Sync files from sa-up

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @upbound/team-customer-success

.github/renovate.json5

@@ -1,42 +1,77 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended",
-    "helpers:pinGitHubActionDigests",
-    ":semanticCommits"
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: [
+    'config:recommended',
+    'helpers:pinGitHubActionDigests',
+    ':semanticCommits',
   ],
-  "rebaseWhen": "conflicted",
-  "prConcurrentLimit": 5,
-  "baseBranches": ["main"],
-  "labels": ["automated"],
-  "customManagers": [
+  rebaseWhen: 'conflicted',
+  prConcurrentLimit: 5,
+  baseBranches: [
+    'main',
+  ],
+  labels: [
+    'automated',
+  ],
+  packageRules: [
+    {
+      matchFileNames: [
+        '.github/**',
+      ],
+      groupName: 'github-actions dependencies',
+    },
+    {
+      matchFileNames: [
+        'crossplane.yaml',
+      ],
+      groupName: 'crossplane dependencies',
+    },
+    {
+      matchFileNames: [
+        'Makefile',
+      ],
+      groupName: 'Makefile dependencies',
+    },
+  ],
+  customManagers: [
     {
-      "customType": "regex",
-      "description": "Bump up version in the Makefile",
-      "fileMatch": ["^Makefile$"],
-      "matchStrings": [
-        "UP_VERSION = (?<currentValue>.*?)\\n"
-      ],
-      "datasourceTemplate": "github-releases",
-      "depNameTemplate": "upbound/up",
-    }, {
-      "customType": "regex",
-      "description": "Bump uptest version in the Makefile",
-      "fileMatch": ["^Makefile$"],
-      "matchStrings": [
-        "UPTEST_VERSION = (?<currentValue>.*?)\\n"
-      ],
-      "datasourceTemplate": "github-releases",
-      "depNameTemplate": "upbound/uptest",
-    }, {
-      "customType": "regex",
-      "description": "Bump providers/functions/configurations in crossplane.yaml",
-      "fileMatch": ["crossplane.yaml"],
-      "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s*\\n\\s*version:\\s*\"(?<currentValue>[^\"]+)\""
-      ],
-      "datasourceTemplate": "{{{datasource}}}",
-      "depNameTemplate": "{{{depName}}}",
-    }
+      customType: 'regex',
+      description: 'Bump up version in the Makefile',
+      fileMatch: [
+        '^Makefile$',
+      ],
+      matchStrings: [
+        'UP_VERSION = (?<currentValue>.*?)\\n',
+      ],
+      datasourceTemplate: 'github-releases',
+      depNameTemplate: 'upbound/up',
+    },
+    {
+      customType: 'regex',
+      description: 'Bump uptest version in the Makefile',
+      fileMatch: [
+        '^Makefile$',
+      ],
+      matchStrings: [
+        'UPTEST_VERSION = (?<currentValue>.*?)\\n',
+      ],
+      datasourceTemplate: 'github-releases',
+      depNameTemplate: 'upbound/uptest',
+    },
+    {
+      customType: 'regex',
+      description: 'Bump providers/functions/configurations in crossplane.yaml',
+      fileMatch: [
+        'crossplane.yaml',
+      ],
+      matchStrings: [
+        '#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s*\\n\\s*version:\\s*"(?<currentValue>[^"]+)"',
+      ],
+      datasourceTemplate: '{{{datasource}}}',
+      depNameTemplate: '{{{depName}}}',
+    },
   ],
+  "git-submodules": {
+     "enabled": true
+  }
 }

.github/workflows/ci.yaml

@@ -8,11 +8,13 @@ on:
   workflow_dispatch: {}
 
 env:
+  DOCKER_BUILDX_VERSION: 'v0.8.2'
+
   XPKG_ACCESS_ID: ${{ secrets.XPKG_ACCESS_ID }}
 
 jobs:
   detect-noop:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       noop: ${{ steps.noop.outputs.should_skip }}
     steps:
@@ -25,18 +27,13 @@ jobs:
           do_not_skip: '["workflow_dispatch", "schedule", "push"]'
 
   publish-artifacts:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: detect-noop
     if: needs.detect-noop.outputs.noop != 'true'
 
     steps:
-      - name: Setup QEMU
-        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
-        with:
-          platforms: all
-
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
         with:
           version: ${{ env.DOCKER_BUILDX_VERSION }}
           install: true
@@ -57,7 +54,7 @@ jobs:
           BUILD_ARGS: "--load"
 
       - name: Publish Artifacts to GitHub
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         with:
           name: output
           path: _output/**
@@ -71,4 +68,5 @@ jobs:
           password: ${{ secrets.XPKG_TOKEN }}
 
       - name: Publish Artifacts
-        run: make -j2 publish BRANCH_NAME=${GITHUB_REF##*/}
+        if: env.XPKG_ACCESS_ID != ''
+        run: make -j2 publish BRANCH_NAME=${GITHUB_REF##*/}

.github/workflows/e2e.yaml

@@ -11,3 +11,4 @@ jobs:
       package-type: configuration
     secrets:
       UPTEST_CLOUD_CREDENTIALS: ${{ secrets.UPTEST_CLOUD_CREDENTIALS }}
+      UPTEST_DATASOURCE: ${{ secrets.UPTEST_DATASOURCE }}

.github/workflows/tag.yml

@@ -12,7 +12,7 @@ on:
 
 jobs:
   create-tag:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout

.github/workflows/yamllint.yaml

@@ -7,7 +7,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: yamllint
-        uses: reviewdog/action-yamllint@e09f07780388032a624e9eb44a23fd1bbb4052cc # v1.19.0
+        uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
         with:
           reporter: github-pr-review
           filter_mode: nofilter

.gitmodules

@@ -1,3 +1,3 @@
 [submodule "build"]
 	path = build
-	url = https://github.com/upbound/build
+	url = https://github.com/crossplane/build.git