George Jenkins
bd061e0cd7
Merge pull request #32016 from TerryHowe/fix/flaky-waitfordelete-timeout
...
test(kube): fix flaky WaitForDelete timing in status wait tests
12 hours ago
Matheus Pimenta
a27f1add79
fix(templating): fix wrong YAML separator parsing for post-renderers ( #31941 )
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
23 hours ago
Terry Howe
cf69a6ef70
Merge pull request #32030 from helm/dependabot/go_modules/main/golang.org/x/crypto-0.50.0
...
chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0
1 day ago
Robert Sirchia
38213a9548
Merge pull request #32000 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.3
...
chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3
1 day ago
Terry Howe
ed7c3e47a9
Merge pull request #32028 from gjenkins8/gjenkins/release_notes_v4
...
chore: Update release notes script for Helm v4
2 days ago
dependabot[bot]
953f5f031b
chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/crypto/compare/v0.49.0...v0.50.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.50.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 days ago
Terry Howe
79493bc6a8
Merge pull request #32031 from helm/dependabot/go_modules/main/golang.org/x/term-0.42.0
...
chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0
2 days ago
dependabot[bot]
10fc5f335b
chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.41.0 to 0.42.0.
- [Commits](https://github.com/golang/term/compare/v0.41.0...v0.42.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 days ago
Terry Howe
36030c947b
Merge pull request #32029 from helm/dependabot/go_modules/main/golang.org/x/text-0.36.0
...
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0
2 days ago
dependabot[bot]
d89e7c6076
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.35.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 days ago
George Jenkins
8a95461925
chore: Update release notes script for Helm v4
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 days ago
Terry Howe
be5aaf7e34
Merge pull request #32024 from helm/dependabot/go_modules/main/github.com/fluxcd/cli-utils-1.0.0
...
chore(deps): bump github.com/fluxcd/cli-utils from 0.37.2-flux.1 to 1.0.0
2 days ago
dependabot[bot]
bd5027a9cf
chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.2 to 1.12.3.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.2...v1.12.3 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 days ago
Terry Howe
fa194a0609
Merge pull request #32025 from gjenkins8/gjenkins/fix_lint
...
fix: unnecessary-format lint issues from merge
2 days ago
George Jenkins
087736b66e
fix: unnecessary-format lint issues from merge
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 days ago
George Jenkins
bc215d8c19
Merge commit from fork
...
fix: Plugin missing provenance bypass
2 days ago
George Jenkins
586eb57338
fix: Plugin missing provenance bypass
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 days ago
George Jenkins
f7c4d75574
Merge commit from fork
...
fix: Chart dot-name path bug
3 days ago
George Jenkins
f8afb35f4e
Merge commit from fork
...
fix: Plugin version path traversal
3 days ago
dependabot[bot]
c8c5dfad63
chore(deps): bump github.com/fluxcd/cli-utils
...
Bumps [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils ) from 0.37.2-flux.1 to 1.0.0.
- [Release notes](https://github.com/fluxcd/cli-utils/releases )
- [Commits](https://github.com/fluxcd/cli-utils/compare/v0.37.2-flux.1...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/fluxcd/cli-utils
dependency-version: 1.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
Matt Farina
8985aed4e3
Merge pull request #32022 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp-1.43.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0
3 days ago
dependabot[bot]
998466cfcf
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
Matt Farina
e8988d3ead
Merge pull request #32021 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.43.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0
3 days ago
dependabot[bot]
b0cec589f5
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
Matt Farina
7a76d370e4
Merge pull request #32020 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp-0.19.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0
3 days ago
dependabot[bot]
6ebfb29dbf
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go ) from 0.18.0 to 0.19.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v0.18.0...v0.19.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
dependency-version: 0.19.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
Robert Sirchia
995f667e55
Merge pull request #31983 from helm/dependabot/github_actions/main/actions/setup-go-6.4.0
...
chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0
3 days ago
Robert Sirchia
2e36897f7c
Merge pull request #32015 from helm/dependabot/go_modules/main/github.com/distribution/distribution/v3-3.1.0
...
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0
3 days ago
Robert Sirchia
a4e61a1c77
Merge pull request #32012 from helm/dependabot/go_modules/github.com/distribution/distribution/v3-3.1.0
...
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0
3 days ago
Terry Howe
a7f84439aa
test(kube): fix flaky WaitForDelete test by avoiding informer sync race
...
The previous fix (increasing timeout / reducing deletion delay) did not
work because the flakiness is not a timing problem at all.
Root cause: fluxcd/cli-utils HasSynced() returns true after the initial
list item is *popped* from DeltaFIFO, which is before AddFunc delivers
the ResourceUpdateEvent to the collector. This creates a race where the
SyncEvent can arrive at the statusObserver *before* the pod's Current
status is recorded. When that happens:
- statusObserver sees pod as Unknown
- Unknown is skipped for WaitForDelete (by design, to handle resources
that were already deleted before watching started)
- AggregateStatus([], NotFoundStatus) == NotFoundStatus → cancel()
- The watch context is cancelled before DeleteFunc can fire
- Final check: pod still Current → error
The test intent is to verify that waitForDeleteCtx (not the cancelled
generalCtx) is selected. A non-existent resource satisfies this:
- With waitForDeleteCtx=Background(): informer syncs with empty list
→ Unknown → cancel → success ✓
- With generalCtx (cancelled, wrong): context immediately done
→ ctx.Err() appended → error returned ✓
Remove the goroutine-based deletion and the pod creation to eliminate
the race while preserving the context-selection assertion.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
4 days ago
Terry Howe
c004f4ddfe
Merge pull request #32014 from AnmolVirdi/doc-import-minor
...
Minor fix (docs.go): fix import instructions to comply with canonical import paths
4 days ago
Terry Howe
4c0d21f53f
test(kube): fix flaky WaitForDelete timing in status wait tests
...
TestMethodContextOverridesGeneralContext/WaitForDelete used a 1s
timeout with a 500ms deletion delay, leaving only ~500ms for the
fake watcher to propagate the delete event. On loaded CI runners
this window is too tight and causes intermittent failures.
Increase the timeout to 5s and reduce the deletion delay to 100ms
so there is ample headroom. Apply the same deletion-delay reduction
to TestStatusWaitForDelete which shares the same pattern.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
4 days ago
dependabot[bot]
08dea9c140
chore(deps): bump github.com/distribution/distribution/v3
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
Anmol Virdi
de58531ca7
Minor nit: fix import instructions to comply with canonical import paths
...
Signed-off-by: Anmol Virdi <anmolvirdi2000@gmail.com>
5 days ago
dependabot[bot]
9b1ad4cf02
chore(deps): bump github.com/distribution/distribution/v3
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
Terry Howe
1be395e7aa
Merge pull request #31996 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.2
...
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
1 week ago
dependabot[bot]
cd7cf76a17
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago
Terry Howe
4d4642b83f
Merge pull request #31994 from helm/dependabot/github_actions/main/github/codeql-action-4.35.1
...
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
1 week ago
dependabot[bot]
45ee55b83f
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.7 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e296a93559...c10b8064de )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago
Terry Howe
67ef801c98
Merge pull request #31974 from TerryHowe/fix/pin-actions-to-sha
...
fix: pin codeql-action/upload-sarif to commit SHA
1 week ago
Terry Howe
e2a2ed5009
Merge pull request #31984 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.1
...
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
2 weeks ago
dependabot[bot]
9a06741884
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
dependabot[bot]
d1e31ca507
chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.2.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](7a3fe6cf4c...4a3601121d )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
Terry Howe
7e149c7229
Merge pull request #31973 from Debasish-87/fix-registry-comments
...
docs(registry): fix incorrect and improve clarity of comments in client.go
2 weeks ago
Terry Howe
7025480397
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
...
Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.
Signed-off-by: Terry Howe <thowe@nvidia.com>
2 weeks ago
Debasish Mohanty
85bf56ea82
docs(registry): fix incorrect and improve clarity of comments in client.go
...
- Fixed incorrect comment in ClientOptPlainHTTP
- Improved clarity of LoginOptPlainText comment
- Enhanced Login function documentation
- Improved wording for ClientOptHTTPClient
No functional changes.
Signed-off-by: Debasish Mohanty <139056705+Debasish-87@users.noreply.github.com>
2 weeks ago
George Jenkins
b3927b3900
Merge pull request #31961 from helm/dependabot/go_modules/main/github.com/ProtonMail/go-crypto-1.4.1
...
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
3 weeks ago
George Jenkins
23a25f67ff
Merge pull request #31960 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.0
...
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
3 weeks ago
Terry Howe
8e44f8e3fe
Merge pull request #31957 from Mentigen/add-mustToToml
...
feat(engine): add mustToToml template function
3 weeks ago
Terry Howe
7369ac0eaa
Merge pull request #31959 from helm/dependabot/go_modules/main/github.com/fatih/color-1.19.0
...
chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0
3 weeks ago