06bb9cda55
Update the govulncheck.yml to run on change
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
Signed-off-by: MrJack <36191829+biagiopietro@users.noreply.github.com>
1 week ago
e89e351fb8
fix: prevent reporting fallback on version when none specified
...
Fixes: https://github.com/helm/helm/issues/31548
```
❯ helm pull rancher/longhorn-crd --version 106.2.0+up1.8.2 --destination /tmp/
level=WARN msg="unable to find exact version; falling back to closest available version" chart=longhorn-crd requested=106.2.0+up1.8.2 selected=106.2.0+up1.8.1
❯ bin/helm show chart brigade/brigade
apiVersion: v1
appVersion: v1.5.0
dependencies:
- condition: kashti.enabled
name: kashti
repository: https://brigadecore.github.io/charts
version: 0.7.0
- condition: brigade-github-app.enabled
name: brigade-github-app
repository: https://brigadecore.github.io/charts
version: 0.8.0
- alias: gw
condition: gw.enabled
name: brigade-github-oauth
repository: https://brigadecore.github.io/charts
version: 0.4.0
description: Brigade provides event-driven scripting of Kubernetes pipelines.
name: brigade
version: 1.10.0
```
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Signed-off-by: MrJack <36191829+biagiopietro@users.noreply.github.com>
1 week ago
27f8e27f0b
fix: preserve vendor suffixes in KubeVersion.GitVersion
...
Helm 3.19.0 introduced a regression where vendor-specific suffixes
(e.g., -gke.1245000, -eks-4096722, +) are stripped from
.Capabilities.KubeVersion.GitVersion, breaking charts that detect
managed Kubernetes platforms.
The root cause was using k8sversion.ParseGeneric().String() which
intentionally discards vendor suffixes. The fix stores both the full
version (with vendor suffix) and a normalized version. String() returns
the normalized version for constraint checking (e.g., ">= 1.21.0"),
while Version/GitVersion preserve the full string for template access.
Fixes #31423
Related to #31063 , #31078
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Signed-off-by: MrJack <36191829+biagiopietro@users.noreply.github.com>
1 week ago
aa29dd4995
Revert "fix(action): enable server-side validation for dry-run=server"
...
This reverts commit c5b6eea1a0
1 week ago
6495074826
Revert "Revert "feat(plugin): add --version flag to plugin update command""
...
This reverts commit d1a7fc5fa1
1 week ago
209569af01
Revert "feat(plugin): add --version flag to plugin update command"
...
This reverts commit bd37347a06
1 week ago
c5b6eea1a0
fix(action): enable server-side validation for dry-run=server
...
When using --dry-run=server with --server-side=true, Helm now properly
validates manifests against the Kubernetes API server. Previously, the
dry-run would return early without calling the API, missing validation
errors like unknown fields in the spec.
This fix ensures that DryRunServer mode calls KubeClient.Create/Update
with the dry-run option, matching the behavior of kubectl apply
--dry-run=server.
Fixes : helm/helm#31505
Signed-off-by: MrJack <36191829+biagiopietro@users.noreply.github.com>
3 weeks ago
bd37347a06
feat(plugin): add --version flag to plugin update command
...
Add support for specifying a version constraint when updating plugins,
matching the existing behavior of helm plugin install.
Changes:
- Add --version flag to plugin update command
- Update VCSInstaller.Update() to resolve and checkout specified version
- Update FindSource() to accept version parameter
- Add TestVCSInstallerUpdateWithVersion test for version support
Signed-off-by: MrJack <36191829+biagiopietro@users.noreply.github.com>
3 weeks ago
5bab984cef
Merge pull request #31599 from helm/dependabot/github_actions/main/actions/checkout-6.0.1
...
chore(deps): bump actions/checkout from 6.0.0 to 6.0.1
3 weeks ago
e91cdd6b3e
Merge pull request #31602 from helm/dependabot/github_actions/main/golangci/golangci-lint-action-9.2.0
...
chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0
3 weeks ago
292f8a8526
Merge pull request #31603 from helm/dependabot/github_actions/main/actions/stale-10.1.1
...
chore(deps): bump actions/stale from 10.1.0 to 10.1.1
3 weeks ago
581ab1afe9
chore(deps): bump actions/stale from 10.1.0 to 10.1.1
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.1.0 to 10.1.1.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](5f858e3efb...997185467f
3 weeks ago
e62bf7fcc9
chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 9.1.0 to 9.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](e7fa5ac41e...1e7e51e771
3 weeks ago
e6b2068afd
chore(deps): bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1af3b93b68...8e8c483db8
4 weeks ago
ff35414bed
Merge pull request #31546 from benoittgt/31544-nil-pointer
...
fix(lint): prevent segmentation violation on only comment yaml in multidoc
4 weeks ago
dfa1e3c3c5
Merge pull request #31562 from atombrella/feature/modernize
...
Use modernize to use newer Golang features.
4 weeks ago
51076a073a
Merge pull request #31519 from TerryHowe/chore-add-warning-for-registry-login
...
chore: add warning for registry login with namespace
4 weeks ago
dbd07fa16c
Merge pull request #31577 from megha1906/main
...
chore: fix typo in pkg/downloader/chart_downloader.go
1 month ago
e71a29ce4f
chore: fix typo in pkg/downloader/chart_downloader.go
...
Signed-off-by: megha1906 <meghabansal135@gmail.com>
1 month ago
722482b77d
Merge pull request #31561 from atombrella/feature/nilness_cleanup
...
Remove two redundant if-checks.
1 month ago
e824d94f74
Merge pull request #31557 from helm/dependabot/github_actions/main/golangci/golangci-lint-action-9.1.0
...
chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0
1 month ago
4d54bea5ff
Merge pull request #31491 from benoittgt/31490-plugin-name-helper
...
feat: improve plugin name validation error messages and field name detection (v1)
1 month ago
00e12b8477
Merge pull request #31560 from mattfarina/fix-kube-client-logging
...
Fix kube client logging
1 month ago
6cceead399
Use modernize to use newer Golang features.
...
The rangeint suggestion is faster.
The maps.Copy and slices.Contains are just syntatic sugar.
Signed-off-by: Mads Jensen <atombrella@users.noreply.github.com>
1 month ago
380abe2b16
Remove two redundant if-checks.
...
These were found with the nilness checker.
Signed-off-by: Mads Jensen <atombrella@users.noreply.github.com>
1 month ago
936cd328ac
Fix kube client logging
...
The kube client logging is based on the actionConfig logging. This
is setup to use slog.Default() before the logging flags are parsed
and logging is setup.
newRootCmdWithConfig changes the logging but it wasn't picked up
for actionConfig or the kube client. This change updates the logging
to include any changes.
Signed-off-by: Matt Farina <matt.farina@suse.com>
1 month ago
61d289c119
Merge pull request #31518 from gjenkins8/gjenkins/fix_update_create
...
fix: Use server-side apply for object create during update
1 month ago
698fcd2290
Merge pull request #31515 from gjenkins8/gjenkins/copy_adopted
...
fix: Copy adopted resource info
1 month ago
cb35947ae6
chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](0a35821d5c...e7fa5ac41e
1 month ago
bd9425c00b
Merge pull request #31550 from helm/dependabot/github_actions/main/actions/setup-go-6.1.0
...
chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0
1 month ago
2a614eeeab
Merge pull request #31551 from helm/dependabot/github_actions/main/actions/checkout-6.0.0
...
chore(deps): bump actions/checkout from 5.0.1 to 6.0.0
1 month ago
4fddc64678
chore(deps): bump actions/checkout from 5.0.1 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](93cb6efe18...1af3b93b68
1 month ago
b87f2da2f8
chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.5.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](d35c59abb0...4dc6199c7b
1 month ago
81d244ca21
fix: prevent segmentation violation on empty yaml in multidoc
...
Fixes: https://github.com/helm/helm/issues/31544
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
1 month ago
df6aafeeee
Merge pull request #31462 from mattfarina/load-archive
...
Adding a LoadArchive to common loader
1 month ago
63858b383f
Merge pull request #31535 from mattfarina/bump-4.1
...
bump version to 4.1
1 month ago
eb3da36e2e
Merge pull request #31530 from shuv0id/improve-debug-logging
...
fix: add missing context to debug logs
1 month ago
47e940341f
Merge pull request #31527 from helm/dependabot/github_actions/main/actions/checkout-5.0.1
...
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1
1 month ago
c185492188
Merge pull request #31540 from helm/dependabot/go_modules/main/github.com/cyphar/filepath-securejoin-0.6.1
...
chore(deps): bump github.com/cyphar/filepath-securejoin from 0.6.0 to 0.6.1
1 month ago
02000f4710
Merge pull request #31542 from helm/dependabot/go_modules/golang.org/x/crypto-0.45.0
...
chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0
1 month ago
c2405ce8c2
chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.45.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
1 month ago
28baa972c1
chore(deps): bump github.com/cyphar/filepath-securejoin
...
Bumps [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin ) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases )
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md )
- [Commits](https://github.com/cyphar/filepath-securejoin/compare/v0.6.0...v0.6.1 )
---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
dependency-version: 0.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 month ago
63dcb5c74c
Merge pull request #31464 from benoittgt/fix-test
...
Properly test error messages on pull command's test
1 month ago
a7ba4fc80e
Merge pull request #31514 from yxxhero/fix-helm-plugin-cmd-args-env-issues
...
Refactor environment variable expansion in PrepareCommands and update tests
1 month ago
63e060fb05
bump version to 4.1
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
1 month ago
2dc5864f44
fix: add missing context to debug logs
...
Adds chart name to dependency logs, namespace to resource waiting logs,
and confirmation message when all resources are ready.
Addresses #31520
Signed-off-by: shuv0id <110290476+shuv0id@users.noreply.github.com>
1 month ago
f6ceae9b74
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...93cb6efe18
1 month ago
f8a49f1852
fixup test
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
1 month ago
a9cdc78116
logs
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
1 month ago
b1a976073f
fix
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
1 month ago
Matt Farina
Benoit Tigeot
MrJack
Robert Sirchia
dependabot[bot]
George Jenkins
megha1906
Scott Rigby
Mads Jensen
shuv0id