diff --git a/.github/workflows/build-go.yaml b/.github/workflows/build-go.yaml index eb5130bf6..82c35c77d 100644 --- a/.github/workflows/build-go.yaml +++ b/.github/workflows/build-go.yaml @@ -26,7 +26,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version: '1.26' diff --git a/.github/workflows/build-oci.yaml b/.github/workflows/build-oci.yaml index 03e917082..d3f49224c 100644 --- a/.github/workflows/build-oci.yaml +++ b/.github/workflows/build-oci.yaml @@ -58,7 +58,7 @@ jobs: run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV - name: Log in quay.io if: github.event_name == 'push' - uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 # v1.7 + uses: redhat-actions/podman-login@50c2d9a331bb67c8fdab99b86455fad05e2e3252 # v2.0 with: registry: quay.io username: ${{ secrets.QUAY_IO_USERNAME }} @@ -126,7 +126,7 @@ jobs: if: startsWith(github.ref, 'refs/tags/') run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV - name: Log in quay.io - uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 # v1.7 + uses: redhat-actions/podman-login@50c2d9a331bb67c8fdab99b86455fad05e2e3252 # v2.0 with: registry: quay.io username: ${{ secrets.QUAY_IO_USERNAME }} diff --git a/.github/workflows/build-on-hosted-runner.yaml b/.github/workflows/build-on-hosted-runner.yaml index a59dde6b5..b499e25d6 100644 --- a/.github/workflows/build-on-hosted-runner.yaml +++ b/.github/workflows/build-on-hosted-runner.yaml @@ -25,7 +25,7 @@ jobs: - name: Code checkout uses: actions/checkout@v7 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version: "1.26" - name: Test diff --git a/.github/workflows/push-oci-pr.yml b/.github/workflows/push-oci-pr.yml index bf0482f4d..2f2ebb820 100644 --- a/.github/workflows/push-oci-pr.yml +++ b/.github/workflows/push-oci-pr.yml @@ -57,7 +57,7 @@ jobs: echo "image=$(cat mapt-image)" >> "$GITHUB_ENV" - name: Log in to ghcr.io if: env.found == 'true' - uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 # v1.7 + uses: redhat-actions/podman-login@50c2d9a331bb67c8fdab99b86455fad05e2e3252 # v2.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/tkn-bundle.yaml b/.github/workflows/tkn-bundle.yaml index 8fe6cdf0f..c0a49dd19 100644 --- a/.github/workflows/tkn-bundle.yaml +++ b/.github/workflows/tkn-bundle.yaml @@ -36,7 +36,7 @@ jobs: uses: actions/checkout@v7 - name: Log in to quay.io Registry - uses: redhat-actions/podman-login@v1 + uses: redhat-actions/podman-login@v2 with: registry: quay.io username: ${{ secrets.QUAY_IO_USERNAME }} diff --git a/Makefile b/Makefile index 2ca2d9b20..1ff099bd5 100644 --- a/Makefile +++ b/Makefile @@ -9,9 +9,9 @@ TKN_IMG ?= quay.io/redhat-developer/mapt:v${VERSION}-tkn # renovate: datasource=github-releases depName=cirruslabs/cirrus-cli CIRRUS_CLI ?= v1.0.0 # renovate: datasource=github-releases depName=actions/runner -GITHUB_RUNNER ?= 2.335.1 +GITHUB_RUNNER ?= 2.336.0 # renovate: datasource=gitlab-releases depName=gitlab-org/gitlab-runner -GITLAB_RUNNER ?= 19.1.1 +GITLAB_RUNNER ?= 19.2.0 # renovate: datasource=github-releases depName=open-telemetry/opentelemetry-collector-releases OTELCOL_VERSION ?= 0.151.0 diff --git a/go.mod b/go.mod index 2b9cab7c5..695b57de6 100644 --- a/go.mod +++ b/go.mod @@ -13,7 +13,7 @@ require ( github.com/mapt-oss/pulumi-ibmcloud/sdk v0.0.12 github.com/pulumi/pulumi-command/sdk v1.2.1 github.com/pulumi/pulumi-random/sdk/v4 v4.21.0 - github.com/pulumi/pulumi/sdk/v3 v3.252.0 + github.com/pulumi/pulumi/sdk/v3 v3.254.0 github.com/sirupsen/logrus v1.9.4 github.com/spf13/cobra v1.10.2 ) @@ -26,26 +26,26 @@ require ( github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.2.0 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions v1.3.0 github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.8.0 - github.com/IBM/go-sdk-core/v5 v5.22.1 + github.com/IBM/go-sdk-core/v5 v5.23.1 github.com/aws/amazon-ec2-instance-selector/v3 v3.1.3 - github.com/aws/aws-sdk-go-v2 v1.42.1 + github.com/aws/aws-sdk-go-v2 v1.43.0 github.com/aws/aws-sdk-go-v2/config v1.32.30 - github.com/aws/aws-sdk-go-v2/service/ec2 v1.316.1 - github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2 - github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 - github.com/pulumi/pulumi-aws-native/sdk v1.71.0 - github.com/pulumi/pulumi-aws/sdk/v7 v7.36.0 - github.com/pulumi/pulumi-awsx/sdk/v3 v3.7.0 - github.com/pulumi/pulumi-azure-native-sdk/authorization/v3 v3.20.0 - github.com/pulumi/pulumi-azure-native-sdk/compute/v3 v3.20.0 - github.com/pulumi/pulumi-azure-native-sdk/containerservice/v3 v3.20.0 - github.com/pulumi/pulumi-azure-native-sdk/managedidentity/v3 v3.20.0 - github.com/pulumi/pulumi-azure-native-sdk/network/v3 v3.20.0 - github.com/pulumi/pulumi-azure-native-sdk/resources/v3 v3.20.0 - github.com/pulumi/pulumi-azure-native-sdk/storage/v3 v3.20.0 + github.com/aws/aws-sdk-go-v2/service/ec2 v1.317.0 + github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 + github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 + github.com/pulumi/pulumi-aws-native/sdk v1.72.0 + github.com/pulumi/pulumi-aws/sdk/v7 v7.39.0 + github.com/pulumi/pulumi-awsx/sdk/v3 v3.8.0 + github.com/pulumi/pulumi-azure-native-sdk/authorization/v3 v3.23.0 + github.com/pulumi/pulumi-azure-native-sdk/compute/v3 v3.23.0 + github.com/pulumi/pulumi-azure-native-sdk/containerservice/v3 v3.23.0 + github.com/pulumi/pulumi-azure-native-sdk/managedidentity/v3 v3.23.0 + github.com/pulumi/pulumi-azure-native-sdk/network/v3 v3.23.0 + github.com/pulumi/pulumi-azure-native-sdk/resources/v3 v3.23.0 + github.com/pulumi/pulumi-azure-native-sdk/storage/v3 v3.23.0 github.com/pulumi/pulumi-gitlab/sdk/v9 v9.11.1 github.com/pulumi/pulumi-tls/sdk/v5 v5.5.0 - golang.org/x/exp v0.0.0-20260709172345-9ea1abe57597 + golang.org/x/exp v0.0.0-20260718201538-764159d718ef k8s.io/apimachinery v0.36.2 k8s.io/client-go v0.36.2 ) @@ -74,10 +74,10 @@ require ( github.com/go-openapi/swag/pools v0.27.1 // indirect github.com/go-playground/locales v0.14.1 // indirect github.com/go-playground/universal-translator v0.18.1 // indirect - github.com/leodido/go-urn v1.4.0 // indirect + github.com/leodido/go-urn v1.5.0 // indirect github.com/muesli/reflow v0.3.0 // indirect github.com/pgavlin/fx/v2 v2.0.12 // indirect - github.com/pulumi/pulumi-azure-native-sdk/v3 v3.20.0 // indirect + github.com/pulumi/pulumi-azure-native-sdk/v3 v3.23.0 // indirect go.opentelemetry.io/contrib/bridges/otelslog v0.19.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.20.0 // indirect go.opentelemetry.io/otel/log v0.20.0 // indirect @@ -90,10 +90,10 @@ require ( github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.31 // indirect github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.23 // indirect github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.31 // indirect - github.com/aws/aws-sdk-go-v2/service/pricing v1.43.1 // indirect + github.com/aws/aws-sdk-go-v2/service/pricing v1.44.0 // indirect github.com/blang/semver/v4 v4.0.0 // indirect //keep bubble-table v0.19.2 to avoid breaking changes in bubble-table v0.20.0 - github.com/evertras/bubble-table v0.19.2 // indirect + github.com/evertras/bubble-table v0.22.3 // indirect github.com/hashicorp/hcl/v2 v2.24.0 // indirect github.com/mitchellh/go-homedir v1.1.0 // indirect github.com/oliveagle/jsonpath v0.1.4 // indirect @@ -118,9 +118,9 @@ require ( github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.30 // indirect github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 // indirect github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.30 // indirect - github.com/aws/aws-sdk-go-v2/service/signin v1.4.1 // indirect - github.com/aws/aws-sdk-go-v2/service/sso v1.32.1 // indirect - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.37.1 // indirect + github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 // indirect + github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 // indirect + github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 // indirect github.com/aws/smithy-go v1.27.4 // indirect github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect github.com/cespare/xxhash/v2 v2.3.0 // indirect @@ -129,7 +129,7 @@ require ( github.com/charmbracelet/colorprofile v0.4.3 // indirect github.com/charmbracelet/x/ansi v0.11.7 // indirect github.com/charmbracelet/x/cellbuf v0.0.15 // indirect - github.com/charmbracelet/x/exp/golden v0.0.0-20260622092256-25656177ba8e // indirect + github.com/charmbracelet/x/exp/golden v0.0.0-20260720091843-3eef36eaaa28 // indirect github.com/charmbracelet/x/term v0.2.2 // indirect github.com/clipperhouse/displaywidth v0.11.0 // indirect github.com/clipperhouse/uax29/v2 v2.7.0 // indirect @@ -143,11 +143,11 @@ require ( github.com/go-openapi/errors v0.22.8 // indirect github.com/go-openapi/jsonpointer v1.0.0 // indirect github.com/go-openapi/jsonreference v1.0.0 // indirect - github.com/go-openapi/loads v0.24.0 // indirect + github.com/go-openapi/loads v0.25.0 // indirect github.com/go-openapi/runtime v0.32.5 // indirect github.com/go-openapi/runtime/server-middleware v0.32.5 // indirect github.com/go-openapi/spec v0.22.6 // indirect - github.com/go-openapi/strfmt v0.26.4 // indirect + github.com/go-openapi/strfmt v0.27.0 // indirect github.com/go-openapi/swag v0.27.1 // indirect github.com/go-openapi/swag/cmdutils v0.27.1 // indirect github.com/go-openapi/swag/conv v0.27.1 // indirect @@ -198,25 +198,25 @@ require ( github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect github.com/zclconf/go-cty v1.19.0 // indirect go.opentelemetry.io/auto/sdk v1.2.1 // indirect - go.opentelemetry.io/collector/featuregate v1.62.0 // indirect - go.opentelemetry.io/collector/pdata v1.62.0 // indirect + go.opentelemetry.io/collector/featuregate v1.63.0 // indirect + go.opentelemetry.io/collector/pdata v1.63.0 // indirect go.opentelemetry.io/otel v1.44.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 // indirect go.opentelemetry.io/otel/metric v1.44.0 // indirect go.opentelemetry.io/otel/sdk v1.44.0 // indirect go.opentelemetry.io/otel/trace v1.44.0 // indirect - go.opentelemetry.io/proto/otlp v1.10.0 // indirect + go.opentelemetry.io/proto/otlp v1.11.0 // indirect go.uber.org/multierr v1.11.0 // indirect golang.org/x/oauth2 v0.36.0 // indirect golang.org/x/sync v0.22.0 // indirect golang.org/x/time v0.15.0 // indirect - google.golang.org/genproto/googleapis/api v0.0.0-20260713224248-f5fc221cf8c4 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20260713224248-f5fc221cf8c4 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20260724162435-b2f20204f0df // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20260724162435-b2f20204f0df // indirect gopkg.in/inf.v0 v0.9.1 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect k8s.io/klog/v2 v2.140.0 // indirect - k8s.io/kube-openapi v0.0.0-20260706235625-cdb1db5517a0 // indirect + k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad // indirect k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3 // indirect sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect sigs.k8s.io/randfill v1.0.0 // indirect @@ -229,8 +229,8 @@ require ( github.com/IBM/vpc-go-sdk v0.87.1 github.com/Microsoft/go-winio v0.6.2 // indirect github.com/ProtonMail/go-crypto v1.4.1 // indirect - github.com/aws/aws-sdk-go-v2/service/ecs v1.88.1 - github.com/aws/aws-sdk-go-v2/service/iam v1.55.1 + github.com/aws/aws-sdk-go-v2/service/ecs v1.89.0 + github.com/aws/aws-sdk-go-v2/service/iam v1.56.0 github.com/blang/semver v3.5.1+incompatible // indirect github.com/cheggaaa/pb v1.0.29 // indirect github.com/djherbis/times v1.6.0 // indirect diff --git a/oci/Containerfile b/oci/Containerfile index 288786ca5..d83235f6c 100644 --- a/oci/Containerfile +++ b/oci/Containerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/go-toolset@sha256:c6b19c92a8613bcfdf69ef00a6ea94ac689ec76d07758d71416c1faa6f35f431 as builder +FROM registry.access.redhat.com/ubi9/go-toolset@sha256:5f5c97d7e6d917b8328321bcf2c9d5700de65b72d434ecdbbba6f35aaebaad40 as builder ARG TARGETARCH USER root SHELL ["/bin/bash", "-euo", "pipefail", "-c"] @@ -6,7 +6,7 @@ WORKDIR /workspace COPY . . # renovate: datasource=github-releases depName=pulumi/pulumi -ENV PULUMI_VERSION 3.252.0 +ENV PULUMI_VERSION 3.254.0 ENV PULUMI_BASE_URL="https://github.com/pulumi/pulumi/releases/download/v${PULUMI_VERSION}/pulumi-v${PULUMI_VERSION}" ENV PULUMI_URL="${PULUMI_BASE_URL}-linux-x64.tar.gz" @@ -20,11 +20,11 @@ RUN unset VERSION \ # Pulumi plugins — installed in build stage, copied into runtime # renovate: datasource=github-releases depName=pulumi/pulumi-aws -ARG PULUMI_AWS_VERSION=v7.36.0 +ARG PULUMI_AWS_VERSION=v7.39.0 # renovate: datasource=github-releases depName=pulumi/pulumi-awsx -ARG PULUMI_AWSX_VERSION=v3.7.0 +ARG PULUMI_AWSX_VERSION=v3.8.0 # renovate: datasource=github-releases depName=pulumi/pulumi-azure-native -ARG PULUMI_AZURE_NATIVE_VERSION=v3.20.0 +ARG PULUMI_AZURE_NATIVE_VERSION=v3.23.0 # renovate: datasource=github-releases depName=pulumi/pulumi-command ARG PULUMI_COMMAND_VERSION=v1.2.1 # renovate: datasource=github-releases depName=pulumi/pulumi-tls @@ -32,9 +32,9 @@ ARG PULUMI_TLS_VERSION=v5.5.0 # renovate: datasource=github-releases depName=pulumi/pulumi-random ARG PULUMI_RANDOM_VERSION=v4.21.0 # renovate: datasource=github-releases depName=pulumi/pulumi-aws-native -ARG PULUMI_AWS_NATIVE_VERSION=v1.71.0 +ARG PULUMI_AWS_NATIVE_VERSION=v1.72.0 # renovate: datasource=github-releases depName=pulumi/pulumi-gitlab -ARG PULUMI_GITLAB_VERSION=v10.0.0 +ARG PULUMI_GITLAB_VERSION=v10.1.1 # renovate: datasource=github-releases depName=mapt-oss/pulumi-ibmcloud ARG PULUMI_IBMCLOUD_VERSION=v0.0.12 ENV IBMCLOUD_PLUGIN_URL https://github.com/mapt-oss/pulumi-ibmcloud/releases/download/${PULUMI_IBMCLOUD_VERSION}/pulumi-resource-ibmcloud-${PULUMI_IBMCLOUD_VERSION}-linux-${TARGETARCH}.tar.gz @@ -56,7 +56,7 @@ RUN mkdir -p ${PULUMI_HOME} \ && pulumi plugin install resource gitlab ${PULUMI_GITLAB_VERSION} # Stage 2: Red Hat Hardened minimal runtime (glibc + coreutils, no toolchain) -FROM registry.access.redhat.com/hi/core-runtime@sha256:809fd66403145e6e98be0f8cce601f4fd0a685ff9cd3d11795aa987250d15c42 +FROM registry.access.redhat.com/hi/core-runtime@sha256:04d24b99a65513db0d32bd7144d5b36a8e68dcfb0f267f74705d14ad3e01c10a USER 0 ARG TARGETARCH LABEL org.opencontainers.image.authors="Redhat Developer" diff --git a/tools/go.mod b/tools/go.mod index 86fecc5aa..126463954 100644 --- a/tools/go.mod +++ b/tools/go.mod @@ -11,9 +11,9 @@ replace ( require github.com/golangci/golangci-lint/v2 v2.12.2 require ( - github.com/charmbracelet/ultraviolet v0.0.0-20251205161215-1948445e3318 // indirect + github.com/charmbracelet/ultraviolet v0.0.0-20260720091822-7cc6674724ac // indirect github.com/denis-tingaikin/go-header v0.5.0 // indirect - github.com/golangci/gofmt v0.0.0-20250106114630-d62b90e6713d // indirect + github.com/golangci/gofmt v0.0.0-20251215234548-e7be49a5ab4d // indirect // github.com/golangci/gofmt v0.0.0-20251215234548-e7be49a5ab4d // indirect ) @@ -178,7 +178,7 @@ require ( github.com/nishanths/predeclared v0.2.2 // indirect github.com/pelletier/go-toml/v2 v2.4.3 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect - github.com/prometheus/client_golang v1.23.2 // indirect + github.com/prometheus/client_golang v1.24.1 // indirect github.com/prometheus/client_model v0.6.2 // indirect github.com/prometheus/common v0.70.0 // indirect github.com/prometheus/procfs v0.21.1 // indirect @@ -196,7 +196,7 @@ require ( github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect github.com/sashamelentyev/interfacebloat v1.1.0 // indirect github.com/sashamelentyev/usestdlibvars v1.29.0 // indirect - github.com/securego/gosec/v2 v2.27.1 // indirect + github.com/securego/gosec/v2 v2.28.0 // indirect github.com/sirupsen/logrus v1.9.4 // indirect github.com/sivchari/containedctx v1.0.3 // indirect github.com/sonatard/noctx v0.5.1 // indirect @@ -212,7 +212,7 @@ require ( github.com/stretchr/testify v1.11.1 // indirect github.com/subosito/gotenv v1.6.0 // indirect github.com/tetafro/godot v1.5.6 // indirect - github.com/timakin/bodyclose v0.0.0-20260129054331-73d1f95b84b4 // indirect + github.com/timakin/bodyclose v0.0.0-20260723120731-857993a2939c // indirect github.com/timonwong/loggercheck v0.11.0 // indirect github.com/tomarrell/wrapcheck/v2 v2.12.0 // indirect github.com/tommy-muehle/go-mnd/v2 v2.5.1 // indirect @@ -231,7 +231,7 @@ require ( go.augendre.info/fatcontext v0.10.0 // indirect go.uber.org/multierr v1.11.0 // indirect go.uber.org/zap v1.28.0 // indirect - golang.org/x/exp/typeparams v0.0.0-20260709172345-9ea1abe57597 // indirect + golang.org/x/exp/typeparams v0.0.0-20260718201538-764159d718ef // indirect golang.org/x/mod v0.38.0 // indirect golang.org/x/sync v0.22.0 // indirect golang.org/x/sys v0.47.0 // indirect