mirrors/velero
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/velero.git synced 2026-09-29 11:16:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
6,921 Commits 101 Branches 190 Tags
dfabab70bf7fa210a63233b8a8a6db8a2f14f9ea
Commit Graph
29 Commits
Author SHA1 Message Date
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		b81d820e6f Bump codecov/codecov-action in the github-actions group (#10548)
Run the E2E test on kind / setup-test-matrix (push) Failing after 3s
Details
Scorecard supply-chain security / Scorecard analysis (push) Skipped
Details
e2e-test-kind.yaml / extract (push) Failing after 10s
Details
Run the E2E test on kind / get-go-version (push) Failing after 11s
Details
Run the E2E test on kind / build (push) Skipped
Details
Run the E2E test on kind / run-e2e-test (push) Skipped
Details
push.yml / extract (push) Failing after 6s
Details
Main CI / get-go-version (push) Failing after 9s
Details
Main CI / Build (push) Skipped
Details 
Bumps the github-actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `codecov/codecov-action` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Commits](https://github.com/codecov/codecov-action/compare/v7...v7.1.1)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-21 13:54:01 -04:00
Shubham Pampattiwar 3191e38ac3 Set least-privilege GITHUB_TOKEN permissions in workflows 
Add an explicit top-level permissions block to the GitHub Actions
workflows that were relying on the default token permissions. Each
workflow now defaults to contents: read, with additional scopes granted
only where a job needs them:

* nightly-trivy-scan keeps security-events: write at the job level to
  upload SARIF results, plus contents: read for checkout.
* stale-issues gets issues: write and pull-requests: write for the
  actions/stale action to label and close stale items.

Setting least-privilege permissions reduces the blast radius if a
workflow or one of its dependencies is compromised, and satisfies the
CLOMonitor token_permissions check.

Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com>
 2026-09-03 10:14:23 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		ccbb7d1cc7 Bump actions/setup-go from 6 to 7 (#10202) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-10 16:01:13 -04:00
dependabot[bot]andGitHub c9f784ef66 Bump actions/checkout from 6 to 7 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-01 19:12:21 +00:00
dependabot[bot]andGitHub ff7273548b Bump codecov/codecov-action from 6 to 7 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6 to 7.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v6...v7)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-25 19:12:25 +00:00
Adam Zhang 50ea4eea74 update codecov-action from v5 to v6 
Signed-off-by: Adam Zhang <adam.zhang@broadcom.com>
 2026-06-08 11:31:37 +08:00
dependabot[bot]andGitHub 981b29b4cb Bump actions/checkout from 5 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-24 19:25:51 +00:00
Xun Jiang 4847eeaf62 Use different go version check logic for main and other branches. 
main branch will read go version from go.mod's go primitive, and
only keep major and minor version, because we want the actions to use
the lastest patch version automatically, even the go.mod specify version
like 1.24.0.
release branch can read the go version from go.mod file by setup-go
action's own logic.
Refactor the get Go version to reusable workflow.

Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
 2025-09-19 16:58:18 +08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		1ec281a64e Bump actions/setup-go from 5 to 6 (#9231)
Run the E2E test on kind / build (push) Failing after 10s
Details
Run the E2E test on kind / setup-test-matrix (push) Successful in 3s
Details
Run the E2E test on kind / run-e2e-test (push) Has been skipped
Details
Main CI / Build (push) Failing after 5s
Details
Close stale issues and PRs / stale (push) Failing after 2m15s
Details
Trivy Nightly Scan / Trivy nightly scan (velero, main) (push) Failing after 7s
Details
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-aws, main) (push) Failing after 5s
Details
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-gcp, main) (push) Failing after 4s
Details
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-microsoft-azure, main) (push) Failing after 4s
Details 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-18 12:29:45 -04:00
dependabot[bot]andGitHub c14d564e24 Bump actions/checkout from 4 to 5 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-12 04:06:54 +00:00
dependabot[bot]andGitHub ea09946803 Bump codecov/codecov-action from 4 to 5 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-18 19:40:22 +00:00
Matthieu MORELandGitHub a6c543384b Use native cache from actions/setup-go (#7768) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-08-19 14:45:59 -04:00
dependabot[bot]andGitHub 516d06c7d1 Bump actions/cache from 2 to 4 
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-29 19:58:24 +00:00
dependabot[bot]andGitHub eed655dddd Bump actions/checkout from 2 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-22 19:38:20 +00:00
Daniel JiangandDaniel Jiang 1b3fe95980 Bump up golang to v1.22 
This commit bumps up the golang for building and testing velero to v1.22

It also updates controller-gen to v0.14.0 to fix an issue under new
versino of go.
More details see https://github.com/golang/go/issues/65637

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
 2024-04-14 20:15:51 +08:00
dependabot[bot]andGitHub 58838fc5c6 Bump actions/setup-go from 4 to 5 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-09 02:03:10 +00:00
Wenkai Yin(尹文开) 6c215d7915 Upgrade codecov action to v4 
Upgrade codecov action to v4

Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com>
 2024-04-08 16:31:24 +08:00
Xun Jiang a726329e82 Bump golang version. 
Bump golang version to v1.21.
Bump golang.org/x/net version to v0.17.0 in Velero and Restic.

Signed-off-by: Xun Jiang <jxun@vmware.com>
 2023-10-13 16:30:23 +08:00
Wenkai Yin(尹文开)andGitHub e9c170cb15 Upgrade to v3 for the codecov action (#6622) 
Upgrade to v3 for the codecov action

Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com>
 2023-08-09 14:08:01 +08:00
Xun Jiang cb0ada1e1c Enable staticcheck and resolve found issues. 
Signed-off-by: Xun Jiang <blackpiglet@gmail.com>
 2023-04-25 11:33:40 +08:00
Xun Jiang 0be3f5a3e7 Update Golang to v1.20 for main branch. 
Signed-off-by: Xun Jiang <blackpiglet@gmail.com>
 2023-04-17 13:26:46 +08:00
Xun Jiang fc692c49e6 Update Golang version to v1.19 for branch main. 
Signed-off-by: Xun Jiang <blackpiglet@gmail.com>
 2023-04-04 12:00:19 +08:00
Xun Jiang 955eec7033 Enable staticcheck linter. Disable check for folder /pkg and /test by now. 
Signed-off-by: Xun Jiang <blackpiglet@gmail.com>
 2023-01-20 13:52:13 +08:00
Gábor Lipták 648d56e541 Bump Go to 1.18 
Signed-off-by: Gábor Lipták <gliptak@gmail.com>
 2022-09-17 13:11:09 -04:00
Daniel Jiang 9f46b10b70 Enable coverage in test.sh and upload to codecov 
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
 2022-02-28 10:59:49 +08:00
Daniel Jiang a3d196ee85 Bump up Go to 1.17 
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
 2021-12-06 20:16:24 +08:00
Daniel JiangandGitHub 6ae9a6eb37 Bump up Go to 1.16 (#3990) 
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
 2021-07-29 23:56:08 -07:00
Nolan BrubakerandGitHub 1e16723da4 Combine CRD install verification into 1 job, and update k8s versions (#3448) 
* Validate CRDs against latest Kubernetes versions

Add Kubernetes v1.19 and v1.20 series images, and consolidate the job
into a single file to reduce repetition.

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Ignore job if the changes are only site/design

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Fix codespell error

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Cache Velero binary for reuse on workers

This will cache the Velero binary based on the PR number and a SHA256 of
the generated binary.

This way, the runners testing each version of Kubernetes do not need to
build it independently.

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Fix GitHub event access

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Wrap output path in quotes

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Move code checkout to build step

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Also cache go modules

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Fix syntax issues

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Download cached binary on each node

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>

* Use cached go modules on main CI

Signed-off-by: Nolan Brubaker <brubakern@vmware.com>
 2021-02-25 16:51:39 -08:00
Ashish Amarnath 5643b0f634 add a CI check for changelog file 
Signed-off-by: Ashish Amarnath <ashisham@vmware.com>
 2020-06-08 09:48:33 -07:00