Skip to content

v1.3.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Aug 01:50
v1.3.0
098b544
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 by @dependabot[bot] in #1619
  • chore: test/ginkgo: bump image-updater from v1.1.1 to v1.2.0 by @dkarpele in #1628
  • chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @dependabot[bot] in #1618
  • chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in #1617
  • chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @chengfang in #1632
  • chore(deps): bump argo-cd from 3.3.9 to 3.4.1, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 by @chengfang in #1636
  • chore(ginkgo): remove role and rolebinding creation by @dkarpele in #1642
  • fix(webhook): normalize ghcr repository casing by @FerasMaali in #1639
  • fix(api): set WriteBackConfig.Method as optional in API by @dkarpele in #1647
  • fix: allow webhook traffic through NetworkPolicy (#1544) by @ystkfujii in #1633
  • chore(deps): bump argo-cd from 3.4.1 to 3.4.2 by @chengfang in #1650
  • chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 by @dkarpele in #1655
  • fix(test): correct assert.Equal arg order and wrong webhook type in quay test by @immanuwell in #1663
  • ci: add unit-tests flag to Codecov coverage uploads by @AdamSaleh in #1665
  • chore(deps): bump argocd from 3.4.2 to 3.4.3 by @chengfang in #1671
  • fix(webhook): align standalone webhook HTTP/2 hardening by @doup2001 in #1588
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @dependabot[bot] in #1670
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 by @dependabot[bot] in #1666
  • chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0 by @dependabot[bot] in #1668
  • chore(deps): bump image-updater from 1.2.0 to 1.2.1, and argocd-operator from 0.17 to 0.18 by @chengfang in #1674
  • feat: support SourceHydrator applications for image updates by @julianderks in #1475
  • chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20230722181636-7b502560cad4 to 3.1.1 by @dkarpele in #1675
  • feat(webhook): enforce mandatory webhook secret configuration by @dkarpele in #1678
  • fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back by @chengfang in #1679
  • feat(webhook): add Azure Container Registry (ACR) webhook handler by @ruturaj220 in #1681
  • fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL by @chengfang in #1683
  • ci: run CI tests on push to master by @AdamSaleh in #1676
  • chore(deps): bump argocd from 3.4.3 to 3.4.4 by @chengfang in #1693
  • chore(deps): bump ImageUpdater from 1.2.1 to 1.2.2 by @chengfang in #1705
  • Add blank lines preservation on git writeback by @rvandernoort in #1702
  • chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1711
  • chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #1710
  • chore(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #1709
  • chore(deps): bump alpine from 3.23 to 3.24 by @dependabot[bot] in #1708
  • chore(ci): add allow-unsafe-pr-checkout: true to actions/checkout@v7 to opt in to allow checkout of fork PRs by @chengfang in #1719
  • fix(write-back): resolve correct git source for implicit kustomize in multi-source apps by @rvandernoort in #1703
  • feat: implement image signature verification by @dkarpele in #1706
  • chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 by @dependabot[bot] in #1714
  • chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #1716
  • chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1 by @dependabot[bot] in #1718
  • chore(e2e): install cosign to gh actions by @dkarpele in #1723
  • feat: image verification to work with both modern registry signature lookup and legacy signature formats; test(e2e): image signature verification by @dkarpele in #1722
  • feat(argocd): support Plugin source type with git write-back by @flobz in #1707
  • chore(deps): bump argocd from 3.4.4 to 3.4.5 by @chengfang in #1726
  • feat(pr): Avoid creating duplicate PRs for apps sharing the same write-back-target and updates by @chengfang in #1724
  • docs: add chansuke to OWNERS reviewers by @chansuke in #1731
  • fix: reject cross-namespace secret references in git write-back by @dkarpele in #1732
  • fix: reject cross-namespace secret references in commonUpdateSettings.pullSecret by @dkarpele in #1733
  • feat: preserve YAML formatting when writing back to Helm values files by @grahamalama in #1734
  • feat(git): sign write-back commits via GitHub API with GitHub App creds by @josmo in #1728
  • chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #1736
  • chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.29.0 by @dependabot[bot] in #1737
  • feat(pr): skip git clone, checkout, commit and PR/MR creation if it already exists in the remote github or gitlab by @chengfang in #1738
  • fix(docs): use current values of updateStrategy (semver, newest-build, digest and alphabetical) and de-emphasize deprecated values by @chengfang in #1740
  • fix(log): pass the context to git commands by @dkarpele in #1742
  • feat(plugin): support applications of type plugin and plugin env variables by @chengfang in #1741
  • chore(deps): bump argocd from 3.4.5 to 3.4.6 by @chengfang in #1744
  • chore(deps): bump github/codeql-action from 4 to 4.37.3 by @dependabot[bot] in #1755
  • chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #1756
  • chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0 by @dependabot[bot] in #1751
  • chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #1749
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 by @dependabot[bot] in #1748
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #1752
  • chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.19.2 by @dependabot[bot] in #1750
  • chore(ci): change to run CodeQL on cron schedule only by @chengfang in #1759
  • feat: support custom CA certificates for registries by @w3lld1 in #1743
  • chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.1 in /registry-scanner by @dependabot[bot] in #1754
  • fix(semver): exclude pre-release tags when no semver constraint is set by @pujitha24 in #1758
  • chore(deps): bump argocd from 3.4.6 to 3.5.0 by @chengfang in #1761
  • chore(doc): remove obsolete breaking change labels by @dkarpele in #1762
  • fix(digest): pick the right live image when multiple containers share the same image by @C4tWithShell in #1757
  • test: add regression coverage for force-update image with empty registry tags by @pujitha24 in #1764
  • chore(go-fix): modernize code with go fix command by @chengfang in #1765
  • fix(kustomize): match images by alias to prevent cross-alias collisions by @pujitha24 in #1763
  • fix(argocd): retain yaml document start if exists by @stphnlwlsh in #1767
  • fix(helm): improve getHelmParamNames func to return defaults for image-name and image-tag param names by @chengfang in #1771
  • chore(deps): bump argocd from 3.5.0 to 3.5.1 by @chengfang in #1772
  • fix(git-writeback): only commit image-managed Helm parameters to .argocd-source override file by @pujitha24 in #1770
  • fix(kustomize): reject mis-configured write-back target without kustomization prefix that is a standard kustomization.yaml by @pujitha24 in #1766
  • chore(deps): bump registry-scanner from 1.2.1 to 1.3.0 by @chengfang in #1776
  • Release 1.3.0 by @chengfang in #1777

New Contributors

Full Changelog: v1.2.2...v1.3.0

Contributors

josmo, chansuke, and 17 other contributors
Assets 9
Loading
0 Join discussion