Jon Ayers
b6d35edebd
chore: remove meticulous from CI ( #14369 )
2024-08-20 14:13:13 -04:00
dependabot[bot]
f007c90a30
ci: bump contributor-assistant/github-action ( #14345 )
...
Bumps the github-actions group with 1 update in the / directory: [contributor-assistant/github-action](https://github.com/contributor-assistant/github-action ).
Updates `contributor-assistant/github-action` from 2.4.0 to 2.5.1
- [Release notes](https://github.com/contributor-assistant/github-action/releases )
- [Commits](https://github.com/contributor-assistant/github-action/compare/v2.4.0...v2.5.1 )
---
updated-dependencies:
- dependency-name: contributor-assistant/github-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-19 21:53:20 +03:00
Ethan
d0f36dc6ba
ci: add networking release validation ( #14273 )
2024-08-19 16:31:49 +10:00
Ethan
0613797934
fix: use dogfood contents as template dir ( #14332 )
2024-08-17 02:52:26 +10:00
Ethan
363a016281
fix: move to dogfood before terraform applying
2024-08-17 02:43:16 +10:00
Ethan
979430d635
chore: manage dogfood template using coderd provider ( #14321 )
2024-08-17 02:33:32 +10:00
Kayla Washburn-Love
95a7c0c4f0
chore: use tabs for prettier and biome ( #14283 )
2024-08-15 14:53:53 -06:00
dependabot[bot]
8acc7f2070
ci: bump crate-ci/typos in the github-actions group ( #14149 )
...
Bumps the github-actions group with 1 update: [crate-ci/typos](https://github.com/crate-ci/typos ).
Updates `crate-ci/typos` from 1.23.5 to 1.23.6
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.23.5...v1.23.6 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-05 15:27:55 +03:00
Jon Ayers
f3ff172979
chore: remove dependency license review ( #14131 )
...
- It's bafflingly buggy and is a source of annoyance for virtually the
whole team.
- Will revisit if we don't have alternatives to catching invalid licenses.
2024-08-02 14:14:14 -04:00
Bruno Quaresma
4d4d27c509
chore(site): allow pnpm packages license ( #14122 )
2024-08-02 13:02:22 -03:00
Muhammad Atif Ali
7619d1c49a
chore: skip dogfood workflow for dependabot PRs ( #14111 )
2024-08-02 09:32:35 +00:00
Muhammad Atif Ali
894020db6a
chore: skip dogfood workflow for dependabot PRs ( #14106 )
2024-08-02 09:39:57 +03:00
Alex Ivanov
6d3f7fb2a2
chore: update meticulous CI job ( #14073 )
2024-08-01 12:26:44 -04:00
Muhammad Atif Ali
b0eaf4ca94
chore: commit update-flake as @dependabot ( #14091 )
...
Thıs is needed to bypass the dependency check job for dependabot PRs.
https://github.com/coder/coder/blob/1289937eaeac63f27f2856a4374a0fedc5cc0e58/.github/workflows/ci.yaml#L973
The username and email are fetched from a previous dependabot commit.
https://github.com/coder/coder/commit/1289937eaeac63f27f2856a4374a0fedc5cc0e58.patch
2024-08-01 19:24:51 +03:00
Muhammad Atif Ali and Dean Sheather
7a4737cf76
ci: handle retriggering ci and human authors in update-flake ( #14052 )
...
Co-authored-by: Dean Sheather <dean@deansheather.com >
2024-07-31 16:12:40 +00:00
Kyle Carberry
5d42f4aa7b
fix: run update-flake with PAT to allow workflow runs ( #14067 )
...
See the comment in the code.
2024-07-31 11:43:43 -04:00
dependabot[bot]
c88ea26d7c
ci: bump crate-ci/typos from 1.23.2 to 1.23.5 in the github-actions group ( #14038 )
...
Bumps the github-actions group with 1 update: [crate-ci/typos](https://github.com/crate-ci/typos ).
Updates `crate-ci/typos` from 1.23.2 to 1.23.5
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.23.2...v1.23.5 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-30 11:07:30 +03:00
Kyle Carberry
b7102b39af
chore: add script to update flake automatically ( #14046 )
2024-07-29 14:29:22 -04:00
Cian Johnston
68fa34feae
ci: remove ci make concurrency to fix docker image race ( #14027 )
...
This PR removes the `-j` argument to `make` when building and pushing Docker images on merge to main.
Seen here: https://github.com/coder/coder/actions/runs/10108431095/job/27954323032#step:9:119
We ran into this previously in #13769 for the release workflow, but neglected to apply the same change to the CI workflow.
2024-07-26 10:53:18 +01:00
Muhammad Atif Ali and Mathias Fredriksson
88bc491778
chore: add stable version info to repository-dispatch event ( #13997 )
...
Co-authored-by: Mathias Fredriksson <mafredri@gmail.com >
2024-07-25 11:03:01 +03:00
Danny Kopping
943ea7c52a
feat: add SMTP auth & TLS support ( #13902 )
2024-07-19 09:22:15 +02:00
Jon Ayers
8d4bccc612
feat: add meticulous recorder ( #13886 )
2024-07-18 20:15:07 -05:00
dependabot[bot]
aaf295badf
ci: bump the github-actions group with 2 updates ( #13890 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 15:56:12 +03:00
Colin Adler
af001773db
fix!: remove TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA cipher by default ( #13837 )
...
This cipher is included by default in Go as a fallback, but is marked as
an insecure cipher. This removes the 3des cipher by default.
Before:
```
$ nmap --script ssl-enum-ciphers -p 443 xxxxxxx
Starting Nmap 7.94 ( https://nmap.org ) at 2024-07-08 14:16 CDT
Nmap scan report for xxxxx (xxx.xxx.xxx.xxx)
Host is up (0.038s latency).
rDNS record for xxx.xxx.xxx.xxx: xxx.xxx.xxx.xxx.bc.googleusercontent.com
PORT STATE SERVICE
443/tcp open https
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) - C
| compressors:
| NULL
| cipher preference: server
| warnings:
| 64-bit block cipher 3DES vulnerable to SWEET32 attack
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
| cipher preference: server
|_ least strength: C
```
After:
```
$ nmap --script ssl-enum-ciphers -p 443 xxxxxxx
Starting Nmap 7.94 ( https://nmap.org ) at 2024-07-08 15:04 CDT
Nmap scan report for xxxxx (xxx.xxx.xxx.xxx)
Host is up (0.039s latency).
rDNS record for xxx.xxx.xxx.xxx: xxx.xxx.xxx.xxx.bc.googleusercontent.com
PORT STATE SERVICE
443/tcp open https
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
| cipher preference: server
|_ least strength: A
```
* fixup! fix!(cli): remove `TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA` cipher by default
* fixup! fix!(cli): remove `TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA` cipher by default
2024-07-09 17:18:27 +00:00
Muhammad Atif Ali
c62512a8bb
chore: use base64 encoded kubeconfig for pr deployments ( #13851 )
2024-07-09 14:24:43 +00:00
Muhammad Atif Ali
a123badccc
chore: use base64 encoded kubeconfig for pr deployments ( #13849 )
2024-07-09 13:44:59 +00:00
dependabot[bot] and Muhammad Atif Ali
65e1d0af4b
ci: bump crate-ci/typos from 1.22.9 to 1.23.1 in the github-actions group ( #13803 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Muhammad Atif Ali <atif@coder.com >
2024-07-09 15:45:09 +03:00
Mathias Fredriksson
a114288ef2
ci: remove release make concurrency to fix docker image race ( #13769 )
2024-07-02 17:49:18 +00:00
Cian Johnston
5ea5db29e9
ci: use postgres version 13 to test migrations ( #13767 )
2024-07-02 17:03:21 +00:00
Kayla Washburn-Love
b1ec4630f2
chore: update react dependencies ( #13749 )
2024-07-01 15:55:27 -06:00
dependabot[bot]
2a21b0d144
ci: bump toshimaru/auto-author-assign in the github-actions group ( #13696 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-28 03:48:01 +03:00
Cian Johnston
20e59e0797
ci: test with multiple postgres versions ( #13665 )
...
- Tests now run on postgres 16 by default when run locally (can be specified with POSTGRES_VERSION)
- Adds test-go-pg-16 to test against postgres version 16
- Updates Dogfood dockerfile / nix flake to postgres version 16
- Updates docker-compose.yaml postgres tag to 16
2024-06-26 16:22:24 +01:00
Danny Kopping
d5d8b918d7
feat: lint github actions workflows ( #13552 )
2024-06-26 10:28:16 +02:00
Muhammad Atif Ali
136900268e
ci: migrate to depot.dev runners ( #13467 )
2024-06-25 09:36:33 +03:00
Cian Johnston and Muhammad Atif Ali
b4a5c7ffa9
chore: upgrade Go version to 1.22.4 ( #13623 )
...
Updates Go version to 1.22.4
Co-authored-by: Muhammad Atif Ali <me@matifali.dev >
2024-06-24 15:50:52 +01:00
dependabot[bot]
7cb8bfb133
ci: bump the github-actions group with 2 updates ( #13645 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-24 15:52:05 +03:00
dependabot[bot]
eed9794516
ci: bump crate-ci/typos in the github-actions group ( #13584 )
...
Bumps the github-actions group with 1 update: [crate-ci/typos](https://github.com/crate-ci/typos ).
Updates `crate-ci/typos` from 1.22.3 to 1.22.7
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.22.3...v1.22.7 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-17 09:03:26 -04:00
dependabot[bot]
363dbad3a3
ci: bump the github-actions group with 2 updates ( #13521 )
...
Bumps the github-actions group with 2 updates: [crate-ci/typos](https://github.com/crate-ci/typos ) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ).
Updates `crate-ci/typos` from 1.21.0 to 1.22.3
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.21.0...v1.22.3 )
Updates `aquasecurity/trivy-action` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/fd25fed6972e341ff0007ddb61f77e88103953c2...595be6a0f6560a0a8fc419ddf630567fc623531d )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-11 01:06:40 +03:00
Bruno Quaresma
056a697eff
feat(site): add download logs option ( #13466 )
2024-06-07 10:03:05 -03:00
Colin Adler
b723da9e91
chore: upgrade terraform to v1.8.5 ( #13429 )
2024-06-02 13:10:28 -04:00
Muhammad Atif Ali
7a7bef0dab
ci: fix syntax issue in docker-base.yaml ( #13412 )
2024-05-30 08:49:30 +00:00
Muhammad Atif Ali
6730c24c58
ci: build base image on PRs ( #13409 )
2024-05-30 08:35:37 +00:00
dependabot[bot]
a1d3b82dd1
ci: bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 in the github-actions group ( #13376 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-27 19:57:36 +03:00
Spike Curtis
b43344b672
feat: use latest gVisor and go 1.22.3 ( #13338 )
2024-05-23 08:22:44 -04:00
Kyle Carberry and Colin Adler
3364abecdd
chore: generate terraform testdata with matching terraform version ( #13343 )
...
Terraform changed the default output of the `terraform graph` command. You must put `-type=plan` to keep the prior behavior.
Co-authored-by: Colin Adler <colin1adler@gmail.com >
2024-05-22 12:45:47 -05:00
Cian Johnston
45b45f1107
ci: re-enable test migrations in release workflow ( #13307 )
2024-05-20 10:35:06 +01:00
Colin Adler
f176ff532f
ci: re-pin actions/dependency-review-action back to a release ( #13309 )
2024-05-17 11:55:30 -05:00
Jon Ayers
82c1562f82
fix: skip license review for dependabot ( #13239 )
2024-05-10 18:14:03 +00:00
dependabot[bot]
8c9560ddb8
ci: bump the github-actions group with 2 updates ( #13238 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-10 17:38:07 +00:00
Mathias Fredriksson
06dd656e08
ci: disable make test-migrations in release.yaml ( #13201 )
2024-05-07 17:15:12 +00:00