Merge pull request #152 from cybozu-go/container-updates

Bump Kubernetes version to v1.31 and update related dependencies

Author: 012xx

.github/actions/aqua/action.yaml

@@ -7,9 +7,9 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: aquaproj/aqua-installer@4551ec64e21bf0f557c2525135ff0bd2cba40ec7 # v3.0.0
+    - uses: aquaproj/aqua-installer@e2d0136abcf70b7a2f6f505720640750557c4b33 # v3.1.1
       with:
-        aqua_version: v2.27.3
+        aqua_version: v2.44.1
         policy_allow: "true"
       env:
         GITHUB_TOKEN: ${{ inputs.github_token }}

.github/workflows/ci.yaml

@@ -7,10 +7,10 @@ on:
 jobs:
   build:
     name: Build binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-go@v3
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
       with:
         go-version-file: go.mod
     - uses: ./.github/actions/aqua
@@ -19,10 +19,10 @@ jobs:
     - run: make release-build
   test:
     name: Small tests
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-go@v3
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
       with:
         go-version-file: go.mod
     - uses: ./.github/actions/aqua
@@ -36,13 +36,13 @@ jobs:
     strategy:
       matrix:
         k8s-version:
-        - v1.28.7 # renovate: kindest/node
-        - v1.29.2 # renovate: kindest/node
-        - v1.30.0 # renovate: kindest/node
-    runs-on: ubuntu-22.04
+        - v1.29.12 # renovate: kindest/node
+        - v1.30.8 # renovate: kindest/node
+        - v1.31.4 # renovate: kindest/node
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-go@v3
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
       with:
         go-version-file: go.mod
         cache: true

.github/workflows/helm.yaml

@@ -8,18 +8,18 @@ on:
 
 jobs:
   lint-test:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
-          python-version: 3.7
+          python-version: 3.13
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@v2.2.1
+        uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2.7.0
 
       - name: Run chart-testing (list-changed)
         id: list-changed
@@ -33,10 +33,10 @@ jobs:
         run: ct lint --config ct.yaml
 
       - name: Create kind cluster
-        uses: helm/kind-action@v1.10.0
+        uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
         if: steps.list-changed.outputs.changed == 'true'
         with:
-          node_image: kindest/node:v1.30.0
+          node_image: kindest/node:v1.31.4
       - name: Apply cert-manager
         run: |
           kubectl apply -f https://github.com/jetstack/cert-manager/releases/latest/download/cert-manager.yaml

.github/workflows/mdbook.yaml

@@ -7,9 +7,9 @@ on:
 jobs:
   build:
     name: Build book
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./.github/actions/aqua
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
@@ -21,10 +21,10 @@ jobs:
         retention-days: 1
   publish:
     name: Publish book on GitHub Pages
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: build
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         ref: gh-pages
     # ignore helm chart index file and chart archive file.

.github/workflows/release.yaml

@@ -6,9 +6,9 @@ on:
 jobs:
   image:
     name: Push Container Image
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Build images
       run: |
         docker build -t accurate:dev .
@@ -22,10 +22,10 @@ jobs:
   release:
     name: Release on GitHub
     needs: image
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-go@v3
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
       with:
         go-version-file: go.mod
         cache: true
@@ -37,26 +37,26 @@ jobs:
         export TAG=$(curl -s "https://api.github.com/repos/cybozu-go/accurate/releases/latest" | jq -r .tag_name)
         echo "GORELEASER_PREVIOUS_TAG=${TAG}" >> $GITHUB_ENV
     - name: GoReleaser
-      uses: goreleaser/goreleaser-action@f82d6c1c344bcacabba2c841718984797f664a6b # v4.2.0
+      uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf # v6.1.0
       with:
         distribution: goreleaser
-        version: v1.15.2
+        version: v2.6.1
         args: release --clean
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - name: Update new version in krew-index
-      uses: rajatjindal/krew-release-bot@92da038bbf995803124a8e50ebd438b2f37bbbb0 # v0.0.43
+      uses: rajatjindal/krew-release-bot@3d9faef30a82761d610544f62afddca00993eef9 # v0.0.47
   chart-release:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: release
     if: contains(needs.release.result, 'success')
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Install Helm
-        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
+        uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v４.2.0
       - name: Set chart version
         run: |
           helm repo add accurate https://cybozu-go.github.io/accurate
@@ -90,7 +90,7 @@ jobs:
           git config user.name "$GITHUB_ACTOR"
           git config user.email "[email protected]"
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0
+        uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         with:
           config: cr.yaml
         env:

.github/workflows/renovate.yaml

@@ -7,9 +7,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@2a87d1192eaa0cac92b6566233afedf68fd3472a # renovate v38.1.8
+        uses: renovatebot/github-action@e084b5ac6fd201023db6dd7743aec023babb02c8 # renovate v41.0.13
         with:
           configurationFile: renovate.json
           token: ${{ secrets.RENOVATE_TOKEN }}

.goreleaser.yaml

@@ -1,3 +1,4 @@
+version: 2
 builds:
   - id: kubectl-accurate
     main: ./cmd/kubectl-accurate
@@ -22,7 +23,7 @@ archives:
       - kubectl-accurate
     name_template: "kubectl-{{ .ProjectName }}_{{ .Tag }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ .Arm }}{{ end }}"
     wrap_in_directory: false
-    format: tar.gz
+    formats: [ 'tar.gz' ]
     files:
       - LICENSE
 

Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM ghcr.io/cybozu/golang:1.21-jammy as builder
+FROM ghcr.io/cybozu/golang:1.23-jammy as builder
 
 COPY ./ .
 RUN CGO_ENABLED=0 go build -ldflags="-w -s" -o accurate-controller ./cmd/accurate-controller

Makefile

@@ -116,7 +116,7 @@ build:
 
 .PHONY: release-build
 release-build: setup
-	goreleaser build --snapshot --rm-dist
+	goreleaser build --snapshot --clean
 
 ##@ Tools
 

aqua.yaml

@@ -2,22 +2,22 @@
 # https://aquaproj.github.io/
 registries:
   - type: standard
-    ref: v4.23.0 # renovate: depName=aquaproj/aqua-registry
+    ref: v4.317.0 # renovate: depName=aquaproj/aqua-registry
   - name: local
     type: local
     path: registry.yaml
 packages:
-  - name: kubernetes/kubectl@v1.30.0
+  - name: kubernetes/kubectl@v1.31.6
   - name: kubernetes-sigs/[email protected]
-  - name: kubernetes-sigs/kustomize@kustomize/v5.4.1
-  - name: kubernetes-sigs/kind@v0.23.0
-  - name: rust-lang/[email protected].31
-  - name: mikefarah/yq@v4.34.1
+  - name: kubernetes-sigs/kustomize@kustomize/v5.6.0
+  - name: kubernetes-sigs/kind@v0.26.0
+  - name: rust-lang/[email protected].45
+  - name: mikefarah/yq@v4.35.1
   - name: clamoriniere/[email protected]
-  - name: kubernetes-sigs/controller-tools/controller-gen@v0.15.0
-  - name: helm/helm@v3.12.1
-  - name: bitnami-labs/sealed-secrets@v0.22.0
-  - name: goreleaser/goreleaser@v1.19.1
+  - name: kubernetes-sigs/controller-tools/controller-gen@v0.16.5
+  - name: helm/helm@v3.17.1
+  - name: bitnami-labs/sealed-secrets@v0.28.0
+  - name: goreleaser/goreleaser@v2.6.1
   - name: kubernetes/code-generator/[email protected]
     registry: local
   - name: kubernetes/code-generator/[email protected]