Skip to content

cherrypick#10000

Closed
menahyouyeah wants to merge 381 commits intoGoogleContainerTools:release/v2.7from
menahyouyeah:cherrypick
Closed

cherrypick#10000
menahyouyeah wants to merge 381 commits intoGoogleContainerTools:release/v2.7from
menahyouyeah:cherrypick

Conversation

@menahyouyeah
Copy link
Contributor

dependabot bot and others added 30 commits April 19, 2024 14:46
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0.
- [Commits](golang/net@v0.17.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ols#9379)

Bumps [flask](https://github.com/pallets/flask) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…eContainerTools#9381)

Bumps [flask](https://github.com/pallets/flask) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ContainerTools#9385)

Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.2.1 to 2.2.4.
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.2.1...v2.2.4)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…nerTools#9403)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.2 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@1746f4a...6546280)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…erTools#9402)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.1 to 3.25.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3.25.1...v3.25.2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

* fix: TestGenerateMavenBuildArgs-host-platform

* fix: gradle
…mands (GoogleContainerTools#9307)

* feat(exec|verify): enabled "namespace" option for exec and verify commands

* generated doc
…nerTools#9468)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@6546280...0b2256b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat: added retry on files sync error

* reverted code style changes

* fix(dev.go): change package order

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

---------

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
…s#9445)

Use bazel logic to determine bazel workspace root
and ensure MODULE.bazel is added as a dep to
Bazel targets if it is present.
…ntainerTools#9503)

* fix: keep the original template if template expansion fails

* fix: keep the original template if template expansion fails
Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
…progress (GoogleContainerTools#9476)

* feat(kaniko): Optimize kaniko build using compression and add progress

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

* add new config for kaniko BuildContextCompressionLevel

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

* linters fix

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

* fixed defaults_test.go

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

---------

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
…nerTools#9516)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.4 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@0b2256b...5076954)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot bot and others added 25 commits October 15, 2025 13:09
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fix minor typo in custom-actions.md

* Apply suggestion from @gemini-code-assist[bot]

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
…es (GoogleContainerTools#9886)

* chore: pin some dependencies (and remove some other pins)

* chore: go get -u ./...

* chore: go mod tidy

* chore: go mod vendor

* chore: changes required because of docker API incompatibilities
…2 support for rendering since `helm version --client` parameter is not supported anymore in v4 (GoogleContainerTools#9892)

* feat(helm): Support Helm v4 for rendering and deployment, drop Helm v2 support for rendering since `helm version --client` parameter is not supported anymore in v4

* Fix imports lint error

* Fix lints/tests
Bumps the golang group with 2 updates: [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `github.com/letsencrypt/boulder` from 0.20251014.0 to 0.20251021.0
- [Release notes](https://github.com/letsencrypt/boulder/releases)
- [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md)
- [Commits](letsencrypt/boulder@v0.20251014.0...v0.20251021.0)

Updates `google.golang.org/api` from 0.252.0 to 0.253.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.252.0...v0.253.0)

---
updated-dependencies:
- dependency-name: github.com/letsencrypt/boulder
  dependency-version: 0.20251021.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: google.golang.org/api
  dependency-version: 0.253.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… group (GoogleContainerTools#9897)

chore: bump actions/upload-artifact in the github-actions group

Bumps the github-actions group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/upload-artifact` from 4 to 5
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the golang group with 3 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go), [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `cloud.google.com/go/storage` from 1.57.0 to 1.57.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.57.0...storage/v1.57.1)

Updates `github.com/letsencrypt/boulder` from 0.20251021.0 to 0.20251027.0
- [Release notes](https://github.com/letsencrypt/boulder/releases)
- [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md)
- [Commits](letsencrypt/boulder@v0.20251021.0...v0.20251027.0)

Updates `google.golang.org/api` from 0.253.0 to 0.254.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.253.0...v0.254.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.57.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/letsencrypt/boulder
  dependency-version: 0.20251027.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: google.golang.org/api
  dependency-version: 0.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The OpenJDK containers were removed from dockerhub.
…oogleContainerTools#9903)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.28 to 1.7.29.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.28...v1.7.29)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.29
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…Tools#9863)

This change enables Skaffold to push to container image registries that use
self-signed or other untrusted certificates, when Skaffold runs on macOS or
Windows. It also removes the need for the `SSL_CERT_FILE` environment
variable workaround on Linux.

Prior to this fix, Skaffold would fail to retrieve the digest from the
registry after the image was built, even if the registry was configured as an
insecure registry in Skaffold configuration:

```
getting image: Get "https://localhost:8443/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority; GET http://localhost:8443/v2/: unexpected status code 400 Bad Request: Client sent an HTTP request to an HTTPS server.
```

On Linux environments only, a possible workaround was to set the
`SSL_CERT_FILE` environment variable. However, this workaround cannot be used
on macOS or Windows.

This change updates `getRemoteIndex()` and `getRemoteImage()` in
`pkg/skaffold/docker/remote.go`, adding the `InsecureSkipVerify` TLS config
field to the transport if the registry from the image name matches one of
the insecure registries configured in Skaffold.

Fixes: GoogleContainerTools#3039 GoogleContainerTools#3116
Related: google/go-containerregistry#1559
…rTools#9721)

* fix: Avoid sync retry if file/directory was not found

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

* use os.IsNotExist in dev.go

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

* Improve sync error handling in dev.go

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

* fix file sync

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>

---------

Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
Bumps the golang group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/cli](https://github.com/docker/cli) | `28.5.1+incompatible` | `28.5.2+incompatible` |
| [github.com/docker/docker](https://github.com/docker/docker) | `28.5.1+incompatible` | `28.5.2+incompatible` |
| [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) | `0.20251027.0` | `0.20251103.0` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.25.1` | `0.25.2` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.32.0` | `0.33.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.17.0` | `0.18.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.37.0` | `0.38.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.254.0` | `0.255.0` |
| [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.20.1` | `0.21.0` |
| [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) | `0.20.1` | `0.21.0` |


Updates `github.com/docker/cli` from 28.5.1+incompatible to 28.5.2+incompatible
- [Commits](docker/cli@v28.5.1...v28.5.2)

Updates `github.com/docker/docker` from 28.5.1+incompatible to 28.5.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v28.5.1...v28.5.2)

Updates `github.com/letsencrypt/boulder` from 0.20251027.0 to 0.20251103.0
- [Release notes](https://github.com/letsencrypt/boulder/releases)
- [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md)
- [Commits](letsencrypt/boulder@v0.20251027.0...v0.20251103.0)

Updates `github.com/moby/buildkit` from 0.25.1 to 0.25.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.25.1...v0.25.2)

Updates `golang.org/x/oauth2` from 0.32.0 to 0.33.0
- [Commits](golang/oauth2@v0.32.0...v0.33.0)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

Updates `golang.org/x/sys` from 0.37.0 to 0.38.0
- [Commits](golang/sys@v0.37.0...v0.38.0)

Updates `google.golang.org/api` from 0.254.0 to 0.255.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.254.0...v0.255.0)

Updates `sigs.k8s.io/kustomize/api` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.20.1...api/v0.21.0)

Updates `sigs.k8s.io/kustomize/kyaml` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.20.1...api/v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/docker/docker
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/letsencrypt/boulder
  dependency-version: 0.20251103.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: google.golang.org/api
  dependency-version: 0.255.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oogleContainerTools#9908)

Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/opencontainers/selinux/releases)
- [Commits](opencontainers/selinux@v1.12.0...v1.13.0)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/selinux
  dependency-version: 1.13.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…backend (GoogleContainerTools#9907)

chore: bump rack in /integration/examples/ruby/backend

Bumps [rack](https://github.com/rack/rack) from 2.2.14 to 2.2.20.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.14...v2.2.20)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 2.2.20
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: upgrade golang to 1.25.4

* chore: upgrade golang to 1.25.4
* chore: Skaffold 2.17 release

* chore: Skaffold 2.17 release
* chore: bump golang.org/x/crypto from 0.43.0 to 0.45.0 (GoogleContainerTools#9917)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.45.0.
- [Commits](golang/crypto@v0.43.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: bump the github-actions group across 1 directory with 3 updates (GoogleContainerTools#9934)

Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v5)

Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: disabling kaniko integration tests due to kaniko service account permissions issue and fix github workflow (GoogleContainerTools#9943)

disabling kaniko integration tests due to kaniko service accountpermissioning issue and fix github workflow

Co-authored-by: Darien-Lin <darienl@google.com>

* chore: upgrade golang to 1.25.5 (GoogleContainerTools#9944)

* Upgrade github.com/google/ko to v0.18.1 (GoogleContainerTools#9939)

* Upgrade github.com/google/ko to v0.18.1

* Upgrade github.com/google/ko to v0.18.1 continue

* fix a issue in docker/auth.go

* fix go version issue in test

* revert go version changes in test

* update docker cli vendor files

* Trigger GitHub Actions

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Darien Lin <lind3686@gmail.com>
Co-authored-by: Darien-Lin <darienl@google.com>
Co-authored-by: Chris <chris.ge@live.com>
* chore: bump github.com/sigstore/cosign/v2 from 2.6.1 to 2.6.2 (GoogleContainerTools#9948)

Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.6.1...v2.6.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-version: 2.6.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* cicd: bazel github presubmit flow fixes for recent bazel 9.0.0 release (GoogleContainerTools#9961)

bazel build fixes for recent bazel 9.0.0 release

* chore: bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (GoogleContainerTools#9957)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.10.3 to 1.10.4.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.3...v1.10.4)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.10.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (GoogleContainerTools#9956)

Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.4.3 to 1.5.0.
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.4.3...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.4.1 (GoogleContainerTools#9962)

Bumps [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf) from 2.3.0 to 2.4.1.
- [Release notes](https://github.com/theupdateframework/go-tuf/releases)
- [Commits](theupdateframework/go-tuf@v2.3.0...v2.4.1)

---
updated-dependencies:
- dependency-name: github.com/theupdateframework/go-tuf/v2
  dependency-version: 2.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* test(integration): Update busybox and alpine:3 to use the mirror to avoid docker rate hub limit errors (GoogleContainerTools#9966)

test(integration): mirror busybox and alpine:3 images to gcr.io

* chore: bump github.com/go-git/go-git/v5 from 5.16.3 to 5.16.5 (GoogleContainerTools#9971)

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.16.3 to 5.16.5.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.16.3...v5.16.5)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.16.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: bump golang.org/x/oauth2 from 0.7.0 to 0.27.0 in /examples/grpc-e2e-tests/service (GoogleContainerTools#9918)

chore: bump golang.org/x/oauth2 in /examples/grpc-e2e-tests/service

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.7.0 to 0.27.0.
- [Commits](golang/oauth2@v0.7.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /hack/tools (GoogleContainerTools#9916)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.36.0 to 0.45.0.
- [Commits](golang/crypto@v0.36.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Use mirror in Dockerfiles for integration tests to prevent docker hub rate limits (GoogleContainerTools#9970)

* use mirror in Dockerfiles for integration tests

* use argument prefix instead

* fix for multi stage

* more fixes

* fix buildx-bin error

* Bring back comments

* missed a comment

* chore: upgrade golang to 1.25.7 (GoogleContainerTools#9973)

Co-authored-by: Darien-Lin <darienl@google.com>

* Updated Dockerfile to try to fix vuln bug (GoogleContainerTools#9974)

* Updated Dockerfile to try to fix vuln bug

* Addressed the gemini-code-assist comments

* Fixed the dockerfile so it runs using docker build -f deploy/webhook-v2/Dockerfile .

* Updated the node version to fix error (GoogleContainerTools#9976)

* Updated Dockerfile to try to fix vuln bug

* Addressed the gemini-code-assist comments

* Fixed the dockerfile so it runs using docker build -f deploy/webhook-v2/Dockerfile .

* Updated node version to try and fix error

* chore: fixing docs due to upgrade in Hugo (GoogleContainerTools#9977)

fixing docs due to upgrade in Hugo

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: menahyouyeah <minnah@google.com>
Co-authored-by: Darien-Lin <darienl@google.com>
Co-authored-by: ruhi-chaddha <ruhichaddha@google.com>
delete webhooks used to display what the docs would look like with a PR change
…ntainerTools#9993)

Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.6.1...v1.6.3)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* debug migrating to Kokoro instances - pared down PR

* switch to new project in presubmit.sh

* pared down to just one test

* tag skaffold-builder image with commit and push to AR

* use buildx with --load

* jib errors

* remove wrong project

* jib updates
…load/python (GoogleContainerTools#9989)

chore: bump flask in /integration/examples/hot-reload/python

Bumps [flask](https://github.com/pallets/flask) from 2.2.5 to 3.1.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@2.2.5...3.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…gleContainerTools#9981)

Bumps [rack](https://github.com/rack/rack) from 2.2.20 to 2.2.22.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.20...v2.2.22)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 2.2.22
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request integrates a comprehensive set of updates, including new features, bug fixes, and dependency upgrades, to enhance Skaffold's functionality and maintainability. It refines the build and deployment experience by updating core tools, improving configuration flexibility, and providing clearer feedback mechanisms. The changes also focus on streamlining internal processes and ensuring documentation accurately reflects the current state of the project.

Highlights

  • Consolidated CODEOWNERS: The .github/CODEOWNERS file has been simplified to assign all repository ownership to the @GoogleContainerTools/skaffold-team.
  • Dependabot Configuration Update: Dependabot update schedules for gomod and github-actions have been changed to weekly, and several example/internal directories are now excluded from gomod updates to reduce noise.
  • Build Process Modernization: Docker build commands in the Makefile have been migrated to docker buildx build with the --load flag, and the release-slim target has been removed. Environment variables for Maven/Gradle (MAVEN_OPTS, GRADLE_USER_HOME) were added to the integration-in-docker target to prevent build issues on clean environments.
  • Removal of Survey and Office Hours: All code and documentation related to the Skaffold user survey and office hours have been removed, streamlining the project's communication channels.
  • Enhanced Config Field Validation: The skaffold config set command now provides a more informative error message when an invalid field is specified, listing all available configuration fields.
  • Improved Error Wrapping: Error messages during manifest rendering in skaffold delete and skaffold deploy commands are now wrapped with additional context for better debugging.
  • Diagnose Command Templating Support: The skaffold diagnose command introduces a new --enable-templating flag, allowing users to render supported templated fields with the Go template engine. It also now uses image tags for artifact diagnostics.
  • External Post-Renderer Support: The skaffold filter command now supports an external --post-renderer executable, enabling more flexible manifest transformations.
  • Expanded Namespace Flag Scope: The --namespace flag is now applicable to skaffold verify and skaffold exec commands, providing more granular control over resource targeting.
  • Remote Cache Directory Renaming: The repoCacheDir variable and related flags/options across various commands (inspect, lint) have been consistently renamed to remoteCacheDir for clarity.
  • Init Command Enhancements: A new --skip-unreachable-dirs flag has been added to skaffold init, allowing the command to bypass directories that cannot be accessed due to permissions instead of erroring out.
  • New Config Dependencies Command: A new skaffold inspect config-dependencies add command has been introduced to facilitate the management and addition of configuration dependencies.
  • Toolchain and Dependency Upgrades: Numerous build tools and dependencies have been upgraded, including kubectl, Helm, Kustomize, kpt, Kompose, container-structure-test, Kind, k3d, gcloud, Bazel, Docker, Buildx, Go, Java, Flask, Micronaut, Spring Boot, and various Go modules. The base image for runtime dependencies has been updated to Ubuntu 24.04.
  • Bazel Cross-Platform Support: The Bazel builder now supports platform mappings, allowing for cross-platform builds by passing --platforms to Bazel based on the target build platform. The Bazel example has been updated to reflect these changes.
  • Documentation Updates: Documentation has been extensively updated to reflect new features, clarify existing functionalities (e.g., templating variables, resource selectors), and correct outdated information (e.g., debug annotations, remote cache paths).

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog
  • .github/CODEOWNERS
    • Simplified CODEOWNERS to assign all responsibility to @GoogleContainerTools/skaffold-team.
  • .github/dependabot.yml
    • Changed gomod and github-actions update schedules to weekly.
    • Grouped gomod and github-actions updates.
    • Excluded codelab, examples, hack, integration, and pkg/skaffold/build/ko/testdata from gomod updates.
  • Makefile
    • Added a comment referencing a Go review to the coverage target.
    • Replaced docker build with docker buildx build and added --load for release and build targets.
    • Added -t gcr.io/$(GCP_PROJECT)/skaffold:latest to the release target.
    • Removed the release-slim target.
    • Added comments explaining Jib (Maven/Gradle) crashing on Kokoro and how to prevent it.
    • Added MAVEN_OPTS and GRADLE_USER_HOME environment variables to integration-in-docker target.
    • Changed make integration to make integration-tests in integration-in-docker target.
  • README.md
    • Removed the 'Come hang out with us!' section.
    • Removed 'Office Hours' and 'Survey' sections.
  • cmd/skaffold/app/cmd/cmd.go
    • Removed import of github.com/GoogleContainerTools/skaffold/v2/pkg/skaffold/survey.
    • Removed surveyPrompt channel and s *survey.Runner variable.
    • Removed survey-related logic from PersistentPreRunE and PersistentPostRunE.
    • Removed NewCmdSurvey() from rootCmd.AddCommand.
    • Updated debug messages to reflect removal of survey prompt.
  • cmd/skaffold/app/cmd/config/list.go
    • Added a message 'No config found for current context' when contextConfig is nil.
  • cmd/skaffold/app/cmd/config/list_test.go
    • Imported fmt.
    • Added expectedOutput field to test cases for contexts without config.
  • cmd/skaffold/app/cmd/config/set.go
    • Imported maps and slices.
    • Improved error message for invalid config fields to list available fields.
  • cmd/skaffold/app/cmd/delete.go
    • Wrapped the error returned by r.Render with additional context.
  • cmd/skaffold/app/cmd/deploy.go
    • Wrapped the error returned by r.Render with additional context.
  • cmd/skaffold/app/cmd/diagnose.go
    • Imported deployutil, tag, and tags.
    • Added enableTemplating flag.
    • Added --enable-templating flag to NewCmdDiagnose.
    • Applied templates to configs if enableTemplating is true.
    • Updated printArtifactDiagnostics to use deployutil.ImageTags and pass imageTags to diagnose.CheckArtifacts.
  • cmd/skaffold/app/cmd/filter.go
    • Imported os/exec.
    • Added postRenderer variable and flag.
    • Modified runFilter to accept postRenderer and execute it if provided.
  • cmd/skaffold/app/cmd/filter_test.go
    • Updated runFilter calls to include the new postRenderer argument (empty string).
  • cmd/skaffold/app/cmd/flags.go
    • Extended DefinedOn for the namespace flag to include verify and exec.
    • Updated Usage and Value for remote-cache-dir flag.
    • Clarified Usage for no-prune flag.
  • cmd/skaffold/app/cmd/init.go
    • Added skipUnreachableDirs variable and flag.
    • Added --skip-unreachable-dirs flag to NewCmdInit.
    • Passed skipUnreachableDirs to init.Entrypoint.
  • cmd/skaffold/app/cmd/inspect.go
    • Renamed repoCacheDir to remoteCacheDir in inspectFlags.
    • Updated StringVar for remote-cache-dir flag.
    • Added cmdConfigDependencies() to NewCmdInspect.
  • cmd/skaffold/app/cmd/inspect_build_env.go
    • Renamed RepoCacheDir to RemoteCacheDir in printBuildEnvsListOptions, localBuildEnvOptions, and addClusterBuildEnvOptions.
  • cmd/skaffold/app/cmd/inspect_config_dependencies.go
    • Added new file for inspect config-dependencies command.
  • cmd/skaffold/app/cmd/inspect_execution_modes.go
    • Renamed RepoCacheDir to RemoteCacheDir in listExecutionModes.
  • cmd/skaffold/app/cmd/inspect_job_manifest_paths.go
    • Renamed RepoCacheDir to RemoteCacheDir in listJobManifestPaths.
  • cmd/skaffold/app/cmd/inspect_modules.go
    • Renamed RepoCacheDir to RemoteCacheDir in listModules.
  • cmd/skaffold/app/cmd/inspect_namespaces.go
    • Renamed RepoCacheDir to RemoteCacheDir in listNamespaces.
  • cmd/skaffold/app/cmd/inspect_profiles.go
    • Renamed RepoCacheDir to RemoteCacheDir in listProfiles.
  • cmd/skaffold/app/cmd/inspect_tests.go
    • Renamed RepoCacheDir to RemoteCacheDir in listTests.
  • cmd/skaffold/app/cmd/lint.go
    • Renamed RepoCacheDir to RemoteCacheDir in lint.Options.
  • cmd/skaffold/app/cmd/survey.go
    • Removed file.
  • deploy/cloudbuild-release.yaml
    • Added gcr.io/$PROJECT_ID/skaffold:latest to images.
  • deploy/cloudbuild-slim.yaml
    • Removed file.
  • deploy/docs-v2/local-preview.sh
    • Changed Dockerfile target from deploy/webhook to deploy/webhook-v2.
  • deploy/skaffold/Dockerfile.deps
    • Updated base image from alpine:3.10 to alpine:3.21.2.
    • Updated KUBECTL_VERSION to v1.33.0 and changed SHA type to SHA256.
    • Updated HELM_VERSION to v3.17.3.
    • Updated KUSTOMIZE_VERSION to 5.6.0.
    • Updated KPT_VERSION to 1.0.0-beta.57.
    • Updated KOMPOSE_VERSION to v1.35.0.
    • Updated CONTAINER_STRUCTURE_TEST_VERSION to v1.19.3.
    • Updated KIND_VERSION to v0.27.0.
    • Updated K3D_VERSION to v5.8.3.
    • Updated GCLOUD_VERSION to 520.0.0.
    • Updated BAZEL_VERSION to 8.2.1.
    • Updated runtime dependencies base image from ubuntu:20.04 to ubuntu:24.04.
    • Changed python to python3 and openjdk-17-jdk to openjdk-21-jdk.
    • Updated Docker and Buildx versions.
    • Updated Go version from 1.21.0 to 1.25.5.
  • deploy/skaffold/Dockerfile.deps.slim
    • Removed file.
  • deploy/skaffold/Dockerfile.slim
    • Removed file.
  • deploy/skaffold/digests/bazel.amd64.sha256
    • Updated SHA256 digest.
  • deploy/skaffold/digests/container-structure-test.amd64.sha512
    • Updated SHA512 digest.
  • deploy/skaffold/digests/gcloud.amd64.sha256
    • Updated SHA256 digest.
  • deploy/skaffold/digests/helm.amd64.sha256
    • Updated SHA256 digest.
  • deploy/skaffold/digests/k3d.amd64.sha256
    • Updated SHA256 digest.
  • deploy/skaffold/digests/kind.amd64.sha512
    • Updated SHA512 digest.
  • deploy/skaffold/digests/kompose.amd64.sha256
    • Updated SHA256 digest.
  • deploy/skaffold/digests/kpt.amd64.sha256
    • Updated SHA256 digest.
  • deploy/skaffold/digests/kubectl.amd64.sha256
    • Added new file.
  • deploy/skaffold/digests/kubectl.amd64.sha512
    • Removed file.
  • deploy/skaffold/digests/kustomize.amd64.sha256
    • Updated SHA256 digest.
  • deploy/webhook-v2/Dockerfile
    • Removed file.
  • deploy/webhook-v2/cloudbuild.yaml
    • Removed file.
  • deploy/webhook-v2/deployment.yaml
    • Removed file.
  • deploy/webhook-v2/skaffold.yaml
    • Removed file.
  • deploy/webhook/Dockerfile
    • Removed file.
  • deploy/webhook/cloudbuild.yaml
    • Removed file.
  • deploy/webhook/deployment.yaml
    • Removed file.
  • deploy/webhook/skaffold.yaml
    • Removed file.
  • docs-v1/content/en/api-v2/skaffold.swagger.json
    • Removed schemes array.
    • Updated operationId for various endpoints to include SkaffoldV2Service_ prefix.
    • Added default error response schema to various endpoints.
    • Added DEPLOY_CLOUD_RUN_GET_WORKER_POOL_ERR, DEPLOY_CLOUD_RUN_UPDATE_WORKER_POOL_ERR, DEPLOY_CLOUD_RUN_DELETE_WORKER_POOL_ERR to enumsStatusCode.
    • Added RENDER_HELM_PLUGIN_ERR to enumsStatusCode.
    • Removed format: "boolean" from boolean properties.
    • Added runtimeError schema definition.
    • Removed x-stream-definitions section.
  • docs-v1/content/en/docs/references/api-v2/grpc.md
    • Added documentation for Cloud Run worker pool errors.
    • Added documentation for RENDER_HELM_PLUGIN_ERR.
  • docs-v1/content/en/docs/references/api/grpc.md
    • Added documentation for Cloud Run worker pool errors.
    • Added documentation for RENDER_HELM_PLUGIN_ERR.
  • docs-v2/config.toml
    • Updated skaffold_version from v4beta6 to v4beta13.
  • docs-v2/content/en/_index.html
    • Changed far fa-gem to fas fa-gem for the gem icon.
  • docs-v2/content/en/api-v2/skaffold.swagger.json
    • Removed schemes array.
    • Updated operationId for various endpoints to include SkaffoldV2Service_ prefix.
    • Added default error response schema to various endpoints.
    • Added DEPLOY_CLOUD_RUN_GET_WORKER_POOL_ERR, DEPLOY_CLOUD_RUN_UPDATE_WORKER_POOL_ERR, DEPLOY_CLOUD_RUN_DELETE_WORKER_POOL_ERR to enumsStatusCode.
    • Added RENDER_HELM_PLUGIN_ERR to enumsStatusCode.
    • Removed format: "boolean" from boolean properties.
    • Added runtimeError schema definition.
    • Removed x-stream-definitions section.
  • docs-v2/content/en/docs/builders/bazel.md
    • Clarified that Bazel target must produce a .tar bundle.
    • Added documentation and example for cross-platform Bazel builds using --platforms.
  • docs-v2/content/en/docs/builders/cross-platform.md
    • Updated Bazel row in the table to indicate 'Cross-platform supported'.
  • docs-v2/content/en/docs/custom-actions.md
    • Reworded description of skaffold exec command for clarity.
  • docs-v2/content/en/docs/deployers/helm.md
    • Minor wording change from 'it's status checking' to 'its status checking'.
  • docs-v2/content/en/docs/design/config.md
    • Updated API version in example from v2beta12 to v4beta7.
    • Added googleCloudStorage example to remote config dependency.
    • Updated description of SKAFFOLD_REMOTE_CACHE_DIR and remote cache directory structure.
  • docs-v2/content/en/docs/design/global-config.md
    • Added update-check and collect-metrics options to the global config table.
  • docs-v2/content/en/docs/environment/templating.md
    • Minor wording changes for clarity.
    • Added deploy.helm.releases.valuesFiles and manifests.helm.releases[].setValueTemplates to templated fields.
    • Clarified Nth artifact naming convention in template variables.
  • docs-v2/content/en/docs/references/api-v2/grpc.md
    • Added documentation for Cloud Run worker pool errors.
    • Added documentation for RENDER_HELM_PLUGIN_ERR.
  • docs-v2/content/en/docs/references/api/grpc.md
    • Added documentation for Cloud Run worker pool errors.
    • Added documentation for RENDER_HELM_PLUGIN_ERR.
  • docs-v2/content/en/docs/renderers/helm.md
    • Minor wording change from 'it's status checking' to 'its status checking'.
  • docs-v2/content/en/docs/renderers/rawYaml.md
    • Added a note about rawYaml being enabled by default with a default parameter.
  • docs-v2/content/en/docs/status-check.md
    • Corrected 'fails to stabilize' to 'fail to stabilize'.
    • Updated 'monitor select Kubernetes resources' to 'monitor select resources'.
    • Added 'Cloud Run instances (running containers) are ready to receive traffic' to monitored resource types.
  • docs-v2/content/en/docs/tutorials/skaffold-resource-selector.md
    • Added PodSpec field to ResourceFilter struct definition.
    • Clarified image and label overwriting rules.
    • Updated description for fixing immutable field issues.
    • Clarified description for allowing image: overwriting for differently named image fields.
  • docs-v2/content/en/docs/workflows/debug.md
    • Changed annotation name from debug.cloud.google.com/probe/timeouts to debug.cloud.google.com/probe-timeouts.
  • docs-v2/content/en/samples/builders/bazel-xplat.yaml
    • Added new file with an example of cross-platform Bazel build configuration.
  • docs-v2/content/en/schemas/version-mappings/v4beta10-version.json
    • Added new file for v2.11.0 schema mapping.
  • docs-v2/content/en/schemas/version-mappings/v4beta11-version.json
    • Added new file for v2.12.0 schema mapping.
  • docs-v2/content/en/schemas/version-mappings/v4beta12-version.json
    • Added new file for v2.14.0 schema mapping.
  • docs-v2/content/en/schemas/version-mappings/v4beta13-version.json
    • Added new file for v2.15.0 schema mapping.
  • docs-v2/content/en/schemas/version-mappings/v4beta7-version.json
    • Added new file for v2.8.0 schema mapping.
  • docs-v2/content/en/schemas/version-mappings/v4beta8-version.json
    • Added new file for v2.9.0 schema mapping.
  • docs-v2/content/en/schemas/version-mappings/v4beta9-version.json
    • Added new file for v2.10.0 schema mapping.
  • docs-v2/design_proposals/concurrent-bazel-builds.md
    • Added new design proposal document.
  • examples/bazel/.bazelrc
    • Added new file with common --enable_bzlmod.
  • examples/bazel/.bazelversion
    • Added new file with Bazel version 6.1.0.
  • examples/bazel/.gitignore
    • Added new file with node_modules and bazel-*.
  • examples/bazel/BUILD
    • Removed file.
  • examples/bazel/BUILD.bazel
    • Added new file with go_binary, oci_image, and oci_tarball rules.
  • examples/bazel/MODULE.bazel
    • Added new file with Bazel module dependencies.
  • examples/bazel/README.md
    • Updated image name from skaffold-example to skaffold-bazel.
    • Updated target name from //:skaffold_example.tar to //:skaffold-example.tar.
  • examples/bazel/WORKSPACE
    • Removed file.
  • examples/bazel/WORKSPACE.bazel
    • Added new file as a Bazel workspace marker.
  • examples/bazel/deploy.yaml
    • Added new file with a simple Pod deployment.
  • examples/bazel/k8s/k8s-pod.yaml
    • Removed file.
  • examples/bazel/main.go
    • Changed print message from 'Hello bazel!!!!' to 'Hello world!'.
  • examples/bazel/skaffold.yaml
    • Updated API version to v4beta13.
    • Added metadata.name: hello.
    • Added tagPolicy: sha256.
    • Updated Bazel artifact target and added platforms configuration.
    • Added deploy.kubectl: {} and manifests.rawYaml: ["deploy.yaml"].
  • examples/buildpacks-java/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/buildpacks-node/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/buildpacks-python/requirements.txt
    • Updated Flask version from 2.3.3 to 3.1.0.
  • examples/buildpacks-python/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/buildpacks/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/cross-platform-builds/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/custom-buildx/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/custom-tests/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/custom/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/dev-journey-buildpacks/skaffold.yaml
    • Updated buildpacks builder SHA.
  • examples/docker-deploy/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/gcb-kaniko/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/generate-pipeline/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/getting-started-kustomize/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/getting-started/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/go-integration-coverage/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/google-cloud-build/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/grpc-e2e-tests/cloud-spanner-bootstrap/go.mod
    • Updated Go version to 1.23.0.
    • Updated cloud.google.com/go/spanner to v1.45.0.
    • Updated google.golang.org/api to v0.114.0.
    • Updated google.golang.org/genproto to v0.0.0-20230410155749-daa745c078e1.
    • Updated google.golang.org/grpc to v1.56.3.
    • Updated various indirect dependencies.
  • examples/grpc-e2e-tests/cloud-spanner-bootstrap/go.sum
    • Updated checksums for various Go modules due to version bumps.
  • examples/grpc-e2e-tests/service/go.mod
    • Updated cloud.google.com/go/spanner to v1.45.0.
    • Updated github.com/golang/protobuf to v1.5.3.
    • Updated google.golang.org/api to v0.114.0.
    • Updated google.golang.org/grpc to v1.56.3.
    • Updated various indirect dependencies.
  • examples/grpc-e2e-tests/service/go.sum
    • Updated checksums for various Go modules due to version bumps.
  • examples/grpc-e2e-tests/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/grpc-e2e-tests/tests/go.mod
    • Removed dependency on github.com/GoogleContainerTools/skaffold/examples/grpc-e2e-tests/service.
  • examples/helm-deployment-dependencies/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/helm-deployment/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/helm-remote-repo/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/helm-render/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/hot-reload/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/jib-gradle/build.gradle
    • Updated io.micronaut.application from 3.6.3 to 4.4.4.
    • Updated com.github.johnrengelman.shadow from 7.1.2 to 8.1.1.
    • Updated com.google.cloud.tools.jib from 3.3.1 to 3.4.4.
    • Changed sourceCompatibility and targetCompatibility from 11 to 21.
    • Added implementation 'io.micronaut:micronaut-jackson-databind'.
    • Removed jib.from.image = 'openjdk:11'.
  • examples/jib-gradle/gradle.properties
    • Updated micronautVersion from 3.7.4 to 4.6.3.
  • examples/jib-gradle/gradle/wrapper/gradle-wrapper.properties
    • Updated distributionUrl to gradle-8.11.1-bin.zip.
    • Added networkTimeout=10000 and validateDistributionUrl=true.
  • examples/jib-gradle/gradlew
    • Added SPDX-License-Identifier: Apache-2.0.
    • Updated APP_HOME resolution logic.
    • Updated JAVACMD logic to use command -v java.
    • Updated MAX_FD handling with ulimit -H -n.
    • Updated argument parsing for Cygwin/MSYS.
    • Replaced eval set -- with xargs and sed for argument collection.
  • examples/jib-gradle/gradlew.bat
    • Added SPDX-License-Identifier: Apache-2.0.
    • Added @rem This is normally unused comment.
    • Added for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi.
    • Updated JAVA_EXE check to use if %ERRORLEVEL% equ 0.
    • Updated error messages to redirect to stderr.
    • Updated exit code handling.
  • examples/jib-gradle/settings.gradle
    • Replaced rootProject.name with plugins { id 'io.micronaut.platform.catalog' version '4.4.4' }.
  • examples/jib-gradle/skaffold.yaml
    • Updated API version to v4beta13.
    • Added jib.type: gradle and jib.fromImage: gcr.io/distroless/java21-debian12:debug.
    • Updated gradleImage SHA in gcb profile.
  • examples/jib-multimodule/pom.xml
    • Updated Jib base image from openjdk:8 to eclipse-temurin:25.
  • examples/jib-sync/build.gradle
    • Updated org.springframework.boot from 2.0.5.RELEASE to 3.4.1.
    • Updated io.spring.dependency-management from 1.0.7.RELEASE to 1.1.7.
    • Updated com.google.cloud.tools.jib from 3.3.1 to 3.4.4.
    • Changed sourceCompatibility and targetCompatibility from 1.8 to 21.
    • Removed jib.from.image = 'openjdk:17'.
  • examples/jib-sync/gradle/wrapper/gradle-wrapper.properties
    • Updated distributionUrl to gradle-8.11.1-bin.zip.
    • Added networkTimeout=10000 and validateDistributionUrl=true.
  • examples/jib-sync/gradlew
    • Added SPDX-License-Identifier: Apache-2.0.
    • Updated APP_HOME resolution logic.
    • Updated JAVACMD logic to use command -v java.
    • Updated MAX_FD handling with ulimit -H -n.
    • Updated argument parsing for Cygwin/MSYS.
    • Replaced eval set -- with xargs and sed for argument collection.
  • examples/jib-sync/gradlew.bat
    • Added SPDX-License-Identifier: Apache-2.0.
    • Added @rem This is normally unused comment.
    • Added for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi.
    • Updated JAVA_EXE check to use if %ERRORLEVEL% equ 0.
    • Updated error messages to redirect to stderr.
    • Updated exit code handling.
  • examples/jib-sync/pom.xml
    • Updated Jib base image from openjdk:8 to eclipse-temurin:25.
  • examples/jib-sync/skaffold-gradle.yaml
    • Updated API version to v4beta13.
    • Updated jib.fromImage to gcr.io/distroless/java21-debian12:debug.
  • examples/jib-sync/skaffold-maven.yaml
    • Updated API version to v4beta13.
  • examples/jib/pom.xml
    • Updated Jib base image from openjdk:8 to eclipse-temurin:25.
  • examples/kaniko/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/ko-sync-infer/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/ko/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/kustomize/skaffold-kustomize-args.yaml
    • Updated API version to v4beta13.
  • examples/kustomize/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/lifecycle-hooks/k8s-pod.yaml
    • Added tier: test-1 label to pod metadata.
  • examples/lifecycle-hooks/skaffold.yaml
    • Updated API version to v4beta13.
    • Added global build.hooks for before and after commands.
  • examples/microservices/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/multi-config-microservices/base/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/multi-config-microservices/leeroy-app/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/multi-config-microservices/leeroy-web/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/multi-config-microservices/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/multiple-renderers/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/nodejs/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/profile-patches/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/profiles/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/react-reload-docker/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/react-reload/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/remote-multi-config-microservices/README.md
    • Updated remote cache folder path from ~/.skaffold/repos to ~/.skaffold/remote-cache.
  • examples/remote-multi-config-microservices/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/ruby/backend/Gemfile.lock
    • Updated nio4r from 2.5.9 to 2.7.3.
    • Updated puma from 5.6.7 to 5.6.9.
    • Updated rack from 2.2.6.4 to 2.2.22.
  • examples/ruby/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/simple-artifact-dependency/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/structure-tests/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/tagging-with-environment-variables/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/templated-fields/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/typescript/skaffold.yaml
    • Updated API version to v4beta13.
  • examples/using-env-file/skaffold.yaml
    • Updated API version to v4beta13.
  • fs/assets/credits_generated/cel.dev/expr/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/moby/sys/mount/LICENSE.
  • fs/assets/credits_generated/cloud.google.com/go/auth/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/moby/sys/mountinfo/LICENSE.
  • fs/assets/credits_generated/cloud.google.com/go/auth/oauth2adapt/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/sigstore/rekor/pkg/generated/models/LICENSE.
  • fs/assets/credits_generated/cloud.google.com/go/cloudbuild/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/sigstore/sigstore/pkg/cryptoutils/LICENSE.
  • fs/assets/credits_generated/cloud.google.com/go/longrunning/LICENSE
    • Renamed from fs/assets/credits_generated/google.golang.org/appengine/LICENSE.
  • fs/assets/credits_generated/dario.cat/mergo/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp/LICENSE
    • Renamed from fs/assets/credits_generated/google.golang.org/genproto/LICENSE.
  • fs/assets/credits_generated/github.com/GoogleContainerTools/kaniko/pkg/util/proc/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/GoogleContainerTools/skaffold/v2/pkg/skaffold/render/applysetters/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/GoogleContainerTools/skaffold/v2/pkg/skaffold/render/applysetters/LICENSE.
  • fs/assets/credits_generated/github.com/MakeNowJust/heredoc/LICENSE
    • Updated copyright year to 2019.
  • fs/assets/credits_generated/github.com/Masterminds/goutils/LICENSE.txt
    • Renamed from fs/assets/credits_generated/gopkg.in/go-jose/go-jose.v2/LICENSE.
  • fs/assets/credits_generated/github.com/Masterminds/sprig/LICENSE.txt
    • Added new file.
  • fs/assets/credits_generated/github.com/ProtonMail/go-crypto/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/agext/levenshtein/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/agext/levenshtein/NOTICE
    • Added new file.
  • fs/assets/credits_generated/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding/LICENSE.txt
    • Renamed from vendor/cloud.google.com/go/compute/LICENSE.
  • fs/assets/credits_generated/github.com/blang/semver/v4/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/census-instrumentation/opencensus-proto/gen-go/LICENSE
    • Renamed from vendor/github.com/google/gofuzz/LICENSE.
  • fs/assets/credits_generated/github.com/cloudflare/circl/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/cncf/xds/go/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/containerd/errdefs/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/containerd/typeurl/LICENSE.
  • fs/assets/credits_generated/github.com/containerd/log/LICENSE
    • Renamed from vendor/github.com/containerd/typeurl/LICENSE.
  • fs/assets/credits_generated/github.com/containerd/platforms/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/containerd/typeurl/v2/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/cyphar/filepath-securejoin/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/distribution/reference/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/docker/cli/cli/NOTICE
    • Updated link to bis.doc.gov.
  • fs/assets/credits_generated/github.com/envoyproxy/go-control-plane/envoy/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/matttproud/golang_protobuf_extensions/pbutil/LICENSE.
  • fs/assets/credits_generated/github.com/envoyproxy/protoc-gen-validate/validate/LICENSE
    • Renamed from vendor/github.com/google/safetext/LICENSE.
  • fs/assets/credits_generated/github.com/felixge/httpsnoop/LICENSE.txt
    • Added new file.
  • fs/assets/credits_generated/github.com/fxamacker/cbor/v2/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/go-chi/chi/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/go-git/gcfg/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/src-d/gcfg/LICENSE.
  • fs/assets/credits_generated/github.com/go-git/go-billy/v5/LICENSE
    • Renamed from fs/assets/credits_generated/gopkg.in/src-d/go-billy.v4/LICENSE.
  • fs/assets/credits_generated/github.com/go-git/go-git/v5/LICENSE
    • Renamed from fs/assets/credits_generated/gopkg.in/src-d/go-git.v4/LICENSE.
  • fs/assets/credits_generated/github.com/go-jose/go-jose/v4/LICENSE
    • Renamed from fs/assets/credits_generated/gopkg.in/go-jose/go-jose.v2/LICENSE.
  • fs/assets/credits_generated/github.com/go-jose/go-jose/v4/json/LICENSE
    • Renamed from fs/assets/credits_generated/gopkg.in/go-jose/go-jose.v2/json/LICENSE.
  • fs/assets/credits_generated/github.com/gobuffalo/here/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/google/gnostic-models/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/google/gnostic/LICENSE.
  • fs/assets/credits_generated/github.com/google/safetext/LICENSE
    • Added a newline character at the end of the file.
  • fs/assets/credits_generated/github.com/gorilla/mux/LICENSE
    • Updated copyright year to 2023.
  • fs/assets/credits_generated/github.com/gorilla/websocket/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/grpc-ecosystem/grpc-gateway/v2/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/grpc-ecosystem/grpc-gateway/v2/LICENSE.txt.
  • fs/assets/credits_generated/github.com/hashicorp/hcl/decoder.go
    • Added UnmarshalErrorOnDuplicates and DecodeErrorOnDuplicates functions.
    • Modified decodePtr to handle non-nil pointers.
    • Updated expandObject to use ast.ObjectKey struct literal.
    • Added unusedNodeKeys map and removeCaseFold function for tracking unused keys.
  • fs/assets/credits_generated/github.com/hashicorp/hcl/hcl/ast/ast.go
    • Added unknownPos variable.
    • Modified ObjectList.Pos() and ObjectItem.Pos() to return unknownPos if no keys are present.
  • fs/assets/credits_generated/github.com/hashicorp/hcl/hcl/parser/parser.go
    • Added errorOnDuplicateKeys field to Parser struct.
    • Added ParseDontErrorOnDuplicateKeys and parse functions.
    • Modified objectList to check for duplicate keys if errorOnDuplicateKeys is true.
    • Modified objectType and listType to handle errors more consistently.
  • fs/assets/credits_generated/github.com/hashicorp/hcl/parse.go
    • Modified ParseBytes and ParseString to call parse with errorOnDuplicateKeys set to true.
    • Modified parse to conditionally call hclParser.ParseDontErrorOnDuplicateKeys.
    • Modified Parse to call parse with errorOnDuplicateKeys set to true.
  • fs/assets/credits_generated/github.com/huandu/xstrings/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/jedisct1/go-minisign/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/jmespath/go-jmespath/LICENSE
    • Updated license to Apache License 2.0.
  • fs/assets/credits_generated/github.com/jmespath/go-jmespath/NOTICE
    • Added new file.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/core/challenges.go
    • Removed 'random' from function names and descriptions.
    • Updated NewChallenge description.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/core/interfaces.go
    • Updated PolicyAuthority interface methods: WillingToIssueWildcards to WillingToIssue, ChallengesFor to ChallengeTypesFor, CheckAuthz to CheckAuthzChallenges.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/core/objects.go
    • Updated jose import from gopkg.in/go-jose/go-jose.v2 to github.com/go-jose/go-jose/v4.
    • Added OCSPStatusNotReady and updated OCSPStatusToInt.
    • Removed InitialIP from Registration struct.
    • Renamed Hostname to DnsName in ValidationRecord.
    • Added ResolverAddrs to ValidationRecord.
    • Removed looksLikeKeyAuthorization function.
    • Simplified Challenge struct, removing URI, ProvidedKeyAuthorization, and updating Validated type.
    • Updated RecordsSane logic for ChallengeTypeHTTP01 and ChallengeTypeTLSALPN01 to use DnsName.
    • Removed CheckConsistencyForClientOffer and CheckConsistencyForValidation functions.
    • Renamed checkConsistency to CheckPending and updated error messages.
    • Changed ID and RegistrationID fields in Authorization to json:"-".
    • Updated Authorization.SolvedBy() error messages.
    • Updated CertificateStatus fields to use timestamppb.Timestamp and removed OCSPResponse.
    • Updated IssuerID to IssuerNameID in CertificateStatus.
    • Updated RenewalInfo struct to include ExplanationURL and added IsWithin method to SuggestedWindow.
    • Updated RenewalInfoImmediate to accept explanationURL and truncate timestamps.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/core/proto/core.pb.go
    • Updated protoc-gen-go version to v1.34.1.
    • Imported timestamppb.
    • Added Identifier message.
    • Updated Challenge message: removed KeyAuthorization, Uri, and changed Validated type to timestamppb.Timestamp.
    • Updated ValidationRecord message: added ResolverAddrs.
    • Updated Certificate message: changed Issued and Expires types to timestamppb.Timestamp.
    • Updated CertificateStatus message: changed OcspLastUpdated, RevokedDate, LastExpirationNagSent, NotAfter types to timestamppb.Timestamp and removed OcspResponse.
    • Updated Registration message: changed CreatedAt type to timestamppb.Timestamp.
    • Updated Authorization message: removed Identifier, added DnsName, changed Expires type to timestamppb.Timestamp.
    • Updated Order message: changed Expires and Created types to timestamppb.Timestamp, renamed Names to DnsNames, added CertificateProfileName.
    • Updated CRLEntry message: changed RevokedAt type to timestamppb.Timestamp.
    • Updated file_core_proto_msgTypes and file_core_proto_depIdxs.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/core/proto/core.proto
    • Imported google/protobuf/timestamp.proto.
    • Added Identifier message.
    • Updated Challenge message: reserved fields, changed validated to google.protobuf.Timestamp, removed keyAuthorization, uri.
    • Updated ValidationRecord message: added resolverAddrs.
    • Updated Certificate message: reserved fields, changed issued and expires to google.protobuf.Timestamp.
    • Updated CertificateStatus message: reserved fields, changed various timestamp fields to google.protobuf.Timestamp.
    • Updated Registration message: reserved field, changed createdAt to google.protobuf.Timestamp.
    • Updated Authorization message: reserved fields, renamed identifier to dnsName, changed expires to google.protobuf.Timestamp.
    • Updated Order message: reserved fields, renamed names to dnsNames, changed expires and created to google.protobuf.Timestamp, added certificateProfileName.
    • Updated CRLEntry message: reserved field, changed revokedAt to google.protobuf.Timestamp.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/core/util.go
    • Imported context, ecdsa, rsa, path, slices, grpc/codes, grpc/status, google.golang.org/protobuf/types/known/durationpb, google.golang.org/protobuf/types/known/timestamppb.
    • Updated mrand import to math/rand/v2.
    • Updated jose import to github.com/go-jose/go-jose/v4.
    • Renamed LooksLikeAToken to looksLikeAToken.
    • Updated KeyDigest error message.
    • Updated PublicKeysEqual to handle rsa.PublicKey and ecdsa.PublicKey.
    • Updated StringToSerial error message.
    • Expanded IsAnyNilOrZero to handle more types including bool, string, []string, byte, int, uint, float, time.Time, timestamppb.Timestamp, durationpb.Duration.
    • Added NormalizeIdentifiers function.
    • Added HashNames function.
    • Updated LoadCert error message.
    • Added IsCanceled function.
    • Added Command function.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/errors/errors.go
    • Imported grpc/codes and grpc/status.
    • Added new ErrorType constants: UnsupportedContact, UnknownSerial, Conflict.
    • Added GRPCStatus() method to BoulderError.
    • Added new error constructor functions: RegistrationsPerIPAddressError, RegistrationsPerIPv6RangeError, NewOrdersPerAccountError, CertificatesPerDomainError, CertificatesPerFQDNSetError, FailedAuthorizationsPerDomainPerAccountError, UnsupportedContactError, UnknownSerialError, ConflictError.
    • Removed DuplicateCertificateError, FailedValidationError, RegistrationsPerIPError.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/goodkey/blocked.go
    • Removed file.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/goodkey/good_key.go
    • Removed imports for berrors, sapb, grpc.
    • Removed WeakKeyFile and BlockedKeyFile from Config.
    • Added AllowedKeys struct and LetsEncryptCPS function.
    • Updated NewPolicy to use AllowedKeys and set default FermatRounds.
    • Updated GoodKey to use policy.allowedKeys and policy.blockedCheck.
    • Removed acceptableRSAKeySizes map.
    • Updated goodKeyRSA to use policy.goodRSABitLen and removed policy.weakRSAList check.
    • Added goodRSABitLen function.
    • Updated checkPrimeFactorsTooClose loop to for range rounds.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/goodkey/weak.go
    • Removed file.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/identifier/identifier.go
    • Imported net/netip and corepb.
    • Added TypeIP constant.
    • Added AsProto() method to ACMEIdentifier.
    • Renamed DNSIdentifier to NewDNS.
    • Added NewIP function.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/probs/probs.go
    • Added new ProblemType constants: AccountDoesNotExistProblem, AlreadyRevokedProblem, BadCSRProblem, BadNonceProblem, BadPublicKeyProblem, BadRevocationReasonProblem, BadSignatureAlgorithmProblem, CAAProblem, ConflictProblem, ConnectionProblem, DNSProblem, InvalidContactProblem, MalformedProblem, OrderNotReadyProblem, PausedProblem, RateLimitedProblem, RejectedIdentifierProblem, ServerInternalProblem, TLSProblem, UnauthorizedProblem, UnsupportedContactProblem, UnsupportedIdentifierProblem.
    • Removed V1ErrorNS and V2ErrorNS, replaced with ErrorNS.
    • Updated all problem constructor functions to use new ProblemType constants and simplified logic.
    • Removed ProblemDetailsToStatusCode.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/sa/proto/sa.proto
    • Imported google/protobuf/duration.proto.
    • Removed CountRegistrationsByIP and CountRegistrationsByIPRange.
    • Added GetLintPrecertificate, GetSerialsByAccount, GetSerialsByKey, CheckIdentifiersPaused, GetPausedIdentifiers to StorageAuthorityReadOnly.
    • Removed GetPendingAuthorization2 and GetPrecertificate.
    • Renamed KeyBlockedRequest to SPKIHash.
    • Added ReplacementOrderExists.
    • Added SetCertificateStatusReady to StorageAuthority.
    • Added UpdateRegistrationContact, UpdateRegistrationKey, LeaseCRLShard, UpdateCRLShard, PauseIdentifiers, UnpauseAccount to StorageAuthority.
    • Updated GetValidAuthorizationsRequest: reserved field, changed domains to dnsNames, now to validUntil (type google.protobuf.Timestamp).
    • Removed ValidAuthorizations message.
    • Updated SerialMetadata: reserved fields, changed created and expires to google.protobuf.Timestamp.
    • Updated Range: reserved fields, changed earliest and latest to google.protobuf.Timestamp.
    • Updated Timestamps: reserved field, changed timestamps to google.protobuf.Timestamp.
    • Updated CountCertificatesByNamesRequest: changed names to dnsNames.
    • Updated CountInvalidAuthorizationsRequest: changed hostname to dnsName.
    • Updated CountFQDNSetsRequest: reserved field, changed domains to dnsNames, added window (type google.protobuf.Duration).
    • Updated FQDNSetExistsRequest: changed domains to dnsNames.
    • Removed PreviousCertificateExistsRequest.
    • Updated AddSerialRequest: reserved fields, changed created and expires to google.protobuf.Timestamp.
    • Updated AddCertificateRequest: reserved fields, removed ocsp, changed issued to google.protobuf.Timestamp, renamed issuerID to issuerNameID, added ocspNotReady.
    • Updated NewOrderRequest: reserved field, changed expires to google.protobuf.Timestamp, renamed names to dnsNames, added replacesSerial and certificateProfileName.
    • Added NewAuthzRequest message.
    • Updated NewOrderAndAuthzsRequest to use NewAuthzRequest.
    • Updated RevokeCertificateRequest: reserved fields, changed date and backdate to google.protobuf.Timestamp, added shardIdx.
    • Updated FinalizeAuthorizationRequest: reserved fields, changed expires and attemptedAt to google.protobuf.Timestamp.
    • Updated AddBlockedKeyRequest: reserved field, changed added to google.protobuf.Timestamp.
    • Updated Incident: reserved field, changed renewBy to google.protobuf.Timestamp.
    • Updated IncidentSerial: reserved field, changed lastNoticeSent to google.protobuf.Timestamp.
    • Updated GetRevokedCertsRequest: reserved fields, changed expiresAfter, expiresBefore, revokedBefore to google.protobuf.Timestamp, added shardIdx.
    • Added LeaseCRLShardRequest, LeaseCRLShardResponse, UpdateCRLShardRequest, Identifiers, PauseRequest, PauseIdentifiersResponse, UpdateRegistrationContactRequest, UpdateRegistrationKeyRequest.
  • fs/assets/credits_generated/github.com/letsencrypt/boulder/sa/proto/subsets.go
    • Removed GetPrecertificate and added GetLintPrecertificate and SetCertificateStatusReady to StorageAuthorityCertificateClient.
  • fs/assets/credits_generated/github.com/liggitt/tabwriter/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/markbates/pkger/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/matttproud/golang_protobuf_extensions/pbutil/NOTICE
    • Removed file.
  • fs/assets/credits_generated/github.com/mitchellh/copystructure/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/mitchellh/reflectwalk/LICENSE
    • Renamed from vendor/github.com/mitchellh/mapstructure/LICENSE.
  • fs/assets/credits_generated/github.com/moby/docker-image-spec/specs-go/v1/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/moby/locker/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/moby/patternmatcher/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/moby/patternmatcher/NOTICE
    • Added new file.
  • fs/assets/credits_generated/github.com/moby/sys/sequential/LICENSE
    • Renamed from vendor/google.golang.org/appengine/LICENSE.
  • fs/assets/credits_generated/github.com/moby/sys/user/LICENSE
    • Renamed from vendor/gopkg.in/go-jose/go-jose.v2/LICENSE.
  • fs/assets/credits_generated/github.com/moby/sys/userns/LICENSE
    • Renamed from vendor/gopkg.in/go-jose/go-jose.v2/LICENSE.
  • fs/assets/credits_generated/github.com/mxk/go-flowrate/flowrate/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/opencontainers/runc/libcontainer/user/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/opencontainers/runc/libcontainer/user/NOTICE
    • Removed file.
  • fs/assets/credits_generated/github.com/pborman/uuid/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/pelletier/go-toml/v2/LICENSE
    • Updated copyright holder and years.
  • fs/assets/credits_generated/github.com/pjbgf/sha1cd/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/planetscale/vtprotobuf/protohelpers/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/pmezard/go-difflib/difflib/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/prometheus/client_golang/prometheus/NOTICE
    • Removed reference to matttproud/golang_protobuf_extensions.
  • fs/assets/credits_generated/github.com/prometheus/common/internal/bitbucket.org/ww/goautoneg/README.txt
    • Removed file.
  • fs/assets/credits_generated/github.com/russross/blackfriday/LICENSE.txt
    • Removed file.
  • fs/assets/credits_generated/github.com/russross/blackfriday/v2/LICENSE.txt
    • Added new file.
  • fs/assets/credits_generated/github.com/sagikazarmark/slog-shim/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/sassoftware/relic/lib/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/secure-systems-lab/go-securesystemslib/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/segmentio/asm/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/sigstore/protobuf-specs/gen/pb-go/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/skeema/knownhosts/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/spf13/jwalterweatherman/LICENSE.
  • fs/assets/credits_generated/github.com/skeema/knownhosts/NOTICE
    • Added new file.
  • fs/assets/credits_generated/github.com/spf13/jwalterweatherman/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/stretchr/testify/assert/LICENSE
    • Removed file.
  • fs/assets/credits_generated/github.com/theupdateframework/go-tuf/LICENSE
    • Renamed from fs/assets/credits_generated/github.com/theupdateframework/go-tuf/encrypted/LICENSE.
  • fs/assets/credits_generated/github.com/tonistiigi/go-csvvalue/LICENSE
    • Added new file.
  • fs/assets/credits_generated/github.com/x448/float16/LICENSE
    • Added new file.
Ignored Files
  • Ignored by pattern: .github/workflows/** (11)
    • .github/workflows/codeql-analysis.yml
    • .github/workflows/draft-release.yml
    • .github/workflows/integration-linux.yml
    • .github/workflows/linters-checks.yml
    • .github/workflows/performance-comparison-label.yml
    • .github/workflows/performance-comparison.yml
    • .github/workflows/scorecards.yml
    • .github/workflows/unit-tests-darwin.yml
    • .github/workflows/unit-tests-linux.yml
    • .github/workflows/unit-tests-windows.yml
    • .github/workflows/verify-examples.yml
Activity
  • The pull request is a cherry-pick, consolidating numerous changes from other branches.
  • Multiple chore, feat, fix, and docs commits are included, indicating a broad range of updates.
  • Dependency versions have been bumped across various ecosystems, including GitHub actions, Go modules, and language-specific packages.
  • Several schema versions have been generated or updated, reflecting ongoing API evolution.
  • Code related to the Skaffold user survey and 'slim' builds has been removed, suggesting a focus on streamlining.
  • Bazel integration has been improved with updated examples and documentation for cross-platform builds.
  • Build processes and tool versions have been updated in Makefile and Dockerfile.deps.
  • A new inspect config-dependencies add command has been introduced, expanding configuration management capabilities.
  • Documentation has been updated to reflect new features, clarify existing functionalities, and ensure accuracy.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request is a large cherry-pick of numerous commits, introducing a wide range of changes including new features, bug fixes, dependency upgrades, and documentation improvements. Key changes include updating many dependencies and tools, removing the 'survey' and 'skaffold slim' features, and adding new capabilities like GCS remote config dependencies and Bazel platform mappings. The review focused on the correctness of these varied changes. A minor but important typo was found in a new user-facing error message and its corresponding tests, where a Cyrillic character was used instead of a Latin one. The rest of the changes appear to be correct and consistent with the goals described in the commit messages.

Note: Security Review did not run due to the size of the PR.

}
if contextConfig == nil { // empty config
if contextConfig == nil {
fmt.Fprintf(out, "No config found for сurrent context %q\n", kubecontext)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

There's a typo in the word "current". It's using a Cyrillic 'с' (U+0441) instead of a Latin 'c'. This should be corrected to avoid potential rendering or processing issues.

Suggested change
fmt.Fprintf(out, "No config found for сurrent context %q\n", kubecontext)
fmt.Fprintf(out, "No config found for current context %q\n", kubecontext)

InsecureRegistries: []string{"mediocre.io"},
},
},
expectedOutput: fmt.Sprintf("No config found for сurrent context %q\n", "context-without-config"),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The test expectation contains the same typo as in the implementation: "сurrent" uses a Cyrillic 'с'. This should be corrected to use a Latin 'c'.

Suggested change
expectedOutput: fmt.Sprintf("No config found for сurrent context %q\n", "context-without-config"),
expectedOutput: fmt.Sprintf("No config found for current context %q\n", "context-without-config"),

},
},
},
expectedOutput: fmt.Sprintf("No config found for сurrent context %q\n", "context-without-config"),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

This test expectation also contains the typo in "сurrent". Please correct it to use a Latin 'c'.

Suggested change
expectedOutput: fmt.Sprintf("No config found for сurrent context %q\n", "context-without-config"),
expectedOutput: fmt.Sprintf("No config found for current context %q\n", "context-without-config"),

@menahyouyeah menahyouyeah deleted the cherrypick branch March 3, 2026 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.