-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Prepare 16.3 #4378
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Prepare 16.3 #4378
Changes from all commits
Commits
Show all changes
41 commits
Select commit
Hold shift + click to select a range
44108a5
Bump OS to development version 16.3.dev0
sairon 78bda4b
Fix broken outgoing connections caused by upstream kernel regression …
sairon 700ff77
Linux: Update kernel to 6.12.44 (#4268)
sairon 8f22412
Revert "Revert kernel patch breaking 6.12.43 build for Tinker (#4257)…
sairon 39ff011
Merge branch 'main' into dev
sairon 8bd5236
Bump actions/stale from 9.1.0 to 10.0.0 (#4283)
dependabot[bot] 36b9606
Bump actions/setup-python from 5 to 6 (#4284)
dependabot[bot] 837baa2
Bump actions/github-script from 7 to 8 (#4285)
dependabot[bot] 3dcf6bd
Enable Pressure Stall Information PSI (#4279)
ajfriesen 9a1e001
Linux: Update kernel to 6.12.45 (#4287)
sairon 0e3fd2c
Start Supervisor container with its cidfile mounted to /run/cid (#4276)
sairon 3c321a8
Linux: Update kernel to 6.12.46 (#4293)
sairon 0e09f22
Implement better support for --silent flag in top-level Makefile (#4292)
sairon 2951f96
Bump Buildroot to 2025.02.6 (#4297)
sairon dc0da1b
Update HOME_URL in os-release metadata (#4299)
sairon e15d99b
Enable HID multitouch support in kernel (#4298)
puterboy ef45889
Pin SHA for all Github Actions (#4305)
silamon c95fd97
Linux: Update kernel to 6.12.47 (#4307)
sairon 510395f
Support Chelsio T4/T5/T6 VF in SRIOV mode (#4281)
servesh c70b528
Linux: Update kernel to 6.12.49 (#4320)
sairon 435714c
Bump actions/cache from 4.2.4 to 4.3.0 (#4323)
dependabot[bot] 342f931
Bump docker/login-action from 3.5.0 to 3.6.0 (#4322)
dependabot[bot] fb52fc9
Update "Supported hardware" section of the readme (#4321)
sairon cb66fa8
Fix build failure caused by RaspberryMatic project renaming (#4324)
sairon 95b1d22
RaspberryPi: Update kernel to 6.12.47 - stable_20250916 (#4327)
sairon bde1900
Improve UX of HA CLI wrapper and emergency console (#4326)
sairon 1c90d4b
Linux: Update kernel to 6.12.50 (#4330)
sairon 4a76a65
Use original hadolint action instead of outdated fork (#4332)
sairon 3e771eb
Add driver for Creative Sound Blastr X-Fi PCI cards (#4331)
sairon 58c4075
Bump actions/stale from 10.0.0 to 10.1.0 (#4338)
dependabot[bot] f9f6c9f
Linux: Update kernel to 6.12.51 (#4343)
sairon 92cb987
Enable powersave CPU frequency governor (#4346)
agners 7005ede
Bump rpi-rf-mod dt overlay to latest version (1.13.3) (#4349)
jens-maus 2e48a0a
Enable x2APIC controller support on x86 and OVA (#4342)
sairon daa6a7c
Use matching version of DinD daemon when creating hassio data partiti…
sairon 1e24b8e
Bump buildroot to 2024.02.7 (#4351)
sairon 92c1bc1
Bump OS to pre-release version 16.3.rc1
sairon 25c082f
Disable UAS via usb-storage.quirks on RPi for JMicron JMS583Gen 2 to …
vichle 3cdb465
Fix Docker issue that could cause slow system startup (#4369)
sairon eef2987
Remove usage of --content-trust CLI option in Supervisor tests (#4371)
sairon bd5ea37
Bump OS to release version 16.3
sairon File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -55,7 +55,7 @@ jobs: | |
| self_signed_cert: ${{ steps.generate_signing_key.outputs.self_signed_cert }} | ||
| steps: | ||
| - name: Checkout source | ||
| uses: actions/checkout@v5 | ||
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| with: | ||
| persist-credentials: false | ||
|
|
||
|
|
@@ -147,7 +147,7 @@ jobs: | |
| fi | ||
|
|
||
| - name: Create build matrix | ||
| uses: actions/github-script@v7 | ||
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | ||
| id: generate_matrix | ||
| with: | ||
| script: | | ||
|
|
@@ -177,15 +177,15 @@ jobs: | |
| } | ||
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/[email protected] | ||
| uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 | ||
| - name: Log in to the GitHub container registry | ||
| uses: docker/login-action@v3.5.0 | ||
| uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 | ||
| with: | ||
| registry: ghcr.io | ||
| username: ${{ github.repository_owner }} | ||
| password: ${{ secrets.GITHUB_TOKEN }} | ||
| - name: Build and Push | ||
| uses: docker/[email protected] | ||
| uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 | ||
| id: build_haos_builder | ||
| with: | ||
| context: . | ||
|
|
@@ -207,7 +207,7 @@ jobs: | |
| echo "self_signed_cert=true" >> $GITHUB_OUTPUT | ||
|
|
||
| - name: Create signing key | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: steps.generate_signing_key.outcome == 'success' | ||
| with: | ||
| name: signing-key | ||
|
|
@@ -227,14 +227,14 @@ jobs: | |
|
|
||
| steps: | ||
| - name: Checkout source | ||
| uses: actions/checkout@v5 | ||
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| with: | ||
| submodules: true | ||
| persist-credentials: false | ||
|
|
||
| - name: Setup Python version ${{ env.PYTHON_VERSION }} | ||
| if: ${{ github.event_name != 'release' }} | ||
| uses: actions/setup-python@v5 | ||
| uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 | ||
| with: | ||
| python-version: ${{ env.PYTHON_VERSION }} | ||
|
|
||
|
|
@@ -260,7 +260,7 @@ jobs: | |
|
|
||
| - name: Get self-signed certificate from the prepare job | ||
| if: ${{ needs.prepare.outputs.self_signed_cert == 'true' }} | ||
| uses: actions/download-artifact@v5 | ||
| uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 | ||
| with: | ||
| name: signing-key | ||
|
|
||
|
|
@@ -281,7 +281,7 @@ jobs: | |
| df -h | ||
|
|
||
| - name: "Restore cache: object files" | ||
| uses: actions/cache/restore@v4 | ||
| uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | ||
| with: | ||
| path: /mnt/cache/cc | ||
| key: haos-cc-${{ matrix.board.id }} | ||
|
|
@@ -329,7 +329,7 @@ jobs: | |
|
|
||
| - name: Upload release assets | ||
| if: ${{ github.event_name == 'release' }} | ||
| uses: shogo82148/actions-upload-release-asset@v1 | ||
| uses: shogo82148/actions-upload-release-asset@59cbc563d11314e48122193f8fe5cdda62ea6cf9 # v1.9.1 | ||
| with: | ||
| upload_url: ${{ github.event.release.upload_url }} | ||
| asset_path: output/images/haos_* | ||
|
|
@@ -344,7 +344,7 @@ jobs: | |
|
|
||
| - name: "Save cache: object files" | ||
| if: github.ref == 'refs/heads/dev' | ||
| uses: actions/cache/save@v4 | ||
| uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | ||
| with: | ||
| path: /mnt/cache/cc | ||
| key: haos-cc-${{ matrix.board.id }}-${{ github.run_id }} | ||
|
|
@@ -378,31 +378,31 @@ jobs: | |
| done | ||
|
|
||
| - name: Upload OS image artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: ${{ github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' && matrix.board.id != 'ova' }} | ||
| with: | ||
| name: haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.img.xz | ||
| path: | | ||
| output/images/haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.img.xz | ||
|
|
||
| - name: Upload RAUC bundle artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: ${{ github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' }} | ||
| with: | ||
| name: haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.raucb | ||
| path: | | ||
| output/images/haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.raucb | ||
|
|
||
| - name: Upload Open Virtualization Format (OVA) artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: ${{ github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' && matrix.board.id == 'ova' }} | ||
| with: | ||
| name: haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.ova | ||
| path: | | ||
| output/images/haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.ova | ||
|
|
||
| - name: Upload QEMU disk image artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| # Create artifact for ova every time - it's used by the called tests workflow | ||
| if: ${{ matrix.board.id == 'ova' || (github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' && matrix.board.id == 'generic-aarch64') }} | ||
| with: | ||
|
|
@@ -411,23 +411,23 @@ jobs: | |
| output/images/haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.qcow2.xz | ||
|
|
||
| - name: Upload VMware Virtual Machine Disk (VMDK) artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: ${{ github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' && (matrix.board.id == 'generic-aarch64' || matrix.board.id == 'ova') }} | ||
| with: | ||
| name: haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.vmdk.zip | ||
| path: | | ||
| output/images/haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.vmdk.zip | ||
|
|
||
| - name: Upload VirtualBox Virtual Disk Image (VDI) artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: ${{ github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' && matrix.board.id == 'ova' }} | ||
| with: | ||
| name: haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.vdi.zip | ||
| path: | | ||
| output/images/haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.vdi.zip | ||
|
|
||
| - name: Upload Virtual Hard Disk v2 (VHDX) artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | ||
| if: ${{ github.event_name != 'release' && needs.prepare.outputs.publish_build != 'true' && matrix.board.id == 'ova' }} | ||
| with: | ||
| name: haos_${{ matrix.board.id }}-${{ needs.prepare.outputs.version_full }}.vhdx.zip | ||
|
|
@@ -466,7 +466,7 @@ jobs: | |
|
|
||
| steps: | ||
| - name: Checkout source | ||
| uses: actions/checkout@v5 | ||
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| with: | ||
| persist-credentials: false | ||
|
|
||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -14,4 +14,4 @@ jobs: | |
| action: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: dessant/[email protected] | ||
| - uses: dessant/label-actions@102faf474a544be75fbaf4df54e73d3c515a0e65 # v4.0.1 | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -14,7 +14,7 @@ jobs: | |
| if: github.repository_owner == 'home-assistant' | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: dessant/[email protected] | ||
| - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1 | ||
| with: | ||
| github-token: ${{ github.token }} | ||
| issue-inactive-days: "30" | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -15,17 +15,17 @@ jobs: | |
| python3-flake8 | ||
|
|
||
| - name: Check out code | ||
| uses: actions/checkout@v5 | ||
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| with: | ||
| submodules: true | ||
|
|
||
| - name: Check Dockerfile | ||
| uses: brpaz/hadolint-action@v1.5.0 | ||
| uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 | ||
| with: | ||
| dockerfile: Dockerfile | ||
|
|
||
| - name: Check shell scripts | ||
| uses: ludeeus/[email protected] | ||
| uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0 | ||
| with: | ||
| ignore_paths: buildroot | ||
|
|
||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🧩 Analysis chain
LGTM! Pinning action to commit SHA enhances security.
Pinning GitHub Actions to specific commit SHAs prevents tag-based supply chain attacks and ensures reproducible builds.
Optionally verify the SHA corresponds to v6.1.0:
🏁 Script executed:
Length of output: 40
I found a discrepancy. Let me verify what version the pinned SHA actually corresponds to:
Let me search for the release history to find what version that commit belongs to:
Let me query the GitHub API to find all releases and match the SHA:
Length of output: 444
Let me query for the actual commit SHAs for these tags:
Length of output: 147
Let me search through more tags to find which one actually corresponds to the workflow SHA:
Length of output: 44
Update inline comment: SHA corresponds to v6, not v6.1.0.
Verification revealed the pinned SHA
b1476f6e6eb133afa41ed8589daba6dc69b4d3f5corresponds to thev6tag, notv6.1.0as indicated in the comment. The actual v6.1.0 SHA is7cf306f56b79636bb76931494ccf29fc893763bd. Either update the comment to reflectv6, or pin to the correct v6.1.0 SHA instead.