From b2c209cbc021e14b213f2e6973845cb34d9f90e4 Mon Sep 17 00:00:00 2001 From: Matthias Kesler Date: Mon, 7 Oct 2024 17:48:42 +0200 Subject: [PATCH 1/8] update restic --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 9cf220b..1583f04 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,7 +4,7 @@ FROM alpine:latest as rclone ADD https://downloads.rclone.org/rclone-current-linux-amd64.zip / RUN unzip rclone-current-linux-amd64.zip && mv rclone-*-linux-amd64/rclone /bin/rclone && chmod +x /bin/rclone -FROM restic/restic:0.16.0 +FROM restic/restic:0.17.1 RUN apk add --update --no-cache curl mailx From 1b7d44a85e386e401b7839bb025721e7da184333 Mon Sep 17 00:00:00 2001 From: Matthias Kesler Date: Mon, 7 Oct 2024 17:58:08 +0200 Subject: [PATCH 2/8] update github workflow dependencies --- .github/workflows/docker-publish.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index cec15e2..d120242 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -33,25 +33,25 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign if: github.event_name != 'pull_request' - uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1 + uses: sigstore/cosign-installer@v3.7.0 with: - cosign-release: 'v2.1.1' + cosign-release: 'v2.4.1' # Workaround: https://github.com/docker/build-push-action/issues/461 - name: Setup Docker buildx - uses: docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf + uses: docker/setup-buildx-action@v3 # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} if: github.event_name != 'pull_request' - uses: docker/login-action@28218f9b04b4f3f62068d7b6ce6ca5b26e35336c + uses: docker/login-action@v3 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -61,7 +61,7 @@ jobs: # https://github.com/docker/metadata-action - name: Extract Docker metadata id: meta - uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38 + uses: docker/metadata-action@v5 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} @@ -69,7 +69,7 @@ jobs: # https://github.com/docker/build-push-action - name: Build and push Docker image id: build-and-push - uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a + uses: docker/build-push-action@v6 with: context: . push: ${{ github.event_name != 'pull_request' }} From 157bc075335e45437de9f058e649e8f0316b39e6 Mon Sep 17 00:00:00 2001 From: Matthias Kesler Date: Fri, 15 Nov 2024 18:51:46 +0100 Subject: [PATCH 3/8] Update to restic 0.17.3 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 1583f04..8e82140 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,7 +4,7 @@ FROM alpine:latest as rclone ADD https://downloads.rclone.org/rclone-current-linux-amd64.zip / RUN unzip rclone-current-linux-amd64.zip && mv rclone-*-linux-amd64/rclone /bin/rclone && chmod +x /bin/rclone -FROM restic/restic:0.17.1 +FROM restic/restic:0.17.3 RUN apk add --update --no-cache curl mailx From 0fd1e1da91cfff348543531e2fd27ef4129208fd Mon Sep 17 00:00:00 2001 From: Matthias Kesler Date: Thu, 16 Jan 2025 18:52:25 +0100 Subject: [PATCH 4/8] Create dependabot.yml --- .github/dependabot.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..4a3a908 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +# Docs: +version: 2 + +updates: + - package-ecosystem: github-actions + directory: / + schedule: {interval: monthly} + reviewers: [krombel] + assignees: [krombel] + + - package-ecosystem: docker + directory: / + schedule: {interval: monthly} + reviewers: [krombel] + assignees: [krombel] From 04fa95a5bed668faeb56e219904afe8c84c8b3c3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Mar 2025 10:29:46 +0000 Subject: [PATCH 5/8] Bump sigstore/cosign-installer from 3.7.0 to 3.8.1 Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.7.0 to 3.8.1. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/v3.7.0...v3.8.1) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index d120242..b3b0e40 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -39,7 +39,7 @@ jobs: # https://github.com/sigstore/cosign-installer - name: Install cosign if: github.event_name != 'pull_request' - uses: sigstore/cosign-installer@v3.7.0 + uses: sigstore/cosign-installer@v3.8.1 with: cosign-release: 'v2.4.1' From 36e90b55e145310d231d108b8c48de4cc875388e Mon Sep 17 00:00:00 2001 From: Matthias Kesler Date: Wed, 5 Mar 2025 14:15:49 +0100 Subject: [PATCH 6/8] Update cosign version accordingly --- .github/workflows/docker-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index b3b0e40..6152760 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -41,7 +41,7 @@ jobs: if: github.event_name != 'pull_request' uses: sigstore/cosign-installer@v3.8.1 with: - cosign-release: 'v2.4.1' + cosign-release: 'v2.4.3' # Workaround: https://github.com/docker/build-push-action/issues/461 - name: Setup Docker buildx From 53aba762e24c2ff6503bb93c2ae27f7e384056eb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Apr 2025 10:38:59 +0000 Subject: [PATCH 7/8] Bump restic/restic from 0.17.3 to 0.18.0 Bumps restic/restic from 0.17.3 to 0.18.0. --- updated-dependencies: - dependency-name: restic/restic dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 8e82140..b279bb2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,7 +4,7 @@ FROM alpine:latest as rclone ADD https://downloads.rclone.org/rclone-current-linux-amd64.zip / RUN unzip rclone-current-linux-amd64.zip && mv rclone-*-linux-amd64/rclone /bin/rclone && chmod +x /bin/rclone -FROM restic/restic:0.17.3 +FROM restic/restic:0.18.0 RUN apk add --update --no-cache curl mailx From 424d4552cc13892ac5a195313ef79782c2bef567 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Max=20Konr=C3=A4di?= Date: Wed, 23 Apr 2025 14:47:22 +0200 Subject: [PATCH 8/8] Update dependabot.yml --- .github/dependabot.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4a3a908..47d3915 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,11 +5,7 @@ updates: - package-ecosystem: github-actions directory: / schedule: {interval: monthly} - reviewers: [krombel] - assignees: [krombel] - package-ecosystem: docker directory: / schedule: {interval: monthly} - reviewers: [krombel] - assignees: [krombel]