🔄 synced file(s) with upbound/sa-up

.github/renovate.json5

@@ -1,42 +1,99 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended",
-    "helpers:pinGitHubActionDigests",
-    ":semanticCommits"
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: [
+    'config:recommended',
+    'helpers:pinGitHubActionDigests',
+    ':semanticCommits',
   ],
-  "rebaseWhen": "conflicted",
-  "prConcurrentLimit": 5,
-  "baseBranches": ["main"],
-  "labels": ["automated"],
-  "customManagers": [
+  rebaseWhen: 'auto',
+  rebaseLabel: 'rebase',
+  prConcurrentLimit: 5,
+  autoApprove: true,
+  automerge: true,
+  automergeType: 'pr',
+  baseBranches: [
+    'main',
+  ],
+  labels: [
+    'automated',
+    'run-e2e-tests',
+  ],
+  ignorePaths: [ // default renovate ignorePaths without '**/examples/**'
+    '**/node_modules/**',
+    '**/bower_components/**',
+    '**/vendor/**',
+    '**/__tests__/**',
+    '**/test/**',
+    '**/tests/**',
+    '**/__fixtures__/**'
+  ],
+  crossplane: {
+    fileMatch: ['(^|/)examples/.*\\.ya?ml$']
+  },
+  packageRules: [
+    {
+      matchFileNames: [
+        '.github/**',
+      ],
+      groupName: 'github-actions dependencies',
+    },
     {
-      "customType": "regex",
-      "description": "Bump up version in the Makefile",
-      "fileMatch": ["^Makefile$"],
-      "matchStrings": [
-        "UP_VERSION = (?<currentValue>.*?)\\n"
-      ],
-      "datasourceTemplate": "github-releases",
-      "depNameTemplate": "upbound/up",
-    }, {
-      "customType": "regex",
-      "description": "Bump uptest version in the Makefile",
-      "fileMatch": ["^Makefile$"],
-      "matchStrings": [
-        "UPTEST_VERSION = (?<currentValue>.*?)\\n"
-      ],
-      "datasourceTemplate": "github-releases",
-      "depNameTemplate": "upbound/uptest",
-    }, {
-      "customType": "regex",
-      "description": "Bump providers/functions/configurations in crossplane.yaml",
-      "fileMatch": ["crossplane.yaml"],
-      "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s*\\n\\s*version:\\s*\"(?<currentValue>[^\"]+)\""
-      ],
-      "datasourceTemplate": "{{{datasource}}}",
-      "depNameTemplate": "{{{depName}}}",
-    }
+      matchFileNames: [
+        'crossplane.yaml',
+      ],
+      groupName: 'crossplane dependencies',
+    },
+    {
+      matchFileNames: [
+        'Makefile',
+      ],
+      groupName: 'Makefile dependencies',
+    },
+    {
+      matchManagers: ['crossplane'],
+      matchFileNames: ['examples/**'],
+      groupName: 'examples'
+    },
+  ],
+  customManagers: [
+    {
+      customType: 'regex',
+      description: 'Bump up version in the Makefile',
+      fileMatch: [
+        '^Makefile$',
+      ],
+      matchStrings: [
+        'UP_VERSION = (?<currentValue>.*?)\\n',
+      ],
+      datasourceTemplate: 'github-releases',
+      depNameTemplate: 'upbound/up',
+    },
+    {
+      customType: 'regex',
+      description: 'Bump uptest version in the Makefile',
+      fileMatch: [
+        '^Makefile$',
+      ],
+      matchStrings: [
+        'UPTEST_VERSION = (?<currentValue>.*?)\\n',
+      ],
+      datasourceTemplate: 'github-releases',
+      depNameTemplate: 'upbound/uptest',
+    },
+    {
+      customType: 'regex',
+      description: 'Bump providers/functions/configurations in crossplane.yaml',
+      fileMatch: [
+        'crossplane.yaml',
+      ],
+      matchStrings: [
+        '#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s*\\n\\s*version:\\s*"(?<currentValue>[^"]+)"',
+      ],
+      datasourceTemplate: '{{{datasource}}}',
+      depNameTemplate: '{{{depName}}}',
+    },
   ],
+  "git-submodules": {
+     "enabled": true
+  }
 }

.github/workflows/ci.yaml

@@ -14,37 +14,32 @@ env:
 
 jobs:
   detect-noop:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       noop: ${{ steps.noop.outputs.should_skip }}
     steps:
       - name: Detect No-op Changes
         id: noop
-        uses: fkirc/skip-duplicate-actions@0c0fd7dfd27f1de7871e98791077b9ae5f1d8757 # v2.2.0
+        uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           paths_ignore: '["**.md", "**.png", "**.jpg"]'
           do_not_skip: '["workflow_dispatch", "schedule", "push"]'
 
   publish-artifacts:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: detect-noop
     if: needs.detect-noop.outputs.noop != 'true'
 
     steps:
-      - name: Setup QEMU
-        uses: docker/setup-qemu-action@v1
-        with:
-          platforms: all
-
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
         with:
           version: ${{ env.DOCKER_BUILDX_VERSION }}
           install: true
 
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           submodules: true
 
@@ -59,13 +54,13 @@ jobs:
           BUILD_ARGS: "--load"
 
       - name: Publish Artifacts to GitHub
-        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: output
           path: _output/**
 
       - name: Login to Upbound
-        uses: docker/login-action@v1
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
         if: env.XPKG_ACCESS_ID != ''
         with:
           registry: xpkg.upbound.io

.github/workflows/e2e.yaml

@@ -3,10 +3,11 @@ name: End to End Testing
 on:
   issue_comment:
     types: [created]
-
+  pull_request:
+    types: [labeled]
 jobs:
   e2e:
-    uses: upbound/uptest/.github/workflows/pr-comment-trigger.yml@main
+    uses: upbound/official-providers-ci/.github/workflows/pr-comment-trigger.yml@main
     with:
       package-type: configuration
     secrets:

.github/workflows/tag.yml

@@ -12,14 +12,14 @@ on:
 
 jobs:
   create-tag:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Create Tag
-        uses: negz/create-tag@v1
+        uses: negz/create-tag@39bae1e0932567a58c20dea5a1a0d18358503320 # v1
         with:
           version: ${{ github.event.inputs.version }}
           message: ${{ github.event.inputs.message }}

.github/workflows/yamllint.yaml

@@ -5,9 +5,9 @@ jobs:
     name: runner / yamllint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: yamllint
-        uses: reviewdog/action-yamllint@v1.9.0
+        uses: reviewdog/action-yamllint@f01d8a48fd8d89f89895499fca2cff09f9e9e8c0 # v1.21.0
         with:
           reporter: github-pr-review
           filter_mode: nofilter

.gitmodules

@@ -1,3 +1,3 @@
 [submodule "build"]
 	path = build
-	url = https://github.com/upbound/build
+	url = https://github.com/crossplane/build.git