🌱 Update github-actions group #310

cluster-stack-bot · 2025-08-04T11:26:50Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	digest	`5a3ec84` -> `0400d5f`
actions/checkout	action	minor	`v4.2.2` -> `v4.3.0`
actions/checkout	action	digest	`11bd719` -> `08eba0b`
actions/create-github-app-token	action	digest	`df432ce` -> `6701853`
docker/login-action	action	minor	`v3.4.0` -> `v3.5.0`
docker/metadata-action	action	minor	`v5.7.0` -> `v5.8.0`
go	uses-with	minor	`1.24` -> `1.25`
sigstore/cosign-installer	action	minor	`v3.9.1` -> `v3.10.0`
softprops/action-gh-release	action	digest	`72f2c25` -> `6cbd405`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

docker/login-action (docker/login-action)

`v3.5.0`

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

`v5.8.0`

Compare Source

New is_not_default_branch global expression by @crazy-max in #535
Allow to match part of the git tag or value for semver/pep440 types by @crazy-max in #536 #537
Bump @actions/github from 6.0.0 to 6.0.1 in #523
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #526
Bump form-data from 2.5.1 to 2.5.5 in #533
Bump moment-timezone from 0.5.47 to 0.6.0 in #525
Bump semver from 7.7.1 to 7.7.2 in #524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

actions/go-versions (go)

`v1.25.1`: 1.25.1

Compare Source

Go 1.25.1

`v1.25.0`: 1.25.0

Compare Source

Go 1.25.0

sigstore/cosign-installer (sigstore/cosign-installer)

`v3.10.0`

Compare Source

What's Changed

Bump default Cosign to v2.6.0 in #200

Full Changelog: sigstore/cosign-installer@v3.9.2...v3.10.0

`v3.9.2`

Compare Source

What's Changed

not fail fast and setup permissions in #195
drop old unsupported versions <v2.0.0 in #192
Update default to v2.5.3 in #196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Configuration

📅 Schedule: Branch creation - "on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

cluster-stack-bot · 2025-09-13T11:17:18Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: BUILD_IMAGE_TOKEN=**redacted** BUILD_IMAGE_USER=kranurag7 CI=true ./hack/upgrade-builder-image.sh
+ set -o errexit
+ set -o nounset
+ set -o pipefail
+++ dirname ./hack/upgrade-builder-image.sh
++ realpath ./hack/..
+ REPO_ROOT=/tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator
+ cd /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator
+ source /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/hack/semver-upgrade.sh
++ set -o errexit
++ set -o nounset
++ set -o pipefail
++ set -x
+ '[' true = true ']'
+ echo **redacted**
+ docker login ghcr.io -u kranurag7 --password-stdin

WARNING! Your credentials are stored unencrypted in '/home/ubuntu/.docker/config.json'.
Configure a credential helper to remove this warning. See
https://docs.docker.com/go/credential-store/

++ git fetch --quiet origin main
++ git show origin/main:.builder-image-version.txt
+ export VERSION=1.1.33
+ VERSION=1.1.33
++ semver_upgrade patch 1.1.33
++ IFS=.
++ read -r version minor patch
++ case "$1" in
++ tag=1.1.34
++ echo 1.1.34
+ export NEW_VERSION=1.1.34
+ NEW_VERSION=1.1.34
+ echo 1.1.34
+ echo 'Wrote new version 1.1.34 to .builder-image-version.txt'
+ docker manifest inspect ghcr.io/sovereigncloudstack/cso-builder:1.1.33
+ echo 0
+ sed -i -e '/^BUILDER_IMAGE_VERSION /s/:=.*$/:= 1.1.34/' Makefile
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/build.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/kubebuilder-markers-checker.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/pr-lint.yml
+ sed -i -e '/image: ghcr\.io\/sovereigncloudstack\/cso-builder:/s/:.*$/: ghcr\.io\/sovereigncloudstack\/cso-builder:1.1.34/' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/pr-lint.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/pr-verify.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/release.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-cache-cleaner-cso-image.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-scan-image.yml
+ sed -i -e '/image: ghcr\.io\/sovereigncloudstack\/cso-builder:/s/:.*$/: ghcr\.io\/sovereigncloudstack\/cso-builder:1.1.34/' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-scan-image.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-update-bot.yaml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/test.yml
+ docker build -t ghcr.io/sovereigncloudstack/cso-builder:1.1.34 ./images/builder
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
            Install the buildx component to build images with BuildKit:
            https://docs.docker.com/go/buildx/

The command '/bin/sh -c apk add -U --no-cache     curl     clusterctl=~${CLUSTERCTL_VERSION#v}     controller-gen=~${CONTROLLER_GEN_VERSION#v}     helm=~${HELM_VERSION#v}     kind=~${KIND_VERSION#v}     kubectl=~${KUBECTL_VERSION#v}     kustomize=~${KUSTOMIZE_VERSION#v}     trivy=~${TRIVY_VERSION#v}' returned a non-zero code: 3

cluster-stack-bot · 2025-09-19T11:19:34Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

| datasource | package | from | to | | --------------- | ------------------------- | ------ | ------- | | github-tags | actions/checkout | v4.2.2 | v4.3.0 | | github-tags | docker/login-action | v3.4.0 | v3.5.0 | | github-tags | docker/metadata-action | v5.7.0 | v5.8.0 | | github-releases | actions/go-versions | 1.24.7 | 1.25.1 | | github-tags | sigstore/cosign-installer | v3.9.1 | v3.10.0 |

Signed-off-by: Jan Schoone <jan.schoone@uhurutec.com>

cluster-stack-bot bot added type/minor update/github-action labels Aug 4, 2025

cluster-stack-bot bot changed the title ~~🌱 Update Github Actions group to v5.8.0~~ 🌱 Update github-actions group (minor) Aug 5, 2025

cluster-stack-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from d5a9120 to b92c47c Compare August 8, 2025 11:25

cluster-stack-bot bot changed the title ~~🌱 Update github-actions group (minor)~~ 🌱 Update github-actions group Aug 8, 2025

cluster-stack-bot bot force-pushed the renovate/github-actions branch 4 times, most recently from 2056564 to 90640fb Compare August 13, 2025 11:24

cluster-stack-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from ac9e8b7 to d07d01e Compare September 13, 2025 11:17

jschoone force-pushed the renovate/github-actions branch 2 times, most recently from 6990bd5 to 98ef78a Compare September 19, 2025 20:08

update controller-tools

350c80f

Signed-off-by: Jan Schoone <jan.schoone@uhurutec.com>

jschoone approved these changes Sep 19, 2025

View reviewed changes

jschoone merged commit 72fd1b1 into main Sep 19, 2025
10 checks passed

jschoone deleted the renovate/github-actions branch September 19, 2025 20:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🌱 Update github-actions group #310

🌱 Update github-actions group #310

Uh oh!

cluster-stack-bot bot commented Aug 4, 2025 •

edited by jschoone

Loading

Uh oh!

cluster-stack-bot bot commented Sep 13, 2025

Uh oh!

cluster-stack-bot bot commented Sep 19, 2025

Uh oh!

Uh oh!

Uh oh!

🌱 Update github-actions group #310

🌱 Update github-actions group #310

Uh oh!

Conversation

cluster-stack-bot bot commented Aug 4, 2025 • edited by jschoone Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.3.0

What's Changed

New Contributors

v3.5.0

v5.8.0

v1.25.1: 1.25.1

v1.25.0: 1.25.0

v3.10.0

What's Changed

v3.9.2

What's Changed

Configuration

Uh oh!

cluster-stack-bot bot commented Sep 13, 2025

⚠️ Artifact update problem

File name: undefined

Uh oh!

cluster-stack-bot bot commented Sep 19, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

Uh oh!

cluster-stack-bot bot commented Aug 4, 2025 •

edited by jschoone

Loading

`v4.3.0`

`v3.5.0`

`v5.8.0`

`v1.25.1`: 1.25.1

`v1.25.0`: 1.25.0

`v3.10.0`

`v3.9.2`