3b18fb7a3c
Merge pull request #32149 from helm/dependabot/go_modules/dev-v3/github.com/Masterminds/semver/v3-3.5.0
...
chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0
6 hours ago
3226ac8942
Merge pull request #32147 from helm/dependabot/go_modules/dev-v3/github.com/mattn/go-shellwords-1.0.13
...
chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13
6 hours ago
8c17168828
chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0
...
Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/Masterminds/semver/releases )
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Masterminds/semver/compare/v3.4.0...v3.5.0 )
---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
15 hours ago
fe141bd537
chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13
...
Bumps [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords ) from 1.0.12 to 1.0.13.
- [Commits](https://github.com/mattn/go-shellwords/compare/v1.0.12...v1.0.13 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-shellwords
dependency-version: 1.0.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
15 hours ago
ebe37310ea
Merge pull request #32150 from helm/dependabot/go_modules/dev-v3/golang.org/x/crypto-0.52.0
...
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0
15 hours ago
980836f726
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.51.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
15 hours ago
cd4c53d3ad
Merge pull request #32152 from TerryHowe/fix/bump-x-net-go-2026-5026-dev-v3
...
fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 [dev-v3]
15 hours ago
1dde6c7551
fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026
...
Upgrades golang.org/x/net from v0.53.0 to v0.55.0 to fix CVE-2026-39821
(GO-2026-5026), where idna.ToASCII/ToUnicode incorrectly accept Punycode-
encoded labels that decode to ASCII-only labels, enabling privilege escalation
via hostname check bypass.
Coordinated x/ upgrades pulled in by the module graph:
- golang.org/x/crypto v0.50.0 => v0.51.0
- golang.org/x/sys v0.43.0 => v0.45.0
- golang.org/x/term v0.42.0 => v0.43.0
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
5 days ago
b8a5d51d16
Merge pull request #31913 from helm/dependabot/go_modules/dev-v3/k8s.io/klog/v2-2.140.0
...
chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0
5 days ago
0162feda1d
chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0
...
Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog ) from 2.130.1 to 2.140.0.
- [Release notes](https://github.com/kubernetes/klog/releases )
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes/klog/compare/v2.130.1...2.140.0 )
---
updated-dependencies:
- dependency-name: k8s.io/klog/v2
dependency-version: 2.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
7ca3199bd2
Merge pull request #31928 from helm/dependabot/go_modules/dev-v3/golang.org/x/text-0.35.0
...
chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0
5 days ago
a664a58f43
chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.35.0 to 0.37.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.35.0...v0.37.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
348e65424c
Merge pull request #31920 from SergioChan/backport-fix-empty-crd-resources-31552
...
fix(action): guard nil RESTClientGetter in CRD install path (dev-v3)
2 weeks ago
d9cc2fe70d
Merge pull request #31982 from Nordix/devel/backport-31412
...
[v3 backport] Fix rollback for missing resources (31412)
2 weeks ago
3033a778b6
[v3] Bump to version v3.21 ( #32103 )
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
3 weeks ago
4d4902c431
Merge pull request #32041 from TerryHowe/fix/upgrade-otel-cves
...
fix: upgrade opentelemetry packages to patch CVEs
1 month ago
13d5fc4ae0
fix: upgrade opentelemetry packages to patch CVEs
...
Upgrade all OpenTelemetry Go packages to their latest versions:
- go.opentelemetry.io/otel: v1.36.0 -> v1.43.0
- go.opentelemetry.io/otel/trace: v1.36.0 -> v1.43.0
- go.opentelemetry.io/otel/metric: v1.36.0 -> v1.43.0
- go.opentelemetry.io/otel/sdk: v1.36.0 -> v1.43.0
- go.opentelemetry.io/otel/sdk/metric: v1.36.0 -> v1.43.0
- go.opentelemetry.io/otel/sdk/log: v0.8.0 -> v0.19.0
- go.opentelemetry.io/otel/log: v0.8.0 -> v0.19.0
- go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: v0.8.0 -> v0.19.0
- go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp: v0.8.0 -> v0.19.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc: v1.32.0 -> v1.43.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp: v1.32.0 -> v1.43.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 -> v1.43.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 -> v1.43.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.32.0 -> v1.43.0
- go.opentelemetry.io/otel/exporters/prometheus: v0.54.0 -> v0.65.0
- go.opentelemetry.io/otel/exporters/stdout/stdoutlog: v0.8.0 -> v0.19.0
- go.opentelemetry.io/otel/exporters/stdout/stdoutmetric: v1.32.0 -> v1.43.0
- go.opentelemetry.io/otel/exporters/stdout/stdouttrace: v1.32.0 -> v1.43.0
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 -> v0.68.0
- go.opentelemetry.io/contrib/instrumentation/.../otelgrpc: v0.60.0 -> v0.68.0
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2 months ago
a60cb79dfb
Merge commit from fork
...
fix: Chart dot-name path bug [v3 backport]
2 months ago
d3bc8535bb
Merge pull request #32026 from gjenkins8/gjenkins/code_action_pin_v3
...
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow [v3 backport]
2 months ago
2552884e3b
fix: Chart dot-name path bug
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 months ago
ec05dd5f04
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
...
Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 months ago
0a4757359e
[v3 backport] Fix rollback for missing resources
...
Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@est.tech>
2 months ago
711a4eaf40
fix(action): avoid nil REST client getter panic when installing CRDs
...
Signed-off-by: sergiochan <yuheng9211@qq.com>
3 months ago
6d809b20f1
Merge pull request #31883 from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3
...
[v3 backport] fix regression when pulling charts from OCI indices
3 months ago
b0dfec5af4
add image index test
...
Signed-off-by: Pedro Tôrres <pedrotorres@microsoft.com>
3 months ago
e629995c5d
fix pulling charts from OCI indices
...
Signed-off-by: Pedro Tôrres <pedrotorres@microsoft.com>
3 months ago
8361ebb4ed
Merge pull request #31830 from helm/dependabot/go_modules/dev-v3/k8s-io-5943130ff0
...
chore(deps): bump the k8s-io group with 7 updates
3 months ago
9c854fbd93
chore(deps): bump the k8s-io group with 7 updates
...
Bumps the k8s-io group with 7 updates:
| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api ) | `0.35.0` | `0.35.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ) | `0.35.0` | `0.35.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) | `0.35.0` | `0.35.1` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver ) | `0.35.0` | `0.35.1` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) | `0.35.0` | `0.35.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go ) | `0.35.0` | `0.35.1` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl ) | `0.35.0` | `0.35.1` |
Updates `k8s.io/api` from 0.35.0 to 0.35.1
- [Commits](https://github.com/kubernetes/api/compare/v0.35.0...v0.35.1 )
Updates `k8s.io/apiextensions-apiserver` from 0.35.0 to 0.35.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.35.0...v0.35.1 )
Updates `k8s.io/apimachinery` from 0.35.0 to 0.35.1
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.0...v0.35.1 )
Updates `k8s.io/apiserver` from 0.35.0 to 0.35.1
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.35.0...v0.35.1 )
Updates `k8s.io/cli-runtime` from 0.35.0 to 0.35.1
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.35.0...v0.35.1 )
Updates `k8s.io/client-go` from 0.35.0 to 0.35.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.0...v0.35.1 )
Updates `k8s.io/kubectl` from 0.35.0 to 0.35.1
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.35.0...v0.35.1 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/apiextensions-apiserver
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/apiserver
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/cli-runtime
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/client-go
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/kubectl
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
16feecfefa
Merge pull request #31829 from nokia/fix-nil-values
...
fix(values): preserve nil values when chart default is empty map - 3.20 backport
3 months ago
0d4d915337
Merge pull request #31823 from helm/dependabot/go_modules/dev-v3/golang.org/x/crypto-0.48.0
...
chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0
4 months ago
a692247486
chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.47.0 to 0.48.0.
- [Commits](https://github.com/golang/crypto/compare/v0.47.0...v0.48.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.48.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
88d299a66f
Merge pull request #31818 from helm/dependabot/go_modules/dev-v3/golang.org/x/term-0.40.0
...
chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0
4 months ago
9f2a7f696a
chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/term/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
a46e266cd0
Merge pull request #31821 from helm/dependabot/go_modules/dev-v3/golang.org/x/text-0.34.0
...
chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0
4 months ago
27628a0f0f
Merge pull request #31827 from helm/dependabot/go_modules/dev-v3/github.com/lib/pq-1.11.2
...
chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2
4 months ago
79f039be71
chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.11.1...v1.11.2 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
45210d597d
chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.33.0 to 0.34.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.33.0...v0.34.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
e2df39fc0b
Remove refactorring changes from coalesce_test.go
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
4 months ago
97affe067a
Fix import
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
4 months ago
c264166ec6
Update pkg/chart/common/util/coalesce_test.go
...
Co-authored-by: George Jenkins <gvjenkins@gmail.com>
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
4 months ago
d409df87ff
Fix lint warning
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
4 months ago
6fdd1017ce
Preserve nil values in chart already
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
4 months ago
b13743c8d4
fix(values): preserve nil values when chart default is empty map
...
Only delete nil user values when overriding a non-nil chart default.
When chart has empty map or no default for a key, preserve user's nil.
| Scenario | Result |
|----------|--------|
| User sets `baz: ~`, chart has `baz: "value"` | Key deleted |
| User sets `baz: ~`, chart has empty map `{}` | Nil preserved |
| User sets `baz: ~`, chart has `baz: ~` | Nil preserved |
Fixes #31643
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
4 months ago
a3899f16c9
Merge pull request #31774 from helm/dependabot/go_modules/dev-v3/github.com/lib/pq-1.11.1
...
chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1
4 months ago
703999db84
chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.10.9 to 1.11.1.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.10.9...v1.11.1 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.11.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
de11348b9d
Merge pull request #31719 from helm/dependabot/go_modules/dev-v3/golang.org/x/crypto-0.47.0
...
chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0
4 months ago
a04be9699e
chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.46.0 to 0.47.0.
- [Commits](https://github.com/golang/crypto/compare/v0.46.0...v0.47.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
b2e4314fa0
Merge pull request #31718 from scottrigby/bump-3.20
...
bump version to v3.20
4 months ago
f6e17f6735
bump version to v3.20
...
Signed-off-by: Scott Rigby <scott@r6by.com>
4 months ago
4e4f0eda5e
Merge pull request #31714 from helm/dependabot/go_modules/dev-v3/golang.org/x/text-0.33.0
...
chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0
5 months ago
Terry Howe
dependabot[bot]
George Jenkins
Evans Mungai
Terry Howe
Feruzjon Muyassarov
sergiochan
Pedro Tôrres
Matt Farina
Joe Julian
Robert Sirchia
Scott Rigby