8 Commits (release-4.3)

Author	SHA1	Message	Date
Matt Farina	b5b498b774	Updating the Go version ... This is needed for goreleaser to create updates. Its latest release needs it. Updates needed for linting and to fix failed tests resulting from Go std library changes. Signed-off-by: Matt Farina <matt.farina@suse.com>	2 weeks ago
Ruslan Shaydullin	67d54fd880	fix(provenance): support GnuPG keybox (pubring.kbx) keyrings (#32281) ... * fix(provenance): support GnuPG keybox (pubring.kbx) keyrings Starting with GnuPG 2.1, file-backed public keyrings can use ~/.gnupg/pubring.kbx instead of the legacy pubring.gpg. Helm only read the legacy format, so chart and plugin verification failed on installations using the file-backed keybox. Make the keyring loader format-aware: - GnuPG keybox (pubring.kbx): extract OpenPGP keyblocks from the keybox container without adding a dependency. Skip ephemeral blobs, matching GnuPG's own read behavior. - ASCII-armored keyrings: load single or concatenated exports. - Legacy binary packet streams (pubring.gpg): retain the existing path. defaultKeyring() falls back to pubring.kbx when pubring.gpg is absent. pubring.gpg keeps precedence when both files exist. This change covers file-backed public keyrings. It does not read the SQLite database used by keyboxd, which needs a separate design. Related to #31836 Signed-off-by: Ruslan Shaydullin <shaydullin.r.d@outlook.com> * fix(provenance): treat only not-exist as keyring absence in defaultKeyring A stat error other than 'not exist' (e.g. a permission problem) meant the file may well be present, but defaultKeyring() skipped past it: an unreadable pubring.gpg silently lost precedence to pubring.kbx, and the surfaced error could point at the wrong file. Treat only fs.ErrNotExist as absence. For any other stat error, return that path unchanged so the real error surfaces when the keyring is opened. Signed-off-by: Ruslan Shaydullin <shaydullin.r.d@outlook.com> --------- Signed-off-by: Ruslan Shaydullin <shaydullin.r.d@outlook.com> Co-authored-by: George Jenkins <gvjenkins@gmail.com>	3 weeks ago
Lohit Kolluri	ad93b7df63	feat: honor SOURCE_DATE_EPOCH for chart archives (#32162) ... * feat: honor SOURCE_DATE_EPOCH for chart archives Add StampModTimes() on Chart struct to recursively set ModTime on all chart file entries. CLI reads SOURCE_DATE_EPOCH env var and wires through all 5 commands: package, install, upgrade, dep build, dep update. Removes unused v3 duplicate source_date_epoch.go (YAGNI). Inlines env var parsing to CLI layer from chart util. Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com> * docs: document SOURCE_DATE_EPOCH in environment variables help Add a short entry for $SOURCE_DATE_EPOCH to the env var table shown in 'helm help'. The variable is honored by 'helm package', 'install', 'upgrade', 'dep build', and 'dep update' to produce reproducible chart archives. Full documentation belongs in helm-www. Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com> * fix: adapt SourceDateEpoch to upstream refactored dep check Upstream/main restructured the dependency error handling in install.go and upgrade.go from a nested-if block (if DependencyUpdate) to an early-return pattern (if !DependencyUpdate). Adapt the feature's Manager construction to match the new code structure. Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com> --------- Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com>	2 months ago
Terry Howe	c2f1b238a1	fix: route registry client output to stdout instead of stderr (#32056) ... Commands like 'helm registry login', 'helm push', and 'helm pull' were writing success messages ("Login Succeeded", "Pushed:", "Pulled:", "Digest:") to stderr instead of stdout. The root cause was that newDefaultRegistryClient and newRegistryClientWithTLS hard-coded os.Stderr as the registry client writer, ignoring the out io.Writer that main() passes as os.Stdout. Thread out io.Writer through newRegistryClient, newDefaultRegistryClient, and newRegistryClientWithTLS, and update all call sites in pkg/cmd. Fixes #13464 Signed-off-by: Terry Howe <terrylhowe@gmail.com>	3 months ago
Matthieu MOREL	259f76a849	fix(pkg): errorlint linter ... errorlint linter in pkg/cmd Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>	7 months ago
tison	90d01915f9	for all other similar cases ... Signed-off-by: tison <wander4096@gmail.com>	10 months ago
Matt Farina	fea6d8eb04	Updating to tested content cache ... A few things are added here: 1. The cache is made to be more generic as a content based cache. It could be used for other things such as plugins 2. Flags were added to specify the content cache locaiton rather than rely on the repository cache. Keeping the 2 the same hid bugs and errors. 3. Tests were added and updated to ensure the cache is used and tested Signed-off-by: Matt Farina <matt.farina@suse.com>	1 year ago
Austin Abro	297f7b9acb	squash ... Signed-off-by: Austin Abro <AustinAbro321@gmail.com>	2 years ago