v0.19.0 - the one with many little version bumps

Changes

of these, ubi9-init bumps to 9.6, which is probs the biggest change

• bump runner, compose, ubi9 @some-natalie (#316)
• bump docker, runner hooks @some-natalie (#302)

🧰 Maintenance

• Bump the actions group across 1 directory with 3 updates @dependabot[bot] (#315)
• Bump super-linter/super-linter from 7.3.0 to 7.4.0 in the actions group @dependabot[bot] (#313)
• Bump actions/setup-go from 5.4.0 to 5.5.0 in the actions group @dependabot[bot] (#312)
• Bump the actions group across 1 directory with 2 updates @dependabot[bot] (#310)
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 in the actions group @dependabot[bot] (#308)
• Bump the actions group across 1 directory with 5 updates @dependabot[bot] (#307)
• Bump actions/setup-node from 4.3.0 to 4.4.0 in the actions group @dependabot[bot] (#300)
• Bump github/codeql-action from 3.28.14 to 3.28.15 in the actions group @dependabot[bot] (#299)
• Bump github/codeql-action from 3.28.13 to 3.28.14 in the actions group @dependabot[bot] (#298)

v0.18.0

Changes

• bump docker, runner, and actions-runner-controller @some-natalie (#297)
• fix the ubuntu runners with multi-arch docker

🧰 Maintenance

• Bump the actions group with 2 updates @dependabot[bot] (#295)
• Bump the actions group across 1 directory with 4 updates @dependabot[bot] (#294)

v0.17.0 - pinning dependencies like a responsible adult

Changes

• move to pinned actions and group all dependabot prs @some-natalie (#291)
• try this change to deployments @some-natalie (#290)
• updates, move to arm64 for testing by default @some-natalie (#289)

v0.16.0 - now with an extra build stage to save space

Kind of embarrassed it took this long to move to a multi-stage build, but here we are. I wrote up more about the process if you want to do this to your own runners internally - https://some-natalie.dev/blog/squash-big-builds/

On these, it saves 5-20% on image size 🎉

And some dependencies got bumped too

Changes

• move everything to squash builds to save space @some-natalie (#286)

🧰 Maintenance

• bump deps @some-natalie (#288)
• bump docker, compose, clean scripts @some-natalie (#287)
• Bump anchore/scan-action from 5 to 6 @dependabot[bot] (#285)

v0.15.1

Changes

• bump compose @some-natalie (#283)
• Pull arch-specific docker-compose in Ubuntu Dockerfiles @dszeto2 (#282)

v0.15.0 - add sigstore signing of all images, auto-updating vulnerability summary, and many dependabot bumps

Changes

• add another matrix dimension to container hooks @some-natalie (#281)
• container scaling test uses multiple containers on same runner set @some-natalie (#280)
• bump runner and fix linter nags @some-natalie (#279)
• bump runner to 2.321.0 @some-natalie (#277)
• bump deps @some-natalie (#276)
• try this to push all tags @some-natalie (#272)
• dependency bumps @some-natalie (#269)
• bump deps @some-natalie (#268)
• the better way to dismiss alerts on other architectures @some-natalie (#267)
• only scan on one architecture to dedupe results @some-natalie (#266)
• bump docker and compose @some-natalie (#265)
• readme update script to include architectures @some-natalie (#264)
• bump runner @some-natalie (#262)
• bump runner to 2.319.0 @some-natalie (#261)
• bump dependencies @some-natalie (#259)
• bump docker @some-natalie (#257)

🧰 Maintenance

• Bump anchore/scan-action from 4 to 5 @dependabot (#270)
• Bump super-linter/super-linter from 6 to 7 @dependabot (#263)
• Bump anchore/scan-action from 3 to 4 @dependabot (#258)

v0.14.0

What's Changed

The images build themselves on latest once a week. Then the readme file updates itself based on CVE scan results.

Add Ubuntu 24.04 LTS.

Bump deps.

Full Changelog: v0.13.4...v0.14.0

v0.13.4

Changes

Cutting a release to rebuild, but also to see what the new build summary is looking like

🧰 Maintenance

• Bump docker/build-push-action from 5 to 6 @dependabot (#252)

v0.13.3 - now with better sbom naming, i think

Changes

• update sbom action and test deployments @some-natalie (#251)

v0.13.2

Changes

• bump arc to 0.9.2, ubi9 to 9.4, docker too @some-natalie (#250)