Commit Graph

137 Commits

Author SHA1 Message Date
benvin 48816bd723 Merge pull request 'Add local npm kind and npm virtual' (#67) from benvin/npm-local-virtual into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #67
2026-10-17 22:37:08 +11:00
unkin-agent 2aa0e3a3bb Add local npm kind and npm virtual
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 17:01:41 +11:00
benvin ea574515e5 Merge pull request 'Add local helm repository kind' (#65) from benvin/local-helm-kind into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #65
2026-10-17 16:35:08 +11:00
benvin 94e698c4df Merge pull request 'Add orca and cloudnative-pg GitHub-release remotes' (#66) from benvin/github-releases-orca-cnpg into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #66
2026-10-17 16:18:47 +11:00
unkin-agent f04d400b5c retrigger CI for provider v0.8.0
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 15:34:35 +11:00
unkin-agent 527a8f2fe3 Restrict orca pattern to real rpm/deb assets; sort orca member
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 15:27:02 +11:00
unkin-agent e004eb5845 Add orca and cloudnative-pg GitHub-release rpm and deb remotes
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 15:25:00 +11:00
unkin-agent 3446a861c8 Add local_helm kind with helm-internal as first helm virtual member
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-17 15:12:09 +11:00
benvin 20912de489 Merge pull request 'Authenticate config writes with a Vault OIDC token' (#64) from benvin/oidc-token into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #64
2026-10-16 22:22:05 +11:00
unkin-agent 363e7b3897 Export artifactapi OIDC token and require provider 0.7
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-16 22:05:06 +11:00
benvin 74d3ce0c5b Merge pull request 'Add rspamd RPM remote' (#63) from benvin/rspamd-rpm-remote into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #63
2026-10-13 20:56:47 +11:00
unkin-agent 29fc4b6655 Add rspamd RPM remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-12 22:46:01 +11:00
benvin cbd61c0984 Merge pull request 'Allow mail stack images through artifactapi' (#62) from benvin/mail-image-allowlist into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #62
2026-10-12 22:28:09 +11:00
unkin-agent 3c97135e77 Allow mail stack images through dockerhub and k8s-registry remotes
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-12 22:20:10 +11:00
benvin d13cf9bc85 Merge pull request 'Allow the ClamAV image through the dockerhub remote' (#61) from benvin/dockerhub-clamav into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #61
2026-10-12 22:16:42 +11:00
unkin-agent 8fe5f74afd Allow the ClamAV image through the dockerhub remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
The mail namespace runs clamd + freshclam from clamav/clamav on Docker Hub
via the artifactapi mirror. Add it to the dockerhub allowlist.

- add "^clamav/clamav" to config/remote_docker/dockerhub.yaml patterns
2026-10-12 21:49:42 +11:00
benvin 8345a0e23e Merge pull request 'Add rpm-custom virtuals per distro' (#60) from benvin/rpm-custom-virtuals into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #60
2026-10-09 23:38:37 +11:00
benvin 4276511243 Merge pull request 'Add crates-io cargo remote' (#59) from benvin/crates-io-remote into benvin/remote-cargo-kind
ci/woodpecker/push/apply Pipeline failed
Reviewed-on: #59
2026-10-09 23:17:46 +11:00
benvin 3ce117fb86 Merge pull request 'Add remote_cargo config kind' (#58) from benvin/remote-cargo-kind into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #58
2026-10-09 23:16:44 +11:00
unkin-agent 66177b5017 Add rpm-custom virtuals per distro
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 22:17:36 +11:00
unkin-agent c2acde9f66 Add crates-io cargo remote
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 22:17:08 +11:00
unkin-agent 09870e9040 Add remote_cargo config kind
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 22:16:28 +11:00
benvin 880120763d Merge pull request 'Add npmjs npm remote' (#57) from benvin/npmjs-remote into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #57
2026-10-09 19:45:02 +11:00
benvin bc149089d0 Merge pull request 'Add remote_npm config kind' (#56) from benvin/remote-npm-kind into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #56
2026-10-09 19:43:42 +11:00
unkin-agent ae8be9f569 Add npmjs npm remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:31:34 +11:00
unkin-agent 35c7d1d224 Add remote_npm config kind
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:30:17 +11:00
benvin cf2d16268b Merge pull request 'allow envoy release assets on github remote' (#53) from benvin/github-envoy into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #53
2026-10-09 19:27:10 +11:00
benvin 0027183be7 Merge pull request 'Add storytold GitHub-release rpm/deb remotes' (#55) from benvin/storytold-remotes into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #55
2026-10-09 19:25:18 +11:00
benvin 1625d41ad4 Merge pull request 'Add GitHub-release rpm/deb remote kinds' (#54) from benvin/github-pkg-remotes into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #54
2026-10-09 19:23:36 +11:00
unkin-agent c3a96e5fa2 Drop storytold-artcraft remotes and fix apt description grammar
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:18:58 +11:00
unkin-agent 6396c80eaa Add storytold GitHub-release rpm and deb remotes
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:09:17 +11:00
unkin-agent c1c1c9d553 Add remote_github_rpm and remote_github_deb config kinds
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 19:08:28 +11:00
unkin-agent 9759f059ea allow envoy release binary and checksums on github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-07 11:47:31 +11:00
benvin df73beb57d Merge pull request 'ci: use container-opentofu image' (#52) from benvin/opentofu-image into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #52
2026-10-05 14:11:12 +11:00
unkin-agent 39817316ab ci: use container-opentofu image
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-05 13:49:23 +11:00
benvin 88f231e752 Merge pull request 'allow kubectl plugin release assets' (#51) from benvin/kubectl-plugins-allowlist into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #51
2026-10-02 23:49:05 +10:00
unkin-agent 37688d237a allow kubectl plugin release assets in github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-02 23:43:54 +10:00
benvin afb0b51dc6 Merge pull request 'allow kubectl-cnpg release assets through the github remote' (#50) from benvin/kubectl-cnpg into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #50
2026-10-02 23:30:03 +10:00
unkin-agent 69c9938c64 feat: allow kubectl-cnpg release assets through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-02 23:18:19 +10:00
benvin 0c1b2a0504 Merge pull request 'Allow victoria-metrics-k8s-stack dashboard sources on github_user' (#49) from benvin/vm-k8s-stack-dashboards into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #49
2026-10-02 23:00:26 +10:00
unkin-agent 0e1add0d43 Allow victoria-metrics-k8s-stack dashboard sources on github_user
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-02 22:48:08 +10:00
benvin b7e10718c3 Merge pull request 'ci: allow manual trigger of apply on main' (#48) from benvin/apply-manual-trigger into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #48
2026-09-19 23:36:36 +10:00
unkin-agent 0a245e7bca ci: allow manual trigger of apply on main
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-09-19 22:32:40 +10:00
benvin dc07c26c2e Merge pull request 'feat: add jellyfin-plugins local generic repo' (#47) from benvin/jellyfin-plugins-local into main
Reviewed-on: #47
2026-09-19 18:41:25 +10:00
unkin-agent e8c09807ae feat: add jellyfin-plugins local generic repo 2026-09-19 17:42:00 +10:00
benvin f64b553e15 Merge pull request 'feat: allow argocd CLI release assets through the github remote' (#46) from benvin/argocd-cli-remote into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #46
2026-09-19 16:29:07 +10:00
unkin-agent f0e63a091e feat: allow argocd CLI release assets through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-09-19 16:22:41 +10:00
benvin 03eb79f27b Merge pull request 'Allow GitHub branch archives through the github remote' (#45) from benvin/github-branch-archives into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #45
2026-09-11 23:37:08 +10:00
unkin-agent d7542d8fe2 Narrow GitHub branch archives to named repos
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
The wildcard heads entries admitted a branch archive from any repository
on GitHub. patterns is the admission allowlist, so only the repos that
need a branch install belong in it.

- Replace the wildcard heads entries with one anchored entry per repo
- Cover the 14 Neovim plugins that publish no tags, zip and tar.gz
- List each repo in both patterns and mutable_patterns
2026-09-11 23:34:12 +10:00
unkin-agent b76fddecb9 Allow GitHub branch archives through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
patterns is a strict allowlist evaluated before mutable_patterns, so
/archive/refs/heads/ downloads are denied despite the mutable entry.

- Add heads .zip and .tar.gz to patterns
- Add heads .zip to mutable_patterns and escape the tar.gz dots
2026-09-11 23:26:29 +10:00