Bump main

.github/dependabot.yml

@@ -51,7 +51,6 @@ updates:
 
       # runc/containerd
       - dependency-name: github.com/containerd/containerd
-      - dependency-name: github.com/opencontainers/runc
 
   - package-ecosystem: github-actions
     directory: /
@@ -62,6 +61,10 @@ updates:
     directory: /docs
     schedule:
       interval: daily
+    groups:
+      mkdocs:
+        patterns:
+          - "mkdocs*"
 
   - package-ecosystem: gomod
     directory: /hack/tool

.github/workflows/autopilot-branch-to-latest.yaml

@@ -30,8 +30,8 @@ on:
 
 env:
   TERRAFORM_VERSION: 1.3.3
-  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_TERRAFORM_ID }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_TERRAFORM_KEY }}
   AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }}
   TOOLSUITE_CIDR: 10.1.0.0/16
   TOOL_DATADIR: tooldata
@@ -45,7 +45,7 @@ jobs:
 
     steps:
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
         persist-credentials: false
@@ -60,7 +60,7 @@ jobs:
         docker save tool:latest | gzip > tool-latest.tar.gz
 
     - name: Cache Tool Image
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         key: tool-${{ github.sha }}-${{ github.run_id }}
         path: tool-latest.tar.gz
@@ -77,13 +77,13 @@ jobs:
 
     steps:
     - name: Setup Terraform
-      uses: hashicorp/setup-terraform@v2
+      uses: hashicorp/setup-terraform@v3
       with:
         terraform_wrapper: false
         terraform_version: ${{ env.TERRAFORM_VERSION }}
 
     - name: Cache Tool Image (restore)
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         key: tool-${{ github.sha }}-${{ github.run_id }}
         path: tool-latest.tar.gz
@@ -94,7 +94,7 @@ jobs:
         rm tool-latest.tar.gz
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
         persist-credentials: false
@@ -116,7 +116,7 @@ jobs:
         echo "vpcid=$(terraform output -raw vpc_id)" >> $GITHUB_OUTPUT
 
     - name: Cache Infrastructure Terraform
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         key: terraform-${{ github.sha }}-${{ github.run_id }}
         path: ${{ env.TOOL_DATADIR }}/terraform.tfstate
@@ -182,7 +182,7 @@ jobs:
 
     steps:
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
         persist-credentials: false
@@ -196,13 +196,13 @@ jobs:
         go-version: ${{ env.GO_VERSION }}
 
     - name: Setup Terraform
-      uses: hashicorp/setup-terraform@v2
+      uses: hashicorp/setup-terraform@v3
       with:
         terraform_wrapper: false
         terraform_version: ${{ env.TERRAFORM_VERSION }}
 
     - name: Cache Tool Image (restore)
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         key: tool-${{ github.sha }}-${{ github.run_id }}
         path: tool-latest.tar.gz
@@ -239,13 +239,13 @@ jobs:
 
     steps:
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
         persist-credentials: false
 
     - name: Cache Tool Image (restore)
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         key: tool-${{ github.sha }}-${{ github.run_id }}
         path: tool-latest.tar.gz
@@ -256,7 +256,7 @@ jobs:
         rm tool-latest.tar.gz
 
     - name: Cache Infrastructure Terraform (restore)
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         key: terraform-${{ github.sha }}-${{ github.run_id }}
         path: ${{ env.TOOL_DATADIR }}/terraform.tfstate

.github/workflows/backport.yaml

@@ -26,21 +26,18 @@ jobs:
       )
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # required to find all branches
           fetch-depth: 0
           token: ${{ secrets.GH_BACKPORT_TOKEN }}
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Create backport PRs
-        # should be kept in sync with `version`
-        uses: zeebe-io/backport-action@v1.4.0
+        uses: korthout/backport-action@v2.5.0
         with:
-          # Config README: https://github.com/zeebe-io/backport-action#backport-action
+          # Inputs documented here: https://github.com/korthout/backport-action?tab=readme-ov-file#inputs
           github_token: ${{ secrets.GH_BACKPORT_TOKEN }}
           github_workspace: ${{ github.workspace }}
-          # should be kept in sync with `uses`
-          version: v0.0.8
 
           # Regex pattern to match github labels
           # The capture group catches the target branch

.github/workflows/build-airgap-image-bundle.yml

@@ -15,34 +15,32 @@ on:
         description: The airgap image bundle's cache key.
         value: ${{ jobs.build.outputs.cache-key }}
 
+env:
+  MAKEFLAGS: -j
+
 jobs:
   build:
     name: "${{ inputs.target-os }}-${{ inputs.target-arch }}"
     runs-on: ubuntu-22.04
 
-    outputs:
-      cache-key: ${{ steps.cache-airgap-image-bundle-calc-key.outputs.cache-key }}
-
     env:
       TARGET_OS: ${{ inputs.target-os }}
       TARGET_ARCH: ${{ inputs.target-arch }}
 
     steps:
       - name: "Build :: Checkout"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: "Download :: Airgap image list"
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: airgap-image-list-${{ inputs.target-os }}-${{ inputs.target-arch }}
 
-        # Capture the calculated image bundle source hash in a build output, so
-        # it can be shared between the cache actions in this job and in the
-        # smoketests. Do this in a separate step, as the hashFiles function is
-        # evaluated before the step execution. So all the required files need to
-        # exist before that.
+        # Capture the calculated image bundle source hash in a separate step, as
+        # the hashFiles function is evaluated before the step execution. So all
+        # the required files need to exist before that.
       - name: "Cache :: Airgap image bundle :: Calculate cache key"
         id: cache-airgap-image-bundle-calc-key
         env:
@@ -52,15 +50,21 @@ jobs:
 
       - name: "Cache :: Airgap image bundle"
         id: cache-airgap-image-bundle
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           key: ${{ steps.cache-airgap-image-bundle-calc-key.outputs.cache-key }}
           path: airgap-image-bundle-${{ inputs.target-os }}-${{ inputs.target-arch }}.tar
-          lookup-only: true
 
       - name: "Build :: Airgap image bundle"
         if: steps.cache-airgap-image-bundle.outputs.cache-hit != 'true'
         run: |
           mkdir -p "embedded-bins/staging/$TARGET_OS/bin"
           make --touch airgap-images.txt
           make "airgap-image-bundle-$TARGET_OS-$TARGET_ARCH.tar"
+
+      - name: "Upload :: Airgap image bundle"
+        uses: actions/upload-artifact@v4
+        with:
+          name: airgap-image-bundle-${{ inputs.target-os }}-${{ inputs.target-arch }}
+          path: airgap-image-bundle-${{ inputs.target-os }}-${{ inputs.target-arch }}.tar
+          compression-level: 0

.github/workflows/build-docs.yml

@@ -8,21 +8,25 @@ on:
     paths:
       - mkdocs.yml
       - embedded-bins/Makefile.variables
+      - CODE_OF_CONDUCT.md
       - docs/**
 
+env:
+  MAKEFLAGS: -j
+
 jobs:
   build:
     name: Build docs
     runs-on: ubuntu-latest
     steps:
       - name: Checkout k0s
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Prepare build environment
         run: .github/workflows/prepare-build-env.sh
 
       - name: Set up Python ${{ env.PYTHON_VERSION }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ env.PYTHON_VERSION }}
           cache: pip
@@ -42,7 +46,7 @@ jobs:
         run: make -C docs docs
 
       - name: Upload site/
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: site
           path: site/
@@ -52,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout k0s
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Build docs dev container
         run: make -C docs .docker-image.serve-dev.stamp

.github/workflows/build-k0s.yml

@@ -12,6 +12,9 @@ on:
         required: true
         description: The architecture to build k0s for.
 
+env:
+  MAKEFLAGS: -j
+
 jobs:
   build:
     name: ${{ inputs.target-os }}-${{ inputs.target-arch }}
@@ -23,7 +26,7 @@ jobs:
 
     steps:
       - name: "Build :: Checkout"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0 # for `git describe`
           persist-credentials: false
@@ -34,13 +37,13 @@ jobs:
           .github/workflows/prepare-build-env.sh
 
           executableSuffix=''
-          if [ "TARGET_OS" = windows ]; then
+          if [ "$TARGET_OS" = windows ]; then
             executableSuffix=.exe
           fi
           echo executable-suffix="$executableSuffix" >>"$GITHUB_OUTPUT"
 
       - name: "Cache :: embedded binaries"
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           key: build-k0s-${{ inputs.target-os }}-${{ inputs.target-arch }}-embedded-bins-${{ hashFiles('embedded-bins/**/*') }}
           path: |
@@ -51,7 +54,7 @@ jobs:
             pkg/assets/zz_generated_offsets_${{ inputs.target-os }}.go
 
       - name: "Cache :: GOCACHE"
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           key: build-k0s-${{ inputs.target-os }}-${{ inputs.target-arch }}-gocache-${{ github.ref_name }}-${{ github.sha }}
           restore-keys: |
@@ -60,7 +63,7 @@ jobs:
             build/cache/go/build
 
       - name: "Cache :: GOMODCACHE"
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           key: build-k0s-${{ inputs.target-os }}-${{ inputs.target-arch }}-gomodcache-${{ hashFiles('go.sum') }}
           path: |
@@ -71,22 +74,22 @@ jobs:
           make bindata
           make --touch codegen
           make build
+          echo "k0s${{ steps.build-prepare.outputs.executable-suffix }} binary size: **$(du -sh k0s${{ steps.build-prepare.outputs.executable-suffix }} | cut -f1)**" >>$GITHUB_STEP_SUMMARY
 
       - name: "Upload :: k0s"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: k0s-${{ inputs.target-os }}-${{ inputs.target-arch }}
           path: |
             k0s${{ steps.build-prepare.outputs.executable-suffix }}
-            k0s${{ steps.build-prepare.outputs.executable-suffix }}[.]exe
 
       - name: "Build :: Airgap image list"
         if: inputs.target-os != 'windows'
         run: make airgap-images.txt && cat airgap-images.txt
 
       - name: "Upload :: Airgap image list"
         if: inputs.target-os != 'windows'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: airgap-image-list-${{ inputs.target-os }}-${{ inputs.target-arch }}
           path: airgap-images.txt