fix(cmd): do not rewrite local paths as URLs in sanitizeChartSource

url.Parse treats a Windows absolute path such as C:\charts\mychart as
having scheme "c", so sanitizeChartSource re-encoded it (e.g. the drive
letter was lowercased and separators could be percent-escaped), producing
a misleading SOURCE value for local installs/upgrades.

Gate sanitization on the parsed URL having a host component, so only real
repository URLs (scheme://host/...) are rewritten while local filesystem
paths and chart references are returned unchanged. Add regression tests
covering Windows (back- and forward-slash) and absolute unix paths.

Signed-off-by: Shaan Satsangi <shaansatsangi@gmail.com>

pkg/cmd/release_source.go

@@ -65,9 +65,14 @@ func setReleaseSource(chrt chart.Charter, chartRef, repoURL string) {
 // it is persisted into the release record, so secrets embedded in a repo URL
 // (e.g. https://user:pass@host) are not leaked into cluster metadata. Sources
 // that are not URLs (local paths or chart references) are returned unchanged.
+//
+// Only sources with a host component (i.e. scheme://host/...) are treated as
+// URLs. This deliberately excludes local filesystem paths, including Windows
+// absolute paths such as C:\charts\mychart, which url.Parse would otherwise
+// interpret as a "c" scheme and re-encode (e.g. c:%5Ccharts%5Cmychart).
 func sanitizeChartSource(source string) string {
 	u, err := url.Parse(source)
-	if err != nil || u.Scheme == "" {
+	if err != nil || u.Scheme == "" || u.Host == "" {
 		return source
 	}
 	u.User = nil

pkg/cmd/release_source_test.go

@@ -64,6 +64,21 @@ func TestSanitizeChartSource(t *testing.T) {
 			source: "./charts/mychart",
 			want:   "./charts/mychart",
 		},
+		{
+			name:   "leaves absolute unix path unchanged",
+			source: "/var/charts/mychart",
+			want:   "/var/charts/mychart",
+		},
+		{
+			name:   "leaves windows absolute path unchanged",
+			source: `C:\charts\mychart`,
+			want:   `C:\charts\mychart`,
+		},
+		{
+			name:   "leaves windows forward-slash path unchanged",
+			source: "C:/charts/mychart",
+			want:   "C:/charts/mychart",
+		},
 		{
 			name:   "leaves bare chart name unchanged",
 			source: "mychart",