 dependabot[bot]
|
5f18eb94c5
|
chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#13040)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-21 22:49:59 +00:00 |
|
|
dependabot[bot]
|
d1298f16ef
|
chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#13039)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-21 22:49:43 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
ece7ac8f7a
|
ci(deployment): drop -cloud image repos, standardize to single repos (#13097)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-16 21:52:04 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
18202ce5a2
|
feat(desktop): add Windows ARM64 desktop builds (#13032)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-15 17:24:55 +00:00 |
|
|
dependabot[bot]
|
6e474c52ba
|
chore(deps): bump runs-on/action from 2.1.2 to 2.2.0 (#12947)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-13 19:38:56 +00:00 |
|
|
dependabot[bot]
|
f142d12f5c
|
chore(deps): bump docker/login-action from 4.1.0 to 4.3.0 (#12773)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-09 19:38:48 +00:00 |
|
|
dependabot[bot]
|
8c944c4f02
|
chore(deps): bump aws-actions/aws-secretsmanager-get-secrets from 2.0.10 to 3.0.1 (#12772)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-09 19:18:43 +00:00 |
|
|
|
b21ea7f2f1
|
chore(model-server): build on a Docker Hardened Image (full distroless) (#12636)
Co-authored-by: t <t@t.co>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-09 16:42:19 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
7021473865
|
feat(ods): dual-format audit output + runbook + non-interactive ignore add (#12747)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-07 20:51:18 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
83e4a3e597
|
chore(web): build frontend on a Docker Hardened Image (#12592)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-01 19:27:08 +00:00 |
|
|
dependabot[bot]
|
74cfa63dd8
|
chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#12609)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-01 18:33:08 +00:00 |
|
|
dependabot[bot]
|
9abcb97278
|
chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#12599)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-01 17:59:38 +00:00 |
|
|
Nikolas Garza
|
98513f3947
|
fix(ci): gate dispatch-cloud-deployment with always() so it doesn't skip (#12590)
|
2026-07-01 16:21:50 +00:00 |
|
|
Nikolas Garza
|
1e8216b4db
|
fix(ci): gate cloud merge jobs on image-audit so they don't skip (#12581)
|
2026-07-01 15:35:27 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
05bc31ba0e
|
chore(deps): upgrade ods: 0.9.2->0.9.4 (#12573)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 21:21:55 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
008978ba77
|
fix(ci): run image-audit on amd64 to match scanned images (#12563)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 19:57:09 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
ffec079a6f
|
feat(ods): add ods audit image and replace Trivy image scanning (#12547)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 02:09:52 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
bb3b227a3f
|
chore(deps): upgrade uv 0.9.9 -> 0.11.25 and digest-pin the image (#12520)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-29 18:55:13 +00:00 |
|
|
Jamison Lahman
|
62fd63e7ae
|
chore(deploy): re-enable model-server sbom and provenance (#12521)
|
2026-06-29 18:47:47 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
703b9bcec1
|
feat(ods): add dependency vulnerability audit command (#12476)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-26 21:05:07 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
e8534c1503
|
fix(deployment): read release id from create response to avoid list race (#12471)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-26 19:25:26 +00:00 |
|
|
dependabot[bot]
|
17b31fd15f
|
chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#12380)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-24 19:36:04 +00:00 |
|
|
Wenxi
|
5b1038935c
|
ci: avoid buildx setup in sandbox prepare job (#12190)
|
2026-06-18 17:47:02 +00:00 |
|
|
dependabot[bot]
|
3c411496e5
|
chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#11903)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-17 22:14:59 +00:00 |
|
|
dependabot[bot]
|
1f90c887bd
|
chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.2.0 (#11899)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-17 20:19:42 +00:00 |
|
|
Wenxi
|
e86db01e3e
|
feat(craft): align sandbox image tagging with app releases (#12141)
|
2026-06-17 19:20:02 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
8932d4d74f
|
fix(ci): resolve draft release id via list endpoint, not tag lookup (#12123)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-16 19:15:22 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
6f7ce5e12c
|
fix(deployment): alert on create-release failure (#12122)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-16 19:03:24 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
b960e18eb5
|
fix(web): add frame-ancestors CSP to prevent clickjacking (#11936)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-11 19:18:19 +00:00 |
|
|
roshanandClaude Opus 4.8
|
a871ef9499
|
feat(craft): make Craft runtime-only; drop the craft backend image (#11877)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-10 01:45:39 +00:00 |
|
|
Jamison Lahman
|
e2a9e8715c
|
chore(gha): git actions-checkout read permissions (#11781)
|
2026-06-05 21:09:46 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
3c06c5296c
|
feat(ci): cloud deploy dispatch on image build (#11707)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-04 19:33:19 +00:00 |
|
|
dependabot[bot]andJamison Lahman
|
07ed891812
|
chore(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 (#11719)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
|
2026-06-04 03:18:13 +00:00 |
|
|
dependabot[bot]andJamison Lahman
|
d6dc80e9d1
|
chore(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 (#11717)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
|
2026-06-04 03:14:06 +00:00 |
|
|
dependabot[bot]andJamison Lahman
|
47e15104bf
|
chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (#10824)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
|
2026-05-29 22:08:43 +00:00 |
|
|
|
e93f6e07d0
|
chore(ci): replace softprops/action-gh-release with gh CLI (#10825)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-29 22:07:03 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
ada6431097
|
ci: tag stable releases with major/minor/patch aliases (#11488)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-28 18:42:53 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
f5e5ec2ead
|
chore(repo): consolidate npm projects into a root bun workspace (#11455)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-27 23:58:50 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
7460ba2827
|
chore(ci): upgrade zizmor to 1.25.2 (#11312)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-22 18:46:11 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
421f38885f
|
chore(ci): drop ECR-cache reads/writes from release Docker builds (#11172)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-18 22:10:36 +00:00 |
|
|
dependabot[bot]
|
310fe71f45
|
chore(deps): bump runs-on/action from 2.0.3 to 2.1.2 (#10821)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-16 00:07:32 +00:00 |
|
|
WenxiandClaude Opus 4.6
|
64eaae972e
|
ci: build craft-edge images on experimental-cc4a tags (#11045)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-05-13 17:17:50 +00:00 |
|
|
Jamison Lahman
|
7ad4059c05
|
chore(deps): bump runs-on/action & runs-on/cache (#10671)
|
2026-05-04 17:37:39 +00:00 |
|
|
Jamison Lahman
|
b39f328cfe
|
chore(deps): bump docker/login-action (#10672)
|
2026-05-04 17:14:18 +00:00 |
|
|
dependabot[bot]
|
86647a111a
|
chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 (#10663)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-28 00:51:01 +00:00 |
|
|
dependabot[bot]
|
a7634e51f7
|
chore(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#10664)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-27 22:27:20 +00:00 |
|
|
dependabot[bot]
|
f4cd80f5fb
|
chore(deps): bump tauri-apps/tauri-action from 0.6.1 to 0.6.2 (#10383)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-20 21:38:42 +00:00 |
|
|
Nikolas Garza
|
ca10520190
|
chore(ci): bump docker/setup-buildx-action to v4 and docker/build-push-action to v7 (#10270)
|
2026-04-16 20:36:03 +00:00 |
|
|
dependabot[bot]
|
fbf3179d84
|
chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 (#10121)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-13 20:45:02 +00:00 |
|
|
Justin Tahara
|
41f2bd2f19
|
chore(edge): Skip edge tag (#10019)
|
2026-04-09 00:56:51 +00:00 |
|