melange 0.5.0 #149821
Merged
melange 0.5.0 #149821
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
go
iMichka
approved these changes
Oct 6, 2023
|
🤖 An automated task has requested bottles to be published to this PR. |
github-actions
bot
added
the
CI-published-bottle-commits
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Created by
brew bumpCreated with
brew bump-formula-pr.release notes
## What's Changed * Rename Contexts to Builds by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/525 * Add missing context propagation by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/527 * Bug fix: silent env var replacement by @luhring in https://github.com/chainguard-dev/melange/pull/533 * Add otel spans by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/529 * Bump apko dep to pick up otel spans by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/535 * docs: explain how build cache works practically by @luhring in https://github.com/chainguard-dev/melange/pull/537 * build: package: forcibly treat libc as a shared library by @kaniini in https://github.com/chainguard-dev/melange/pull/538 * Change git-checkout depth default to 1 by @luhring in https://github.com/chainguard-dev/melange/pull/539 * Fix/python version issue by @mesaglio in https://github.com/chainguard-dev/melange/pull/532 * pull in apko with fix for blank SOURCE_DATE_EPOCH by @deitch in https://github.com/chainguard-dev/melange/pull/542 * Remove use of deprecated WaitImmediate by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/528 * lima startup issues fixed by @deitch in https://github.com/chainguard-dev/melange/pull/543 * add dir option to ruby pipelines as not all gemspecs live in the root… by @rawlingsj in https://github.com/chainguard-dev/melange/pull/544 * K8s runner template bugs by @joshrwolf in https://github.com/chainguard-dev/melange/pull/550 * K8s runner retry exec by @joshrwolf in https://github.com/chainguard-dev/melange/pull/549 * Refactor some pipelines to more safely use pipeline expansions by @kaniini in https://github.com/chainguard-dev/melange/pull/554 * Default remove builder by @joshrwolf in https://github.com/chainguard-dev/melange/pull/552 * use go-apk.FullFS for retrieving builder workspaces by @joshrwolf in https://github.com/chainguard-dev/melange/pull/548 * Correct the variable name in the patch pipeline by @mattmoor in https://github.com/chainguard-dev/melange/pull/555 * Stop breaking github action. by @mesaglio in https://github.com/chainguard-dev/melange/pull/546 * Pod names must be RFC1123 compliant by @mattmoor in https://github.com/chainguard-dev/melange/pull/557 * K8s runner fetch workspace tgz by @joshrwolf in https://github.com/chainguard-dev/melange/pull/551 * Avoid using pargzip for compression by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/558 * Add more otel spans to k8s runner by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/565 * build(deps): bump k8s.io/client-go from 0.27.3 to 0.27.4 by @dependabot in https://github.com/chainguard-dev/melange/pull/562 * skip the cache mount for kubernetes runner builds by @joshrwolf in https://github.com/chainguard-dev/melange/pull/566 * Make sure we log errors. by @mattmoor in https://github.com/chainguard-dev/melange/pull/570 * Log errors bundling, enable GGCR Warn/Progress logs by @mattmoor in https://github.com/chainguard-dev/melange/pull/574 * add k8s runner config loading from envvars by @joshrwolf in https://github.com/chainguard-dev/melange/pull/571 * Remove `wget -q` from `fetch` by @mattmoor in https://github.com/chainguard-dev/melange/pull/575 * Several fixes to k8s runner. by @mattmoor in https://github.com/chainguard-dev/melange/pull/578 * Tweak the strip pipeline so that it never fails for deleted files by @mattmoor in https://github.com/chainguard-dev/melange/pull/573 * convert/python: check if release is found by @Dentrax in https://github.com/chainguard-dev/melange/pull/572 * Fix subpackage SBOM generation by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/569 * build(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 by @dependabot in https://github.com/chainguard-dev/melange/pull/530 * build(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 by @dependabot in https://github.com/chainguard-dev/melange/pull/561 * build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/564 * build(deps): bump google.golang.org/api from 0.129.0 to 0.133.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/576 * build(deps): bump github.com/docker/docker from 24.0.2+incompatible to 24.0.5+incompatible by @dependabot in https://github.com/chainguard-dev/melange/pull/577 * build(deps): bump google.golang.org/api from 0.133.0 to 0.134.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/580 * build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.1 by @dependabot in https://github.com/chainguard-dev/melange/pull/579 * Refactor the config/logging stuff out of build by @Elizafox in https://github.com/chainguard-dev/melange/pull/581 * renovate: update to use new config infrastructure by @Elizafox in https://github.com/chainguard-dev/melange/pull/585 * pipelines: meson/configure: explicitly invoke meson setup action by @kaniini in https://github.com/chainguard-dev/melange/pull/582 * Updates on ci and release by @cpanato in https://github.com/chainguard-dev/melange/pull/583 * Make var transforms work in bump by @Elizafox in https://github.com/chainguard-dev/melange/pull/586 * container: bubblewrap: do not defer closing files by @kaniini in https://github.com/chainguard-dev/melange/pull/596 * build: package: add pkgconf-based SCA to catalog SDKs which use it by @kaniini in https://github.com/chainguard-dev/melange/pull/590 * doc and lint revisions by @jessp01 in https://github.com/chainguard-dev/melange/pull/598 * build(deps): bump google.golang.org/api from 0.134.0 to 0.136.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/597 * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/594 * build(deps): bump github.com/lima-vm/lima from 0.16.0 to 0.17.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/593 * build(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 by @dependabot in https://github.com/chainguard-dev/melange/pull/592 * Version transform block in melange by @Elizafox in https://github.com/chainguard-dev/melange/pull/588 * Add docs about custom pipelines, defining and using. by @vaikas in https://github.com/chainguard-dev/melange/pull/604 * Support for setting context in .melange.k8s.yaml by @tcnghia in https://github.com/chainguard-dev/melange/pull/605 * allow override go version for uses: go/build and go/install by @rawlingsj in https://github.com/chainguard-dev/melange/pull/606 * add melange sign command, slightly refactor and make public the signing methods by @joshrwolf in https://github.com/chainguard-dev/melange/pull/607 * plumb through SDE to EmitSignature by @joshrwolf in https://github.com/chainguard-dev/melange/pull/608 * support substitutions in provides lists by @imjasonh in https://github.com/chainguard-dev/melange/pull/610 * Set reasonable concurrency levels for pgzip by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/611 * Bump pkgconfig to pick up the openblas fix. by @dlorenc in https://github.com/chainguard-dev/melange/pull/612 * Bump pkg-config again to actually pick up the openblas fix. by @dlorenc in https://github.com/chainguard-dev/melange/pull/618 * Add ${{targets.contextdir}} by @kaniini in https://github.com/chainguard-dev/melange/pull/622 * add --force option to recreate apk indexes with given signatures by @joshrwolf in https://github.com/chainguard-dev/melange/pull/626 * sign: do not rename across device boundaries by @kaniini in https://github.com/chainguard-dev/melange/pull/627 * Fix the links to commands, fix the URLs generated. by @vaikas in https://github.com/chainguard-dev/melange/pull/624 * cli: index: add --signing-key, --source and --merge options by @kaniini in https://github.com/chainguard-dev/melange/pull/629 * docs: typo in go-build example by @acuteaura in https://github.com/chainguard-dev/melange/pull/630 * Bump apko and fix everything I broke by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/631 * Print the path to generated melange config. by @vaikas in https://github.com/chainguard-dev/melange/pull/636 * feat: support --recurse-submodules in git clone by @stormqueen1990 in https://github.com/chainguard-dev/melange/pull/639 * readlinkfs: ignore some security-module specific xattrs by @kaniini in https://github.com/chainguard-dev/melange/pull/640 * Add --wolfi-defaults flag, clean up flag handling. by @vaikas in https://github.com/chainguard-dev/melange/pull/641 * Start of exhaustively documenting the build file. by @vaikas in https://github.com/chainguard-dev/melange/pull/609 * Add a maven/configure-mirror pipeline to redirect to GCP. by @dlorenc in https://github.com/chainguard-dev/melange/pull/644 * Add flags for resolving git tags, release-monitoring by @vaikas in https://github.com/chainguard-dev/melange/pull/643 * add builtin pipelines for python by @imjasonh in https://github.com/chainguard-dev/melange/pull/642 * remove extra backtick. by @vaikas in https://github.com/chainguard-dev/melange/pull/647 * Bunch of lint fixes. No functional changes. by @vaikas in https://github.com/chainguard-dev/melange/pull/645 * Change GeneratedMelangeConfig to embed pkg/config/config instead of redefining it. by @vaikas in https://github.com/chainguard-dev/melange/pull/650 * Fix syntax in maven pipeline (and add test). by @dlorenc in https://github.com/chainguard-dev/melange/pull/652 * package: dereference symlinks for aliased pkg-config modules by @kaniini in https://github.com/chainguard-dev/melange/pull/653 * Fix issue: #658 by @vaikas in https://github.com/chainguard-dev/melange/pull/659 * feat: add output logs for the apkbuild converter by @stormqueen1990 in https://github.com/chainguard-dev/melange/pull/660 * Change default python-version from 3.11 to 3. by @vaikas in https://github.com/chainguard-dev/melange/pull/649 * feat: add new Perl pipelines for Makefile generation and cleanup by @stormqueen1990 in https://github.com/chainguard-dev/melange/pull/657 * add ${{package.full-version}} = ${{package.version}}-r${{package.epoch}} by @vaikas in https://github.com/chainguard-dev/melange/pull/662 * document / examples for ${{package.full-version}} by @vaikas in https://github.com/chainguard-dev/melange/pull/664 * config: copy all subpackage variables when doing a range expansion by @kaniini in https://github.com/chainguard-dev/melange/pull/661 * docs: add documentation for built-in pipelines by @stormqueen1990 in https://github.com/chainguard-dev/melange/pull/665 * construct the package.full-version in higher context than just pipeline. by @vaikas in https://github.com/chainguard-dev/melange/pull/667 * Replace the elements of the subpackage by @mattmoor in https://github.com/chainguard-dev/melange/pull/668 * docs: fix link in pkg/build/pipelines/README.md by @stormqueen1990 in https://github.com/chainguard-dev/melange/pull/666 * package: constrain library SCA to library search paths only by @kaniini in https://github.com/chainguard-dev/melange/pull/669 * Add environment var overriding to the pipeline. by @Elizafox in https://github.com/chainguard-dev/melange/pull/676 * Add tests for new pipeline variables by @Elizafox in https://github.com/chainguard-dev/melange/pull/677 * Fix some python generation issues: by @dlorenc in https://github.com/chainguard-dev/melange/pull/674 * package: only constrain library search paths for provides entries by @kaniini in https://github.com/chainguard-dev/melange/pull/678 * Bump goreleaser/goreleaser-action from 4.3.0 to 4.6.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/673 * Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/chainguard-dev/melange/pull/672 * Add pecl pipelines for phpize & install. by @vaikas in https://github.com/chainguard-dev/melange/pull/679 * Bump go tests to 1.21 by @Elizafox in https://github.com/chainguard-dev/melange/pull/682 * Add regression tests for workdir propagation, fix long-standing bug with propagation across referenced pipelines by @kaniini in https://github.com/chainguard-dev/melange/pull/681 * Bump k8s test workflows to Go 1.21 by @Elizafox in https://github.com/chainguard-dev/melange/pull/683 * golangci-lint version bump to 1.54 by @Elizafox in https://github.com/chainguard-dev/melange/pull/687 * chore: remove CODEOWNERS file by @luhring in https://github.com/chainguard-dev/melange/pull/688 * git-checkout: Allow tags to matched annotated tag SHAs, don't allow by @wlynch in https://github.com/chainguard-dev/melange/pull/686 * build(deps): bump k8s.io/client-go from 0.28.0 to 0.28.1 by @dependabot in https://github.com/chainguard-dev/melange/pull/632 * Bump goreleaser/goreleaser-action from 4.6.0 to 5.0.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/690 * Bump docker/login-action from 2.2.0 to 3.0.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/689 * build(deps): bump go.opentelemetry.io/otel from 1.16.0 to 1.17.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/635 * build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/654 * build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/620 * build(deps): bump cloud.google.com/go/storage from 1.31.0 to 1.32.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/617 * build(deps): bump k8s.io/api from 0.28.0 to 0.28.1 by @dependabot in https://github.com/chainguard-dev/melange/pull/633 * build(deps): bump google.golang.org/api from 0.136.0 to 0.138.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/613 * build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/600 * build(deps): bump github.com/lima-vm/lima from 0.17.0 to 0.17.2 by @dependabot in https://github.com/chainguard-dev/melange/pull/599 * build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 by @dependabot in https://github.com/chainguard-dev/melange/pull/655 * Binary package linting by @Elizafox in https://github.com/chainguard-dev/melange/pull/680 * add goreleaser pipeline by @developer-guy in https://github.com/chainguard-dev/melange/pull/671 * Disable linters on -compat packages by @Elizafox in https://github.com/chainguard-dev/melange/pull/691 * log and continue when .pc file can't be loaded by @imjasonh in https://github.com/chainguard-dev/melange/pull/694 * Use Warnf over WARNING by @jonjohnsonjr in https://github.com/chainguard-dev/melange/pull/696 * Add dev, opt, and srv linters by @Elizafox in https://github.com/chainguard-dev/melange/pull/697 * fix the dir name as we already expect dir to be set explicit by @developer-guy in https://github.com/chainguard-dev/melange/pull/692 * linter: when subpackages are linted use the subpackage name as the pa… by @rawlingsj in https://github.com/chainguard-dev/melange/pull/699 * Add worldwrite linter by @Elizafox in https://github.com/chainguard-dev/melange/pull/698 * build: do not run linters on skipped subpackages by @kaniini in https://github.com/chainguard-dev/melange/pull/701 * bump go to 1.21 and apko to e9722fc by @joshrwolf in https://github.com/chainguard-dev/melange/pull/702 * exa is dead, use mdbook as a rust CI test instead. by @Elizafox in https://github.com/chainguard-dev/melange/pull/703 * Add post-file walk linting and empty package linting by @Elizafox in https://github.com/chainguard-dev/melange/pull/700 * Refactor the package linter into a submodule by @Elizafox in https://github.com/chainguard-dev/melange/pull/706 * build: refactor package linter invocation by @kaniini in https://github.com/chainguard-dev/melange/pull/708 * Do not delete extensions and plugins directories with ruby/clean by @found-it in https://github.com/chainguard-dev/melange/pull/719 * build(deps): bump google.golang.org/api from 0.138.0 to 0.142.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/717 * build(deps): bump k8s.io/api from 0.28.1 to 0.28.2 by @dependabot in https://github.com/chainguard-dev/melange/pull/718 * build(deps): bump k8s.io/client-go from 0.28.1 to 0.28.2 by @dependabot in https://github.com/chainguard-dev/melange/pull/716 * build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc4 to 1.1.0-rc5 by @dependabot in https://github.com/chainguard-dev/melange/pull/715 * add docs for -compat packages by @imjasonh in https://github.com/chainguard-dev/melange/pull/709 * build(deps): bump github.com/docker/docker from 24.0.5+incompatible to 24.0.6+incompatible by @dependabot in https://github.com/chainguard-dev/melange/pull/714 * build(deps): bump cloud.google.com/go/storage from 1.32.0 to 1.33.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/713 * build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/710 * build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/712 * build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/711 * build(deps): bump google.golang.org/api from 0.142.0 to 0.143.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/720 * pipelines: strip: use -g by default when stripping by @kaniini in https://github.com/chainguard-dev/melange/pull/722 * update alpine-go to latest git to fix indexing by @kaniini in https://github.com/chainguard-dev/melange/pull/723 * Add stripped file linter by @Elizafox in https://github.com/chainguard-dev/melange/pull/724 * strip linter: properly close tempfile by @Elizafox in https://github.com/chainguard-dev/melange/pull/725 * Update linter docs by @Elizafox in https://github.com/chainguard-dev/melange/pull/726 * Add section to linter docs about disabling linters by @Elizafox in https://github.com/chainguard-dev/melange/pull/728 * Add a PR checklist to melange. by @mattmoor in https://github.com/chainguard-dev/melange/pull/734 * build(deps): bump github.com/package-url/packageurl-go from 0.1.1 to 0.1.2 by @dependabot in https://github.com/chainguard-dev/melange/pull/736 * build(deps): bump go.opentelemetry.io/otel from 1.18.0 to 1.19.0 by @dependabot in https://github.com/chainguard-dev/melange/pull/735 * Fix yaml typo in linter docs by @imjasonh in https://github.com/chainguard-dev/melange/pull/732 * nit: fix mistake in function docs by @jspeed-meyers in https://github.com/chainguard-dev/melange/pull/731 * Enable linters to warn (via callback) instead of just failing. by @mattmoor in https://github.com/chainguard-dev/melange/pull/739New Contributors
Full Changelog: chainguard-dev/melange@v0.4.0...v0.5.0