cloud/ocis
1
0
Fork 0
mirror of https://github.com/owncloud/ocis.git synced 2026-10-23 23:29:02 +03:00
Code Activity
23,044 Commits 164 Branches 209 Tags
test-cli-postprocessing-resume
Commit Graph

32 Commits

Author SHA1 Message Date
Michal Klos
b9077d96d8 chore(deps): consolidate dependency and security bumps (#13081) 
* chore(deps): consolidate dependency and security bumps

Dependabot PRs applied:
- #12878 qs 6.15.2 -> 6.16.0 (web/web-runtime)
- #13013 alpine 3.24.1 -> 3.24.2
- #13061 actions/checkout -> v7.0.1 (missed instance in k8s.yml)
- #13062 actions/setup-node -> v7.0.0 (missed instance in k8s.yml)
- #13075 simple-git 3.36.0 -> 4.0.1 (security)
- #13076 katex 0.16.45 -> 0.18.2+ (security)
- #13077 dompurify 3.4.13 -> 3.4.16 (security)
- #13079 go deps minor-and-patch group, 18 updates (opa 1.19.0 -> 1.21.1, otel 1.46 -> 1.47, bleve, govips, grpc-gateway, lico, tablewriter, logrus, gjson, x/exp, x/image, genproto, etc.)

Skipped (already satisfied on master): #12513, #12624, #12625, #12633

Manual security bumps via pnpm.overrides (no dependabot PR existed):
- axios -> 1.20.0
- smol-toml -> 1.9.0
- postcss -> 8.5.23
- postcss-selector-parser -> 7.1.6
- colord -> 2.9.4
- unhead -> 2.1.13
- markdown-it -> 14.3.1
- esbuild -> 0.28.1
- brace-expansion 5.0.11 -> 5.0.12

Not fixable: sprintf-js and elliptic have no patched version released upstream yet; left as-is.

go build and pnpm install verified clean.

* chore(deps): fix residual transitive vulns found by trivy

trivy flagged duplicate/stale resolutions that survived the earlier
override pass: dompurify (3.4.12 -> 3.4.16), qs (6.14.2 -> 6.16.0),
and fast-uri (3.1.7 -> 3.1.8, CVE-2026-86472). Added/bumped pnpm.overrides
accordingly. trivy fs scan of web/pnpm-lock.yaml now clean.

* chore(deps): bump reva to bac0e1ee144ab853a81c6b02142032f102dd245a

Pins github.com/owncloud/reva/v2 to bac0e1ee144ab853a81c6b02142032f102dd245a,
pulling in its go-playground/locales and huandu/xstrings version bumps.
Appends this PR to changelog/unreleased/bump-reva.md.

go build ./... verified clean after go mod vendor resync.

* fix(ci): revert unhead override, breaks web build

* revert: keep k8s.yml actions/checkout and setup-node pinned
 2026-10-07 07:56:56 +02:00
dependabot[bot]
4c66e38c31 build(deps): bump the minor-and-patch group across 2 directories with 3 updates (#12427) 
Bumps the minor-and-patch group with 1 update in the / directory: alpine.
Bumps the minor-and-patch group with 2 updates in the /ocis/docker directory: amd64/alpine and arm64v8/alpine.


Updates `alpine` from 3.23.4 to 3.24.1

Updates `amd64/alpine` from 3.23.4 to 3.24.1

Updates `arm64v8/alpine` from 3.23.4 to 3.24.1

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: amd64/alpine
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: arm64v8/alpine
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-23 11:48:39 +02:00
Michal Klos
9ebc3f3515 chore: bump libvips (#12301) 2026-05-11 12:37:39 +02:00
Michal Klos
eaaf8533f4 chore: bump packages, consolidated dependabot (#12240) 
* chore(deps): bump @testing-library/jest-dom in /services/idp

Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 6.6.4 to 6.9.1.
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.6.4...v6.9.1)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 6.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1

Bumps [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) from 1.1.0 to 1.1.1.
- [Commits](https://github.com/FiloSottile/edwards25519/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Merge branch 'master' into dependabot/go_modules/github.com/russellhaering/goxmldsig-1.6.0

* build(deps): bump alpine from 3.23.3 to 3.23.4

Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump arm64v8/alpine from 3.23.3 to 3.23.4 in /ocis/docker

Bumps arm64v8/alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: arm64v8/alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump actions/cache from 5.0.4 to 5.0.5

Bumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](668228422a...27d5ce7f10)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump github.com/go-acme/lego/v4 from 4.25.2 to 4.34.0

Bumps [github.com/go-acme/lego/v4](https://github.com/go-acme/lego) from 4.25.2 to 4.34.0.
- [Release notes](https://github.com/go-acme/lego/releases)
- [Changelog](https://github.com/go-acme/lego/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-acme/lego/compare/v4.25.2...v4.34.0)

---
updated-dependencies:
- dependency-name: github.com/go-acme/lego/v4
  dependency-version: 4.34.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.17.1 to 5.18.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.17.1...v5.18.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.18.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: regenerate pnpm-lock.yaml

* fix(ci): replace nc-based fakeoffice with Python HTTP server

BusyBox nc -k restarts between connections leaving a gap where the
collaboration service gets ECONNRESET at startup, so healthz never
binds and the 300s wait times out. Python HTTPServer is gap-free.

---------

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-21 15:59:21 +00:00
Roman Perekhod
da5e63dfe3 feat: bump go to 1.25 
feat: bump mockery to v2.53.5

feat: bump govulncheck

feat: bump bingo to v0.10.0

force go-1.25.7

update thumbnail images for test

bump reva to latest
 2026-02-10 16:27:52 +01:00
dependabot[bot]
815af83186 chore(deps): bump alpine from 3.20 to 3.23 
Bumps alpine from 3.20 to 3.23.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-21 13:23:19 +00:00
dependabot[bot]
5de8e060fd chore(deps): bump owncloudci/golang from 1.24 to 1.25 (#11934) 
Bumps owncloudci/golang from 1.24 to 1.25.

---
updated-dependencies:
- dependency-name: owncloudci/golang
  dependency-version: '1.25'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-21 11:06:48 +01:00
Lukas Hirt
ee805b7019 chore: bump nodejs to v24 2025-10-29 11:58:42 +01:00
Julian Koberg
e20ddfdaf5 feat(ocis): update go version to 1.24 
Signed-off-by: Julian Koberg <jkoberg@MBP-Julian-Koberg.local>
 2025-02-26 15:51:04 +01:00
Michael Barz
35578a0ecc chore: remove unneeded stuff 2024-10-21 22:46:06 +02:00
Ralf Haferkamp
26f3e23b79 dev: Enable VIPS in local docker builds 
As libvips is not available as a static library we can no longer
create a statically linked ocis binary for the docker images when
libvips is enabled.
We also need to make sure that the base images used for building
ocis needs to match the image where ocis is installed when creating
a shared binary.
 2024-10-17 14:05:27 +02:00
Florian Schade
2fcde5b9d2 chore: bump go to 1.22 2024-03-06 11:52:23 +01:00
Ralf Haferkamp
e93d18b382 Dockerfile: Bump go version to the require go1.21 release 
Fixes: #7911
 2023-12-08 09:28:19 +01:00
Ralf Haferkamp
6668f90e18 Fix development Dockerfile to use uptodate images 2023-08-30 21:09:56 +02:00
jkoberg
179d82c9cf bump dockerfile go version 
Signed-off-by: jkoberg <jkoberg@owncloud.com>
 2023-03-09 09:24:16 +01:00
Willy Kloucek
86a108ac49 switch to a more recent alpine image for image builds (#5123) 2022-11-25 13:35:24 +01:00
Willy Kloucek
d74b879d4f update tooling (#5038) 
* update tooling

* update nodejs version
 2022-11-11 15:01:45 +01:00
Dominik Schmidt
b195c6bb0d Build idp and settings frontends with pnpm 2022-10-24 20:31:56 +02:00
Willy Kloucek
503c8a38eb add curl to the oCIS OCI image 2022-10-07 07:14:37 +02:00
Michael Barz
cfda133e43 Use golang 1.18 2022-08-10 17:51:28 +02:00
Bishop Clark
001b4301ab adjective order 
Adjective order nit-correction in prepositions.
 2022-07-09 12:48:15 -07:00
Willy Kloucek
bb6239d2ad reword reference do dev-image make target 2021-11-16 10:52:35 +01:00
Willy Kloucek
418b649647 add make target for dev docker image 2021-11-16 10:09:21 +01:00
Willy Kloucek
f243b663b3 quickfix root dockerfile to unblock docker based acceptance tests 2021-11-02 14:25:50 +01:00
Willy Kloucek
d6adbb3068 ugrade to GO 1.17 2021-10-11 14:50:37 +02:00
Willy Kloucek
a7f0bac2a0 fix to alpine:3.13 2021-03-24 16:44:31 +01:00
Willy Kloucek
4c769e0d33 update alpine base image to 3.14 2021-03-24 16:44:31 +01:00
Willy Kloucek
bd49b1d5c7 change volume 2021-03-24 10:28:40 +01:00
Florian Schade
f13530425a move cache to sync package 
rollback indexer map
use sync.pool for cache entries
add tests for cache
remove main locks from nrwmutex and use sync.map and sync.pool instead
bump dockerfile go version
 2021-01-19 23:23:41 +01:00
Willy Kloucek
1c409c64a1 implement acceptance tests in docker for dev machine 2020-12-15 08:36:34 +05:45
Willy Kloucek
34845f9414 work on docs 2020-11-30 16:31:38 +01:00
Jan Müller
4fafb96bbb Adds Dockerfile for building a local development image 
Add image builder documentation

Fix list item indent

Fix codacy issues

Make alpine version explicit

Fix markup indents

Fix image tag

Remove list items from markdown
 2020-10-08 11:41:20 +02:00