing inputs to validate-inputs, refactor node
* chore: cr comment fixes
* fix: update-validators formatting
* chore: update validators, add tests, conventions
* feat: validate severity with severity_enum
* feat: add 10 generic validators to improve input validation coverage
Add comprehensive validation system improvements across multiple phases:
Phase 2A - Quick Wins:
- Add multi_value_enum validator for 2-10 value enumerations
- Add exit_code_list validator for Unix/Linux exit codes (0-255)
- Refactor coverage_driver to use multi_value_enum
Phase 2B - High-Value Validators:
- Add key_value_list validator with shell injection prevention
- Add path_list validator with path traversal and glob support
Quick Wins - Additional Enums:
- Add network_mode validator for Docker network modes
- Add language_enum validator for language detection
- Add framework_mode validator for PHP framework modes
- Update boolean pattern to include 'push'
Phase 2C - Specialized Validators:
- Add json_format validator for JSON syntax validation
- Add cache_config validator for Docker BuildKit cache configs
Improvements:
- All validators include comprehensive security checks
- Pattern-based validation with clear error messages
- 23 new test methods with edge case coverage
- Update special case mappings for 20+ inputs
- Fix build-args mapping test expectation
Coverage impact: 22 actions now at 100% validation (88% → 92%)
Test suite: 762 → 785 tests (+23 tests, all passing)
* chore: regenerate rules.yml with improved validator coverage
Regenerate validation rules for all actions with new validators:
- compress-images: 86% → 100% (+1 input: ignore-paths)
- docker-build: 63% → 100% (+4 inputs: cache configs, platform-build-args)
- docker-publish: 73% → 100% (+1 input: build-args)
- language-version-detect: 67% → 100% (+1 input: language)
- php-tests: 89% (fixed framework→framework_mode mapping)
- prettier-lint: 86% → 100% (+2 inputs: file-pattern, plugins)
- security-scan: 86% (maintained coverage)
Overall: 23 of 25 actions now at 100% validation coverage (92%)
* fix: address PR #377 review comments
- Add | None type annotations to 6 optional parameters (PEP 604)
- Standardize injection pattern: remove @# from comma_separated_list validator
(@ and # are not shell injection vectors, allows npm scoped packages)
- Remove dead code: unused value expression in key_value_list validator
- Update tests to reflect injection pattern changes
v25.11.26
|
2025-11-25 23:51:03 +02:00 |
|
|
|
e58465e5d3
|
chore(new-release): add prefix v, add security as type (#376)
* chore(new-release): add prefix v, add security as type
* fix(pr-lint): fix pr-lint workflow
* fix(lint): prettier format
v25.11.25
|
2025-11-25 14:15:55 +02:00 |
|
|
|
9fe05efeec
|
chore: update workflows (#375)
|
2025-11-25 13:31:36 +02:00 |
|
|
|
449669120c
|
fix: pr-lint UID, use printf instead of echo, tweaks (#374)
|
2025-11-25 13:31:11 +02:00 |
|
github-actions[bot]
|
d9098ddead
|
chore: update action references to v2025 (5cc7373a22) (#372)
This commit updates all internal action references to point to the latest
v2025 tag SHA.
|
2025-11-25 12:35:25 +02:00 |
|
