Align files

.cursor/rules/zz_generated.base-llm-rules.mdc

@@ -56,6 +56,6 @@ For detailed guidelines and examples, always refer to: @https://github.com/giant
 <!--
 DO NOT EDIT. Generated with devctl.
 This file is maintained at:
-https://github.com/giantswarm/devctl/blob/3bbd5cb47ff855f0b9c88881fbdcaa907d85647c/pkg/gen/input/llm/internal/file/base_llm_rules.mdc.template
+https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/llm/internal/file/base_llm_rules.mdc.template
 Manual changes will be overwritten.
 -->

.cursor/rules/zz_generated.go-llm-rules.mdc

@@ -30,6 +30,6 @@ When creating or modifying Go files, perform the according check and mitigate an
 <!--
 DO NOT EDIT. Generated with devctl.
 This file is maintained at:
-https://github.com/giantswarm/devctl/blob/83dbeb7aedca2abc8fd38c99e3cfa49f58d8ff82/pkg/gen/input/llm/internal/file/go_rules.mdc.template
+https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/llm/internal/file/go_rules.mdc.template
 Manual changes will be overwritten.
 -->

.github/workflows/zz_generated.check_values_schema.yaml

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/87f30fd3b955a0daf6017834a776c222d93a207c/pkg/gen/input/workflows/internal/file/check_values_schema.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/check_values_schema.yaml.template
 #
 
 name: 'Values and schema'

.github/workflows/zz_generated.create_release.yaml

@@ -2,9 +2,10 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/72df19d0bff1cc8a679b00fdb4ac4e2504f8962a/pkg/gen/input/workflows/internal/file/create_release.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/create_release.yaml.template
 #
 name: Create Release
+
 on:
   push:
     branches:
@@ -18,258 +19,12 @@ on:
 permissions: {}
 
 jobs:
-  debug_info:
-    name: Debug info
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Print github context JSON
-        run: |
-          cat <<EOF
-          ${{ toJson(github) }}
-          EOF
-  gather_facts:
-    name: Gather facts
-    runs-on: ubuntu-22.04
-    permissions:
-      contents: read
-    outputs:
-      project_go_path: ${{ steps.get_project_go_path.outputs.path }}
-      ref_version: ${{ steps.ref_version.outputs.refversion }}
-      version: ${{ steps.get_version.outputs.version }}
-    steps:
-      - name: Get version
-        id: get_version
-        env:
-          COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
-        run: |
-          title=$(echo -n "${COMMIT_MESSAGE}" | head -1)
-          # Matches strings like:
-          #
-          #   - "Release v1.2.3"
-          #   - "Release v1.2.3-r4"
-          #   - "Release v1.2.3 (#56)"
-          #   - "Release v1.2.3-r4 (#56)"
-          #
-          # And outputs version part (1.2.3).
-          if echo "${title}" | grep -iqE '^Release v[0-9]+\.[0-9]+\.[0-9]+([.-][^ .-][^ ]*)?( \(#[0-9]+\))?$' ; then
-          version=$(echo "${title}" | cut -d ' ' -f 2)
-          fi
-          version="${version#v}" # Strip "v" prefix.
-          echo "version=\"${version}\""
-          echo "version=${version}" >> $GITHUB_OUTPUT
-      - name: Checkout code
-        if: ${{ steps.get_version.outputs.version != '' }}
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Get project.go path
-        id: get_project_go_path
-        if: ${{ steps.get_version.outputs.version != '' }}
-        run: |
-          path='./pkg/project/project.go'
-          if [[ ! -f $path ]] ; then
-            path=''
-          fi
-          echo "path=\"$path\""
-          echo "path=${path}" >> $GITHUB_OUTPUT
-      - name: Check if reference version
-        id: ref_version
-        env:
-          COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
-        run: |
-          title=$(echo -n "${COMMIT_MESSAGE}" | head -1)
-          if echo "${title}" | grep -qE '^release v[0-9]+\.[0-9]+\.[0-9]+([.-][^ .-][^ ]*)?( \(#[0-9]+\))?$' ; then
-            version=$(echo "${title}" | cut -d ' ' -f 2)
-          fi
-          version=$(echo "${title}" | cut -d ' ' -f 2)
-          version="${version#v}" # Strip "v" prefix.
-          refversion=false
-          if [[ "${version}" =~ ^[0-9]+.[0-9]+.[0-9]+-[0-9]+$ ]]; then
-            refversion=true
-          fi
-          echo "refversion =\"${refversion}\""
-          echo "refversion=${refversion}" >> $GITHUB_OUTPUT
-  update_project_go:
-    name: Update project.go
-    runs-on: ubuntu-22.04
-    permissions:
-      contents: read
-    if: ${{ needs.gather_facts.outputs.version != '' && needs.gather_facts.outputs.project_go_path != '' && needs.gather_facts.outputs.ref_version != 'true' }}
-    needs:
-      - gather_facts
-    steps:
-      - name: Install architect
-        uses: giantswarm/install-binary-action@c94c7adadeb14af4bdbdd601f9a6e7f69638134c # v4.0.0
-        with:
-          binary: "architect"
-          version: "6.14.1"
-      - name: Install semver
-        uses: giantswarm/install-binary-action@c94c7adadeb14af4bdbdd601f9a6e7f69638134c # v4.0.0
-        with:
-          binary: "semver"
-          version: "3.2.0"
-          download_url: "https://github.com/fsaintjacques/${binary}-tool/archive/${version}.tar.gz"
-          tarball_binary_path: "*/src/${binary}"
-          smoke_test: "${binary} --version"
-      - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          persist-credentials: false
-      - name: Update project.go
-        id: update_project_go
-        env:
-          branch: "${{ github.ref }}-version-bump"
-        run: |
-          git checkout -b ${{ env.branch }}
-          file="${{ needs.gather_facts.outputs.project_go_path }}"
-          version="${{ needs.gather_facts.outputs.version }}"
-          new_version="$(semver bump patch $version)-dev"
-          echo "version=\"$version\" new_version=\"$new_version\""
-          echo "new_version=${new_version}" >> $GITHUB_OUTPUT
-          sed -Ei "s/(version[[:space:]]*=[[:space:]]*)\"${version}\"/\1\"${new_version}\"/" $file
-          if git diff --exit-code $file ; then
-            echo "error: no changes in \"$file\"" >&2
-            exit 1
-          fi
-      - name: Set up git identity
-        run: |
-          git config --local user.email "dev@giantswarm.io"
-          git config --local user.name "taylorbot"
-      - name: Commit changes
-        run: |
-          file="${{ needs.gather_facts.outputs.project_go_path }}"
-          git add $file
-          git commit -m "Bump version to ${{ steps.update_project_go.outputs.new_version }}"
-      - name: Push changes
-        env:
-          REMOTE_REPO: "https://${{ github.actor }}:${{ secrets.TAYLORBOT_GITHUB_ACTION }}@github.com/${{ github.repository }}.git"
-          branch: "${{ github.ref }}-version-bump"
-        run: |
-          git push "${REMOTE_REPO}" HEAD:${{ env.branch }}
-      - name: Create PR
-        env:
-          GITHUB_TOKEN: "${{ secrets.TAYLORBOT_GITHUB_ACTION }}"
-          base: "${{ github.ref }}"
-          branch: "${{ github.ref }}-version-bump"
-          version: "${{ needs.gather_facts.outputs.version }}"
-          title: "Bump version to ${{ steps.update_project_go.outputs.new_version }}"
-        run: |
-          gh pr create --title "${{ env.title }}" --body "" --base ${{ env.base }} --head ${{ env.branch }} --reviewer ${{ github.actor }}
-      - name: Enable auto-merge for PR
-        env:
-          GITHUB_TOKEN: "${{ secrets.TAYLORBOT_GITHUB_ACTION }}"
-          base: "${{ github.ref }}"
-          branch: "${{ github.ref }}-version-bump"
-          version: "${{ needs.gather_facts.outputs.version }}"
-          title: "Bump version to ${{ steps.update_project_go.outputs.new_version }}"
-        run: |
-          gh pr merge --auto --squash "${{ env.branch }}" || echo "::warning::Auto-merge not allowed. Please adjust the repository settings."
-  create_release:
-    name: Create release
-    runs-on: ubuntu-22.04
-    permissions:
-      contents: read
-    needs:
-      - gather_facts
-    if: ${{ needs.gather_facts.outputs.version }}
-    outputs:
-      upload_url: ${{ steps.create_gh_release.outputs.upload_url }}
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          ref: ${{ github.sha }}
-          persist-credentials: false
-      - name: Ensure correct version in project.go
-        if: ${{ needs.gather_facts.outputs.project_go_path != '' && needs.gather_facts.outputs.ref_version != 'true' }}
-        run: |
-          file="${{ needs.gather_facts.outputs.project_go_path }}"
-          version="${{ needs.gather_facts.outputs.version }}"
-          grep -qE "version[[:space:]]*=[[:space:]]*\"$version\"" $file
-      - name: Get Changelog Entry
-        id: changelog_reader
-        uses: mindsers/changelog-reader-action@32aa5b4c155d76c94e4ec883a223c947b2f02656  # v2.2.3
-        with:
-          version: ${{ needs.gather_facts.outputs.version }}
-          path: ./CHANGELOG.md
-      - name: Set up git identity
-        run: |
-          git config --local user.email "dev@giantswarm.io"
-          git config --local user.name "taylorbot"
-      - name: Create tag
-        run: |
-          version="${{ needs.gather_facts.outputs.version }}"
-          git tag "v$version" ${{ github.sha }}
-      - name: Push tag
-        env:
-          REMOTE_REPO: "https://${{ github.actor }}:${{ secrets.TAYLORBOT_GITHUB_ACTION }}@github.com/${{ github.repository }}.git"
-        run: |
-          git push "${REMOTE_REPO}" --tags
-      - name: Create release
-        id: create_gh_release
-        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b  # v1.20.0
-        with:
-          body: ${{ steps.changelog_reader.outputs.changes }}
-          tag: "v${{ needs.gather_facts.outputs.version }}"
-          token: ${{ secrets.TAYLORBOT_GITHUB_ACTION }}
-          skipIfReleaseExists: true
-
-  create-release-branch:
-    name: Create release branch
-    runs-on: ubuntu-22.04
+  create-release:
+    uses: giantswarm/github-workflows/.github/workflows/create-release.yaml@main
+    with:
+      build-release-artifacts: false
+      fetch-deep-gitlog-for-build: true
+    secrets:
+      TAYLORBOT_GITHUB_ACTION: ${{ secrets.TAYLORBOT_GITHUB_ACTION }}
     permissions:
       contents: write
-    needs:
-      - gather_facts
-    if: ${{ needs.gather_facts.outputs.version }}
-    steps:
-      - name: Install semver
-        uses: giantswarm/install-binary-action@c94c7adadeb14af4bdbdd601f9a6e7f69638134c # v4.0.0
-        with:
-          binary: "semver"
-          version: "3.0.0"
-          download_url: "https://github.com/fsaintjacques/${binary}-tool/archive/${version}.tar.gz"
-          tarball_binary_path: "*/src/${binary}"
-          smoke_test: "${binary} --version"
-      - name: Check out the repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          fetch-depth: 0  # Clone the whole history, not just the most recent commit.
-      - name: Fetch all tags and branches
-        run: "git fetch --all"
-      - name: Create long-lived release branch
-        run: |
-          current_version="${{ needs.gather_facts.outputs.version }}"
-          parent_version="$(git describe --tags --abbrev=0 HEAD^ || true)"
-          parent_version="${parent_version#v}" # Strip "v" prefix.
-
-          if [[ -z "$parent_version" ]] ; then
-            echo "Unable to find a parent tag version. No branch to create."
-            exit 0
-          fi
-
-          echo "current_version=$current_version parent_version=$parent_version"
-
-          current_major=$(semver get major $current_version)
-          current_minor=$(semver get minor $current_version)
-          parent_major=$(semver get major $parent_version)
-          parent_minor=$(semver get minor $parent_version)
-          echo "current_major=$current_major current_minor=$current_minor parent_major=$parent_major parent_minor=$parent_minor"
-
-          if [[ $current_major -gt $parent_major ]] ; then
-            echo "Current tag is a new major version"
-          elif [[ $current_major -eq $parent_major ]] && [[ $current_minor -gt $parent_minor ]] ; then
-            echo "Current tag is a new minor version"
-          else
-            echo "Current tag is not a new major or minor version. Nothing to do here."
-            exit 0
-          fi
-
-          release_branch="release-v${parent_major}.${parent_minor}.x"
-          echo "release_branch=$release_branch"
-
-          if git rev-parse --verify $release_branch ; then
-            echo "Release branch $release_branch already exists. Nothing to do here."
-            exit 0
-          fi
-
-          git branch $release_branch HEAD^
-          git push origin $release_branch

.github/workflows/zz_generated.create_release_pr.yaml

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/87f30fd3b955a0daf6017834a776c222d93a207c/pkg/gen/input/workflows/internal/file/create_release_pr.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/create_release_pr.yaml.template
 #
 name: Create Release PR
 on:

.github/workflows/zz_generated.fix_vulnerabilities.yaml

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/6ff4d7652142f59436c1d1ef925f8d687e1ac671/pkg/gen/input/workflows/internal/file/fix_vulnerabilities.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/fix_vulnerabilities.yaml.template
 #
 
 name: Fix Go vulnerabilities
@@ -14,11 +14,12 @@ on:
     inputs:
       branch:
         description: Branch on which to fix vulnerabilities
+        default: main
         required: true
         type: string
       log_level:
         description: Log Level (info / error / debug)
-        default: "info"
+        default: info
         type: string
 
 permissions: {}

.github/workflows/zz_generated.gitleaks.yaml

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/87f30fd3b955a0daf6017834a776c222d93a207c/pkg/gen/input/workflows/internal/file/gitleaks.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/gitleaks.yaml.template
 #
 name: gitleaks
 

.github/workflows/zz_generated.run_ossf_scorecard.yaml

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/4897b6ea0f98cfba54f8d3003f5bdcefb968a7b5/pkg/gen/input/workflows/internal/file/run_ossf_scorecard.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/run_ossf_scorecard.yaml.template
 #
 
 # This workflow uses actions that are not certified by GitHub. They are provided

.github/workflows/zz_generated.validate_changelog.yaml

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/87f30fd3b955a0daf6017834a776c222d93a207c/pkg/gen/input/workflows/internal/file/validate_changelog.yaml.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/workflows/internal/file/validate_changelog.yaml.template
 #
 name: Validate changelog
 

Makefile

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/6a704f7e2a8b0f09e82b5bab88f17971af849711/pkg/gen/input/makefile/internal/file/Makefile.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/makefile/internal/file/Makefile.template
 #
 
 include Makefile.*.mk

Makefile.gen.app.mk

@@ -2,7 +2,7 @@
 #
 #    devctl
 #
-#    https://github.com/giantswarm/devctl/blob/eea19f200d7cfd27ded22474b787563bbfdb8ec4/pkg/gen/input/makefile/internal/file/Makefile.gen.app.mk.template
+#    https://github.com/giantswarm/devctl/blob/c2dd604fd787d9aa63ec6c43c817c8596f1356f7/pkg/gen/input/makefile/internal/file/Makefile.gen.app.mk.template
 #
 
 ##@ App