Changes

• stop using secrets cat'd to a file @some-natalie (#444)
• Update Docker Compose to v2.40.2 in rootless Ubuntu images @copilot-swe-agent[bot] (#436)
• start to move to testing into ephemeral minikube in actions hosted @some-natalie (#433)

🧰 Maintenance

• Bump actions/upload-artifact from 4.6.2 to 5.0.0 @dependabot[bot] (#441)
• Bump github/codeql-action from 4.30.9 to 4.31.0 @dependabot[bot] (#442)
• Bump actions/download-artifact from 5.0.0 to 6.0.0 @dependabot[bot] (#443)
• Bump anchore/sbom-action from 0.20.8 to 0.20.9 @dependabot[bot] (#438)
• Bump anchore/scan-action from 7.0.2 to 7.1.0 @dependabot[bot] (#437)
• Bump github/codeql-action from 4.30.8 to 4.30.9 @dependabot[bot] (#435)
• Bump super-linter/super-linter from 8.2.0 to 8.2.1 @dependabot[bot] (#431)
• Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 @dependabot[bot] (#432)

Changes

• Update GitHub Actions Runner to v2.329.0 @copilot-swe-agent[bot] (#428)
• Update image dependencies: runner-container-hooks 0.8.0, docker 28.5.1, compose v2.40.0 @copilot-swe-agent[bot] (#425)
• Update Docker Compose to v2.39.4 in rootless Ubuntu images @copilot-swe-agent[bot] (#413)
• Update Docker Compose to v2.39.3 in rootless Ubuntu images @copilot-swe-agent[bot] (#408)

🧰 Maintenance

• Bump anchore/sbom-action from 0.20.6 to 0.20.8 @dependabot[bot] (#430)
• Bump anchore/scan-action from 7.0.0 to 7.0.2 @dependabot[bot] (#429)
• Bump actions/setup-node from 5.0.0 to 6.0.0 @dependabot[bot] (#426)
• Bump github/codeql-action from 4.30.7 to 4.30.8 @dependabot[bot] (#424)
• Bump github/codeql-action from 3.30.6 to 4.30.7 @dependabot[bot] (#422)
• Bump actions/stale from 10.0.0 to 10.1.0 @dependabot[bot] (#421)
• Bump github/codeql-action from 3.30.5 to 3.30.6 @dependabot[bot] (#419)
• Bump super-linter/super-linter from 8.1.0 to 8.2.0 @dependabot[bot] (#418)
• Bump docker/login-action from 3.5.0 to 3.6.0 @dependabot[bot] (#417)
• Bump github/codeql-action from 3.30.4 to 3.30.5 @dependabot[bot] (#416)
• Bump github/codeql-action from 3.30.3 to 3.30.4 @dependabot[bot] (#414)
• Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 @dependabot[bot] (#409)
• Bump anchore/scan-action from 6.5.1 to 7.0.0 @dependabot[bot] (#410)
• Bump anchore/sbom-action from 0.20.5 to 0.20.6 @dependabot[bot] (#411)
• Bump github/codeql-action from 3.30.2 to 3.30.3 @dependabot[bot] (#406)
• Bump github/codeql-action from 3.30.1 to 3.30.2 @dependabot[bot] (#405)
• Bump actions/setup-go from 5.5.0 to 6.0.0 @dependabot[bot] (#399)
• Bump actions/github-script from 7.0.1 to 8.0.0 @dependabot[bot] (#400)
• Bump actions/labeler from 5.0.0 to 6.0.1 @dependabot[bot] (#401)
• Bump github/codeql-action from 3.30.0 to 3.30.1 @dependabot[bot] (#402)
• Bump actions/setup-node from 4.4.0 to 5.0.0 @dependabot[bot] (#398)
• Bump actions/setup-python from 5.6.0 to 6.0.0 @dependabot[bot] (#395)
• Bump actions/stale from 9.1.0 to 10.0.0 @dependabot[bot] (#397)
• Bump github/codeql-action from 3.29.11 to 3.30.0 @dependabot[bot] (#394)
• Bump actions/attest-build-provenance from 2.4.0 to 3.0.0 @dependabot[bot] (#391)
• Bump azure/setup-helm from 4.3.0 to 4.3.1 @dependabot[bot] (#386)
• Bump github/codeql-action from 3.29.10 to 3.29.11 @dependabot[bot] (#388)
• Bump super-linter/super-linter from 8.0.0 to 8.1.0 @dependabot[bot] (#387)
• Bump github/codeql-action from 3.29.9 to 3.29.10 @dependabot[bot] (#385)
• Bump anchore/sbom-action from 0.20.4 to 0.20.5 @dependabot[bot] (#382)

Changes

• bump runner @some-natalie (#381)
• Enhance GitHub Copilot instructions with comprehensive development guidance @copilot-swe-agent[bot] (#374)
• Test @some-natalie (#378)
• move to another cluster for testing @some-natalie (#377)
• Janky @some-natalie (#361)
• Update Docker Compose to v2.39.2 in Ubuntu runner images @copilot-swe-agent[bot] (#357)
• ✨ Add GitHub Copilot instructions for AI dependency management workflow @copilot-swe-agent[bot] (#359)
• try to automate the janky parts of updating dockerfiles @some-natalie (#355)
• small bumps @some-natalie (#354)
• Update actions/runner version from v2.327.0 to v2.327.1 in all Dockerfiles @copilot-swe-agent[bot] (#346)
• bump @some-natalie (#344)

🧰 Maintenance

• Bump github/codeql-action from 3.29.8 to 3.29.9 @dependabot[bot] (#376)
• Bump actions/checkout from 4.2.2 to 5.0.0 @dependabot[bot] (#375)
• Bump github/codeql-action from 3.29.7 to 3.29.8 @dependabot[bot] (#353)
• Bump actions/download-artifact from 4.3.0 to 5.0.0 @dependabot[bot] (#351)
• Bump docker/login-action from 3.4.0 to 3.5.0 @dependabot[bot] (#349)
• Bump anchore/scan-action from 6.5.0 to 6.5.1 @dependabot[bot] (#350)
• Bump docker/metadata-action from 5.7.0 to 5.8.0 @dependabot[bot] (#348)
• Bump github/codeql-action from 3.29.4 to 3.29.5 @dependabot[bot] (#347)
• Bump github/codeql-action from 3.29.3 to 3.29.4 @dependabot[bot] (#343)
• Bump anchore/sbom-action from 0.20.2 to 0.20.4 @dependabot[bot] (#341)
• Bump anchore/scan-action from 6.4.0 to 6.5.0 @dependabot[bot] (#342)
• Bump super-linter/super-linter from 7.4.0 to 8.0.0 @dependabot[bot] (#338)
• Bump github/codeql-action from 3.29.2 to 3.29.3 @dependabot[bot] (#340)
• Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 @dependabot[bot] (#339)

🎉 Add a UBI 10 runner image 🎉

⚠️ Buuuuut, with one condition. Red Hat removed lttng-ust from the UBI CodeReady Builder repos. It's only available for subscribers ... fair, but definitely annoying. So this runner is using the Rocky 10 RPM for this one package instead. It's a hard dependency of the GitHub Actions runner agent.

Changes

• add ubi10 @some-natalie (#337)

Changes

• lots of version bumps @some-natalie (#336)
• ungroup dependabot @some-natalie (#323)

🧰 Maintenance

• Bump github/codeql-action from 3.28.19 to 3.29.2 @dependabot[bot] (#333)
• Bump anchore/scan-action from 6.2.0 to 6.4.0 @dependabot[bot] (#335)
• Bump actions/attest-build-provenance from 2.3.0 to 2.4.0 @dependabot[bot] (#328)
• Bump sigstore/cosign-installer from 3.8.2 to 3.9.1 @dependabot[bot] (#331)
• Bump anchore/sbom-action from 0.20.0 to 0.20.2 @dependabot[bot] (#334)
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 @dependabot[bot] (#329)
• Bump github/codeql-action from 3.28.18 to 3.28.19 in the actions group @dependabot[bot] (#319)
• Bump docker/build-push-action from 6.17.0 to 6.18.0 in the actions group @dependabot[bot] (#318)

Changes

of these, ubi9-init bumps to 9.6, which is probs the biggest change

• bump runner, compose, ubi9 @some-natalie (#316)
• bump docker, runner hooks @some-natalie (#302)

🧰 Maintenance

• Bump the actions group across 1 directory with 3 updates @dependabot[bot] (#315)
• Bump super-linter/super-linter from 7.3.0 to 7.4.0 in the actions group @dependabot[bot] (#313)
• Bump actions/setup-go from 5.4.0 to 5.5.0 in the actions group @dependabot[bot] (#312)
• Bump the actions group across 1 directory with 2 updates @dependabot[bot] (#310)
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 in the actions group @dependabot[bot] (#308)
• Bump the actions group across 1 directory with 5 updates @dependabot[bot] (#307)
• Bump actions/setup-node from 4.3.0 to 4.4.0 in the actions group @dependabot[bot] (#300)
• Bump github/codeql-action from 3.28.14 to 3.28.15 in the actions group @dependabot[bot] (#299)
• Bump github/codeql-action from 3.28.13 to 3.28.14 in the actions group @dependabot[bot] (#298)

Changes

• bump docker, runner, and actions-runner-controller @some-natalie (#297)
• fix the ubuntu runners with multi-arch docker

🧰 Maintenance

• Bump the actions group with 2 updates @dependabot[bot] (#295)
• Bump the actions group across 1 directory with 4 updates @dependabot[bot] (#294)

Changes

• move to pinned actions and group all dependabot prs @some-natalie (#291)
• try this change to deployments @some-natalie (#290)
• updates, move to arm64 for testing by default @some-natalie (#289)

Kind of embarrassed it took this long to move to a multi-stage build, but here we are. I wrote up more about the process if you want to do this to your own runners internally - https://some-natalie.dev/blog/squash-big-builds/

On these, it saves 5-20% on image size 🎉

And some dependencies got bumped too

Changes

• move everything to squash builds to save space @some-natalie (#286)

🧰 Maintenance

• bump deps @some-natalie (#288)
• bump docker, compose, clean scripts @some-natalie (#287)
• Bump anchore/scan-action from 5 to 6 @dependabot[bot] (#285)

Changes

• bump compose @some-natalie (#283)
• Pull arch-specific docker-compose in Ubuntu Dockerfiles @dszeto2 (#282)