Skip to content

Weekly: Promote nightly to main (2026-04-27)#984

Merged
Wikid82 merged 18 commits intomainfrom
nightly
Apr 27, 2026
Merged

Weekly: Promote nightly to main (2026-04-27)#984
Wikid82 merged 18 commits intomainfrom
nightly

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

🚀 Weekly Nightly to Main Promotion

Date: 2026-04-27
Trigger: Scheduled weekly promotion
Commits: 17 commits to promote
Changes: 33 files changed, 222 insertions(+), 88 deletions(-)


Commits Being Promoted

418cc644 Merge pull request #977 from Wikid82/renovate/development-non-major-updates
1b3ab9bd Merge branch 'development' into renovate/development-non-major-updates
815d1c03 Merge branch 'feature/beta-release' into development
57d0a6e3 Merge branch 'development' into renovate/development-non-major-updates
c6e7b81c chore: add minimumReleaseAge field to renovate configuration
232b1993 chore(deps): update non-major-updates
abe0ef9e fix: pin OpenTelemetry-Go to v1.41.0 to address CVE-2026-29181 vulnerability
759a9ce1 Merge pull request #974 from Wikid82/development
dfc67df4 Merge pull request #973 from Wikid82/bot/update-geolite2-checksum
d9dfaab9 fix: suppress semgrep path traversal false positive and scope linters to staged changes
f2ad3654 chore(docker): update GeoLite2-Country.mmdb checksum
c7f9d480 Merge pull request #972 from Wikid82/feature/beta-release
a66ba37e chore: add libc support for various packages in package-lock.json
a62d2364 chore: add corepack shims to npm update script for improved dependency management
e7ffa749 chore: update modernc.org/libc to version 1.72.1 and modernc.org/cc/v4 to version 4.28.1
3debe457 docs: clarify Docker socket security risks and recommend socket proxy
050394b4 fix: update ownership handling for data volume and subdirectories in entrypoint script for rootless Docker environments

Pre-Merge Checklist

  • All status checks pass
  • No critical security issues identified
  • Changelog is up-to-date (auto-generated via workflow)
  • Version bump is appropriate (if applicable)

Merge Instructions

This PR promotes changes from nightly to main. Once all checks pass:

  1. Review the commit summary above
  2. Approve if changes look correct
  3. Merge using "Merge commit" to preserve history

This PR was automatically created by the Weekly Nightly Promotion workflow.

actions-user and others added 17 commits April 24, 2026 00:14
…entrypoint script for rootless Docker environments
The Docker socket's :ro bind-mount flag prevents the socket file from
being deleted/renamed but does not restrict Docker API access. Any
process with socket access retains root-equivalent control over the
Docker daemon. This was a misleading omission in the documentation.

Updated three docs to correct this:
- Explain the :ro limitation honestly and frame socket mounting as
  an optional feature users can skip if they don't need auto-discovery
- Recommend a socket proxy as the production hardening pattern, scoped
  to only the container listing endpoints Charon actually requires
- Provide a ready-to-use compose example using linuxserver/socket-proxy
  with CONTAINERS=1 and POST=0 so write operations are denied
- Add a short security callout in the getting-started guide pointing
  users toward the proxy setup

Closes #920
…y management

Co-authored-by: Copilot <copilot@github.com>
fix: update ownership handling for data volume and subdirectories in entrypoint script for rootless Docker environments
Automated checksum update for GeoLite2-Country.mmdb database.

Old: 62049119bd084e19fff4689bebe258f18a5f27a386e6d26ba5180941b613fc2b
New: c880cbc7e6b1a9b1a96d530c34996480d6d809d2c89a6bd73a5072e4fffbc01c

Auto-generated by: .github/workflows/update-geolite2.yml
… to staged changes

- Add nosemgrep inline suppression on os.Open call in logs_handler.go;
  path is already validated by LogService.GetLogPath via filepath.Base
  equality check and prefix validation
- Scope semgrep pre-commit scan to staged files via {staged_files} in
  lefthook, with full-scan fallback when no file args are provided
- Scope golangci-lint pre-commit scan to new-from-rev HEAD so only
  issues introduced by the current change are reported, preventing
  pre-existing issues in unrelated files from blocking commits
- renovate.json: align dependency grouping configuration
chore(docker): update GeoLite2-Country.mmdb checksum
Propagate changes from development into feature/beta-release
…pdates

chore(deps): update non-major-updates (development)
@github-actions github-actions Bot added automated Automatically generated by CI/CD weekly-promotion Weekly promotion from nightly to main labels Apr 27, 2026
@github-actions
Copy link
Copy Markdown
Contributor Author

✅ Supply Chain Verification Results

PASSED

📦 SBOM Summary

  • Components: 1485

🔍 Vulnerability Scan

Severity Count
🔴 Critical 0
🟠 High 0
🟡 Medium 5
🟢 Low 2
Total 7

📎 Artifacts

  • SBOM (CycloneDX JSON) and Grype results available in workflow artifacts

Generated by Supply Chain Verification workflow • View Details

@github-advanced-security
Copy link
Copy Markdown
Contributor

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 27, 2026

Codecov Report

❌ Patch coverage is 94.44444% with 2 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
backend/internal/services/uptime_service.go 88.23% 2 Missing ⚠️

📢 Thoughts on this report? Let us know!

@Wikid82 Wikid82 merged commit dc96507 into main Apr 27, 2026
43 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automatically generated by CI/CD weekly-promotion Weekly promotion from nightly to main

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants