Jan Čermák
dfa8bf679d
Disable version check and publish
2026-03-18 12:22:28 +01:00
Jan Čermák
d0cd84b35e
Revert changes to the build_base job
2026-03-18 12:15:49 +01:00
Jan Čermák
cebc35901f
Remove redundant default "context: ."
2026-03-17 17:45:01 +01:00
Jan Čermák
9e4fcac98a
Pin builder actions to release hash
2026-03-17 17:22:17 +01:00
Jan Čermák
c0b581c924
Merge remote-tracking branch 'origin/dev' into gha-builder
2026-03-17 16:16:55 +01:00
Robert Resch and GitHub
e4524d9b68
Run split tests in the same stage with mypy ( #165738 )
2026-03-17 10:45:55 +01:00
Ville Skyttä and GitHub
0e76d927cf
Switch to actions/attest for build provenance ( #165350 )
2026-03-17 09:57:48 +01:00
751b2638ce
Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 ( #165758 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 09:23:42 +01:00
Jan Čermák and GitHub
5d182394c2
Update zizmor to v1.23.1 ( #165467 )
2026-03-16 14:30:13 +01:00
7afc5b777c
Bump docker/metadata-action from 5.10.0 to 6.0.0 ( #165438 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 12:25:35 +01:00
595aeea8cc
Bump github/codeql-action from 4.32.4 to 4.32.6 ( #165436 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 12:22:09 +01:00
02abba02d1
Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 ( #165437 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 12:21:54 +01:00
4ca1ad96f1
Bump docker/build-push-action from 6.19.2 to 7.0.0 ( #165435 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 12:21:20 +01:00
dependabot[bot] and GitHub
2a8d59be4c
Bump docker/login-action from 3.7.0 to 4.0.0 ( #165302 )
2026-03-11 09:16:34 +01:00
dependabot[bot] and GitHub
6e6e35bc3b
Bump actions/dependency-review-action from 4.8.3 to 4.9.0 ( #165304 )
2026-03-11 09:15:36 +01:00
51f90a328b
Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 ( #164909 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 09:38:33 +01:00
Jan Čermák
36cb3e21fe
Merge remote-tracking branch 'origin/dev' into gha-builder
2026-03-05 12:17:11 +01:00
Jan Čermák
f645b232f9
Fix container-(username|password) -> container-registry-(username|password)
2026-03-05 12:14:36 +01:00
Jan Čermák
e8454d9b2c
Use updated build-image action inputs, sort alphabetically
2026-03-05 12:10:43 +01:00
60a4a97d9c
Bump dawidd6/action-download-artifact from 14 to 16 ( #164790 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-05 10:16:23 +01:00
dependabot[bot] and GitHub
ad1c6846e7
Bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #164791 )
2026-03-05 07:29:59 +01:00
Jan Čermák
f6f7390063
Restore build context also in build_python
2026-03-04 18:26:21 +01:00
Jan Čermák
bfa1fd7f1b
Use new home-assistant/builder actions for image builds
...
This PR completely drops usage of the builder action in favor of new actions
introduced in home-assistant/builder#273. This results in faster builds with
better caching options and simple local builds using Docker BuildKit.
The image dependency chain currently still uses per-arch builds but once
docker-base and docker repositories start publishing multi-arch images, we can
simplify the action a bit further.
The idea to use composite actions comes from #162245 and this PR fully predates
it. There is minor difference that the files generated twice in per-arch builds
are now generated and archived by the init job.
2026-03-04 18:05:12 +01:00
Robert Resch and GitHub
780dc178a1
Use Python version file in CI for setting the default python version ( #164751 )
2026-03-04 16:53:31 +01:00
b750de1e3e
Bump actions/ai-inference from 2.0.6 to 2.0.7 ( #164713 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 09:45:00 +01:00
Robert Resch and GitHub
c311ff0464
Fix wheels building by using arch dependent requirements_all file ( #164675 )
2026-03-03 21:55:59 +01:00
e107b8e5cd
Bump actions/download-artifact from 7.0.0 to 8.0.0 ( #164647 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-03 08:34:36 +01:00
dependabot[bot] and GitHub
df8f135532
Bump github/codeql-action from 4.32.3 to 4.32.4 ( #164554 )
2026-03-02 07:30:23 +01:00
b1bc1dc102
Bump actions/dependency-review-action from 4.8.2 to 4.8.3 ( #164296 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 21:21:15 +01:00
Franck Nijhof and GitHub
51dc6d7c26
Bump version to 2026.4.0dev0 ( #164101 )
2026-02-25 21:08:17 +01:00
Robert Resch and GitHub
f12c5b627d
Remove building wheels for Python 3.13 ( #164083 )
2026-02-25 18:05:32 +01:00
Jan Čermák and GitHub
6a91771f04
Use native ARM runner for builder action, update to builder 2026.02.1 ( #163942 )
2026-02-24 23:14:50 +01:00
Robert Resch and GitHub
220e94d029
Fix nightlies by reverting the builder to a version instead of a sha ( #163935 )
2026-02-24 11:48:19 +01:00
Marc Mueller and GitHub
6ecbaa979a
Fix hassfest requirements check ( #163681 )
2026-02-20 20:36:07 +01:00
dependabot[bot] and GitHub
fa71fd3992
Bump actions/stale from 10.1.1 to 10.2.0 ( #163223 )
2026-02-18 07:46:11 +01:00
Franck Nijhof and GitHub
46a1dda8d8
Fix CI partial run glob expansion without reintroducing template injection ( #163170 )
2026-02-16 15:50:50 +01:00
Franck Nijhof and GitHub
1e6196c6e8
Add zizmor as a CI check for GitHub Actions workflows ( #163161 )
2026-02-16 15:18:55 +01:00
Franck Nijhof and GitHub
e48bd88581
Improve GitHub Actions workflow metadata and concurrency settings ( #163117 )
2026-02-16 11:38:40 +01:00
Franck Nijhof and GitHub
3f755f1f0d
CI security hardening: pin actions and images in builder and CI workflows ( #163116 )
2026-02-16 08:43:20 +01:00
dependabot[bot] and GitHub
4cc9805a4b
Bump github/codeql-action from 4.32.2 to 4.32.3 ( #163126 )
2026-02-16 08:39:56 +01:00
Franck Nijhof and GitHub
2178c98ccc
Assign no-stale to Tasks/Epic/Opportunity issue type ( #163080 )
2026-02-15 22:18:43 +01:00
Franck Nijhof and GitHub
07dcc2eae0
CI security hardening: restrict permissions in AI issue detection workflows ( #163068 )
2026-02-15 16:33:23 +01:00
Franck Nijhof and GitHub
8e1c6c2157
CI security hardening: prevent template injection in CI workflow ( #163076 )
2026-02-15 16:30:30 +01:00
Franck Nijhof and GitHub
f10cb23aab
CI security hardening: prevent template injection in builder workflow ( #163075 )
2026-02-15 16:27:46 +01:00
Franck Nijhof and GitHub
7020bec262
CI security hardening: prevent template injection in translations workflow ( #163074 )
2026-02-15 16:26:13 +01:00
Franck Nijhof and GitHub
980507480b
CI security hardening: prevent template injection in wheels workflow ( #163073 )
2026-02-15 16:25:43 +01:00
Franck Nijhof and GitHub
6cc2f835e4
CI security hardening: restrict permissions in CI workflow ( #163063 )
2026-02-15 12:58:48 +01:00
Franck Nijhof and GitHub
b20959d938
CI security hardening: restrict permissions in builder workflow ( #163062 )
2026-02-15 12:58:24 +01:00
Franck Nijhof and GitHub
e1194167cb
CI security hardening: restrict permissions in translations workflow ( #163057 )
2026-02-15 12:00:10 +01:00
Franck Nijhof and GitHub
3a6ca5ec17
CI security hardening: restrict permissions in wheels workflow ( #163059 )
2026-02-15 11:59:52 +01:00