Skip to content

Conversation

@olix0r
Copy link
Member

@olix0r olix0r commented Oct 1, 2025

  • Update dependabot to properly scan the dev Dockerfile weekly
  • Add syft, grype, oras, and cosign to the tools iamge
  • Update various dependencies to be managed as OCI dependencies (for dependabot management)
  • Update other dependencies, including Go (to 1.25) and Rust (to 1.90)
  • setup-tools action:
    • Hack mandb to avoid slowness during apt installs in GitHub Actions
    • Unpack the tools binaries without doing a full docker buildx setup

sfleen and others added 3 commits August 1, 2025 15:37
This needs a few environment variables and debian packages installed to facilitate building that package. This includes the env vars in the `just-cargo` invocation, and the packages in the rust, rust-musl, and devcontainer images.
- Update dependabot to properly scan the dev Dockerfile weekly
- Add syft, grype, oras, and cosign to the tools iamge
- Update various dependencies to be managed as OCI dependencies (for dependabot
  management)
- Update other dependencies, including Go (to 1.25) and Rust (to 1.90)
- setup-tools action:
  - Hack mandb to avoid slowness during apt installs in GitHub Actions
  - Unpack the tools binaries without doing a full docker buildx setup
@olix0r olix0r changed the title wip: v48 v48 Oct 3, 2025
@olix0r olix0r marked this pull request as ready for review October 3, 2025 15:50
@olix0r olix0r merged commit 74b7337 into main Oct 3, 2025
30 checks passed
@olix0r olix0r deleted the ver/v48 branch October 3, 2025 17:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants