chore(deps): update golang:1.26.1 docker digest to 5ba1126 (#400 )

fix(deps): update module github.com/alecthomas/kong to v1.15.0 (#398 )
chore(deps): update pre-commit hook golangci/golangci-lint to v2.11.4 (#396 )
2026-04-07 07:28:27 +00:00 · 2026-04-01 23:30:44 +00:00 · 2026-03-22 19:39:29 +00:00 · 2026-03-19 13:12:52 +00:00 · 2026-03-19 11:49:59 +00:00 · 2026-03-17 03:23:42 +00:00
10 changed files with 201 additions and 39 deletions
@@ -0,0 +1,43 @@
+name: gitlab-cleanup-handler
+
+on:
+  push:
+    branches: [main]
+    tags: ['*']
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
+        with:
+          go-version: 'stable'
+      - name: Run tests
+        run: go test -race -coverprofile=coverage.txt ./...
+
+  vulnerabilities:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
+        with:
+          go-version: 'stable'
+      - name: Check vulnerabilities
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+          govulncheck ./...
+
+  build:
+    needs: [test, vulnerabilities]
+    runs-on: ubuntu-latest
+    env:
+      BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_CONTENT }}
+      GITEA_REPOSITORY: ${{ gitea.repository }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: buildtool/setup-buildtools-action@v1
+      - name: Build and push
+        run: unset GITEA_TOKEN && build && push
@@ -0,0 +1,9 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    uses: unboundsoftware/shared-workflows/.gitea/workflows/Release.yml@main
@@ -1,22 +0,0 @@
-include:
- template: 'Workflows/MergeRequest-Pipelines.gitlab-ci.yml'
- project: unboundsoftware/ci-templates
-  file: Defaults.gitlab-ci.yml
- project: unboundsoftware/ci-templates
-  file: Release.gitlab-ci.yml
- project: unboundsoftware/ci-templates
-  file: Pre-Commit-Go.gitlab-ci.yml
-
-stages:
- build
-
-image: buildtool/build-tools:${BUILDTOOLS_VERSION}
-
-build:
-  stage: build
-  script:
-  - build
-  - curl -Os https://uploader.codecov.io/latest/linux/codecov
-  - chmod +x codecov
-  - ./codecov -t ${CODECOV_TOKEN} -R $CI_PROJECT_DIR -C $CI_COMMIT_SHA -r $CI_PROJECT_PATH
-  - push
@@ -22,7 +22,7 @@ repos:
    - --project
    - unboundsoftware/gitlab-cleanup-handler
 - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook
-  rev: v9.23.0
+  rev: v9.24.0
  hooks:
  - id: commitlint
    stages: [ commit-msg ]
@@ -36,6 +36,6 @@ repos:
  - id: go-vet
  - id: gofumpt
 - repo: https://github.com/golangci/golangci-lint
-  rev: v2.7.2
+  rev: v2.11.4
  hooks:
  - id: golangci-lint
@@ -1 +1,3 @@
-{"version":"v0.0.22"}
+{
+  "version": "v0.1.5"
+}
@@ -2,6 +2,84 @@

 All notable changes to this project will be documented in this file.

+## [0.1.5] - 2026-03-19
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update kubernetes monorepo to v0.35.3 (#394)
+
+### ⚙️ Miscellaneous Tasks
+
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.2 (#388)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.3 (#390)
+- *(deps)* Update golang:1.26.1 docker digest to 984bf90 (#392)
+
+## [0.1.4] - 2026-03-06
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update kubernetes packages to v0.35.2 (#379)
+
+### ⚙️ Miscellaneous Tasks
+
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.10.1 (#375)
+- *(deps)* Update golang:1.26.0 docker digest to 9835fb4 (#377)
+- *(deps)* Update dependency go to v1.26.1 (#381)
+- *(deps)* Update golang docker tag to v1.26.1 (#382)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.0 (#384)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.1 (#386)
+
+## [0.1.3] - 2026-02-12
+
+### ⚙️ Miscellaneous Tasks
+
+- *(deps)* Update dependency go to v1.26.0 (#368)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.9.0 (#371)
+
+## [0.1.2] - 2026-02-11
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update module github.com/alecthomas/kong to v1.14.0 (#367)
+- *(deps)* Update kubernetes packages to v0.35.1 (#372)
+
+### ⚙️ Miscellaneous Tasks
+
+- *(deps)* Update golang:1.25.5 docker digest to 3a01526 (#358)
+- *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.24.0 (#359)
+- *(deps)* Update dependency go to v1.25.6 (#361)
+- *(deps)* Update golang docker tag to v1.25.6 (#362)
+- Remove unused .gitlab-ci.yml
+- *(deps)* Update golang:1.25.6 docker digest to ceda080 (#364)
+- *(deps)* Update dependency go to v1.25.7 (#365)
+- *(deps)* Update golang docker tag to v1.25.7 (#366)
+- *(deps)* Update golang:1.25.7 docker digest to d2819ff (#369)
+- *(deps)* Update golang docker tag to v1.26.0 (#370)
+
+## [0.1.1] - 2026-01-10
+
+### ⚙️ Miscellaneous Tasks
+
+- Run workflow on tags
+
+## [0.1.0] - 2026-01-09
+
+### 🚀 Features
+
+- Migrate from GitLab CI to Gitea Actions
+
+### 📚 Documentation
+
+- Add CLAUDE.md for Claude Code guidance
+
+### ⚙️ Miscellaneous Tasks
+
+- *(deps)* Update golang:1.25.5 docker digest to ad03ba9
+- *(deps)* Update actions/setup-go action to v6
+- *(deps)* Update actions/checkout action to v6
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.8.0
+- Add release workflow
+
 ## [0.0.22] - 2025-12-18

 ### 🐛 Bug Fixes
@@ -0,0 +1,52 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+A Go service that scans Kubernetes namespaces for container images from GitLab's container registry and automatically updates GitLab project cleanup policies to preserve those images. This ensures images actively running in Kubernetes are protected from automated cleanup.
+
+## Build & Test Commands
+
+```bash
+# Run all tests
+go test ./...
+
+# Run a specific test
+go test ./kube -run TestFetcher
+
+# Run tests with coverage
+go test -cover ./...
+
+# Lint (via pre-commit)
+pre-commit run golangci-lint --all-files
+
+# Format code
+gofumpt -w .
+
+# Run all pre-commit hooks (always add all files first)
+git add -A && pre-commit run --all-files
+```
+
+## Architecture
+
+The service has three main components:
+
+1. **cmd/handler** - Entry point using Kong for CLI argument parsing. Accepts `--namespaces` (or NAMESPACES env) and `--gitlab-token` (or GITLAB_TOKEN env).
+
+2. **kube** - Kubernetes client that scans Deployments and CronJobs in specified namespaces for images prefixed with `registry.gitlab.com`. Uses provider pattern for in-cluster vs KUBECONFIG-based authentication.
+
+3. **gitlab** - REST client that fetches repository tags and updates container expiration policies via GitLab API. The cleanup policy keeps images matching `main|master|<active-versions>`.
+
+### Data Flow
+```
+Kubernetes Cluster → kube.Client.GetImages() → ImageCollector
+    → gitlab.RestClient.GetTags() + UpdateCleanupPolicy()
+```
+
+## Code Conventions
+
+- Uses `github.com/apex/log` for structured JSON logging
+- Tests use `github.com/stretchr/testify` assertions and `gitlab.com/unboundsoftware/apex-mocks` for log mocking
+- Interfaces defined locally for testability (KubeClient, GitlabClient, ClientProvider, ConfigProvider)
+- Follows conventional commits format (enforced by pre-commit commitlint hook)
@@ -1,4 +1,4 @@
-FROM amd64/golang:1.25.5@sha256:0c27bcf0df81eca89f87e1e78be5ad5e36487f0eaf71cd900ba14ee7621d3e70 as build
+FROM amd64/golang:1.26.1@sha256:5ba1126a6dbb65aa517ff5eaecab6abc29480671e5c0ca176192de8da9dba4b8 as build
 WORKDIR /build
 ENV CGO_ENABLED=0
 ADD . /build
@@ -2,16 +2,16 @@ module gitlab.com/unboundsoftware/gitlab-cleanup-handler

 go 1.25.0

-toolchain go1.25.5
+toolchain go1.26.1

 require (
-	github.com/alecthomas/kong v1.13.0
+	github.com/alecthomas/kong v1.15.0
 	github.com/apex/log v1.9.0
 	github.com/stretchr/testify v1.11.1
 	gitlab.com/unboundsoftware/apex-mocks v0.2.0
-	k8s.io/api v0.35.0
-	k8s.io/apimachinery v0.35.0
-	k8s.io/client-go v0.35.0
+	k8s.io/api v0.35.3
+	k8s.io/apimachinery v0.35.3
+	k8s.io/client-go v0.35.3
 )

 require (
@@ -2,8 +2,8 @@ github.com/Masterminds/semver/v3 v3.4.0 h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1
 github.com/Masterminds/semver/v3 v3.4.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
 github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
 github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
-github.com/alecthomas/kong v1.13.0 h1:5e/7XC3ugvhP1DQBmTS+WuHtCbcv44hsohMgcvVxSrA=
-github.com/alecthomas/kong v1.13.0/go.mod h1:wrlbXem1CWqUV5Vbmss5ISYhsVPkBb1Yo7YKJghju2I=
+github.com/alecthomas/kong v1.15.0 h1:BVJstKbpO73zKpmIu+m/aLRrNmWwxXPIGTNin9VmLVI=
+github.com/alecthomas/kong v1.15.0/go.mod h1:wrlbXem1CWqUV5Vbmss5ISYhsVPkBb1Yo7YKJghju2I=
 github.com/alecthomas/repr v0.5.2 h1:SU73FTI9D1P5UNtvseffFSGmdNci/O6RsqzeXJtP0Qs=
 github.com/alecthomas/repr v0.5.2/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
 github.com/apex/log v1.9.0 h1:FHtw/xuaM8AgmvDDTI9fiwoAL25Sq2cxojnZICUU8l0=
@@ -181,12 +181,12 @@ gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C
 gopkg.in/yaml.v3 v3.0.0-20200605160147-a5ece683394c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.35.0 h1:iBAU5LTyBI9vw3L5glmat1njFK34srdLmktWwLTprlY=
-k8s.io/api v0.35.0/go.mod h1:AQ0SNTzm4ZAczM03QH42c7l3bih1TbAXYo0DkF8ktnA=
-k8s.io/apimachinery v0.35.0 h1:Z2L3IHvPVv/MJ7xRxHEtk6GoJElaAqDCCU0S6ncYok8=
-k8s.io/apimachinery v0.35.0/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
-k8s.io/client-go v0.35.0 h1:IAW0ifFbfQQwQmga0UdoH0yvdqrbwMdq9vIFEhRpxBE=
-k8s.io/client-go v0.35.0/go.mod h1:q2E5AAyqcbeLGPdoRB+Nxe3KYTfPce1Dnu1myQdqz9o=
+k8s.io/api v0.35.3 h1:pA2fiBc6+N9PDf7SAiluKGEBuScsTzd2uYBkA5RzNWQ=
+k8s.io/api v0.35.3/go.mod h1:9Y9tkBcFwKNq2sxwZTQh1Njh9qHl81D0As56tu42GA4=
+k8s.io/apimachinery v0.35.3 h1:MeaUwQCV3tjKP4bcwWGgZ/cp/vpsRnQzqO6J6tJyoF8=
+k8s.io/apimachinery v0.35.3/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
+k8s.io/client-go v0.35.3 h1:s1lZbpN4uI6IxeTM2cpdtrwHcSOBML1ODNTCCfsP1pg=
+k8s.io/client-go v0.35.3/go.mod h1:RzoXkc0mzpWIDvBrRnD+VlfXP+lRzqQjCmKtiwZ8Q9c=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE=