Adesh Deshmukh
c29596092f
Merge 3b47bb2e34 into ed7c3e47a9
3 days ago
Terry Howe
ed7c3e47a9
Merge pull request #32028 from gjenkins8/gjenkins/release_notes_v4
...
chore: Update release notes script for Helm v4
4 days ago
Terry Howe
79493bc6a8
Merge pull request #32031 from helm/dependabot/go_modules/main/golang.org/x/term-0.42.0
...
chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0
4 days ago
dependabot[bot]
10fc5f335b
chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.41.0 to 0.42.0.
- [Commits](https://github.com/golang/term/compare/v0.41.0...v0.42.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 days ago
Terry Howe
36030c947b
Merge pull request #32029 from helm/dependabot/go_modules/main/golang.org/x/text-0.36.0
...
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0
4 days ago
dependabot[bot]
d89e7c6076
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.35.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 days ago
George Jenkins
8a95461925
chore: Update release notes script for Helm v4
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
4 days ago
Terry Howe
be5aaf7e34
Merge pull request #32024 from helm/dependabot/go_modules/main/github.com/fluxcd/cli-utils-1.0.0
...
chore(deps): bump github.com/fluxcd/cli-utils from 0.37.2-flux.1 to 1.0.0
4 days ago
Terry Howe
fa194a0609
Merge pull request #32025 from gjenkins8/gjenkins/fix_lint
...
fix: unnecessary-format lint issues from merge
4 days ago
George Jenkins
087736b66e
fix: unnecessary-format lint issues from merge
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
4 days ago
George Jenkins
bc215d8c19
Merge commit from fork
...
fix: Plugin missing provenance bypass
4 days ago
George Jenkins
586eb57338
fix: Plugin missing provenance bypass
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
4 days ago
George Jenkins
f7c4d75574
Merge commit from fork
...
fix: Chart dot-name path bug
4 days ago
George Jenkins
f8afb35f4e
Merge commit from fork
...
fix: Plugin version path traversal
4 days ago
dependabot[bot]
c8c5dfad63
chore(deps): bump github.com/fluxcd/cli-utils
...
Bumps [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils ) from 0.37.2-flux.1 to 1.0.0.
- [Release notes](https://github.com/fluxcd/cli-utils/releases )
- [Commits](https://github.com/fluxcd/cli-utils/compare/v0.37.2-flux.1...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/fluxcd/cli-utils
dependency-version: 1.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
Matt Farina
8985aed4e3
Merge pull request #32022 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp-1.43.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0
5 days ago
dependabot[bot]
998466cfcf
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
Matt Farina
e8988d3ead
Merge pull request #32021 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.43.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0
5 days ago
dependabot[bot]
b0cec589f5
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
Matt Farina
7a76d370e4
Merge pull request #32020 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp-0.19.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0
5 days ago
dependabot[bot]
6ebfb29dbf
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go ) from 0.18.0 to 0.19.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v0.18.0...v0.19.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
dependency-version: 0.19.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
Robert Sirchia
995f667e55
Merge pull request #31983 from helm/dependabot/github_actions/main/actions/setup-go-6.4.0
...
chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0
5 days ago
Robert Sirchia
2e36897f7c
Merge pull request #32015 from helm/dependabot/go_modules/main/github.com/distribution/distribution/v3-3.1.0
...
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0
5 days ago
Robert Sirchia
a4e61a1c77
Merge pull request #32012 from helm/dependabot/go_modules/github.com/distribution/distribution/v3-3.1.0
...
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0
5 days ago
Terry Howe
c004f4ddfe
Merge pull request #32014 from AnmolVirdi/doc-import-minor
...
Minor fix (docs.go): fix import instructions to comply with canonical import paths
6 days ago
dependabot[bot]
08dea9c140
chore(deps): bump github.com/distribution/distribution/v3
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
7 days ago
Anmol Virdi
de58531ca7
Minor nit: fix import instructions to comply with canonical import paths
...
Signed-off-by: Anmol Virdi <anmolvirdi2000@gmail.com>
7 days ago
dependabot[bot]
9b1ad4cf02
chore(deps): bump github.com/distribution/distribution/v3
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
7 days ago
Terry Howe
1be395e7aa
Merge pull request #31996 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.2
...
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
1 week ago
dependabot[bot]
cd7cf76a17
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
Terry Howe
4d4642b83f
Merge pull request #31994 from helm/dependabot/github_actions/main/github/codeql-action-4.35.1
...
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
2 weeks ago
dependabot[bot]
45ee55b83f
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.7 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e296a93559...c10b8064de )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
Terry Howe
67ef801c98
Merge pull request #31974 from TerryHowe/fix/pin-actions-to-sha
...
fix: pin codeql-action/upload-sarif to commit SHA
2 weeks ago
Terry Howe
e2a2ed5009
Merge pull request #31984 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.1
...
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
2 weeks ago
dependabot[bot]
9a06741884
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
dependabot[bot]
d1e31ca507
chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.2.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](7a3fe6cf4c...4a3601121d )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
Terry Howe
7e149c7229
Merge pull request #31973 from Debasish-87/fix-registry-comments
...
docs(registry): fix incorrect and improve clarity of comments in client.go
2 weeks ago
Terry Howe
7025480397
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
...
Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.
Signed-off-by: Terry Howe <thowe@nvidia.com>
2 weeks ago
Debasish Mohanty
85bf56ea82
docs(registry): fix incorrect and improve clarity of comments in client.go
...
- Fixed incorrect comment in ClientOptPlainHTTP
- Improved clarity of LoginOptPlainText comment
- Enhanced Login function documentation
- Improved wording for ClientOptHTTPClient
No functional changes.
Signed-off-by: Debasish Mohanty <139056705+Debasish-87@users.noreply.github.com>
2 weeks ago
Adesh Deshmukh
3b47bb2e34
Add ShellCheck linting to CI/CD pipeline
...
This commit adds a new GitHub Actions workflow that runs ShellCheck on all bash scripts
in the repository. ShellCheck is a static analysis tool for shell scripts that detects
bugs, security issues, and style problems.
Changes:
- Add .github/workflows/shellcheck.yml workflow that runs on push and pull requests
- Fix bash script issues in scripts/release-notes.sh:
- Quote all variable expansions to prevent word splitting (SC2086)
- Use proper error checking instead of checking $? (SC2181)
The workflow runs ShellCheck on all .sh files except testdata and generated directories.
Signed-off-by: Adesh Deshmukh <adeshkd123@gmail.com>
3 weeks ago
George Jenkins
b3927b3900
Merge pull request #31961 from helm/dependabot/go_modules/main/github.com/ProtonMail/go-crypto-1.4.1
...
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
3 weeks ago
George Jenkins
23a25f67ff
Merge pull request #31960 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.0
...
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
3 weeks ago
Terry Howe
8e44f8e3fe
Merge pull request #31957 from Mentigen/add-mustToToml
...
feat(engine): add mustToToml template function
3 weeks ago
Terry Howe
7369ac0eaa
Merge pull request #31959 from helm/dependabot/go_modules/main/github.com/fatih/color-1.19.0
...
chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0
3 weeks ago
dependabot[bot]
c7a75b16cb
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
...
Bumps [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto ) from 1.3.0 to 1.4.1.
- [Release notes](https://github.com/ProtonMail/go-crypto/releases )
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.3.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
dependency-version: 1.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
dependabot[bot]
3a7573a81e
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.11.2 to 1.12.0.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.11.2...v1.12.0 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
dependabot[bot]
0229da1803
chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0
...
Bumps [github.com/fatih/color](https://github.com/fatih/color ) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/fatih/color/releases )
- [Commits](https://github.com/fatih/color/compare/v1.18.0...v1.19.0 )
---
updated-dependencies:
- dependency-name: github.com/fatih/color
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
George Jenkins
ce203dc568
Merge pull request #31938 from mmorel-35/perfsprint
...
chore: enable perfsprint linter
3 weeks ago
George Jenkins
563d1cfa73
Merge pull request #31934 from helm/dependabot/go_modules/main/golang.org/x/crypto-0.49.0
...
chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0
3 weeks ago
George Jenkins
dde23c5e9c
Merge pull request #31945 from helm/dependabot/go_modules/google.golang.org/grpc-1.79.3
...
chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3
3 weeks ago