Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump updatecli version to v0.74.0 #506

Conversation

github-actions[bot]
Copy link
Contributor

@github-actions github-actions bot commented Apr 5, 2024

UPDATECLI.YAML

Bump updatecli version in action.yaml

change detected: * key "$.inputs.version.default" updated from "v0.74.0" to "v0.75.0-rc.2", in file "action.yaml"

v0.74.0
Release published on the 2024-03-07 13:04:07 +0000 UTC at the url https://github.com/updatecli/updatecli/releases/tag/v0.74.0

On top of bug-fixes and dependency updates, this release introduces the following main features:

**Shareable Policy out of experimental**

We don't need the flag `--experimental` to use that feature anymore.
More information on https://www.updatecli.io/blog/shareable-policies/

**Allow to enable/disable working branch for any scm using the parameter `workingbranch`.**

Previously, only the "git" scm could be used to push changes to existing git branches while other scm (GitHub,Gitlab,Stash,Gitea) would only push changes to a working branch like `updatecli_main_xxxxx`.
It was handy for pullrequest based workflow, but also a frequent source of confusion for new users.
Now if `workingbranch` is set true/false then we enable/disable working branch otherwise by default.

We preserve the previous situation depending on the scm kind:

* Scm "GitHub", "GitLab", "Stash", "Gitea" uses by default `workingbranch` set to true to create working branch.
* Scm "Git" uses by default `workingbranch` set to false to not create working branch  

**Allow condition target**

Previously for a target to be executed, all conditions defined in the pipeline needed to pass.
While it remains the default behavior, now it's possible to only trigger a target based on a subset of conditions

**Add flux autodiscovery plugin**

Updatecli autodiscovery can now identify updates in Flux helmrelease and ociregistry.
gitrepository support will come in a future version.

Once again, we paid attention to not introducing any breaking changes so all existing manifests should keep working.

## Changes

## 🚀 Features

- feat: move shareable policies out of experimental @olblak (#1973)
- feat: Allow to enable/disable working branch for all scm plugins @olblak (#1955)
- feat: Add conditional Target @olblak (#1962)
- feat: add flux autodiscovery plugin @olblak (#1950)
- feat: golang autodiscovery should follow conventional commits @olblak (#1947)
- feat: fleet autodiscovery should follow conventional commits @olblak (#1946)

## 🐛 Bug Fixes

- fix(dockerdigest): Allow to specify none linux os @olblak (#1981)
- fix(golang): autodiscovery should run go mod tidy from sub folders @olblak (#1957)
- fix(helm): ignore containers when tag or repository are not specified @olblak (#1956)

## 🧰 Maintenance

- deps: bump Golang version to 1.22.1 @updateclibot (#1971)
- Update Golang module golang.org/x/oauth2 @updateclibot (#1976)
- Update Golang module github.com/stretchr/testify @updateclibot (#1969)
- refactor: remove useless git checkout after a git clone @olblak (#1966)
- Update Golang module github.com/hashicorp/hcl/v2 @updateclibot (#1967)
- chore(deps): Bump actions/add-to-project from 0.5.0 to 0.6.0 @dependabot (#1961)
- Update Golang module github.com/drone/go-scm @updateclibot (#1953)
- chore(deps): Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 @dependabot (#1952)
- Update Golang module golang.org/x/mod @updateclibot (#1944)
- clean: always run fleet autodiscovery test @olblak (#1948)
- chore(deps): Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 @dependabot (#1934)

## Contributors

@dependabot, @dependabot[bot], @olblak, @updateclibot and @updateclibot[bot]
v0.75.0-rc.2
Release published on the 2024-04-05 09:46:47 +0000 UTC at the url https://github.com/updatecli/updatecli/releases/tag/v0.75.0-rc.2

This release introduces a major improvement when interacting with Git repositories.
Updatecli now automatically recreate "working" branch if their base branch diverges.
It relies on the scm option `force` to enable/disable this behavior.

So, If a target relies on a scm configuration with the setting "force" set to "true" like in the following example:

```
pipelineid: example
scms:
    default:
        kind: github
        spec:
            branch: 'main'
            email: 'alice@foo.bar'
            owner: 'updatecli-test'
            repository: 'updatecli'
            token: '{{ requiredEnv "GITHUB_TOKEN" }}'
            user: 'updateclibot'
            username: 'alice'
            # force allows recreating the working branch 
            # and to force push the changes by running 
            # git push --force
            force: true
        disabled: false
```

Then Updatecli creates a working branch named "updatecli_main_example" based on the branch "main"
and each time the branch "main" is modified, Updatecli recreates the working branch "updatecli_main_example".
The setting "force" allows Updatecli to recreate the working branch and to run "git push --force" operation. 

As a reminder, it's always a good practice to have branch protection in place to protect sensitive branches.

The scm git plugin has `force` set to `false` by default because it doesn't use working branch by default.
The scm plugin github,gitlab,stash, and gitea use `force` set to true by default as they all use working branch by default.
 
## Changes

- clean: migrate some updatecli pipeline to update-compose.yaml @olblak (#2011)

## 🚀 Features

- feat: By default scm github/gitlab/stash/gitea uses force push @olblak (#2026)
- chore: show extra warning for git scm @olblak (#2025)
- feat: close GitHub pullrequest when no file changed @olblak (#2021)
- Allow to recreate working branch based on their "base" branch @olblak (#2018)

## 🧰 Maintenance

- deps: bump golangci-lint to v1.57.2 @updateclibot (#2017)
- chore(deps): Bump actions/add-to-project from 0.6.1 to 1.0.0 @dependabot (#2009)
- chore(deps): Bump anchore/sbom-action from 0.15.9 to 0.15.10 @dependabot (#2010)
- deps(go): bump module github.com/aws/aws-sdk-go @updateclibot (#1996)
- chore(deps): Bump anchore/sbom-action from 0.15.8 to 0.15.9 @dependabot (#1978)
- chore(deps): Bump actions/add-to-project from 0.6.0 to 0.6.1 @dependabot (#1997)
- deps(go): bump module helm.sh/helm/v3 @updateclibot (#2001)
- deps(go): bump module oras.land/oras-go/v2 @updateclibot (#2002)
- chore(deps): Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible @dependabot (#1998)
- deps(go): bump module github.com/google/go-containerregistry @updateclibot (#2003)
- deps(go): bump module github.com/drone/go-scm @updateclibot (#2004)
- chore(deps): Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 @dependabot (#1994)
- deps(go): bump module github.com/zclconf/go-cty @updateclibot (#2006)
- deps(go): bump module github.com/zclconf/go-cty @updateclibot (#1986)
- deps(go): bump module github.com/opencontainers/image-spec @updateclibot (#1987)
- deps(go): bump module github.com/goccy/go-yaml @updateclibot (#1988)
- deps(go): bump module github.com/aws/aws-sdk-go @updateclibot (#1990)
- deps(go): bump module golang.org/x/mod @updateclibot (#1991)
- chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 @dependabot (#1983)

## Contributors

@dependabot, @dependabot[bot], @olblak, @updateclibot and @updateclibot[bot]
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

Made with ❤️️ by updatecli
Made with ❤️️ by updatecli
@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Apr 5, 2024
@github-actions github-actions bot enabled auto-merge April 5, 2024 10:08
Made with ❤️️ by updatecli
@github-actions github-actions bot changed the title Bump updatecli version to v0.75.0-rc.2 Bump updatecli version to v0.74.0 Apr 5, 2024
@github-actions github-actions bot added this pull request to the merge queue Apr 5, 2024
Merged via the queue into v2 with commit 2df63cc Apr 5, 2024
@olblak olblak deleted the updatecli_v2_f1d125f2e8197c29b4655c467651503ab61377fa1a31af6152254a7e8764c2ab branch April 5, 2024 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant