Commit Graph

632 Commits (e16087fab426e1edbc1a3ea8a75ce7e0ee76a4e4)

Author SHA1 Message Date
Jason Ish e979f6d523 rust: inherit common package metadata from workspace 4 days ago
Philippe Antoine 3da75f1385 ci: add new suricata-verify replay step to xdp build
so as to run ebpf replay tests
4 days ago
Samaresh Kumar Singh 73095bb089 github-ci: run netmap unit tests
Build the netmap job with unittests and run the netmap tests so the
multi-slot packet handling stays covered.

Ticket: #8777
4 days ago
Lukas Sismis 3a6ecab098 github-ci: add OpenBSD 7.9 build
Ticket: 8975
3 weeks ago
Lukas Sismis 9d88976dfa ci: migrate to FreeBSD 15.1
As FreeBSD 15.0 hit EOL, Rust dependencies started to fail.
Upgrading to 15.1 to move from EOL release.

Ticket: 9172
3 weeks ago
Philippe Antoine 49aefe7093 ci: check for enum integer keywords
And generic documentation about it

Ticket: 8675
3 weeks ago
Victor Julien 178ff02750 ci: bump RUST_VERSION_KNOWN to 1.99.0
Rust 1.99 has been released. With its clippy fallout addressed, move
the pinned build/test/verify toolchain to it.
3 weeks ago
dependabot[bot] 64bd29d952 github-actions: bump codecov/codecov-action from 7.0.0 to 7.1.1
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.0.0 to 7.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](fb8b3582c8...303a32d7a5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
dependabot[bot] fa09a2b69f github-actions: bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from a0c73122a6231d3a72b4b04036548af1cd2487c9 to 61817fadad823920a8924645dd5f67985d6a1d94.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](a0c73122a6...61817fadad)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 61817fadad823920a8924645dd5f67985d6a1d94
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
dependabot[bot] bc06108376 github-actions: bump vmactions/freebsd-vm from 1.5.5 to 1.5.8
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) from 1.5.5 to 1.5.8.
- [Release notes](https://github.com/vmactions/freebsd-vm/releases)
- [Commits](f0552d3b69...a2f9a41fa9)

---
updated-dependencies:
- dependency-name: vmactions/freebsd-vm
  dependency-version: 1.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
dependabot[bot] 81d2423f02 github-actions: bump github/codeql-action from 4.37.9 to 4.38.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.9 to 4.38.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.37.9...v4.38.2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
Lukas Sismis 8c62c0e6a9 github-ci: fail the prep stage when the description cannot be read
Previously, on request failure, the prep stage fall-backed to the
default upstream branches of SV/SU due to not finding the PR body
in the error message.

This commit changes the behavior to fail the prep stage when
the description cannot be read.
4 weeks ago
Lukas Sismis a6b9d0a8ec github-ci: authenticate the pull request body fetch
Unauthenticated calls to api.github.com are limited to 60 requests per
hour, counted against the originating IP address. A GitHub-hosted
runner's egress IP is shared with jobs from unrelated repositories, so
that allowance is non-deterministic.

By authenticating the request with github.token we increase the limit
to 1000+ requests per hour counted against this repository.
4 weeks ago
Jason Ish b8cc4be978 github-ci: add live testing to xdp build 1 month ago
Jason Ish 1965e15152 github-ci: test live tests
- Adds podman, and other tools as needed.
- Upload live testing failure logs
- Suppress leak detection, there are leaks here
1 month ago
Jason Ish 39828e1587 github-ci: factor FreeBSD build into reusable script 1 month ago
Jason Ish fc70f8e788 github-ci: factor out scan-build to a script
So the main part of the build can be used by other CI.
1 month ago
Jason Ish 2147b8f51c github-ci: add build with asan instrumented rust
Factor out most of the testing to a script in hopes that it can be
re-used by other CI systems.
1 month ago
Jason Ish 516636f26d github-ci: remove jq from mingw builds
It has been dropped from that platform.
1 month ago
Juliana Fajardini 1283580858 github-ci: skip format check on stable branches
Ticket: #9097
1 month ago
Philippe Antoine 02f79c0451 ci: exclude rust crates from scan-build 1 month ago
Victor Julien 8e4d49df0d github-ci: remove Debian 11 build; Debian 11 is EOL 2 months ago
dependabot[bot] b8084b37cb github-actions: bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 1cd4d01d58f636bbdbffbfd3c121b3446d07e9f3 to a0c73122a6231d3a72b4b04036548af1cd2487c9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1cd4d01d58...a0c73122a6)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: a0c73122a6231d3a72b4b04036548af1cd2487c9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot] ba10f5177d github-actions: bump github/codeql-action from 4.37.3 to 4.37.9
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.3 to 4.37.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.37.9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot] 28bcc96fe5 github-actions: bump vmactions/freebsd-vm from 1.5.2 to 1.5.5
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) from 1.5.2 to 1.5.5.
- [Release notes](https://github.com/vmactions/freebsd-vm/releases)
- [Commits](77ed28d336...f0552d3b69)

---
updated-dependencies:
- dependency-name: vmactions/freebsd-vm
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Jason Ish acd9d3a09e github-ci: update rust known version to 1.98.0 2 months ago
Jason Ish 9a2b700471 github-ci: run dist in rust-vars job 2 months ago
Jason Ish df58deac96 github-ci: update rust-vars job to rust 1.85 2 months ago
Jason Ish 6af3bf93f3 github-ci/builds: update ubuntu builds to rust 1.89 2 months ago
Jason Ish 0b86dce1f1 github-ci/docs: use rust 1.89 2 months ago
Jason Ish b639fb0d67 github-ci/commits: update to ubuntu 24.04; rust 1.89 2 months ago
Jason Ish bd522291cf github-ci/formatting: update to rust 1.89 2 months ago
Jason Ish bc868647fe github-ci/nix: update to nixos-25.11
To pick up a newer version of Rust.
2 months ago
Jason Ish eb887f00dc github-ci: update rust vars job to rust 1.85 2 months ago
Jason Ish 6b8c482012 github-ci: break ubuntu/debian script into 2 scripts
Debian 13 ships Rust 1.85 by default, Ubuntu requires installing a
specific patch to get newer then 1.75. So to support a newer MSRV,
these operating systems need different examples.
2 months ago
Jason Ish 05882e7be0 github-ci: cleanups to almalinux minimal build
Don't install extra repo's in the script, do it in CI. These are covered
by the documentation as they vary depending on the version and variant.
2 months ago
Jason Ish 7827f357b5 github-ci: suppress RUSTSEC-2026-0253
RUSTSEC-2026-0253 in the lru crate requires that items we put in the
lru have a drop implementation that may panic, and we catch
that panic. The current items we put in the lru cache do not have a drop
implementation, and we treat panic's as fatal so will not run into the
issue presented in RUSTSEC-2026-0253.
3 months ago
dependabot[bot] 060808f36e github-actions: bump ossf/scorecard-action from 2.4.3 to 2.4.4
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](4eaacf0543...2d1146689b)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot] 279317327c github-actions: bump github/codeql-action from 4.36.2 to 4.37.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.2 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.36.2...v4.37.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot] c6164c6ef1 github-actions: bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 1f34ec16430d82636d18716acc7aaa6d843b35a9 to 1cd4d01d58f636bbdbffbfd3c121b3446d07e9f3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1f34ec1643...1cd4d01d58)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 1cd4d01d58f636bbdbffbfd3c121b3446d07e9f3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot] bc04ca0f00 github-actions: bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot] 050290b636 github-actions: bump vmactions/freebsd-vm from 1.5.0 to 1.5.2
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/vmactions/freebsd-vm/releases)
- [Commits](5a72679103...77ed28d336)

---
updated-dependencies:
- dependency-name: vmactions/freebsd-vm
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
Jason Ish b364f28387 github-ci: update RUST_VERSION_KNOWN
To 1.97 as that is where we are clippy clean to.
4 months ago
Jason Ish 40503f6602 github-ci: fix new authors check
Shortly after minimizing the new authors check to one workflow, github
released an action update that required more permissions due to an
attack scenario, which didn't really apply to us as we didn't run code
from the remotes fork.

However, to avoid extending permissions, rework the authors check to
pull the OISF repo, checkout the PR fork as history, then do the new
authors check. This safely allows the check to run in the context of our
repo without the fork being able to inject code execution.
4 months ago
dependabot[bot] 6cbf511f65 github-actions: bump github/codeql-action/upload-sarif
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from eda5730a8bfb740e03a28087a958444c646e5842 to 1f34ec16430d82636d18716acc7aaa6d843b35a9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](eda5730a8b...1f34ec1643)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 1f34ec16430d82636d18716acc7aaa6d843b35a9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot] 8002b59993 github-actions: bump actions/checkout from 6.0.2 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot] 0a2b024317 github-actions: bump vmactions/freebsd-vm from 1.4.6 to 1.5.0
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) from 1.4.6 to 1.5.0.
- [Release notes](https://github.com/vmactions/freebsd-vm/releases)
- [Commits](a6de9343ef...5a72679103)

---
updated-dependencies:
- dependency-name: vmactions/freebsd-vm
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot] 7a419071c8 github-actions: bump actions/cache from 5 to 6
Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Lukas Sismis 376db8fc6b ci: upgrade FreeBSD Python package to 3.12
FreeBSD upgraded the default Python package to 3.12.
With that the pip packages also updated to the new
version.
4 months ago
Philippe Antoine 399ee1e360 ci: check multi uint keywords
Ticket: 7929
4 months ago