dependabot[bot]
4b416f89bf
Chore(deps): Bump actions/checkout from 4 to 5 ( #110558 )
...
* Chore(deps): Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* remove incorrect comments
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ashley Harrison <ashley.harrison@grafana.com >
2025-09-10 14:25:41 +01:00
Tom Ratcliffe
85f1f0d227
Chore: Skip CodeQL depending on changed files ( #109959 )
2025-08-22 13:13:28 +01:00
dependabot[bot]
41df2e9d26
Bump actions/setup-go from 4.2.1 to 5.5.0 ( #108286 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-31 13:27:36 +01:00
xavi
439b8c01b3
Remove Python CodeQL check ( #106259 )
2025-06-02 20:17:20 +02:00
Nick Moore
5e6c926b9c
Build: Update codeql to scan Actions ( #105136 )
...
Modifies the repository's codeql configuration to include GitHub Actions in its scanning
2025-05-09 16:15:58 +01:00
Kevin Minehart
2436b4e097
CI: move workflows/actions to actions ( #104711 )
...
* move workflows/actions to actions
* rerun actions
* fix setup-go v5
* unpinned unnecessary pins
* update CODEOWONERS
* update CODEOWONERS
* remove remove-milestone from codeowners
* remove bad key
2025-04-29 14:24:55 -05:00
Kevin Minehart
97d10b5095
CI: remove unused worklow; use GITHUB_TOKEN where possible ( #104657 )
...
* remove unused worklow; use GITHUB_TOKEN where possible
* pin usages of checkout and setup-go
* Fix zizmor errors
* add zizmor.yml
* fix `changelog.yml`
* fix `core-plugins-build-and-release.yml`
* fix `release-comms.yml`
* update release-pr.yml and run-e2e-suite.yml
* Fix errors in files outside of .github/workflows
* Remove path filter on zizmor.yml
---------
Co-authored-by: Sven Grossmann <svennergr@gmail.com >
Co-authored-by: joshhunt <josh.hunt@grafana.com >
2025-04-29 10:09:23 -05:00
Leonor Oliveira
c63cfc11e2
[Chore] Mark CodeQL warning as safe ( #101365 )
...
* Mark CodeQL warning as safe
* Temporarily ignore file
2025-04-07 11:52:09 +02:00
Leonor Oliveira
feed071815
Codeql: enable PR check ( #101392 )
...
* Enable running a CodeQL check whenever someone opens a PR (for Go code)
* Fetch main in the GHA so CodeQL can properly compare code changes
* Try to fetch more of main to see if CodeQL can compare changes
* Also trigger on push
* Rename GHA
* Use only one workflow for all languages that runs on each puch hook
* Rename GHA
* Removing owner from deleted GHA
* Temporarily mark this GHA as not required for a PR to get merged
* Always run the workflow
* Mark action as non blocking
2025-04-03 11:19:58 +02:00
Ashley Harrison
4dbd1846c7
Chore: bump codeql versions used in pr checks ( #101957 )
...
* bump codeql versions used in pr checks
* update supported versions
* use glob syntax
* wider glob
2025-03-11 17:28:36 +00:00
Leonor Oliveira
9bc1549aee
Upgrade codeql version ( #100883 )
2025-02-19 15:59:54 +01:00
Dave Henderson
c6a0175c04
ci: use go.mod as source of truth for actions/setup-go action ( #87574 )
...
* ci: use go.mod as source of truth for actions/setup-go action
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
* updating upgrading-go-version.md doc
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
---------
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2024-05-09 15:30:13 -04:00
Stephanie Hingtgen
d365d442fa
Chore: Upgrade go to 1.22.3 ( #87463 )
2024-05-07 15:23:21 -05:00
Kristin Laemmert
f1aa6549f6
Chore: Upgrade go version to 1.22.2 ( #86873 )
...
* Chore: Upgrade go version to 1.22.2
* upgrade to latest swagger for go 1.22 compatibility
* regen openapi spec
* upgrade go in github workflows
2024-04-24 14:26:14 -04:00
Dave Henderson
5cfca8dbf6
chore: bump Go to 1.21.9 ( #85964 )
...
* chore: bump Go to 1.21.9
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
* regen .drone.yml
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
---------
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2024-04-11 15:37:07 -04:00
Fabrizio
45c56d208f
CI: Skip CodeQL analysis if repo is not grafana/grafana ( #85652 )
2024-04-05 17:10:18 +02:00
Dave Henderson
01fb2cff62
chore: bump Go to 1.21.8 ( #83927 )
...
* chore: bump Go to 1.21.8
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
* bump workflows too
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
---------
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2024-03-05 15:24:34 -05:00
Fabrizio
8852b1dcc5
Run analysis steps only on grafana/grafana ( #83185 )
2024-02-22 10:26:50 +01:00
Timur Olzhabayev
4083d23f01
Chore: Bumping go to 1.21.6 ( #80709 )
...
* Bumping go to 1.25.6
* bumping sqlite to 1.14.19
* Bumping sqlite version
2024-01-23 14:32:26 +01:00
Timur Olzhabayev
7c74ab7059
Revert "bumping go to 1.25.6"
...
This reverts commit 73439f2cd3 .
2024-01-17 11:40:25 +01:00
Timur Olzhabayev
73439f2cd3
bumping go to 1.25.6
2024-01-17 11:38:25 +01:00
Timur Olzhabayev
4991e71b85
Chore: Upgrade Go to 1.21.5 ( #79329 )
...
* bumping grafanas go version to 1.21.5
* adding how to upgrade go doc
* removing the whole ci-build and corresponding pipelines
* clarifying that we have to run make drone
* fixing starlark linter and removing unused code
* Adding note about enterprise
* trying to change the underyling image to avoid musl issues
* only need to golang one
2023-12-15 10:36:49 +01:00
Ryan McKinley
5d5f8dfc52
Chore: Upgrade Go to 1.21.3 ( #77304 )
2023-11-01 09:17:38 -07:00
Horst Gutmann
6b52bb9c27
Chore: Upgrade Go to 1.20.10 ( #76359 )
2023-10-11 16:49:24 +03:00
Horst Gutmann
39dbd98458
Chore: Upgrade Go to 1.20.8 ( #74978 )
...
chore: Update to Go 1.20.8
2023-09-18 11:29:50 +03:00
dependabot[bot]
5ea16cb947
Bump actions/checkout from 2 to 4 ( #74356 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 09:10:10 +01:00
Josh Soref
9571aea651
Only run workflows if they might be able to work ( #72503 )
...
* Fix whitespace
* Only run workflows if they might be able to work
* fix quotes
---------
Co-authored-by: joshhunt <josh@trtr.co >
2023-08-02 12:25:23 +01:00
Armand Grillet
dc486e0ca4
Revert "Only run workflows if they might be able to work" ( #72506 )
...
Revert "Only run workflows if they might be able to work (#63164 )"
This reverts commit 234b5c8c21 .
2023-07-28 13:21:34 +02:00
Josh Soref
234b5c8c21
Only run workflows if they might be able to work ( #63164 )
2023-07-28 11:01:14 +02:00
Emil Tullstedt
e07fbeef60
Chore: Upgrade Go to 1.20.6 ( #71440 )
2023-07-12 15:32:40 +02:00
dependabot[bot]
e4f662e440
Chore(deps): Bump actions/setup-go from 3 to 4 ( #64862 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-02 14:17:02 +00:00
Emil Tullstedt
b0e681c339
Chore: Update target in go.mod to 1.20 and golangci-lint to v1.52.2 ( #67102 )
2023-05-10 13:47:35 +02:00
Dan Cech
da9c646f24
Build: add explicit build step for go codeql ( #58195 )
...
* add explicit build step for go codeql
* support workflow_dispatch for codeql checks
* syntax fix
* enable on push to codeql-go branch
* test
* use go version from go.mod
* explicitly set go version
* tidy up, add workflow_dispatch support to all codeql actions
2022-11-04 10:20:08 -04:00
dependabot[bot]
369358500d
Bump github/codeql-action from 1 to 2 ( #49128 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-13 11:29:42 +01:00
dependabot[bot]
c8514756be
Bump actions/checkout from 2 to 3 ( #46068 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-08 09:26:30 +01:00
Armand Grillet
3e9dfcd730
Optimize CodeQL workflow ( #47095 )
...
* Do not run CodeQL analysis when updating .cue file
* Remove autobuild step for CodeQL workflow as unecessary
* Add specialized CodeQL workflow
* Updated main CodeQL workflow to not run on PRs
* Simplify CodeQL analysis on PR
* Add .tsx file format to JS CodeQL analysis match
2022-04-01 16:40:25 +02:00
Armand Grillet
42e090cda8
Do not run CodeQL analysis when some file types are updated ( #47051 )
...
This follows the recommendation in the GitHub Docs "Configuring code scanning" > "Avoiding unnecessary scans of pull requests".
2022-03-30 13:12:59 +02:00
Arve Knudsen
c2c1ec7d0f
Chore: Move from master to main branch ( #33693 )
...
* Chore: Move from master branch to main
Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com >
* CI: Upgrade build pipeline tool to v2
Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com >
2021-05-06 16:29:29 +02:00
Giordano Ricci
a8ed304f82
Chore: remove checkout step ( #31614 )
2021-03-24 13:40:34 +00:00
Arve Knudsen
a2816ee64a
Add codeql-analysis.yml ( #28029 )
2020-10-06 09:58:25 +02:00