Skip to content

Commit a50b225

Browse files
committed
build(deps): bump dependencies
Bumps: - actions/download-artifact v8.0.0 -> v8.0.1 - actions/setup-go v6.3.0 -> v6.4.0 - actions/upload-artifact v7.0.0 -> v7.0.1 - cachix/cachix-action v16 -> v17 - crate-ci/typos v1.44.0 -> v1.45.2 - docker/build-push-action v6.19.2 -> v7.1.0 - docker/login-action v4.0.0 -> v4.1.0 - docker/setup-buildx-action v3.12.0 -> v4.0.0 - sigstore/cosign-installer v4.0.0 -> v4.1.1 - softprops/action-gh-release v2.5.0 -> v3.0.0 - ubi8/go-toolset b83390c -> 04558ab - ubi9/ubi-minimal 83006d5 -> 8d0a8fb - github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4 - github.com/google/go-containerregistry v0.21.3 -> v0.21.4 - github.com/maxbrunsfeld/counterfeiter/v6 v6.12.1 -> v6.12.2 - github.com/opencontainers/runc v1.4.1 -> v1.4.2 - github.com/sigstore/cosign/v2 v2.6.2 -> v2.6.3 - github.com/sigstore/timestamp-authority/v2 v2.0.5 -> v2.0.6 - go.opentelemetry.io/otel/sdk v1.41.0 -> v1.43.0 - go.podman.io/common v0.67.0 -> v0.67.1 - golang.org/x/mod v0.34.0 -> v0.35.0 - google.golang.org/grpc v1.79.3 -> v1.80.0 - operator-sdk v1.37.0 -> v1.42.2 - opm v1.65.0 Updates baseprofile names for runc v1.4.2 and crun v1.26 from cri-o/packaging. Release v0.10.1. Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
1 parent dbc1b7a commit a50b225

425 files changed

Lines changed: 24726 additions & 23266 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.github/workflows/build.yml

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: macos-latest
2121
steps:
2222
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
23-
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
23+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
2424
with:
2525
go-version-file: ./go.mod
2626
- run: make test-unit
@@ -41,13 +41,13 @@ jobs:
4141
- uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
4242
with:
4343
install_url: https://releases.nixos.org/nix/nix-${{ env.NIX_VERSION }}/install
44-
- uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
44+
- uses: cachix/cachix-action@1eb2ef646ac0255473d23a5907ad7b04ce94065c # v17
4545
with:
4646
name: security-profiles-operator
4747
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
4848
pushFilter: security-profiles-operator
4949
- run: make nix-${{ matrix.arch }}
50-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
50+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5151
with:
5252
name: build-${{ matrix.arch }}
5353
path: build/${{ matrix.arch }}
@@ -67,7 +67,7 @@ jobs:
6767
- uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
6868
with:
6969
install_url: https://releases.nixos.org/nix/nix-${{ env.NIX_VERSION }}/install
70-
- uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
70+
- uses: cachix/cachix-action@1eb2ef646ac0255473d23a5907ad7b04ce94065c # v17
7171
with:
7272
name: security-profiles-operator
7373
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
@@ -89,12 +89,12 @@ jobs:
8989
contents: write # required for updating the release
9090
id-token: write # required for sigstore signing
9191
steps:
92-
- uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
92+
- uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
9393
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9494
- uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
9595
with:
9696
install_url: https://releases.nixos.org/nix/nix-${{ env.NIX_VERSION }}/install
97-
- uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
97+
- uses: cachix/cachix-action@1eb2ef646ac0255473d23a5907ad7b04ce94065c # v17
9898
with:
9999
name: security-profiles-operator
100100
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
@@ -104,12 +104,12 @@ jobs:
104104
https://github.com/kubernetes-sigs/bom/releases/download/${{ env.BOM_VERSION }}/bom-amd64-linux
105105
sudo chmod +x /usr/bin/bom
106106
- run: make nix-spoc-${{ matrix.arch }}
107-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
107+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
108108
with:
109109
name: spoc-${{ matrix.arch }}
110110
path: |
111111
build/*
112-
- uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
112+
- uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
113113
if: startsWith(github.ref, 'refs/tags/')
114114
with:
115115
files: |
@@ -119,13 +119,13 @@ jobs:
119119
runs-on: ubuntu-24.04
120120
steps:
121121
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
122-
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
122+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
123123
with:
124124
go-version-file: ./go.mod
125125
- uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
126126
with:
127127
install_url: https://releases.nixos.org/nix/nix-${{ env.NIX_VERSION }}/install
128-
- uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
128+
- uses: cachix/cachix-action@1eb2ef646ac0255473d23a5907ad7b04ce94065c # v17
129129
with:
130130
name: security-profiles-operator
131131
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
@@ -144,9 +144,9 @@ jobs:
144144
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
145145
- name: Set up Docker Buildx
146146
id: buildx
147-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
147+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
148148
- name: Login to Quay
149-
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
149+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
150150
with:
151151
registry: quay.io/security-profiles-operator
152152
username: security-profiles-operator+github
@@ -165,7 +165,7 @@ jobs:
165165
type=ref,event=tag
166166
type=sha,format=long
167167
- name: Build (and push if needed)
168-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
168+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
169169
with:
170170
context: .
171171
file: Dockerfile.build-image
@@ -179,9 +179,9 @@ jobs:
179179
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
180180
- name: Set up Docker Buildx
181181
id: buildx
182-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
182+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
183183
- name: Login to Quay
184-
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
184+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
185185
with:
186186
registry: quay.io/security-profiles-operator
187187
username: security-profiles-operator+github
@@ -199,7 +199,7 @@ jobs:
199199
type=ref,event=tag
200200
type=sha,format=long
201201
- name: Build
202-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
202+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
203203
with:
204204
context: .
205205
file: Dockerfile
@@ -213,9 +213,9 @@ jobs:
213213
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
214214
- name: Set up Docker Buildx
215215
id: buildx
216-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
216+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
217217
- name: Login to Quay
218-
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
218+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
219219
with:
220220
registry: quay.io/security-profiles-operator
221221
username: security-profiles-operator+github
@@ -236,7 +236,7 @@ jobs:
236236
type=sha,format=long
237237
# TODO(jaosorior): Push UBI image too
238238
- name: Build
239-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
239+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
240240
with:
241241
context: .
242242
file: Dockerfile.ubi

.github/workflows/helm-chart-package.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,12 +31,12 @@ jobs:
3131
[ ! -f "${tgz_path}" ] && echo "failed to find helm chart from 'helm package' stdout" && exit 1
3232
echo "helm_tgz_path=${tgz_path}" >> $GITHUB_OUTPUT
3333
echo "helm_tgz_name=${tgz_path##*/}" >> $GITHUB_OUTPUT
34-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
34+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
3535
with:
3636
name: ${{ steps.package.outputs.helm_tgz_name}}
3737
path: ${{ steps.package.outputs.helm_tgz_path}}
3838
if-no-files-found: error
39-
- uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
39+
- uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
4040
if: startsWith(github.ref, 'refs/tags/')
4141
with:
4242
files: |

.github/workflows/olm_tests.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
echo "${GITHUB_WORKSPACE}/build" >> ${GITHUB_PATH}
2727
make operator-sdk opm
2828
29-
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
29+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
3030
with:
3131
go-version-file: ./go.mod
3232

.github/workflows/osff.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
5656
# format to the repository Actions tab.
5757
- name: "Upload artifact"
58-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
58+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5959
with:
6060
name: SARIF file
6161
path: results.sarif

.github/workflows/test.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
runs-on: ubuntu-24.04
3131
steps:
3232
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
33-
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
33+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
3434
with:
3535
go-version-file: ./go.mod
3636
- name: Install dependencies
@@ -51,7 +51,7 @@ jobs:
5151
env:
5252
XDG_RUNTIME_DIR: ''
5353
- run: podman save -o image.tar security-profiles-operator
54-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
54+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5555
with:
5656
name: image
5757
path: image.tar
@@ -73,7 +73,7 @@ jobs:
7373
run: |
7474
sudo modprobe -r kvm_amd kvm_intel kvm || true
7575
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
76-
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
76+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
7777
with:
7878
name: image
7979
path: .
@@ -111,7 +111,7 @@ jobs:
111111
run: |
112112
sudo modprobe -r kvm_amd kvm_intel kvm || true
113113
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
114-
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
114+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
115115
with:
116116
name: image
117117
path: .
@@ -158,7 +158,7 @@ jobs:
158158
run: |
159159
ln -sf hack/ci/Vagrantfile-flatcar Vagrantfile
160160
vagrant box update
161-
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
161+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
162162
with:
163163
name: image
164164
path: .
@@ -193,7 +193,7 @@ jobs:
193193
run: |
194194
sudo modprobe -r kvm_amd kvm_intel kvm || true
195195
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
196-
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
196+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
197197
with:
198198
name: image
199199
path: .
@@ -226,7 +226,7 @@ jobs:
226226
run: |
227227
sudo modprobe -r kvm_amd kvm_intel kvm || true
228228
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
229-
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
229+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
230230
with:
231231
name: image
232232
path: .
@@ -259,7 +259,7 @@ jobs:
259259
run: |
260260
sudo modprobe -r kvm_amd kvm_intel kvm || true
261261
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
262-
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
262+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
263263
with:
264264
name: image
265265
path: .
@@ -279,6 +279,6 @@ jobs:
279279
runs-on: ubuntu-24.04
280280
steps:
281281
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
282-
- uses: crate-ci/typos@631208b7aac2daa8b707f55e7331f9112b0e062d # v1.44.0
282+
- uses: crate-ci/typos@7c572958218557a3272c2d6719629443b5cc26fd # v1.45.2
283283
with:
284284
config: .typos.toml

Dockerfile.ubi

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
# for more details
1919

2020
# hash below referred to latest
21-
FROM registry.access.redhat.com/ubi8/go-toolset@sha256:b83390c62618db65aea35507285d7f1c79e609952cded9eef9f7f01b0bc1a45e AS build
21+
FROM registry.access.redhat.com/ubi8/go-toolset@sha256:04558ab2ebcebce1c9d1028d2c6b5e8c825fdb402489d1345e44f5376d6a879b AS build
2222
USER root
2323
WORKDIR /work
2424

@@ -45,7 +45,7 @@ ARG STATIC_LINK=no
4545
RUN make
4646

4747
# hash below referred to latest
48-
FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:83006d535923fcf1345067873524a3980316f51794f01d8655be55d6e9387183
48+
FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:8d0a8fb39ec907e8ca62cdd24b62a63ca49a30fe465798a360741fde58437a23
4949
ARG version
5050
USER root
5151

Makefile

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,8 @@ GO ?= go
1717
GOLANGCI_LINT_VERSION = v2.10.1
1818
REPO_INFRA_VERSION = v0.2.5
1919
KUSTOMIZE_VERSION = 5.5.0
20-
OPERATOR_SDK_VERSION ?= v1.37.0
20+
OPERATOR_SDK_VERSION ?= v1.42.2
21+
OPM_VERSION ?= v1.65.0
2122
ZEITGEIST_VERSION = v0.5.4
2223
MDTOC_VERSION = v1.4.0
2324
CI_IMAGE ?= golang:$(shell sed -n 's;^go\s\(.*\);\1;p' go.mod)
@@ -625,7 +626,7 @@ ifeq (,$(shell which opm 2>/dev/null))
625626
set -e ;\
626627
mkdir -p $(dir $(OPM)) ;\
627628
OS=$(shell go env GOOS) && ARCH=$(shell go env GOARCH) && \
628-
curl -sSLo $(OPM) https://github.com/operator-framework/operator-registry/releases/download/$(OPERATOR_SDK_VERSION)/$${OS}-$${ARCH}-opm ;\
629+
curl -sSLo $(OPM) https://github.com/operator-framework/operator-registry/releases/download/$(OPM_VERSION)/$${OS}-$${ARCH}-opm ;\
629630
chmod +x $(OPM) ;\
630631
}
631632
else
@@ -647,8 +648,8 @@ catalog-build: opm ## Build a catalog image.
647648
$(eval TMP_DIR := $(shell mktemp -d))
648649
$(eval CATALOG_DOCKERFILE := $(TMP_DIR).Dockerfile)
649650
cp deploy/catalog-preamble.json $(TMP_DIR)/security-profiles-operator-catalog.json
650-
$(OPM) $(OPM_EXTRA_ARGS) render $(BUNDLE_IMGS) >> $(TMP_DIR)/security-profiles-operator-catalog.json
651-
$(OPM) generate dockerfile $(TMP_DIR)
651+
XDG_RUNTIME_DIR=$(TMP_DIR) $(OPM) $(OPM_EXTRA_ARGS) render $(BUNDLE_IMGS) >> $(TMP_DIR)/security-profiles-operator-catalog.json
652+
XDG_RUNTIME_DIR=$(TMP_DIR) $(OPM) generate dockerfile $(TMP_DIR)
652653
$(CONTAINER_RUNTIME) build -f $(CATALOG_DOCKERFILE) -t $(CATALOG_IMG) $(shell dirname $(TMP_DIR))
653654
rm -rf $(TMP_DIR) $(CATALOG_DOCKERFILE)
654655

VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
0.10.1-dev
1+
0.10.1

bundle.Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ LABEL operators.operatorframework.io.bundle.metadata.v1=metadata/
77
LABEL operators.operatorframework.io.bundle.package.v1=security-profiles-operator
88
LABEL operators.operatorframework.io.bundle.channels.v1=stable
99
LABEL operators.operatorframework.io.bundle.channel.default.v1=stable
10-
LABEL operators.operatorframework.io.metrics.builder=operator-sdk-v1.39.2
10+
LABEL operators.operatorframework.io.metrics.builder=operator-sdk-v1.42.2
1111
LABEL operators.operatorframework.io.metrics.mediatype.v1=metrics+v1
1212
LABEL operators.operatorframework.io.metrics.project_layout=go.kubebuilder.io/v4
1313

bundle/manifests/security-profiles-operator-profile_v1_configmap.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -262,7 +262,6 @@ data:
262262
"sigaltstack",
263263
"socket",
264264
"stat",
265-
"statx",
266265
"statfs",
267266
"statx",
268267
"tgkill",

0 commit comments

Comments
 (0)