Merge branch 'main' into drop-kernel-signer

.github/renovate.json5

@@ -4,6 +4,9 @@
     "config:best-practices",
   ],
 
+  // Do not rebase when the default branch is updated
+  "rebaseWhen": "never",
+
   "packageRules": [
     {
       "automerge": true,

.github/workflows/build-bluefin-stable-iso.yml

@@ -0,0 +1,15 @@
+name: Bluefin Stable ISO Build
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '41 6 * * 2'  # 6:41 UTC every Tuesday
+
+
+jobs:
+  build-latest:
+    name: Bluefin Stable
+    uses: ./.github/workflows/reusable-build-iso.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: stable

.github/workflows/build-coreos-aurora.yml

@@ -0,0 +1,28 @@
+name: aurora coreos
+on:
+  merge_group:
+  pull_request:
+    branches:
+      - main
+      - testing
+    paths-ignore:
+      - '**.md'
+      - 'system_files/bluefin/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'system_files/bluefin/**'
+  schedule:
+    - cron: '41 5 * * *'  # 5:41 UTC everyday
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: build
+    uses: ./.github/workflows/reusable-build.yml
+    secrets: inherit
+    with:
+      brand_name: aurora
+      fedora_version: stable

.github/workflows/build-coreos-bluefin.yml

@@ -0,0 +1,28 @@
+name: bluefin coreos
+on:
+  merge_group:
+  pull_request:
+    branches:
+      - main
+      - testing
+    paths-ignore:
+      - '**.md'
+      - 'system_files/kinoite/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'system_files/kinoite/**'
+  schedule:
+    - cron: '41 5 * * *'  # 5:41 UTC everyday
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: build
+    uses: ./.github/workflows/reusable-build.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: stable

.github/workflows/generate_changelog.yml

@@ -15,7 +15,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v4
+      - uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4
         id: release-please
         with:
           release-type: simple

.github/workflows/reusable-build-iso.yml

@@ -49,10 +49,10 @@ jobs:
 
     steps:
       - name: Free Disk Space (Ubuntu)
-        uses: jlumbroso/free-disk-space@v1.3.1
+        uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
 
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Matrix Variables
         run: |
@@ -170,7 +170,7 @@ jobs:
       - name: Upload ISOs and Checksum to Job Artifacts
         if: github.ref_name == 'testing'
         #if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
         with:
           name: ${{ steps.build.outputs.iso_name }}
           path: ${{ steps.upload-directory.outputs.iso-upload-dir }}