Merge branch 'main' into updatecli_main_scaffold_zizmor

Author: olblak

.github/workflows/updatecli.yaml

@@ -1,29 +1,26 @@
+---
 name: Updatecli
 on:
   release:
   workflow_dispatch:
   schedule:
     # Run at 12:00 every 14 days
     - cron: 0 3 * * *
-
 jobs:
   updatecli:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
         uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
-
       - name: "Setup updatecli"
-        uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
+        uses: "updatecli/updatecli-action@v3.0.0" # v2.100.0
         with:
-          version: "v0.114.0"
-
+          version: "v0.115.0"
       - name: "Set up Go"
         uses: "actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c" # v6.1.0
         with:
           go-version-file: "go.mod"
         id: go
-
       - name: "Run updatecli"
         run: updatecli compose apply --clean-git-branches=true --experimental
         env:

.github/workflows/updatecli_test.yaml

@@ -1,29 +1,24 @@
+---
 name: Updatecli Test
-
 on:
   pull_request:
-
 permissions:
   contents: read
-
 jobs:
   updatecli:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
         uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
-
       - name: "Setup updatecli"
-        uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
+        uses: "updatecli/updatecli-action@v3.0.0" # v2.100.0
         with:
-          version: "v0.114.0"
-
+          version: "v0.115.0"
       - name: "Set up Go"
         uses: "actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c" # v6.1.0
         with:
           go-version-file: "go.mod"
         id: go
-
       - name: "Test updatecli in dry-run mode"
         run: "updatecli compose diff"
         env:

.github/workflows/updatecli_update.yaml

@@ -1,3 +1,4 @@
+---
 name: Updatecli - Update
 on:
   workflow_dispatch:
@@ -7,25 +8,21 @@ on:
   push:
     branches:
       - main
-
 jobs:
   updatecli:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
         uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
-
       - name: "Setup updatecli"
-        uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
+        uses: "updatecli/updatecli-action@v3.0.0" # v2.100.0
         with:
-          version: "v0.113.0-rc.1"
-
+          version: "v0.115.0"
       - name: "Set up Go"
         uses: "actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c" # v6.1.0
         with:
           go-version-file: "go.mod"
         id: go
-
       - name: "Run updatecli only on monitored pipelines"
         run: updatecli compose apply --clean-git-branches=true --labels="monitoring:enabled" --experimental
         env:
@@ -35,7 +32,6 @@ jobs:
           UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }}
           UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }}
           UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }}
-
       - name: "Run updatecli only on existing pipelines"
         run: updatecli compose apply --clean-git-branches=true --existing-only=true --experimental
         env:

updatecli-compose.yaml

@@ -1,45 +1,95 @@
+name: Default Policies
+
+valuesinline:
+  scm:
+    enabled: true
+    email: bot@updatecli.io
+    user: updatecli
+    owner: updatecli
+    repository: releasepost
+    username: "updatecli-bot"
+    branch: main
+
 policies:
+  - name: Update golangci-lint
+    policy: ghcr.io/updatecli/policies/golangci-lint/githubaction:0.6.1@sha256:a6f5d1c9e809f7a1eb86d61d2f88be1d11bf1bb4a1dd094dc285425e7f737f3f
+
+  - name: Updatecli GitHub action
+    policy: ghcr.io/updatecli/policies/autodiscovery/githubaction:0.2.1@sha256:cfddec11464cc09615135f0f1e069f00ad24d28edc7cc6a4e8224e04c3699008
+
   - name: Update Updatecli policies
     policy: ghcr.io/updatecli/policies/updatecli/autodiscovery:0.6.1@sha256:71ce3cf69ebf8b7c25fa6131c51de2e13ceef9b832a4689b9d9422c7ce03bef1
-    values:
-      - updatecli/values.d/scm.yaml
-      - updatecli/values.d/update-compose.yaml
+    valuesinline:
+      pipeline:
+        labels:
+          ecosystem: "updatecli"
+          monitor: active
+
+  - name: Update Updatecli version in GitHub action
+    policy: ghcr.io/updatecli/policies/updatecli/githubaction:0.7.0
+    valuesinline:
+      pipeline:
+        labels:
+          ecosystem: "updatecli"
+          monitor: active
 
   - name: Golang Version
     policy: ghcr.io/updatecli/policies/golang/version:0.5.1@sha256:e288b0d8bac7b0454a96c587cd7bea8a29173a290c3b4437677b56487cfd127e
-    values:
-      - updatecli/values.d/scm.yaml
 
   - name: Major Golang Module update
     policy: ghcr.io/updatecli/policies/autodiscovery/golang:0.11.1@sha256:0a66e83d6d5c7a122bb2c7e28eb27a34e16aa16450979a8bc323d52a7a453739
-    values:
-      - updatecli/values.d/scm.yaml
-      - updatecli/values.d/golang_major.yaml
+    valuesinline:
+      name: "deps(golang): Bump Major version for Golang module"
+      pipelineid: "golang/gomod/major"
+      groupby: all
+      spec:
+        versionfilter:
+          kind: semver
+          pattern: majoronly
+        ignore:
+          - modules:
+              # Ignoring the following modules as they do not publish release
+              github.com/shurcooL/githubv4: ""
+        only:
+          # This repository contains other go.sum file used for testing.
+          # So we want to be sure that we only update the one at the root of the repository
+          - path: "go.mod"
 
   - name: Minor Golang Module update
     policy: ghcr.io/updatecli/policies/autodiscovery/golang:0.11.1@sha256:0a66e83d6d5c7a122bb2c7e28eb27a34e16aa16450979a8bc323d52a7a453739
-    values:
-      - updatecli/values.d/scm.yaml
-      - updatecli/values.d/golang_minor.yaml
+    valuesinline:
+      name: "deps(golang): Bump Minor version for Golang module"
+      pipelineid: "golang/gomod/minor"
+      groupby: individual
+
+      spec:
+        versionfilter:
+          kind: semver
+          pattern: minoronly
+        ignore:
+          - modules:
+              # Ignoring the following modules as they do not publish release
+              github.com/shurcooL/githubv4: ""
+        only:
+          # This repository contains other go.sum file used for testing.
+          # So we want to be sure that we only update the one at the root of the repository
+          - path: "go.mod"
 
   - name: Patch Golang Module update
     policy: ghcr.io/updatecli/policies/autodiscovery/golang:0.11.1@sha256:0a66e83d6d5c7a122bb2c7e28eb27a34e16aa16450979a8bc323d52a7a453739
-    values:
-      - updatecli/values.d/scm.yaml
-      - updatecli/values.d/golang_patch.yaml
-
-  - name: Update golangci-lint
-    policy: ghcr.io/updatecli/policies/golangci-lint/githubaction:0.6.1@sha256:a6f5d1c9e809f7a1eb86d61d2f88be1d11bf1bb4a1dd094dc285425e7f737f3f
-    values:
-      - updatecli/values.d/scm.yaml
+    valuesinline:
+      name: "deps: bump patch version for Golang module"
+      pipelineid: "golang/gomod/patch"
 
-  - name: Updatecli GitHub action
-    policy: ghcr.io/updatecli/policies/autodiscovery/githubaction:0.2.1@sha256:cfddec11464cc09615135f0f1e069f00ad24d28edc7cc6a4e8224e04c3699008
-    values:
-      - updatecli/values.d/scm.yaml
-
-  - name: Update Updatecli version in GitHub action
-    policy: ghcr.io/updatecli/policies/updatecli/githubaction:0.7.0
-    values:
-      - updatecli/values.d/scm.yaml
-      - updatecli/values.d/githubaction.yaml
+      spec:
+        versionfilter:
+          kind: semver
+          pattern: patch
+        ignore:
+          - modules:
+              # Ignoring the following modules as they do not publish release
+              github.com/shurcooL/githubv4: ""
+        only:
+          # This repository contains other go.sum file used for testing.
+          # So we want to be sure that we only update the one at the root of the repository
+          - path: "go.mod"