Émile Ré
26595b724f
Serve compliance-portal instead of trust
...
Embed and build @probo/compliance-portal for the
/trust path and custom-domain SPA so production
ships the v2 portal. Keep apps/trust in the repo
for local use on port 5175; portal takes 5174.
Signed-off-by: Émile Ré <emile@probo.com >
2026-07-20 17:38:45 +02:00
dependabot[bot]
ef87fa981d
Bump the github-actions group with 8 updates
...
Bumps the github-actions group with 8 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `6` | `7` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) | `9.2.1` | `9.3.0` |
| [docker/setup-compose-action](https://github.com/docker/setup-compose-action ) | `2.2.0` | `2.3.0` |
| [azure/setup-helm](https://github.com/azure/setup-helm ) | `5.0.0` | `5.0.1` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) | `4.1.0` | `4.1.1` |
| [actions/attest](https://github.com/actions/attest ) | `4.1.0` | `4.1.1` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.32.1` | `4.36.2` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog ) | `3.95.5` | `3.95.7` |
Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
Updates `golangci/golangci-lint-action` from 9.2.1 to 9.3.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](82606bf257...ba0d7d2ec0https://github.com/docker/setup-compose-action/releases )
- [Commits](16feee727c...4eb059ff7fhttps://github.com/azure/setup-helm/releases )
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md )
- [Commits](dda3372f75...9bc31f4ebchttps://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](a2bbfa2537...0f67c3f485https://github.com/actions/attest/releases )
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md )
- [Commits](59d89421af...a1948c3f04https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](6bc82e05fd...8aad20d150https://github.com/trufflesecurity/trufflehog/releases )
- [Commits](d411fff7b8...f446421bafsupport@github.com >
2026-07-02 16:30:32 +02:00
dependabot[bot]
18be2b5772
Bump the github-actions group across 1 directory with 10 updates
...
Bumps the github-actions group with 10 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [runs-on/action](https://github.com/runs-on/action ) | `2.1.0` | `2.1.2` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.0` | `7.0.1` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) | `4.0.0` | `4.1.0` |
| [docker/login-action](https://github.com/docker/login-action ) | `4.0.0` | `4.2.0` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) | `db582008a42febd596419635a5abc9d9815daa9c` | `82606bf257cbaff209d206a39f5134f0cfbfd2ee` |
| [docker/setup-compose-action](https://github.com/docker/setup-compose-action ) | `2.1.0` | `2.2.0` |
| [azure/setup-helm](https://github.com/azure/setup-helm ) | `4.3.0` | `5.0.0` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `6.3.0` | `6.4.0` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) | `4.0.0` | `4.1.2` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog ) | `5f47aad1c2df34f7c6230784ce9a5a659922f479` | `d411fff7b8879a62509f3fa98c07f247ac089a51` |
Updates `runs-on/action` from 2.1.0 to 2.1.2
- [Release notes](https://github.com/runs-on/action/releases )
- [Commits](742bf56072...d141ef83ebhttps://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](4d04d5d948...d7f5e7f509https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v4...650006c6eb7dba73a995cc03b0b2d7f5ca915bee )
Updates `golangci/golangci-lint-action` from db582008a42febd596419635a5abc9d9815daa9c to 82606bf257cbaff209d206a39f5134f0cfbfd2ee
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](db582008a4...82606bf257https://github.com/docker/setup-compose-action/releases )
- [Commits](8cccb8c14b...16feee727chttps://github.com/azure/setup-helm/releases )
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md )
- [Commits](b9e51907a0...dda3372f75https://github.com/actions/setup-node/releases )
- [Commits](53b83947a5...48b55a011bhttps://github.com/sigstore/cosign-installer/releases )
- [Commits](faadad0cce...6f9f177880https://github.com/trufflesecurity/trufflehog/releases )
- [Commits](5f47aad1c2...d411fff7b8support@github.com >
2026-06-16 16:18:49 +02:00
Émile Ré
e29dc4fee9
Update trivy sarif upload action to associate to branch ref
...
Signed-off-by: Émile Ré <emile@probo.com >
2026-06-03 16:20:12 +02:00
Bryan Frimin
1dc9f5f0cd
Sign image
...
Signed-off-by: Bryan Frimin <bryan@probo.com >
2026-05-25 17:22:51 -07:00
Bryan Frimin
078f9d229d
Fix cache url
...
Signed-off-by: Bryan Frimin <bryan@probo.com >
2026-05-25 16:42:05 -07:00
Bryan Frimin
2c716efb80
Fix wrong cache endpoint
...
Signed-off-by: Bryan Frimin <bryan@probo.com >
2026-05-25 16:19:45 -07:00
Bryan Frimin
d804c72c07
Migrate to custom oci registry
...
Signed-off-by: Bryan Frimin <bryan@probo.com >
2026-05-25 15:01:35 -07:00
Émile Ré
1452db2db2
Bump aquasecurity/trivy-action to 0.36.0
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-05-08 13:17:36 +04:00
Émile Ré
5b1197db9e
Fix release note files on release tracks
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-05-07 17:36:36 +04:00
Bryan Frimin
ac526fb54d
Split release into per-track packages
...
Each shippable artifact (prb, probod server group, probod-bootstrap,
@probo/n8n-nodes-probo, @probo/cookie-banner) now has its own version
file, its own CHANGELOG.md, its own annotated-tag scheme of the form
<track>/v<version>, and its own GitHub Actions release workflow. The
unified release.yaml is removed; the unified CHANGELOG.md becomes a
short index pointing at each per-track file, with the prior history
preserved in CHANGELOG.archive.md.
Probod's CHANGELOG carries the post-split monorepo releases (0.174.0
through 0.181.0) so the server-group history stays continuous and the
probod docker image keeps its existing version line.
contrib/claude/release.md is split into contrib/claude/release/ with
one entrypoint per track plus a README that drives the agent: detect
which tracks have user-facing commits since their last tag and skip
tracks with no relevant changes, so a release request never tags an
unchanged track. The cookie-banner and n8n-node entrypoints add an
explicit npm run build step after the version bump (build.mjs bakes
package.json's version into __SDK_VERSION__) so compile errors and
package-lock.json updates are caught before tagging.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-05-06 16:04:36 +02:00
