Skip to content

Merge upstream main - #4

Merged
artulloss merged 19 commits into
mainfrom
merge-upstream-main
Jul 14, 2026
Merged

Merge upstream main#4
artulloss merged 19 commits into
mainfrom
merge-upstream-main

Conversation

@artulloss

Copy link
Copy Markdown
Member

Getting out of date

mike-day and others added 19 commits April 25, 2025 08:24
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
We only build and distribute amd64 images at this time, so we should
specify that as the platform when building the image to prevent
accidental pushes of arm64 images when building from Apple Silicon.

Additionally, CI doesn't publish images with the `v` prefix, so the
versioning targets are updated to match.
* Add scheduled rebuild workflow

* Remove dependency on instrumentisto/rsync-ssh

Dependabot version checks aren't able to detect changes to the base
image because the tag format (i.e. alpine3.20) is not standard semver.
This prevents Dependabot from automatically updating the base image when
a new version is released, creating the need to manually monitor for and
apply base image updates.

The instrumentisto/rsync-ssh base image isn't particularly complex and
we're already running package updates and installing a few additional
dependencies. Therefore, it makes sense to just use alpine directly and
install all of the instrumentisto/rsync-ssh dependencies ourselves. This
should allow Dependabot to automatically update the base image when a
new version is released.

* Update documentation

* Drop unused v prefix for image tags
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.14.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Removes [tmp](https://github.com/raszi/node-tmp). It's no longer used after updating ancestor dependency [@changesets/cli](https://github.com/changesets/changesets). These dependencies need to be updated together.


Removes `tmp`

Updates `@changesets/cli` from 2.29.3 to 2.29.8
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@changesets/cli"
  dependency-version: 2.29.8
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump alpine from 3.20 to 3.23

Bumps alpine from 3.20 to 3.23.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add changeset

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Matthews <andrew.matthews@wpengine.com>
A dependabot update got these two out of sync and it's preventing
the Version and Release action from running `npm ci`.
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Polishing the DEVELOPMENT.md documentation for accuracy and clarity
* Adding dependabot autoappoval/merge

* address dir path and remove docker compose file from codeowners

* adding github actions ecosystem

* fix trailing newline, add open-pull-requests-limit to github-actions ecosystem, add workflow paths to CODEOWNERS for bot approval

---------

Co-authored-by: Michael Day <michael.day@wpengine.com>
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 0.1.14 to 0.1.15.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@1e07f43...de2c0eb)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 0.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps alpine from 3.23 to 3.24.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.24'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@changesets/cli](https://github.com/changesets/changesets) from 2.29.8 to 2.31.0.
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.0)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@artulloss
artulloss merged commit c0dae66 into main Jul 14, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants