sigi-glovebox
|
a1f673dcf5
|
Update secret detector to fix vulnerability https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
Signed-off-by: sigi-glovebox <sigi@gloveboxapp.com>
|
2025-04-03 21:06:26 +02:00 |
|
Guillaume Lours
|
02c747a7de
|
bump compose-go to custom version of v2.5.0
should be replace by v2.5.1 it will be released
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2025-04-03 15:13:44 +02:00 |
|
Nicolas De Loof
|
e67348222f
|
DRAFT external services plugin support
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-04-03 15:13:44 +02:00 |
|
Guillaume Lours
|
2e75185a07
|
bump golang to 1.23.8
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2025-04-02 16:31:43 +02:00 |
|
Nicolas De Loof
|
f9cd4d0b1d
|
bump docker,cli,buildx
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-03-31 11:05:19 +02:00 |
|
Nicolas De Loof
|
342a2a9e71
|
Fix support for depends_on.restart in up and restart commands
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-03-19 15:29:50 +01:00 |
|
dependabot[bot]
|
7814e5798c
|
build(deps): bump github.com/containerd/containerd/v2
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.0.3...v2.0.4)
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-18 11:02:40 +01:00 |
|
dependabot[bot]
|
42b2e11094
|
build(deps): bump github.com/docker/buildx from 0.21.2 to 0.21.3
Bumps [github.com/docker/buildx](https://github.com/docker/buildx) from 0.21.2 to 0.21.3.
- [Release notes](https://github.com/docker/buildx/releases)
- [Commits](https://github.com/docker/buildx/compare/v0.21.2...v0.21.3)
---
updated-dependencies:
- dependency-name: github.com/docker/buildx
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-18 10:45:25 +01:00 |
|
Guillaume Lours
|
b6f313b8a5
|
bump compose-go to version v2.4.9
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2025-03-13 16:54:22 +01:00 |
|
dependabot[bot]
|
8e3e1f7f8b
|
build(deps): bump tags.cncf.io/container-device-interface
Bumps [tags.cncf.io/container-device-interface](https://github.com/cncf-tags/container-device-interface) from 0.8.1 to 1.0.0.
- [Release notes](https://github.com/cncf-tags/container-device-interface/releases)
- [Changelog](https://github.com/cncf-tags/container-device-interface/blob/main/RELEASE.md)
- [Commits](https://github.com/cncf-tags/container-device-interface/compare/v0.8.1...v1.0.0)
---
updated-dependencies:
- dependency-name: tags.cncf.io/container-device-interface
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-12 15:50:14 +01:00 |
|
Guillaume Lours
|
55b5f233c2
|
use Defang secret-detector to identify potential secret leaks before publishing OCI artifacts
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2025-03-11 15:02:37 +01:00 |
|
Nicolas De Loof
|
c3a0c35681
|
implement extends.file replace without yqlib
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-03-11 14:18:41 +01:00 |
|
Nicolas De Loof
|
b23728941d
|
only load env_file after services have been selected
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-03-10 08:32:03 +01:00 |
|
dependabot[bot]
|
1a7343bc88
|
build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.20.0 to 0.20.1.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](https://github.com/moby/buildkit/compare/v0.20.0...v0.20.1)
---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-07 16:44:02 +01:00 |
|
Nicolas De Loof
|
66a47169d5
|
Publish compose file with required siblings used by extends
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-03-07 13:58:10 +01:00 |
|
dependabot[bot]
|
4c72d3a0e3
|
build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.30.0 to 0.31.0.
- [Commits](https://github.com/golang/sys/compare/v0.30.0...v0.31.0)
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-06 19:07:25 +01:00 |
|
dependabot[bot]
|
59f39b9990
|
build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.70.0 to 1.71.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.70.0...v1.71.0)
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-06 18:55:59 +01:00 |
|
dependabot[bot]
|
7ab65ba127
|
build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.11.0 to 0.12.0.
- [Commits](https://github.com/golang/sync/compare/v0.11.0...v0.12.0)
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-06 18:44:23 +01:00 |
|
dependabot[bot]
|
eaf9800948
|
build(deps): bump github.com/opencontainers/image-spec
Bumps [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/opencontainers/image-spec/releases)
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md)
- [Commits](https://github.com/opencontainers/image-spec/compare/v1.1.0...v1.1.1)
---
updated-dependencies:
- dependency-name: github.com/opencontainers/image-spec
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-05 10:19:45 +01:00 |
|
dependabot[bot]
|
8092ce9414
|
build(deps): bump github.com/docker/buildx from 0.21.1 to 0.21.2
Bumps [github.com/docker/buildx](https://github.com/docker/buildx) from 0.21.1 to 0.21.2.
- [Release notes](https://github.com/docker/buildx/releases)
- [Commits](https://github.com/docker/buildx/compare/v0.21.1...v0.21.2)
---
updated-dependencies:
- dependency-name: github.com/docker/buildx
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-04 10:44:04 +01:00 |
|
dependabot[bot]
|
97595066e3
|
build(deps): bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 28.0.0+incompatible to 28.0.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v28.0.0...v28.0.1)
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-04 07:52:24 +01:00 |
|
dependabot[bot]
|
508309414f
|
build(deps): bump github.com/docker/cli
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 28.0.0+incompatible to 28.0.1+incompatible.
- [Commits](https://github.com/docker/cli/compare/v28.0.0...v28.0.1)
---
updated-dependencies:
- dependency-name: github.com/docker/cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-03-04 07:52:00 +01:00 |
|
Nicolas De Loof
|
0ef7bbcddc
|
introduce watch.include
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-03-03 21:59:26 +01:00 |
|
dependabot[bot]
|
094b48fd74
|
build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.6.0...v0.7.0)
---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-26 09:31:01 +01:00 |
|
dependabot[bot]
|
43c52e2a80
|
build(deps): bump tags.cncf.io/container-device-interface
Bumps [tags.cncf.io/container-device-interface](https://github.com/cncf-tags/container-device-interface) from 0.8.0 to 0.8.1.
- [Release notes](https://github.com/cncf-tags/container-device-interface/releases)
- [Commits](https://github.com/cncf-tags/container-device-interface/compare/v0.8.0...v0.8.1)
---
updated-dependencies:
- dependency-name: tags.cncf.io/container-device-interface
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-26 09:30:52 +01:00 |
|
Nicolas De Loof
|
6c1ee1069b
|
support refresh pull policy
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-02-25 17:05:23 +01:00 |
|
Nicolas De Loof
|
cae8e84636
|
require go 1.23|1.24 (stable)
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-02-21 16:54:16 +01:00 |
|
Sebastiaan van Stijn
|
cf2fc2005c
|
go.mod: docker/docker, docker/cli v28.0.0, buildx v0.21.1
full diff:
- https://github.com/docker/docker/compare/v27.5.1...v28.0.0
- https://github.com/docker/cli/compare/v27.5.1...v28.0.0
- https://github.com/docker/buildx/compare/v0.20.1...v0.21.1
Co-authored-by: Nicolas De Loof <nicolas.deloof@gmail.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
|
2025-02-21 15:23:25 +01:00 |
|
Sebastiaan van Stijn
|
d0398a4681
|
go.mod: github.com/moby/buildkit v0.20.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
|
2025-02-21 15:23:25 +01:00 |
|
Sebastiaan van Stijn
|
ac40aae4c3
|
go.mod: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
|
2025-02-21 15:23:25 +01:00 |
|
dependabot[bot]
|
fd0c23a1c9
|
build(deps): bump google.golang.org/grpc from 1.68.1 to 1.70.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.68.1 to 1.70.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.68.1...v1.70.0)
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-18 11:04:32 +01:00 |
|
dependabot[bot]
|
c23eea9341
|
build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.8.1 to 1.9.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.8.1...v1.9.1)
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-17 20:08:53 +01:00 |
|
Sebastiaan van Stijn
|
036da47950
|
go.mod: remove toolchain directive
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
|
2025-02-12 08:19:25 +01:00 |
|
dependabot[bot]
|
3f1a6b72a5
|
build(deps): bump gotest.tools/v3 from 3.5.1 to 3.5.2
Bumps [gotest.tools/v3](https://github.com/gotestyourself/gotest.tools) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/gotestyourself/gotest.tools/releases)
- [Commits](https://github.com/gotestyourself/gotest.tools/compare/v3.5.1...v3.5.2)
---
updated-dependencies:
- dependency-name: gotest.tools/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-11 10:53:38 +01:00 |
|
dependabot[bot]
|
f9a6e6c414
|
build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.10.0 to 0.11.0.
- [Commits](https://github.com/golang/sync/compare/v0.10.0...v0.11.0)
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-11 10:53:02 +01:00 |
|
dependabot[bot]
|
18ef6e592b
|
build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](https://github.com/spf13/pflag/compare/v1.0.5...v1.0.6)
---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-11 10:50:47 +01:00 |
|
dependabot[bot]
|
fa4cfb652e
|
build(deps): bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
Bumps [github.com/jonboulle/clockwork](https://github.com/jonboulle/clockwork) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/jonboulle/clockwork/releases)
- [Commits](https://github.com/jonboulle/clockwork/compare/v0.4.0...v0.5.0)
---
updated-dependencies:
- dependency-name: github.com/jonboulle/clockwork
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-10 15:24:46 +01:00 |
|
dependabot[bot]
|
200638b024
|
build(deps): bump github.com/otiai10/copy from 1.14.0 to 1.14.1
Bumps [github.com/otiai10/copy](https://github.com/otiai10/copy) from 1.14.0 to 1.14.1.
- [Release notes](https://github.com/otiai10/copy/releases)
- [Commits](https://github.com/otiai10/copy/compare/v1.14.0...v1.14.1)
---
updated-dependencies:
- dependency-name: github.com/otiai10/copy
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-10 15:04:10 +01:00 |
|
dependabot[bot]
|
a0320f12ef
|
build(deps): bump golang.org/x/sys from 0.28.0 to 0.30.0
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.28.0 to 0.30.0.
- [Commits](https://github.com/golang/sys/compare/v0.28.0...v0.30.0)
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-02-10 15:03:31 +01:00 |
|
Nicolas De Loof
|
f8a912ab9a
|
bump compose-go v2.4.8
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-02-10 15:02:01 +01:00 |
|
Sebastiaan van Stijn
|
faa46d374d
|
go.mod: github.com/moby/term v0.5.2
- update github.com/Azure/go-ansiterm to v0.0.0-20250102033503-faa5f7b0171c
to fix OSC string terminator parsing.
- add security policy
- update github actions and test against go1.22, go1.23
full diff: https://github.com/moby/term/compare/v0.5.0...v0.5.2
update github.com/Azure/go-ansiterm faa5f7b0171c
- fix OSC string terminator parsing
diff: d185dfc1b5...faa5f7b017
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
|
2025-02-09 17:37:45 +01:00 |
|
Nicolas De Loof
|
5e2abb6c26
|
support additional_context reference to another service
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-02-03 17:23:35 +01:00 |
|
Nicolas De Loof
|
7c7407672a
|
bump docker to v27.5.1
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-01-23 15:31:01 +01:00 |
|
Nicolas De Loof
|
25cfa66a91
|
bump buildx v0.20.1 and docker v27.5.0
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
|
2025-01-23 09:13:37 +01:00 |
|
Guillaume Lours
|
1f3c10eb4b
|
bump compose-go to v2.4.7
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2025-01-07 14:59:47 +01:00 |
|
Guillaume Lours
|
3060ed2795
|
bump golang.org/x/net to v0.33.0 to fix potential security issue
https://github.com/golang/go/issues/70906
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2025-01-07 12:11:44 +01:00 |
|
Guillaume Lours
|
a42a04dfe8
|
bump Golang version to v1.22.10 and update CI actions
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
|
2024-12-18 16:09:48 +01:00 |
|
dependabot[bot]
|
977530c22a
|
build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.68.0 to 1.68.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.68.0...v1.68.1)
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-12-12 19:25:02 +01:00 |
|
dependabot[bot]
|
d4db8b6b12
|
build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.27.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.31.0)
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-12-12 19:12:27 +01:00 |
|
dependabot[bot]
|
f8ce0f04e6
|
build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.27.0 to 0.28.0.
- [Commits](https://github.com/golang/sys/compare/v0.27.0...v0.28.0)
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-12-12 19:11:45 +01:00 |
|