César Arroba Vico
2600d49195
fix(ci): create the release tracking ref locally in prepare-release ( #13052 )
2026-10-15 11:51:12 +02:00
César Arroba Vico
7c4b12b655
fix(ci): fetch the release branch after creating it in prepare-release ( #13050 )
2026-10-15 11:23:57 +02:00
César Arroba
92216f1597
ci(release): auto-create minor release branch and lift freeze on publish
...
Create the minor release branch automatically in the release preparation workflow, check versions before creating it, match the version literally, and lift the release freeze when the release is published.
2026-10-08 12:47:38 +02:00
César Arroba
07faddd64e
ci: fix the remaining shellcheck findings and enable the check ( #12367 )
2026-08-06 12:35:55 +02:00
César Arroba
76d7a2882c
ci: quote the unquoted shell expansions in workflows ( #12365 )
2026-08-06 11:59:40 +02:00
Copilot and Pepe Fagoaga
e15f6970ef
fix(ci): use PROWLER_BOT_ACCESS_TOKEN for release freeze ( #12295 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-03 14:45:23 +02:00
Hugo Pereira Brito
1bb3fc9bda
ci: add release freeze gate ( #11621 )
2026-07-29 10:08:15 +01:00
stepsecurity-app[bot] and Pepe Fagoaga
2a077cae5e
feat(security): security best practices from StepSecurity ( #11937 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-07-10 09:00:40 +02:00
dependabot[bot]
c660b35ed6
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 ( #11267 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:33:57 +02:00
dependabot[bot]
782e3f238b
chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #10960 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:50:28 +02:00
dependabot[bot]
6ef70484c7
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.19.1 ( #10953 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:32:05 +02:00
César Arroba
4c0a3f477f
chore(ci): consolidate sdk/api/ui/docs bump workflows into single bump-version.yml ( #11208 )
2026-05-18 18:29:17 +02:00
César Arroba
bc443eef22
chore(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID ( #11205 )
2026-05-18 17:38:57 +02:00
César Arroba
5cd7fe4f96
revert(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID ( #11202 )
2026-05-18 15:59:52 +02:00
César Arroba
0234f038f0
chore(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID ( #11201 )
2026-05-18 15:44:21 +02:00
Adrián Peña
7d3ed62e90
chore(sdk): migrate from poetry to uv ( #11162 )
2026-05-14 12:51:57 +02:00
AOrps and Adrián Jesús Peña Rodríguez
fb0ef391f2
ci(api): replace poetry with uv (api) ( #10775 )
...
Signed-off-by: AOrps <aorbeandrews@gmail.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-05-14 11:17:17 +02:00
César Arroba
ca79300440
fix(ci): poetry cache post-step failure on release workflows ( #10881 )
2026-04-24 11:57:30 +02:00
stepsecurity-app[bot] and Pepe Fagoaga
96e7d6cb3a
feat(security): security best practices from StepSecurity ( #10682 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-14 15:13:12 +02:00
Josema Camacho
51591cb8cd
build: bump poetry to 2.3.4 and consolidate SDK workflows ( #10681 )
2026-04-14 13:32:46 +02:00
dependabot[bot]
c8d41745dd
chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 ( #10544 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-09 10:23:44 +02:00
stepsecurity-app[bot] and Pepe Fagoaga
716c130140
feat(security): security best practices from StepSecurity ( #10480 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-26 13:58:19 +01:00
dependabot[bot]
6e9f54d1ba
build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ( #9937 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 09:51:07 +01:00
dependabot[bot]
41a7b19c7d
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 ( #9936 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 09:46:40 +01:00
dependabot[bot]
27d074abe4
build(deps): bump actions/setup-python from 5.3.0 to 6.2.0 ( #9932 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 09:44:28 +01:00
Andoni Alonso
8be218b29f
fix(ci): harden GitHub Actions workflows against expression injection ( #10200 )
2026-03-01 19:58:43 +01:00
dependabot[bot]
7c9dd8fe89
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.0.0 ( #9705 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-08 13:19:35 +01:00
dependabot[bot]
8f5c43744f
build(deps): bump softprops/action-gh-release from 2.4.1 to 2.5.0 ( #9389 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-08 13:15:24 +01:00
dependabot[bot]
ca9211b5ed
build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 ( #9390 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:26:54 +01:00
dependabot[bot]
3cf7f7845e
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 ( #9397 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:20:19 +01:00
César Arroba
9c387d5742
chore(github): fix release notes ( #9457 )
2025-12-04 12:15:09 +01:00
César Arroba
4a5801c519
chore(github): debug release notes ( #9456 )
2025-12-04 12:07:02 +01:00
César Arroba
85cb39af28
chore(github): fix release notes ( #9455 )
2025-12-04 11:53:11 +01:00
César Arroba
56d092c87e
chore(github): fix changelog extraction and verify API specs file ( #9420 )
2025-12-03 10:52:52 +01:00
dependabot[bot]
1a4ae33235
chore(deps): bump softprops/action-gh-release from 2.3.3 to 2.4.1 ( #9134 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-06 10:09:29 +01:00
César Arroba
1bb6bc148e
chore(github): fix prepare release action ( #9159 )
2025-11-04 14:44:25 +01:00
César Arroba
f5dc0c9ee0
chore(github): fix prepare release action ( #8998 )
2025-10-24 12:44:32 +02:00
César Arroba
2039a5005c
chore(github): rename prepare release action ( #8985 )
2025-10-22 17:29:22 +02:00