2270 Commits

Author SHA1 Message Date
dependabot[bot]
0e89432849
Bump golang.org/x/crypto from 0.32.0 to 0.35.0 (#311)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.32.0 to 0.35.0.
- [Commits](https://github.com/golang/crypto/compare/v0.32.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.35.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-24 20:01:56 -07:00
dependabot[bot]
736b682d9a
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#309)
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-24 20:00:26 -07:00
dependabot[bot]
0f00b1c154
Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#303)
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-24 19:58:27 -07:00
David Dworken
42f9659b47
Skip TestLiveOpenAiApi for non-master branches to allow dependabot PRs to pass GH actions 2025-03-02 10:49:29 -08:00
dependabot[bot]
56d5189538
Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#302)
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-01 16:09:39 -08:00
David Dworken
0a8abb4b13
Release v0.335 v0.335 2025-02-07 15:14:24 -08:00
David Dworken
bd60ac52ca
Increase number of lines used in AI context for files 2025-02-07 11:23:05 -08:00
David Dworken
f7f712bf0f Release v0.334 v0.334 2025-02-06 23:31:09 -08:00
David Dworken
2420fe28f4
Add beta-mode support for AI queries that include context about referenced files (#300) 2025-02-06 22:44:58 -08:00
dependabot[bot]
c9599b92db
Bump github.com/sigstore/sigstore-go from 0.2.0 to 0.6.1 (#292)
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 0.2.0 to 0.6.1.
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v0.2.0...v0.6.1)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-04 22:06:19 -08:00
David Dworken
3f34db597a
Release v0.333 v0.333 2025-02-04 20:37:20 -08:00
David Dworken
ed049aa366
Add caching function to calculate rune-aware string truncations since this single function takes ~30% of CPU time in the TUI, follow up to #295 (#296) 2025-02-04 20:02:24 -08:00
David Dworken
61d680cbee Release v0.332 v0.332 2025-02-04 06:23:28 -08:00
David Dworken
b9d630f82a
Update actions-validate.py to re-enable actions validation of slsa 2025-02-03 21:41:53 -08:00
David Dworken
4afba5677a
Add caching function to calculate rune-aware string lengths since this single function takes ~50% of CPU time in the TUI (#295)
* Add opt-in support for CPU profiling the TUI

* Add caching function to calculate rune-aware string lengths since this single function takes ~50% of CPU time in the TUI
2025-02-03 21:19:01 -08:00
David Dworken
6107834be4
Release v0.331 v0.331 2025-02-03 15:35:44 -08:00
dependabot[bot]
5bd8fcd423
Bump github.com/theupdateframework/go-tuf/v2 (#293)
Bumps [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf) from 2.0.0-20240207172116-f5cf71290141 to 2.0.1.
- [Release notes](https://github.com/theupdateframework/go-tuf/releases)
- [Changelog](https://github.com/theupdateframework/go-tuf/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/theupdateframework/go-tuf/commits/v2.0.1)

---
updated-dependencies:
- dependency-name: github.com/theupdateframework/go-tuf/v2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-03 15:35:25 -08:00
David Dworken
641e87c22a
Optimize TUI performance via sqlite tuning + caching (#290)
* Optimize TUI performance via sqlite tuning + caching

* Disable TestTuiBench in GH actions since it is just meant for benchmarking

* Update golden

* Fix go errcheck finding

* Revert "Update golden"

This reverts commit 7c8865ce755cacac7cc6bc9eba1ccf4024345cab.

* Clear the search cache after deletions

* Allowlist TestTuiBench-Query as an unused golden since it is not used on GH actions
2025-02-03 14:59:16 -08:00
David Dworken
380fb2afa7
Release v0.330 v0.330 2025-02-02 21:47:33 -08:00
David Dworken
b4be6d3680
Release v0.329 v0.329 2025-02-02 21:37:09 -08:00
David Dworken
10badf538d
disable tmate 2025-02-02 21:27:16 -08:00
David Dworken
aaf4cc47bb
Re-enable slsa validation in GH actions 2025-02-02 21:18:49 -08:00
David Dworken
75ea3534dc
Add better logging to slsa validation in GH actions 2025-02-02 21:16:40 -08:00
David Dworken
4a0bb18bcc
tmate debugging 2025-02-02 13:53:56 -08:00
David Dworken
8cfabb857d
Drop validate straight into tmate for debugging 2025-02-02 13:47:12 -08:00
David Dworken
216f2aaddc
Add SLSA warning for #294 2025-02-02 13:25:20 -08:00
David Dworken
0dc64d79d5
Disable SLSA validation in GH actions per #294 2025-02-02 13:23:39 -08:00
David Dworken
27e2521358
Revert "temporarily disable macos code signing verification in GH actions validator"
This reverts commit d6e2ebbf0ba1e6d0db8f156a0e9450f48470d0e1.
2025-02-02 13:11:41 -08:00
David Dworken
79ae5f7f72
Revert "Update slsa-releaser.yml, attempt #3"
This reverts commit c6a1b5533f82134737e0026d5c4038bce613f3bc.
2025-02-02 13:11:30 -08:00
David Dworken
8f89b1f9cc
Major version upgrade for slsa verifier 2025-02-02 13:11:08 -08:00
David Dworken
e92305b1a6
more dep upgrades 2025-02-02 12:43:54 -08:00
David Dworken
f6e231df2d
Block release validation in GH actions 2025-02-02 12:38:57 -08:00
David Dworken
d6e2ebbf0b
temporarily disable macos code signing verification in GH actions validator 2025-02-02 12:32:07 -08:00
David Dworken
9884a80466
Upgrade go deps to try to fix slsa issues 2025-02-02 12:31:40 -08:00
David Dworken
c6a1b5533f
Update slsa-releaser.yml, attempt #3 2025-02-02 12:11:41 -08:00
David Dworken
2145906f73
Fix directory mismatch caused by change in GH actions artifact version 2025-02-02 11:55:47 -08:00
David Dworken
eabd001d3e
Add additional fail-safe validation to SLSA validator for better error messages 2025-02-02 11:47:02 -08:00
David Dworken
417c2e9e62
Add tmate debugging 2025-02-02 11:45:16 -08:00
David Dworken
3e9be81301
Attempt #2 at avoiding duplicate artifact names 2025-02-02 11:13:04 -08:00
David Dworken
3d19e69463
Revert "Avoid reusing artifact name to enable GH action upgrade"
This reverts commit 7649ac1331fd1e63f0671c0ccffa8451ed0d1593.
2025-02-02 11:09:01 -08:00
David Dworken
7649ac1331
Avoid reusing artifact name to enable GH action upgrade 2025-02-02 10:35:19 -08:00
David Dworken
562b52c688
More GH action upgrades 2025-02-02 10:21:38 -08:00
David Dworken
6de83cb888
Upgrade slsa builder 2025-02-02 10:08:09 -08:00
David Dworken
fc01eff62f
Upgrade GH actions for https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/ 2025-02-02 10:03:46 -08:00
David Dworken
8682681842
Add CPU profiling to make fbench command 2025-02-02 09:41:48 -08:00
David Dworken
9d0edba3a3
Add support for NoSleep param to test runner 2025-02-02 09:41:13 -08:00
David Dworken
482f7ae021
Delete commented out code 2025-02-01 10:17:10 -08:00
David Dworken
cb253b6985
Release v0.328 v0.328 2025-01-22 15:27:14 -08:00
David Dworken
f8c414b2c9
Skip deep cleans for sqlite DBs (#289)
* Add explicit DROP TABLE directives for temp_inactive_devices and drop the TEMP qualifier for non-postgres DBs, fixes #288

* Revert "Add explicit DROP TABLE directives for temp_inactive_devices and drop the TEMP qualifier for non-postgres DBs, fixes #288"

This reverts commit db6d8413a74d1fe624e431243bb0808bee8ab01f.

* Skip deep cleans for sqlite DBs
2025-01-20 17:50:33 -08:00
David Dworken
a4ff05c0fa Release v0.327 v0.327 2025-01-20 14:49:47 -08:00