Merge branch 'main' into fix_generate_matching_pattern

.chainsaw.yaml

@@ -12,3 +12,4 @@ spec:
   excludeTestRegex: '_.+'
   forceTerminationGracePeriod: 5s
   delayBeforeCleanup: 3s
+  template: false

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:24.04@sha256:3f85b7caad41a95462cf5b787d8a04604c8262cdcdf9a472b8c52ef83375fe15
+FROM ubuntu:24.04@sha256:2e863c44b718727c860746568e1d54afd13b2fa71b160f5cd9058fc436217b30
 
 RUN apt-get update && apt-get install -y sudo git curl apt-transport-https ca-certificates gnupg-agent software-properties-common
 ARG USERNAME=root

.github/ISSUE_TEMPLATE/bug-cli.yaml

@@ -42,6 +42,7 @@ body:
         - 1.12.0
         - 1.12.1
         - 1.12.2
+        - 1.12.3
     validations:
       required: true
   - type: textarea

.github/ISSUE_TEMPLATE/bug-other.yaml

@@ -41,6 +41,7 @@ body:
         - 1.12.0
         - 1.12.1
         - 1.12.2
+        - 1.12.3
     validations:
       required: true
   - type: textarea

.github/ISSUE_TEMPLATE/bug-webhook.yaml

@@ -41,6 +41,7 @@ body:
         - 1.12.0
         - 1.12.1
         - 1.12.2
+        - 1.12.3
     validations:
       required: true
   - type: dropdown
@@ -72,6 +73,7 @@ body:
         - KinD
         - Minikube
         - K3d
+        - K3s
         - OpenShift
         - VMware Tanzu (specify in description)
         - Bare metal

.github/workflows/check-actions.yaml

@@ -18,9 +18,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Ensure SHA pinned actions
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@40e45e738b3cad2729f599d8afc6ed02184e1dbd # v3.0.5
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@74606c30450304eee8660aae751818321754feb1 # v3.0.9
         with:
           # slsa-github-generator requires using a semver tag for reusable workflows. 
           # See: https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators

.github/workflows/check-milestone-label.yaml

@@ -0,0 +1,32 @@
+name: check-milestone-label
+
+permissions: {}
+
+on:
+  pull_request:
+    branches:
+      - 'main'
+    types:
+      - opened
+      - synchronize
+      - edited
+      - reopened
+      - labeled
+      - unlabeled
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  check_labels:
+    name: Check milestone label for pull request
+    runs-on: ubuntu-latest
+    if: ${{ github.actor != 'dependabot[bot]' }}  # dependabot prs do not have to be in milestone
+    steps:
+      - name: require milestone label for pull request
+        uses: docker://agilepathway/pull-request-label-checker:latest
+        with:
+          prefix_mode: true
+          one_of: "milestone"
+          repo_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/clean-stale-branches.yaml

@@ -0,0 +1,20 @@
+name: Cleanup Stale Branches
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 0 * * *' # This schedule runs the workflow at midnight every day
+
+jobs:
+  cleanup-stale-branches:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Cleanup Stale Branches
+        uses: cbrgm/cleanup-stale-branches-action@af96333d4b82de4b00ea2305610a0e3a3da82392 # v1.1.16
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          repository: ${{ github.repository }}
+          allowed-prefixes: "dependabot/,temp-cherry-pick-,cherry-pick-"
+          last-commit-age-days: 7
+          dry-run: false
+          rate-limit: true

.github/workflows/cli.yaml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Setup caches
         uses: ./.github/actions/setup-caches
         timeout-minutes: 5
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Setup caches
         uses: ./.github/actions/setup-caches
         timeout-minutes: 5

.github/workflows/codecov.yaml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Setup caches
       uses: ./.github/actions/setup-caches
       timeout-minutes: 5
@@ -50,13 +50,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Download coverage
       uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
       with:
         name: coverage.out
     - name: Upload Report to Codecov
-      uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
+      uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
       with:
         files: ./coverage.out
         fail_ci_if_error: true