Commit Graph

2270 Commits

Author SHA1 Message Date
0e89432849 Bump golang.org/x/crypto from 0.32.0 to 0.35.0 (#311)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.32.0 to 0.35.0.
- [Commits](https://github.com/golang/crypto/compare/v0.32.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.35.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-24 20:01:56 -07:00
736b682d9a Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#309)
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-24 20:00:26 -07:00
0f00b1c154 Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#303)
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-24 19:58:27 -07:00
42f9659b47 Skip TestLiveOpenAiApi for non-master branches to allow dependabot PRs to pass GH actions 2025-03-02 10:49:29 -08:00
56d5189538 Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#302)
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-01 16:09:39 -08:00
0a8abb4b13 Release v0.335 v0.335 2025-02-07 15:14:24 -08:00
bd60ac52ca Increase number of lines used in AI context for files 2025-02-07 11:23:05 -08:00
f7f712bf0f Release v0.334 v0.334 2025-02-06 23:31:09 -08:00
2420fe28f4 Add beta-mode support for AI queries that include context about referenced files (#300) 2025-02-06 22:44:58 -08:00
c9599b92db Bump github.com/sigstore/sigstore-go from 0.2.0 to 0.6.1 (#292)
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 0.2.0 to 0.6.1.
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v0.2.0...v0.6.1)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-04 22:06:19 -08:00
3f34db597a Release v0.333 v0.333 2025-02-04 20:37:20 -08:00
ed049aa366 Add caching function to calculate rune-aware string truncations since this single function takes ~30% of CPU time in the TUI, follow up to #295 (#296) 2025-02-04 20:02:24 -08:00
61d680cbee Release v0.332 v0.332 2025-02-04 06:23:28 -08:00
b9d630f82a Update actions-validate.py to re-enable actions validation of slsa 2025-02-03 21:41:53 -08:00
4afba5677a Add caching function to calculate rune-aware string lengths since this single function takes ~50% of CPU time in the TUI (#295)
* Add opt-in support for CPU profiling the TUI

* Add caching function to calculate rune-aware string lengths since this single function takes ~50% of CPU time in the TUI
2025-02-03 21:19:01 -08:00
6107834be4 Release v0.331 v0.331 2025-02-03 15:35:44 -08:00
5bd8fcd423 Bump github.com/theupdateframework/go-tuf/v2 (#293)
Bumps [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf) from 2.0.0-20240207172116-f5cf71290141 to 2.0.1.
- [Release notes](https://github.com/theupdateframework/go-tuf/releases)
- [Changelog](https://github.com/theupdateframework/go-tuf/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/theupdateframework/go-tuf/commits/v2.0.1)

---
updated-dependencies:
- dependency-name: github.com/theupdateframework/go-tuf/v2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-03 15:35:25 -08:00
641e87c22a Optimize TUI performance via sqlite tuning + caching (#290)
* Optimize TUI performance via sqlite tuning + caching

* Disable TestTuiBench in GH actions since it is just meant for benchmarking

* Update golden

* Fix go errcheck finding

* Revert "Update golden"

This reverts commit 7c8865ce75.

* Clear the search cache after deletions

* Allowlist TestTuiBench-Query as an unused golden since it is not used on GH actions
2025-02-03 14:59:16 -08:00
380fb2afa7 Release v0.330 v0.330 2025-02-02 21:47:33 -08:00
b4be6d3680 Release v0.329 v0.329 2025-02-02 21:37:09 -08:00
10badf538d disable tmate 2025-02-02 21:27:16 -08:00
aaf4cc47bb Re-enable slsa validation in GH actions 2025-02-02 21:18:49 -08:00
75ea3534dc Add better logging to slsa validation in GH actions 2025-02-02 21:16:40 -08:00
4a0bb18bcc tmate debugging 2025-02-02 13:53:56 -08:00
8cfabb857d Drop validate straight into tmate for debugging 2025-02-02 13:47:12 -08:00
216f2aaddc Add SLSA warning for #294 2025-02-02 13:25:20 -08:00
0dc64d79d5 Disable SLSA validation in GH actions per #294 2025-02-02 13:23:39 -08:00
27e2521358 Revert "temporarily disable macos code signing verification in GH actions validator"
This reverts commit d6e2ebbf0b.
2025-02-02 13:11:41 -08:00
79ae5f7f72 Revert "Update slsa-releaser.yml, attempt #3"
This reverts commit c6a1b5533f.
2025-02-02 13:11:30 -08:00
8f89b1f9cc Major version upgrade for slsa verifier 2025-02-02 13:11:08 -08:00
e92305b1a6 more dep upgrades 2025-02-02 12:43:54 -08:00
f6e231df2d Block release validation in GH actions 2025-02-02 12:38:57 -08:00
d6e2ebbf0b temporarily disable macos code signing verification in GH actions validator 2025-02-02 12:32:07 -08:00
9884a80466 Upgrade go deps to try to fix slsa issues 2025-02-02 12:31:40 -08:00
c6a1b5533f Update slsa-releaser.yml, attempt #3 2025-02-02 12:11:41 -08:00
2145906f73 Fix directory mismatch caused by change in GH actions artifact version 2025-02-02 11:55:47 -08:00
eabd001d3e Add additional fail-safe validation to SLSA validator for better error messages 2025-02-02 11:47:02 -08:00
417c2e9e62 Add tmate debugging 2025-02-02 11:45:16 -08:00
3e9be81301 Attempt #2 at avoiding duplicate artifact names 2025-02-02 11:13:04 -08:00
3d19e69463 Revert "Avoid reusing artifact name to enable GH action upgrade"
This reverts commit 7649ac1331.
2025-02-02 11:09:01 -08:00
7649ac1331 Avoid reusing artifact name to enable GH action upgrade 2025-02-02 10:35:19 -08:00
562b52c688 More GH action upgrades 2025-02-02 10:21:38 -08:00
6de83cb888 Upgrade slsa builder 2025-02-02 10:08:09 -08:00
fc01eff62f Upgrade GH actions for https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/ 2025-02-02 10:03:46 -08:00
8682681842 Add CPU profiling to make fbench command 2025-02-02 09:41:48 -08:00
9d0edba3a3 Add support for NoSleep param to test runner 2025-02-02 09:41:13 -08:00
482f7ae021 Delete commented out code 2025-02-01 10:17:10 -08:00
cb253b6985 Release v0.328 v0.328 2025-01-22 15:27:14 -08:00
f8c414b2c9 Skip deep cleans for sqlite DBs (#289)
* Add explicit DROP TABLE directives for temp_inactive_devices and drop the TEMP qualifier for non-postgres DBs, fixes #288

* Revert "Add explicit DROP TABLE directives for temp_inactive_devices and drop the TEMP qualifier for non-postgres DBs, fixes #288"

This reverts commit db6d8413a7.

* Skip deep cleans for sqlite DBs
2025-01-20 17:50:33 -08:00
a4ff05c0fa Release v0.327 v0.327 2025-01-20 14:49:47 -08:00