Commit graph

461 commits

Author SHA1 Message Date
Julien
c8739b0766
Merge pull request #19074 from roidelapluie/roidelapluie/lts-split
ci: run version upgrade test as a per-LTS matrix
2026-07-02 12:47:27 +02:00
Julien Pivotto
827d0f9ad3
ci: run version upgrade test as a per-LTS matrix
Fan out the upgrade/downgrade test over each active LTS release so the
matrix jobs run in parallel and a single release failure does not mask
the others. A new list_lts_releases job reads the active LTS versions
from prometheus.io/download.json and feeds them to the matrix.

Add a --test.lts-version flag so TestVersionUpgrade can be restricted to
a single LTS release; when empty, all active LTS releases are tested.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-07-02 12:28:12 +02:00
renovate[bot]
2f43e049c5
chore(deps): update golangci/golangci-lint-action action to v9.3.0 (#19064)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 15:24:13 +02:00
renovate[bot]
2736cd9b3f
chore(deps): update actions/cache action to v6 (#19055)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:28:22 +02:00
renovate[bot]
07fc98e525
chore(deps): update prometheus/promci-setup action to v0.2.1 (#19058)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:28:09 +02:00
renovate[bot]
25cf60018f
chore(deps): update prometheus/promci action to v0.8.5 (#19057)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:27:58 +02:00
renovate[bot]
b27435d356
chore(deps): update actions/checkout action to v7 (#19056)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:27:44 +02:00
renovate[bot]
954cb0b5cc
chore(deps): update actions/setup-go action to v6.5.0 (#19054)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:04:40 +02:00
renovate[bot]
e8289cb64d
chore(deps): update actions/cache action to v5.1.0 (#19053)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:04:13 +02:00
Julien
123824de6c
Merge pull request #19008 from roidelapluie/roidelapluie/update-cache
ci: update promci-setup to v0.2.0
2026-06-23 12:50:50 +02:00
Julien Pivotto
b821b219a6 ci: update promci-setup to v0.2.0
Bump prometheus/promci-setup to v0.2.0 (with cache_key_suffix) across
all jobs.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-23 09:45:23 +02:00
renovate[bot]
bef665abdd
chore(deps): update dependabot/fetch-metadata action to v3 (#18884)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-23 09:21:12 +02:00
renovate[bot]
dfe7dd8ff2
chore(deps): update prometheus/promci action to v0.8.4 (#18984)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-23 07:00:18 +00:00
Julien
0efc62677d
Merge pull request #18995 from roidelapluie/roidelapluie/build-reuse-ui-assets
ci: reuse pre-built UI assets in build_all crossbuild
2026-06-22 14:33:48 +02:00
Julien Pivotto
300f9d8c28 ci: reuse pre-built UI assets in build_all crossbuild
test_ui already builds and saves the web UI tarball. Restore it in
build_all, extract it, and pass it to the crossbuild containers via promu's
new --env flag (PREBUILT_ASSETS_STATIC_DIR), so make build skips rebuilding
the UI in every crossbuild thread.

Bump promu to 0.20.0 for the crossbuild --env flag.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-22 14:09:24 +02:00
Julien
60b92cb2e1
ci: bump pnpm/action-setup to v6.0.9 (#18998)
v4.3.0 predates the npm + lockfile bootstrap rewrite (v5/v6) and its
follow-up fixes. v6.0.9 pulls in the self-update, standalone, and PATH
fixes and bumps the bootstrap pnpm to 11.7.0.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-22 13:14:34 +02:00
Julien
24582595ef
ci: update promci to v0.8.3 (#18960)
Some checks are pending
buf.build / lint and publish (push) Waiting to run
CI / Go tests (push) Waiting to run
CI / More Go tests (push) Waiting to run
CI / Go tests for 32-bit x86 (push) Waiting to run
CI / Go tests for Prometheus upgrades and downgrades (push) Waiting to run
CI / Go tests with previous Go version (push) Waiting to run
CI / UI tests (push) Waiting to run
CI / Go tests on Windows (push) Waiting to run
CI / Mixins tests (push) Waiting to run
CI / Compliance testing (push) Waiting to run
CI / Build Prometheus for common architectures (push) Waiting to run
CI / Build Prometheus for all architectures (push) Waiting to run
CI / Report status of build Prometheus for all architectures (push) Blocked by required conditions
CI / Check generated parser (push) Waiting to run
CI / golangci-lint (push) Waiting to run
CI / fuzzing (push) Waiting to run
CI / codeql (push) Waiting to run
CI / Publish main branch artifacts (push) Blocked by required conditions
CI / Publish release artefacts (push) Blocked by required conditions
CI / Publish UI on npm Registry (push) Blocked by required conditions
govulncheck / Run govulncheck (push) Waiting to run
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-18 08:48:38 +02:00
Julien Pivotto
af2d08a727 ci: use npm trusted publishing for UI release
Switch the publish_ui_release job to npm trusted publishing via OIDC by
granting the id-token: write permission and dropping the NPM_TOKEN secret.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-17 16:24:32 +02:00
Julien
74b4f3ac69
Merge pull request #18946 from roidelapluie/roidelapluie/pin-govulncheck-master
chore: pin golang/govulncheck-action to latest master
2026-06-17 14:09:39 +02:00
Julien Pivotto
46e1808dd9 chore: pin golang/govulncheck-action to latest master
This change is needed for windows_exporter.

https://go-review.googlesource.com/c/govulncheck-action/+/785640

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-17 09:54:42 +02:00
Julien
f8b921c084
Merge pull request #18797 from roidelapluie/roidelapluie/pnpm
chore(UI): Move to pnpm
2026-06-16 13:36:32 +02:00
Sebastian Schubert
c3c67e3445
chore(ci) install libsnmp-dev for snmp_exporter govulncheck
snmp_exporter has a generator/ subpackage that uses CGo and requires libsnmp-dev to compile. Without it, govulncheck ./... fails with fatal error: net-snmp/net-snmp-config.h: No such file or directory.

Fixes: prometheus/snmp_exporter#1618
Signed-off-by: Sebastian Schubert <basti@schubert.digital>
2026-06-12 11:53:39 +02:00
Julien Pivotto
53cde1b1be chore(UI): Move to pnpm
Switch the UI workspace from npm to pnpm. Declare jest as a direct
devDependency in lezer-promql (pnpm's strict isolation requires every
binary to be an explicit dependency), fix the moduleNameMapper path in
codemirror-promql's jest config to reflect pnpm's per-package
node_modules layout, and add a localStorage mock to mantine-ui's test
setup so module-level Redux slice initializers work under Node.js v22+,
which pre-defines localStorage as undefined on globalThis.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-11 14:13:28 +02:00
renovate[bot]
e05f5a74a3
chore(deps): update actions/checkout action to v6.0.3 (#18866)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-07 17:57:45 +02:00
renovate[bot]
a77b69e1f1
chore(deps): update dessant/lock-threads action to v6.0.2 (#18868)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-07 17:40:35 +02:00
renovate[bot]
c0bceeeb27
chore(deps): update golangci/golangci-lint-action action to v9.2.1 (#18870)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-07 17:40:07 +02:00
renovate[bot]
588702f91d
chore(deps): update github/codeql-action action to v4.36.2 (#18869)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-07 17:39:42 +02:00
Julien
7ba5c0bc0f
Merge pull request #18791 from roidelapluie/roidelapluie/ghtoken
ci: use github.token for publish_release job
2026-06-01 14:23:42 +02:00
Julien Pivotto
51d015945a ci: push to GHCR and bump promci to v0.8.2
- Add packages: write permission to publish_main and publish_release jobs
- Add ghcr_io_password: github.token to both publish jobs
- Bump promci build/publish actions from v0.6.0 to v0.8.2 (SHA-pinned)
- Drop standalone checkout steps preceding promci build/publish steps
  (promci v0.8.2 performs its own checkout)
- Add persist-credentials: false to check_release_notes checkout

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-05-29 18:04:16 +02:00
Julien
f22c6db04f
Merge pull request #18816 from roidelapluie/roidelapluie/govulncheck-goos
ci: set GOOS=windows for windows_exporter in govulncheck workflow
2026-05-29 14:45:13 +02:00
Julien Pivotto
ee5eb8f0d9 ci: set GOOS=windows for windows_exporter in govulncheck workflow
Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-05-29 11:14:57 +02:00
Julien Pivotto
b67d15347a ci: use per-org PATs for repo sync PR creation
Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-05-27 15:23:08 +02:00
Julien Pivotto
0b47509663 chore(reposync): use fork actual name and new API version in sync_repo_files
Read the fork's actual full_name from the fork API response instead of
constructing it.  Pass the fork full_name to post_pull_request so the checkout
hint uses the correct repo name.

Use newly-created scoped PROMBOT_REPOSYNC_TOKEN in the workflow.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-05-26 17:00:13 +02:00
Julien Pivotto
77e5477765 ci: use github.token for publish_release job
Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-05-26 10:38:47 +02:00
renovate[bot]
c5beac40e8
Update golang/govulncheck-action action to v1.0.4 (#18749)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-23 12:29:22 +00:00
renovate[bot]
50d4c349de
Update quay.io/prometheus/golang-builder Docker tag to v1.26 (#18149)
* Update quay.io/prometheus/golang-builder Docker tag to v1.26

---------

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>
2026-05-23 12:28:15 +00:00
renovate[bot]
711157537f
Update github/codeql-action action to v4.36.0 (#18748)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-23 11:21:20 +00:00
renovate[bot]
2a5793c38d
Update actions/stale action to v10.3.0 (#18755)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-23 13:10:28 +02:00
bwplotka
a987aef460 tests: split 32bit x86 tests to a separate job with parallel=1
Signed-off-by: bwplotka <bwplotka@gmail.com>
2026-05-18 12:07:18 +01:00
renovate[bot]
a732c0793a
Update actions/upload-artifact action to v7 (#18674)
Some checks are pending
buf.build / lint and publish (push) Waiting to run
CI / Go tests (push) Waiting to run
CI / More Go tests (push) Waiting to run
CI / Go tests for Prometheus upgrades and downgrades (push) Waiting to run
CI / Go tests with previous Go version (push) Waiting to run
CI / UI tests (push) Waiting to run
CI / Go tests on Windows (push) Waiting to run
CI / Mixins tests (push) Waiting to run
CI / Compliance testing (push) Waiting to run
CI / Build Prometheus for common architectures (push) Waiting to run
CI / Build Prometheus for all architectures (push) Waiting to run
CI / Report status of build Prometheus for all architectures (push) Blocked by required conditions
CI / Check generated parser (push) Waiting to run
CI / golangci-lint (push) Waiting to run
CI / fuzzing (push) Waiting to run
CI / codeql (push) Waiting to run
CI / Publish main branch artifacts (push) Blocked by required conditions
CI / Publish release artefacts (push) Blocked by required conditions
CI / Publish UI on npm Registry (push) Blocked by required conditions
govulncheck / Run govulncheck (push) Waiting to run
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 18:11:18 +02:00
renovate[bot]
2ac56b3285
Update actions/setup-node action to v6.4.0 (#18671)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 18:10:52 +02:00
renovate[bot]
5cf214cf5e
Update actions/cache action to v5.0.5 (#18670)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 17:40:29 +02:00
renovate[bot]
9ddc1fe475
Update github/codeql-action action to v4.35.4 (#18672)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-11 13:59:23 +00:00
Julien Pivotto
a7fb856707 ci: restrict govulncheck PR runs
Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-05-08 12:11:56 +02:00
Ben Kochie
7475a07d82
Enable govulncheck in CI (#18553)
Add a CI job to run govulncheck.
* Run daily.
* Run when touching go.{mod,sum}.on PRs and merge to the default branch.
* Cleanup unused / broken govulncheck in Makefile.common.
* Add status badge.
* Add to repo sync for all Go projects.
* Reduce green lines in sync script to make it easier to read the log.

Signed-off-by: SuperQ <superq@gmail.com>
2026-04-22 09:14:54 +02:00
Gagan H R
bfcaa44c2c fix: adding required permissions to top level and jobs in the workflow
Signed-off-by: Gagan H R <hrgagan4@gmail.com>
2026-04-19 11:41:48 +00:00
Ben Kochie
25d678b502
Cleanup promci action (#18524)
Use new `promci-setup` action for version upgrade test job.

Signed-off-by: SuperQ <superq@gmail.com>
2026-04-16 10:19:05 +02:00
Julien
f1c02cc7f1
Merge pull request #18420 from roidelapluie/roidelapluie/fuzzing-jobs
chore(fuzzing): limit number of CI jobs
2026-04-16 09:36:24 +02:00
Ben Kochie
b81f79b47f
Bump actions/setup-go (#18504)
Some checks are pending
buf.build / lint and publish (push) Waiting to run
CI / Go tests (push) Waiting to run
CI / More Go tests (push) Waiting to run
CI / Go tests for Prometheus upgrades and downgrades (push) Waiting to run
CI / Go tests with previous Go version (push) Waiting to run
CI / UI tests (push) Waiting to run
CI / Go tests on Windows (push) Waiting to run
CI / Mixins tests (push) Waiting to run
CI / Compliance testing (push) Waiting to run
CI / Build Prometheus for common architectures (push) Waiting to run
CI / Build Prometheus for all architectures (push) Waiting to run
CI / Report status of build Prometheus for all architectures (push) Blocked by required conditions
CI / Check generated parser (push) Waiting to run
CI / golangci-lint (push) Waiting to run
CI / fuzzing (push) Waiting to run
CI / codeql (push) Waiting to run
CI / Publish main branch artifacts (push) Blocked by required conditions
CI / Publish release artefacts (push) Blocked by required conditions
CI / Publish UI on npm Registry (push) Blocked by required conditions
Scorecards supply-chain security / Scorecards analysis (push) Waiting to run
Update actions/setup-go to the latest release.

Signed-off-by: SuperQ <superq@gmail.com>
2026-04-10 09:06:09 +02:00
Matthieu MOREL
45a2857eca ci: add compliance linting step to CI workflow
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2026-04-07 18:35:59 +02:00