feat(e2e): add plugin-name to e2e.yaml after plugin-e2e workflow update (PRI-944)

Passes headlamp-kube-vip as plugin-name input to the reusable plugin-e2e workflow which now requires it for ConfigMap naming. Co-Authored-By: Paperclip <noreply@paperclip.ing>
feat(workflows): add renovate-app-token reusable workflow for Mend Renovate (#43 )
2026-05-06 17:44:53 +00:00 · 2026-05-04 21:19:09 +00:00 · 2026-05-04 20:02:52 +00:00 · 2026-05-03 23:24:51 +00:00 · 2026-05-03 17:44:02 +00:00
4 changed files with 971 additions and 841 deletions
@@ -0,0 +1,24 @@
 name: E2E Tests
 on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:
 permissions:
  contents: read
 concurrency:
  group: e2e-${{ github.repository }}
  cancel-in-progress: false
 jobs:
  e2e:
    uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@hugh/add-pnpm-support-plugin-e2e
    with:
      node-version: '22'
      headlamp-version: v0.40.1
      e2e-namespace: headlamp-dev
      plugin-name: headlamp-kube-vip
@@ -0,0 +1,21 @@
 name: Mend Renovate GitHub App Token
 on:
  workflow_call:
    outputs:
      token:
        description: "Short-lived GitHub App installation token"
        value: ${{ jobs.app-token.outputs.token }}
 jobs:
  app-token:
    runs-on: runners-privilegedescalation
    outputs:
      token: ${{ steps.app-token.outputs.token }}
    steps:
      - name: Generate GitHub App token
        id: app-token
        uses: actions/create-github-app-token@v3
        with:
          app-id: ${{ secrets.RELEASE_APP_ID }}
          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
@@ -31,7 +31,9 @@
  },
  "overrides": {
    "tar": "^7.5.11",
-    "undici": "^7.24.3"
+    "undici": "^7.24.3",
    "lodash": ">=4.18.0",
    "vite": ">=6.4.2"
  },
  "devDependencies": {
    "@headlamp-k8s/eslint-config": "^0.6.0",
Author	SHA1	Message	Date
Chris Farhood	005793d644	feat(e2e): add plugin-name to e2e.yaml after plugin-e2e workflow update (PRI-944) Passes headlamp-kube-vip as plugin-name input to the reusable plugin-e2e workflow which now requires it for ConfigMap naming. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-06 17:44:53 +00:00
privilegedescalation-engineer[bot]	6459913304	feat(workflows): add renovate-app-token reusable workflow for Mend Renovate (#43 ) workflow_call reusable workflow that exposes a GitHub App installation token. Mend Renovate will use this token to push commits. Refs: PRI-413 Co-authored-by: Chris Farhood <chris@farhood.org>	2026-05-04 21:19:09 +00:00
privilegedescalation-engineer[bot]	d9fec8b93c	fix: add markdownlint config to resolve CI failures (#42 ) Co-authored-by: Chris Farhood <chris@farhood.org> Co-authored-by: Paperclip <noreply@paperclip.ing>	2026-05-04 20:02:52 +00:00
privilegedescalation-engineer[bot]	dd2d942d39	fix: override lodash >=4.18.0 to patch code injection vulnerability (#40 ) Defensive override floor for GHSA-r5fr-rjxr-66jc. Main already resolves lodash@4.18.1 transitively, so override prevents future regressions. CI green on `1d65d51`. Approved by CEO via admin override per stopgap during PRI-309 adapter outage.	2026-05-03 23:24:51 +00:00
privilegedescalation-engineer[bot]	8e9b2c2645	fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability (#39 ) Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via the Vite Dev Server WebSocket (server.fs.deny bypass with queries). CVE: GHSA-p9ff-h696-f583 Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-03 17:44:02 +00:00