mirrors/external-dns
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/external-dns.git synced 2026-04-18 22:41:01 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,507 Commits 13 Branches 124 Tags
Commit Graph

18 Commits

Author SHA1 Message Date
Raffaele Di Fazio
a6266dd5ff
Minimize GitHub Actions workflow permissions (#6319) 
Apply principle of least privilege across all workflows:

- end-to-end-tests.yml: add missing permissions (contents: read)
- dependency-update.yaml: add missing permissions (contents: read)
- lint-test-chart.yaml: replace top-level read-all with permissions: {}
- release-chart.yaml: replace top-level read-all with permissions: {}
- codeql-analysis.yaml: remove unused actions: read
- lint.yaml: remove unused pull-requests: read
- staging-image-tester.yaml: remove unused checks: write (no goveralls step)
 2026-03-27 23:22:47 +05:30
Raffaele Di Fazio
109fd6559f
Pin all GitHub Actions to commit SHAs per Kubernetes policy (#6316) 
Pin all uses: references in workflow files to 40-character commit
SHA hashes instead of mutable tags, as required by the Kubernetes
GitHub Actions security policy.

Actions pinned:
- actions/setup-go v6.3.0
- actions/setup-python v6
- actions/checkout v6
- coverallsapp/github-action v2
- github/codeql-action v4
- golangci/golangci-lint-action v9
- GrantBirki/json-yaml-validate v4.0.0
- nosborn/github-action-markdown-cli v3.5.0
- pre-commit/action v3.0.1
- renovatebot/github-action v46.1.4
 2026-03-27 20:14:47 +05:30
dependabot[bot]
ac091a58b5
chore(deps): bump the dev-dependencies group across 1 directory with 3 updates (#6226) 
Bumps the dev-dependencies group with 3 updates in the / directory: [actions/setup-go](https://github.com/actions/setup-go), [renovatebot/github-action](https://github.com/renovatebot/github-action) and [helm/kind-action](https://github.com/helm/kind-action).


Updates `actions/setup-go` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v6.2.0...v6.3.0)

Updates `renovatebot/github-action` from 44.2.4 to 46.1.2
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/renovatebot/github-action/compare/v44.2.4...v46.1.2)

Updates `helm/kind-action` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](92086f6be0...ef37e7f390)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: renovatebot/github-action
  dependency-version: 46.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: helm/kind-action
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-27 13:33:55 +05:30
dependabot[bot]
fb038012ba
chore(deps): bump the dev-dependencies group across 1 directory with 2 updates (#6116) 
Bumps the dev-dependencies group with 2 updates in the / directory: [actions/setup-go](https://github.com/actions/setup-go) and [renovatebot/github-action](https://github.com/renovatebot/github-action).


Updates `actions/setup-go` from 5.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5.1.0...v6.2.0)

Updates `renovatebot/github-action` from 44.2.3 to 44.2.4
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/renovatebot/github-action/compare/v44.2.3...v44.2.4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: renovatebot/github-action
  dependency-version: 44.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-16 14:01:11 +05:30
dependabot[bot]
e22cd737cd
chore(deps): bump the dev-dependencies group with 2 updates (#5962) 
Bumps the dev-dependencies group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [renovatebot/github-action](https://github.com/renovatebot/github-action).


Updates `actions/checkout` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v5...v5.0.1)

Updates `renovatebot/github-action` from 44.0.2 to 44.0.3
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/renovatebot/github-action/compare/v44.0.2...v44.0.3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: renovatebot/github-action
  dependency-version: 44.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-05 11:30:57 -08:00
dependabot[bot]
66b698e552
chore(deps): bump the dev-dependencies group with 2 updates (#5895) 
Bumps the dev-dependencies group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [renovatebot/github-action](https://github.com/renovatebot/github-action).


Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

Updates `renovatebot/github-action` from 43.0.15 to 43.0.16
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/renovatebot/github-action/compare/v43.0.15...v43.0.16)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: renovatebot/github-action
  dependency-version: 43.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-08 23:09:00 -07:00
dependabot[bot]
490e56f495
chore(deps): bump the dev-dependencies group with 3 updates (#5806) 
Bumps the dev-dependencies group with 3 updates: [actions/setup-go](https://github.com/actions/setup-go), [actions/setup-python](https://github.com/actions/setup-python) and [actions/github-script](https://github.com/actions/github-script).


Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

Updates `actions/setup-python` from 5 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](60a0d83039...ed597411d8)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-05 00:35:27 -07:00
dependabot[bot]
829b5a946f
chore(deps): bump the dev-dependencies group across 1 directory with 2 updates (#5732) 
Bumps the dev-dependencies group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [renovatebot/github-action](https://github.com/renovatebot/github-action).


Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4.2.2...v5)

Updates `renovatebot/github-action` from 43.0.5 to 43.0.7
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/renovatebot/github-action/compare/v43.0.5...v43.0.7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: renovatebot/github-action
  dependency-version: 43.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-15 02:01:08 -07:00
dependabot[bot]
ba16809071
chore(deps): bump the dev-dependencies group across 1 directory with 2 updates 
Bumps the dev-dependencies group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/checkout` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](eef61447b9...11bd71901b)

Updates `actions/setup-python` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](f677139bbe...0b93645e9f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-25 03:35:30 +00:00
dependabot[bot]
e48fabc1b8
chore(deps): bump actions/checkout in the dev-dependencies group 
Bumps the dev-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](d632683dd7...eef61447b9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-08 03:30:56 +00:00
dependabot[bot]
13739fc1ce
chore(deps): bump actions/checkout in the dev-dependencies group 
Bumps the dev-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.7 to 4.2.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](692973e3d9...d632683dd7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-26 03:37:14 +00:00
Michel Loiseleur
50672d66b9
chore: upgrade ExternalDNS to go 1.23 2024-08-22 09:10:10 +02:00
dependabot[bot]
d897bd08c7
chore(deps): bump actions/checkout in the dev-dependencies group 
Bumps the dev-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](a5ac7e51b4...692973e3d9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-19 03:39:44 +00:00
Raffaele Di Fazio
7ae7c7a21b upgrades to go 1.22.4 
Signed-off-by: Raffaele Di Fazio <raffo@github.com>
 2024-06-06 19:10:13 +02:00
dependabot[bot]
4faeffd939
build(deps): bump actions/checkout in the dev-dependencies group 
Bumps the dev-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.5 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](44c2b7a8a4...a5ac7e51b4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-17 03:21:39 +00:00
dependabot[bot]
8a00a15d66
build(deps): bump actions/checkout in the dev-dependencies group 
Bumps the dev-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.4 to 4.1.5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](0ad4b8fada...44c2b7a8a4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-09 03:56:56 +00:00
dependabot[bot]
1d1a742082
build(deps): bump the dev-dependencies group across 1 directory with 4 updates 
Bumps the dev-dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [GrantBirki/json-yaml-validate](https://github.com/grantbirki/json-yaml-validate), [azure/setup-helm](https://github.com/azure/setup-helm) and [helm/kind-action](https://github.com/helm/kind-action).


Updates `actions/checkout` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](9bb56186c3...0ad4b8fada)

Updates `GrantBirki/json-yaml-validate` from 2.6.2 to 2.7.1
- [Release notes](https://github.com/grantbirki/json-yaml-validate/releases)
- [Commits](https://github.com/grantbirki/json-yaml-validate/compare/v2.6.2...v2.7.1)

Updates `azure/setup-helm` from 3.5 to 4
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](5119fcb908...fe7b79cd5e)

Updates `helm/kind-action` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](99576bfa6d...0025e74a8c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: GrantBirki/json-yaml-validate
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-25 08:57:11 +00:00
Michel Loiseleur
01961f3b42 chore: upgrade ExternalDNS to go 1.22.2 2024-04-25 08:41:51 +02:00