v0.75.0

Description

This release introduces a major improvement when interacting with Git repositories.
By default, Updatecli now automatically recreate "working" branch if their base branch diverges.
It relies on the scm option force to enable/disable this behavior.

So, If a target relies on a scm configuration with the setting "force" set to "true" like in the following example:

pipelineid: example
scms:
    default:
        kind: github
        spec:
            branch: 'main'
            email: 'alice@foo.bar'
            owner: 'updatecli-test'
            repository: 'updatecli'
            token: '{{ requiredEnv "GITHUB_TOKEN" }}'
            user: 'updateclibot'
            username: 'alice'
            # force allows recreating the working branch
            # and to force push the changes by running
            # git push --force
            force: true
        disabled: false

Then Updatecli creates a working branch named "updatecli_main_example" based on the branch "main"
and each time the branch "main" is modified, Updatecli recreates the working branch "updatecli_main_example".
The setting "force" allows Updatecli to recreate the working branch and to run "git push --force" operation.

As a reminder, it's always a good practice to have branch protection in place to protect sensitive branches.

The scm git plugin has force set to false by default because it doesn't use working branch by default.
The scm plugin github,gitlab,stash, and gitea use force set to true by default as they all use working branch by default.

Changes

• clean: migrate some updatecli pipeline to update-compose.yaml @olblak (#2011)

🚀 Features

• feat: By default scm github/gitlab/stash/gitea uses force push @olblak (#2026)
• chore: show extra warning for git scm @olblak (#2025)
• feat: close GitHub pullrequest when no file changed @olblak (#2021)
• Allow to recreate working branch based on their "base" branch @olblak (#2018)

🧰 Maintenance

• deps: bump golangci-lint to v1.57.2 @updateclibot (#2017)
• chore(deps): Bump actions/add-to-project from 0.6.1 to 1.0.0 @dependabot (#2009)
• chore(deps): Bump anchore/sbom-action from 0.15.9 to 0.15.10 @dependabot (#2010)
• deps(go): bump module github.com/aws/aws-sdk-go @updateclibot (#1996)
• chore(deps): Bump anchore/sbom-action from 0.15.8 to 0.15.9 @dependabot (#1978)
• chore(deps): Bump actions/add-to-project from 0.6.0 to 0.6.1 @dependabot (#1997)
• deps(go): bump module helm.sh/helm/v3 @updateclibot (#2001)
• deps(go): bump module oras.land/oras-go/v2 @updateclibot (#2002)
• chore(deps): Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible @dependabot (#1998)
• deps(go): bump module github.com/google/go-containerregistry @updateclibot (#2003)
• deps(go): bump module github.com/drone/go-scm @updateclibot (#2004)
• chore(deps): Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 @dependabot (#1994)
• deps(go): bump module github.com/zclconf/go-cty @updateclibot (#2006)
• deps(go): bump module github.com/zclconf/go-cty @updateclibot (#1986)
• deps(go): bump module github.com/opencontainers/image-spec @updateclibot (#1987)
• deps(go): bump module github.com/goccy/go-yaml @updateclibot (#1988)
• deps(go): bump module github.com/aws/aws-sdk-go @updateclibot (#1990)
• deps(go): bump module golang.org/x/mod @updateclibot (#1991)
• chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 @dependabot (#1983)

Contributors

@dependabot, @dependabot[bot], @olblak, @updateclibot and @updateclibot[bot]

Download