Skip to content

chore(ci-governance): synchronize Go profile - #82

Merged
enriqueavindi merged 2 commits into
mainfrom
automated/ci-governance-sync
Oct 9, 2026
Merged

enriqueavindi merged 2 commits into
mainfrom
automated/ci-governance-sync

Conversation

@inditextechci-sync

@inditextechci-sync inditextechci-sync Bot commented Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

CI governance synchronization

This PR was generated by the PR-only controller. Review and merge it; the controller never pushes directly to the default branch.

Profile

  • go (Go)

Source revisions

  • base: e2ca2a0cca0b3e05773fd73e2bb7122c46173f2b
  • go: 571a2e078494a679febe450df9508166a9e38772

Planned changes

  • update .github/inditextech-ci-sync-manifest.json
  • update .github/workflows/code-gomod_go-PR_verify.yml
  • update .github/workflows/code-gomod_go-sonarcloud-analysis.yml
  • update .github/workflows/codeql.yml
  • update .github/workflows/pr-verify.yml
  • update .github/workflows/push-verify.yml
  • add .github/workflows/scorecard-analysis.yml

Governance-Provenance: hmac-sha256:f92607eac193cbee45fb3640b338d9f0645a5ba0107828ddbd224a6d820311c0
@inditextechci-sync
inditextechci-sync Bot requested a review from a team as a code owner October 2, 2026 14:30
@inditextechci-sync inditextechci-sync Bot added the skip-release Do not publish a release for this change. label Oct 2, 2026
Merge of current main into the profile sync branch to resolve the
conflicts introduced by the dependency bumps consolidated in #94.
Dependency pins from main are preserved (reviewdog/action-actionlint
v1.77.0, github/codeql-action v4.38.2 across codeql.yml and the new
scorecard-analysis.yml).

Signed-off-by: Enrique Andrés Villar <enriqueavi@inditex.com>
@signoff-validator

Copy link
Copy Markdown

Contribution License Agreement - Valid 🟢

All commits contain valid signoff. As a confirmation, remember that you are agreeing to our Contribution License Agreement.

@enriqueavindi

Copy link
Copy Markdown
Contributor

Resolved the conflicts with the dependency pins consolidated in #94: reviewdog/action-actionlint kept at v1.77.0 and github/codeql-action at v4.38.2 (codeql.yml and the new scorecard-analysis.yml), with the scorecard job moved to its dedicated workflow as the sync proposes.

@sonarqubecloud

sonarqubecloud Bot commented Oct 9, 2026

Copy link
Copy Markdown

@enriqueavindi
enriqueavindi merged commit 76bc292 into main Oct 9, 2026
22 checks passed
@enriqueavindi
enriqueavindi deleted the automated/ci-governance-sync branch October 9, 2026 09:44
@enriqueavindi enriqueavindi mentioned this pull request Oct 9, 2026
5 tasks done
enriqueavindi added a commit that referenced this pull request Oct 9, 2026
Prepare patch release 1.3.4.

- Update active operator, Helm, catalog and documentation version
  references from 1.3.3 to 1.3.4.
- Regenerate the OLM bundle for 1.3.4 so chart RBAC templates and the
  clusterserviceversion carry the least-privilege RBAC from #93 and the
  governance sync from #82; the bundle in the 1.3.3 tree predated them,
  which made the release workflow's 'Check bundle generation' step fail
  on tag 1.3.3. Versioned artifacts of previous releases stay frozen.
- Add the versioned OLM and Helm release artifacts for 1.3.4.

Signed-off-by: Enrique Andrés Villar <enriqueavi@inditex.com>
enriqueavindi added a commit that referenced this pull request Oct 9, 2026
Prepare patch release 1.3.4.

- Update active operator, Helm, catalog and documentation version
  references from 1.3.3 to 1.3.4.
- Regenerate the OLM bundle for 1.3.4 so chart RBAC templates and the
  clusterserviceversion carry the least-privilege RBAC from #93 and the
  governance sync from #82; the bundle in the 1.3.3 tree predated them,
  which made the release workflow's 'Check bundle generation' step fail
  on tag 1.3.3. Versioned artifacts of previous releases stay frozen.
- Add the versioned OLM and Helm release artifacts for 1.3.4.

Signed-off-by: Enrique Andrés Villar <enriqueavi@inditex.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-release Do not publish a release for this change.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants