diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index a0784a5..4ded344 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -31,7 +31,7 @@ jobs: steps: - name: gather-system-info id: system-info - uses: kenchan0130/actions-system-info@59699597e84e80085a750998045983daa49274c4 # version: v1.4.0 + uses: kenchan0130/actions-system-info@bc4d96a0885af9f87e23f018f87c86d800e334d9 # version: v1.4.0 continue-on-error: true - name: print-system-info run: | @@ -55,13 +55,13 @@ jobs: done continue-on-error: true - name: checkout - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # version: v6.0.1 + uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # version: v6.0.1 - name: Unshallow run: | git fetch --prune --unshallow - name: Set up Docker Buildx id: setup-buildx - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1 + uses: docker/setup-buildx-action@7c525be6cc8a882d5163ce04293cac18617c709f # version: v3.11.1 with: driver: remote endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234 @@ -104,7 +104,7 @@ jobs: steps: - name: gather-system-info id: system-info - uses: kenchan0130/actions-system-info@59699597e84e80085a750998045983daa49274c4 # version: v1.4.0 + uses: kenchan0130/actions-system-info@bc4d96a0885af9f87e23f018f87c86d800e334d9 # version: v1.4.0 continue-on-error: true - name: print-system-info run: | @@ -128,19 +128,19 @@ jobs: done continue-on-error: true - name: checkout - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # version: v6.0.1 + uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # version: v6.0.1 - name: Unshallow run: | git fetch --prune --unshallow - name: Set up Docker Buildx id: setup-buildx - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1 + uses: docker/setup-buildx-action@7c525be6cc8a882d5163ce04293cac18617c709f # version: v3.11.1 with: driver: remote endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234 timeout-minutes: 10 - name: login-to-registry - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # version: v3.6.0 + uses: docker/login-action@3227f5311cb93ffd14d13e65d8cc400d30f4dd8a # version: v3.6.0 with: password: ${{ secrets.GITHUB_TOKEN }} registry: ghcr.io @@ -165,7 +165,7 @@ jobs: steps: - name: gather-system-info id: system-info - uses: kenchan0130/actions-system-info@59699597e84e80085a750998045983daa49274c4 # version: v1.4.0 + uses: kenchan0130/actions-system-info@bc4d96a0885af9f87e23f018f87c86d800e334d9 # version: v1.4.0 continue-on-error: true - name: print-system-info run: | @@ -189,13 +189,13 @@ jobs: done continue-on-error: true - name: checkout - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # version: v6.0.1 + uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # version: v6.0.1 - name: Unshallow run: | git fetch --prune --unshallow - name: Set up Docker Buildx id: setup-buildx - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1 + uses: docker/setup-buildx-action@7c525be6cc8a882d5163ce04293cac18617c709f # version: v3.11.1 with: driver: remote endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234 @@ -210,7 +210,7 @@ jobs: run: | make release - name: login-to-registry - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # version: v3.6.0 + uses: docker/login-action@3227f5311cb93ffd14d13e65d8cc400d30f4dd8a # version: v3.6.0 with: password: ${{ secrets.GITHUB_TOKEN }} registry: ghcr.io @@ -227,7 +227,7 @@ jobs: sha256sum control-plane-talos/*/* > sha256sum.txt sha512sum control-plane-talos/*/* > sha512sum.txt - name: release - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # version: v2.5.0 + uses: softprops/action-gh-release@e798e6a1ede8d07b74ac4cdac6bdfa4cc1653907 # version: v2.5.0 with: body_path: _out/RELEASE_NOTES.md draft: "true" diff --git a/.github/workflows/slack-notify-ci-failure.yaml b/.github/workflows/slack-notify-ci-failure.yaml index 9c8d6f5..3bc0067 100644 --- a/.github/workflows/slack-notify-ci-failure.yaml +++ b/.github/workflows/slack-notify-ci-failure.yaml @@ -18,7 +18,7 @@ jobs: if: github.event.workflow_run.conclusion == 'failure' && github.event.workflow_run.event != 'pull_request' steps: - name: Slack Notify - uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # version: v2.1.1 + uses: slackapi/slack-github-action@bb7fadeefe0943ce928531b8ab4ab49d481b0192 # version: v2.1.1 with: method: chat.postMessage payload: | diff --git a/.github/workflows/slack-notify.yaml b/.github/workflows/slack-notify.yaml index 8c86005..15cb112 100644 --- a/.github/workflows/slack-notify.yaml +++ b/.github/workflows/slack-notify.yaml @@ -23,7 +23,7 @@ jobs: run: | echo pull_request_number=$(gh pr view -R ${{ github.repository }} ${{ github.event.workflow_run.head_repository.owner.login }}:${{ github.event.workflow_run.head_branch }} --json number --jq .number) >> $GITHUB_OUTPUT - name: Slack Notify - uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # version: v2.1.1 + uses: slackapi/slack-github-action@bb7fadeefe0943ce928531b8ab4ab49d481b0192 # version: v2.1.1 with: method: chat.postMessage payload: | diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index e86cd1b..a5c35e0 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -15,7 +15,7 @@ jobs: - ubuntu-latest steps: - name: Close stale issues and PRs - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # version: v10.1.1 + uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # version: v10.1.1 with: close-issue-message: This issue was closed because it has been stalled for 7 days with no activity. days-before-issue-close: "5" diff --git a/Dockerfile b/Dockerfile index 8128ae0..5af15c7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -# syntax = docker/dockerfile-upstream:1.14.1-labs +# syntax = docker/dockerfile-upstream:1.21.0-labs # Meta args applied to stage base names. @@ -56,7 +56,7 @@ RUN --mount=type=cache,target=/root/.cache --mount=type=cache,target=/tmp go tes FROM scratch AS unit-tests COPY --from=unit-tests-run /src/coverage.txt /coverage.txt -FROM --platform=${BUILDPLATFORM} alpine:3.21 AS release-build +FROM --platform=${BUILDPLATFORM} alpine:3.23 AS release-build ADD https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv4.1.0/kustomize_v4.1.0_linux_amd64.tar.gz . RUN tar -xf kustomize_v4.1.0_linux_amd64.tar.gz -C /usr/local/bin && rm kustomize_v4.1.0_linux_amd64.tar.gz COPY ./config ./config diff --git a/go.mod b/go.mod index 1697570..70e15b4 100644 --- a/go.mod +++ b/go.mod @@ -3,37 +3,37 @@ module github.com/siderolabs/cluster-api-control-plane-provider-talos go 1.25.3 // compatibility with kube-apiserver v0.32.3, should be dropped once kube-apiserver dependency is updated -replace github.com/google/cel-go => github.com/google/cel-go v0.22.0 +replace github.com/google/cel-go => github.com/google/cel-go v0.27.0 require ( github.com/coreos/go-semver v0.3.1 github.com/go-logr/logr v1.4.3 github.com/gobuffalo/flect v1.0.3 github.com/google/uuid v1.6.0 - github.com/onsi/gomega v1.38.2 + github.com/onsi/gomega v1.39.1 github.com/pkg/errors v0.9.1 - github.com/siderolabs/capi-utils v0.0.0-20251124160722-4ee8a1b7d4d0 + github.com/siderolabs/capi-utils 995e8c672207 github.com/siderolabs/cluster-api-bootstrap-provider-talos v0.6.11 github.com/siderolabs/crypto v0.6.4 github.com/siderolabs/gen v0.8.6 github.com/siderolabs/go-retry v0.3.3 - github.com/siderolabs/talos/pkg/machinery v1.12.0 + github.com/siderolabs/talos/pkg/machinery v1.12.4 github.com/spf13/pflag v1.0.10 github.com/stretchr/testify v1.11.1 - golang.org/x/sync v0.18.0 - google.golang.org/grpc v1.76.0 - google.golang.org/protobuf v1.36.10 + golang.org/x/sync v0.19.0 + google.golang.org/grpc v1.79.1 + google.golang.org/protobuf v1.36.11 gopkg.in/yaml.v3 v3.0.1 - k8s.io/api v0.32.3 - k8s.io/apiextensions-apiserver v0.32.3 - k8s.io/apimachinery v0.32.3 - k8s.io/apiserver v0.32.3 - k8s.io/client-go v0.32.3 - k8s.io/component-base v0.32.3 + k8s.io/api v0.35.1 + k8s.io/apiextensions-apiserver v0.35.1 + k8s.io/apimachinery v0.35.1 + k8s.io/apiserver v0.35.1 + k8s.io/client-go v0.35.1 + k8s.io/component-base v0.35.1 k8s.io/klog/v2 v2.130.1 - k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 - sigs.k8s.io/cluster-api v1.10.9 - sigs.k8s.io/controller-runtime v0.20.4 + k8s.io/utils b8788abfbbc2 + sigs.k8s.io/cluster-api v1.12.3 + sigs.k8s.io/controller-runtime v0.23.1 ) require (