6 Commits (0ee6c7bc9d6bf5c96089d8bfb7a66472067934ac)

Author	SHA1	Message	Date
Benoit Tigeot	0ee6c7bc9d	fix: deprecate MaxDecompressedFileSize instead of removing ... As Matt suggested we should keep the variable until v5 as it can be used because it is public. Related: - https://github.com/helm/helm/pull/31748#discussion_r2738518696 Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>	4 months ago
Benoit Tigeot	60294548e0	refactor: remove per-file decompression size limit ... Remove MaxDecompressedFileSize as it's no longer necessary after migrating to a maintained JSON schema library (santhosh-tekuri/jsonschema/v6). The original limit was added to protect against vulnerabilities in an unmaintained library. The total decompressed chart size limit (MaxDecompressedChartSize) remains to protect against other attack vectors. Partially resolves #30738 Related: - https://github.com/helm/helm/pull/30743 Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>	4 months ago
Matthieu MOREL	6d1490ed1e	fix(pkg): errorlint linter ... #### Description errorlint linter in pkg/cmd Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>	6 months ago
Mads Jensen	a490bb3c20	Use errors.Is to check for io.EOF and gzip.ErrHeader ... In GoLang, using the == operator to check for a certain error will not unwrap the error chain, and therefore may hide the problem. Signed-off-by: Mads Jensen <atombrella@users.noreply.github.com>	8 months ago
Matt Farina	ca8eae9361	Reproducible chart archive builds ... Building the same chart into an archive multiple times will have the same sha256 hash. Perviously, the time in the headers for a file was time.Now() which changed each time. The time is now collected from the operating system when the file is loaded and this time is used. Fixes: #3612 Signed-off-by: Matt Farina <matt.farina@suse.com>	9 months ago
Matt Farina	8dc7c57f50	Update the action interfaces for chart apiversions ... This change is about handling the interfaces to public functions for different chart apiVersions. The internals are still focused on v2. This enables v3 to be layered in layer. Signed-off-by: Matt Farina <matt.farina@suse.com>	11 months ago