2b128dcd27
docs: add LibreDB to ADOPTERS.md ( #32704 )
...
Signed-off-by: Abdullah Kaya <abdullah.kaya@libredb.org>
12 hours ago
8a9993eff0
chore(deps): bump the github-actions group across 1 directory with 4 updates ( #32701 )
...
Bumps the github-actions group with 4 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](1c5b675653...2892aa5e19https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](1c5b675653...2892aa5e19https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](1c5b675653...2892aa5e19https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](1c5b675653...2892aa5e19
2 days ago
88baf07aae
chore(deps): bump github.com/ProtonMail/go-crypto from 1.5.0 to 1.5.2 ( #32699 )
...
Bumps [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto ) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/ProtonMail/go-crypto/releases )
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.5.0...v1.5.2 )
---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
dependency-version: 1.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 days ago
2de5afa0bc
chore(deps): bump github.com/distribution/distribution/v3 ( #32698 )
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.1.1...v3.1.2 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 days ago
8107b76042
chore(deps): bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.0 ( #32690 )
...
Bumps [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto ) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/ProtonMail/go-crypto/releases )
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.4.1...v1.5.0 )
---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
dependency-version: 1.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 days ago
d31cd6992f
chore(deps): bump the github-actions group with 4 updates ( #32677 )
...
Bumps the github-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b96794f015...1c5b675653https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b96794f015...1c5b675653https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b96794f015...1c5b675653https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b96794f015...1c5b675653
1 week ago
e9f1921aa5
Merge pull request #32661 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc-0.21.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.18.0 to 0.21.0
1 week ago
4c8a1b2361
chore(deps): bump otlploghttp and stdoutlog to v0.21.0
...
otel/log v0.21.0 removed log.Kind, log.Value and log.KeyValue, so the
otlploghttp and stdoutlog exporters must move to the matching release
or they fail to compile.
Signed-off-by: Terry Howe <thowe@nvidia.com>
1 week ago
6f5c2f5f72
feat(storage): add internal/storage/driver for release v2 ( #32667 )
...
* feat(storage): add internal/storage/driver for release v2
Copy of pkg/storage/driver operating on internal/release/v2, with the
storage object Type field set to helm.sh/release.v2. The
sh.helm.release.v1 name prefix is unchanged.
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* feat(storage): mark configmap release schema with a label
ConfigMaps have no Type field to record it in, unlike Secrets. Absence
of the label means v1. Also documents why the sh.helm.release.v1 name
prefix is decoupled from Type.
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Update internal/storage/driver/sql.go
Co-authored-by: Terry Howe <terrylhowe@gmail.com>
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Update test
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* PR comment fixes
- Add comment to explain sql driver update behaviour when it comes to updating custom labels
- Apply custom labels in memory driver
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Update internal/storage/driver/records.go
Co-authored-by: Terry Howe <terrylhowe@gmail.com>
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
---------
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
Co-authored-by: Terry Howe <terrylhowe@gmail.com>
1 week ago
e0f9bdac28
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go ) from 0.18.0 to 0.21.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v0.18.0...log/v0.21.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc
dependency-version: 0.21.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago
7fd3c5e8f2
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp ( #32665 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.43.0 to 1.45.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.45.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.45.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
c378ef66c8
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc ( #32664 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.44.0...v1.45.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.45.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
855985a0c6
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace ( #32663 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.44.0...v1.45.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.45.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
37c258a8f4
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 ( #32662 )
...
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.44.0...v1.45.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.45.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
c3bb7ad28e
chore(deps): bump sigs.k8s.io/controller-runtime from 0.25.0 to 0.25.1 ( #32654 )
...
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) from 0.25.0 to 0.25.1.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.25.0...v0.25.1 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
dependency-version: 0.25.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
31050af088
chore(deps): bump github.com/mattn/go-shellwords from 1.0.14 to 1.0.15 ( #32652 )
...
Bumps [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/mattn/go-shellwords/releases )
- [Commits](https://github.com/mattn/go-shellwords/compare/v1.0.14...v1.0.15 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-shellwords
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
3e382d022a
chore(deps): bump the github-actions group with 4 updates ( #32649 )
...
Bumps the github-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015
2 weeks ago
bfa3b6c325
chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 ( #32645 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.56.0 to 0.57.0.
- [Commits](https://github.com/golang/crypto/compare/v0.56.0...v0.57.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.57.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
0d4048c62a
chore(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 ( #32643 )
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/term/compare/v0.45.0...v0.46.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.46.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
c90810dda4
chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0 ( #32641 )
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.41.0...v0.42.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
402938cd0f
chore(deps): bump github.com/fluxcd/cli-utils from 1.2.3 to 1.3.0 ( #32639 )
...
Bumps [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils ) from 1.2.3 to 1.3.0.
- [Release notes](https://github.com/fluxcd/cli-utils/releases )
- [Commits](https://github.com/fluxcd/cli-utils/compare/v1.2.3...v1.3.0 )
---
updated-dependencies:
- dependency-name: github.com/fluxcd/cli-utils
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
62c7e845d1
Merge pull request #32636 from helm/dependabot/go_modules/google.golang.org/grpc-1.83.2
...
chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2
3 weeks ago
614120ff25
chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.83.1 to 1.83.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.1...v1.83.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.83.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
87268ee077
chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 ( #32632 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.55.0 to 0.56.0.
- [Commits](https://github.com/golang/crypto/compare/v0.55.0...v0.56.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
357678488e
chore(deps): bump sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0 ( #32631 )
...
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) from 0.24.1 to 0.25.0.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.24.1...v0.25.0 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
dependency-version: 0.25.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
fa11636b01
Merge pull request #32590 from cuishuang/main
...
fix(downloader): pass getter options when fetching cached provenance
4 weeks ago
7803d52e7f
Merge pull request #32598 from helm/dependabot/go_modules/main/k8s-io-997deca8d0
...
chore(deps): bump the k8s-io group across 1 directory with 6 updates
4 weeks ago
61313b07c1
Merge pull request #32613 from helm/dependabot/go_modules/main/github.com/fluxcd/cli-utils-1.2.3
...
chore(deps): bump github.com/fluxcd/cli-utils from 1.2.2 to 1.2.3
4 weeks ago
b588bcd32f
chore(deps): bump the k8s-io group across 1 directory with 6 updates
...
Bumps the k8s-io group with 3 updates in the / directory: [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ), [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl ).
Updates `k8s.io/apiextensions-apiserver` from 0.36.4 to 0.37.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.36.4...v0.37.0 )
Updates `k8s.io/apimachinery` from 0.36.4 to 0.37.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.36.4...v0.37.0 )
Updates `k8s.io/apiserver` from 0.36.4 to 0.37.0
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.36.4...v0.37.0 )
Updates `k8s.io/cli-runtime` from 0.36.4 to 0.37.0
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.36.4...v0.37.0 )
Updates `k8s.io/client-go` from 0.36.4 to 0.37.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.36.4...v0.37.0 )
Updates `k8s.io/kubectl` from 0.36.4 to 0.37.0
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.36.4...v0.37.0 )
---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-io
- dependency-name: k8s.io/apiserver
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-io
- dependency-name: k8s.io/cli-runtime
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-io
- dependency-name: k8s.io/client-go
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-io
- dependency-name: k8s.io/kubectl
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-io
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
42af994c33
Merge pull request #32614 from helm/dependabot/go_modules/google.golang.org/grpc-1.83.1
...
chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1
4 weeks ago
9c9c8e10ca
chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.82.1 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.1...v1.83.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.83.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
fa6ea21d4c
chore(deps): bump github.com/fluxcd/cli-utils from 1.2.2 to 1.2.3
...
Bumps [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils ) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/fluxcd/cli-utils/releases )
- [Commits](https://github.com/fluxcd/cli-utils/compare/v1.2.2...v1.2.3 )
---
updated-dependencies:
- dependency-name: github.com/fluxcd/cli-utils
dependency-version: 1.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
67946bb22e
chore(deps): bump the github-actions group across 1 directory with 4 updates ( #32603 )
...
Bumps the github-actions group with 4 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](db488ddef3...cdf488f595https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](db488ddef3...cdf488f595https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](db488ddef3...cdf488f595https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](db488ddef3...cdf488f595
4 weeks ago
4ba1280837
chore(deps): bump github.com/gobwas/glob from 0.2.3 to 1.0.0 ( #32602 )
...
Bumps [github.com/gobwas/glob](https://github.com/gobwas/glob ) from 0.2.3 to 1.0.0.
- [Release notes](https://github.com/gobwas/glob/releases )
- [Commits](https://github.com/gobwas/glob/compare/v0.2.3...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/gobwas/glob
dependency-version: 1.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
702c67e97d
chore(deps): bump github.com/gofrs/flock from 0.13.0 to 0.13.1 ( #32601 )
...
Bumps [github.com/gofrs/flock](https://github.com/gofrs/flock ) from 0.13.0 to 0.13.1.
- [Release notes](https://github.com/gofrs/flock/releases )
- [Commits](https://github.com/gofrs/flock/compare/v0.13.0...v0.13.1 )
---
updated-dependencies:
- dependency-name: github.com/gofrs/flock
dependency-version: 0.13.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
c0039291c1
bump version to 4.3 ( #32605 )
...
Signed-off-by: Scott Rigby <scott@r6by.com>
1 month ago
4c36bd1d4e
Merge pull request #32364 from gjenkins8/gjenkins/cleanup_deprecated_todo_comments
...
chore: Cleanup deprecated and TODO comments
1 month ago
babae796e3
chore: Cleanup deprecated and TODO comments
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
1 month ago
2b3f680754
Merge pull request #32596 from gjenkins8/gjenkins/fix_ci
...
chore: Fix independent-merge lint issues
1 month ago
ca6681ca55
chore: Fix independent-merge lint issues
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
1 month ago
37752b70b2
refactor(repo): Use byte buffer to build index file ( #32579 )
...
The string returned by the string builder was cast to a byte slice
anyways. Remove this indirection. Also, write directly to the buffer
instead of using fmt.Fprintln(...).
Signed-off-by: Tom Wieczorek <twieczorek@mirantis.com>
1 month ago
28e64bd2dd
chore: fix gofumpt extra-rules ( #32486 )
...
* chore: fix gofumpt extra-rules
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
* Apply suggestions from code review
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
---------
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
1 month ago
4dfbaa40c6
Remove deprecated `internal/chart/v3/` code ( #32365 )
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
1 month ago
9a3c040369
fix(template): regression - route registry messages to stderr in template and show ( #32217 )
...
* fix: route registry messages to stderr in template and show
When pulling an OCI chart, the registry client prints "Pulled: ..." and
"Digest: ..." status lines (and deprecation/underscore warnings) to its
configured output writer. Since v4.2.1 (introduced by #32056 ), these
messages leaked into the stdout output of helm template and helm show,
breaking downstream consumers such as cdk8s and other YAML parsers.
Fix by passing the command's stderr to the registry client in the
template and show commands instead of stdout. This keeps stdout clean
for machine-readable YAML while still surfacing registry warnings and
status messages on stderr for troubleshooting, rather than discarding
them. The pull/push commands continue to print these messages on their
normal output writer.
The show command's addRegistryClient writer parameter is renamed to
registryOut and wired through to the registry client, so it is no longer
a no-op.
Fixes #32215
Signed-off-by: amarkdotdev <amarkdotdev@users.noreply.github.com>
* test(cmd): cover registry client stderr routing via OCI pull
Exercise helm template and helm show against an in-process OCI registry
(repotest.NewOCIServer) and assert Pulled:/Digest: status lines appear
on stderr only, keeping stdout free of registry noise.
Signed-off-by: amarkdotdev <amarkdotdev@users.noreply.github.com>
* test(cmd): drop weak addRegistryClient unit test
OCI pull coverage already asserts Pulled/Digest land on stderr, not stdout.
Signed-off-by: amarkdotdev <amarkdotdev@users.noreply.github.com>
---------
Signed-off-by: amarkdotdev <amarkdotdev@users.noreply.github.com>
Co-authored-by: amarkdotdev <amarkdotdev@users.noreply.github.com>
1 month ago
11e2010aeb
refactor: remove per-file decompression size limit ( #31748 )
...
* refactor: remove per-file decompression size limit
Remove MaxDecompressedFileSize as it's no longer necessary after
migrating to a maintained JSON schema library (santhosh-tekuri/jsonschema/v6).
The original limit was added to protect against vulnerabilities in an
unmaintained library.
The total decompressed chart size limit (MaxDecompressedChartSize) remains
to protect against other attack vectors.
Partially resolves #30738
Related:
- https://github.com/helm/helm/pull/30743
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* fix: deprecate MaxDecompressedFileSize instead of removing
As Matt suggested we should keep the variable until v5 as it can be used
because it is public.
Related:
- https://github.com/helm/helm/pull/31748#discussion_r2738518696
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* fix: enforce aggregate size budget on directory loading
Directory-based chart loading (`LoadDir`) used unbounded `os.ReadFile`
calls with no total size check. Archive loading already enforces
`MaxDecompressedChartSize` via a remaining-byte budget but directory
loading did not, leaving local charts and `file://` dependencies as
an unbounded memory path.
Add `ReadFileWithBudget` in the archive package and use it in both
v2 and v3 directory loaders so they track the same aggregate budget.
Ref: https://github.com/helm/helm/pull/31748#issuecomment-4138927643
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* fix: cap directory budget reads with LimitReader
Use `os.Open` + `io.LimitReader` instead of `os.ReadFile` in
`ReadFileWithBudget` so a file that grows between stat and read
cannot allocate unbounded memory.
Also fix `MaxDecompressedFileSize` doc comment to reflect it is
unused/deprecated, add nil guard on remaining, and check
`os.Stat` errors in tests.
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* test: add v3 directory loader budget test
Mirror the v2 `TestLoadDirExceedsBudget` test for the v3 loader
to prevent budget enforcement regressions in either path.
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* refactor(loader): make read budget configurable
Follow recommendations from https://github.com/helm/helm/pull/31748#discussion_r3058581419
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* fix(loader): export BudgetedReader for cross-package use
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
* fix(loader): rename max param to avoid shadowing built-in
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
---------
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
1 month ago
d2de64e64b
Merge pull request #32577 from mattfarina/bump-go-1.27
...
Updating the Go version
1 month ago
57a67b30d2
fix(downloader): pass getter options when fetching cached provenance
...
Signed-off-by: cuishuang <imcusg@gmail.com>
1 month ago
b5b498b774
Updating the Go version
...
This is needed for goreleaser to create updates. Its latest release
needs it.
Updates needed for linting and to fix failed tests resulting from
Go std library changes.
Signed-off-by: Matt Farina <matt.farina@suse.com>
1 month ago
d62bee21c2
Merge pull request #32570 from MsfPablo/fix-readiness-log-typo
...
fix: correct 'doest not match' in readiness debug logs
1 month ago
1af7ea274a
Merge branch 'main' into fix-readiness-log-typo
1 month ago
Abdullah Kaya
dependabot[bot]
Evans Mungai
Terry Howe
Robert Sirchia
George Jenkins
Scott Rigby
Tom Wieczorek
Matthieu MOREL
Aaron Mark
Benoit Tigeot
Matt Farina
cuishuang