feat(e2e): add plugin-name to e2e.yaml after plugin-e2e workflow update (PRI-944)

Passes headlamp-kube-vip as plugin-name input to the reusable plugin-e2e workflow which now requires it for ConfigMap naming. Co-Authored-By: Paperclip <noreply@paperclip.ing>
feat(workflows): add renovate-app-token reusable workflow for Mend Renovate (#43 )
2026-05-06 17:44:53 +00:00 · 2026-05-04 21:19:09 +00:00 · 2026-05-04 20:02:52 +00:00 · 2026-05-03 23:24:51 +00:00 · 2026-05-03 17:44:02 +00:00
4 changed files with 971 additions and 841 deletions
@@ -0,0 +1,24 @@
+name: E2E Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: e2e-${{ github.repository }}
+  cancel-in-progress: false
+
+jobs:
+  e2e:
+    uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@hugh/add-pnpm-support-plugin-e2e
+    with:
+      node-version: '22'
+      headlamp-version: v0.40.1
+      e2e-namespace: headlamp-dev
+      plugin-name: headlamp-kube-vip
@@ -0,0 +1,21 @@
+name: Mend Renovate GitHub App Token
+
+on:
+  workflow_call:
+    outputs:
+      token:
+        description: "Short-lived GitHub App installation token"
+        value: ${{ jobs.app-token.outputs.token }}
+
+jobs:
+  app-token:
+    runs-on: runners-privilegedescalation
+    outputs:
+      token: ${{ steps.app-token.outputs.token }}
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
@@ -31,7 +31,9 @@
  },
  "overrides": {
    "tar": "^7.5.11",
-    "undici": "^7.24.3"
+    "undici": "^7.24.3",
+    "lodash": ">=4.18.0",
+    "vite": ">=6.4.2"
  },
  "devDependencies": {
    "@headlamp-k8s/eslint-config": "^0.6.0",
Author	SHA1	Message	Date
Chris Farhood	005793d644	feat(e2e): add plugin-name to e2e.yaml after plugin-e2e workflow update (PRI-944) Passes headlamp-kube-vip as plugin-name input to the reusable plugin-e2e workflow which now requires it for ConfigMap naming. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-06 17:44:53 +00:00
privilegedescalation-engineer[bot]	6459913304	feat(workflows): add renovate-app-token reusable workflow for Mend Renovate (#43 ) workflow_call reusable workflow that exposes a GitHub App installation token. Mend Renovate will use this token to push commits. Refs: PRI-413 Co-authored-by: Chris Farhood <chris@farhood.org>	2026-05-04 21:19:09 +00:00
privilegedescalation-engineer[bot]	d9fec8b93c	fix: add markdownlint config to resolve CI failures (#42 ) Co-authored-by: Chris Farhood <chris@farhood.org> Co-authored-by: Paperclip <noreply@paperclip.ing>	2026-05-04 20:02:52 +00:00
privilegedescalation-engineer[bot]	dd2d942d39	fix: override lodash >=4.18.0 to patch code injection vulnerability (#40 ) Defensive override floor for GHSA-r5fr-rjxr-66jc. Main already resolves lodash@4.18.1 transitively, so override prevents future regressions. CI green on `1d65d51`. Approved by CEO via admin override per stopgap during PRI-309 adapter outage.	2026-05-03 23:24:51 +00:00
privilegedescalation-engineer[bot]	8e9b2c2645	fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability (#39 ) Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via the Vite Dev Server WebSocket (server.fs.deny bypass with queries). CVE: GHSA-p9ff-h696-f583 Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-03 17:44:02 +00:00