cd7cf76a17
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 days ago
4d4642b83f
Merge pull request #31994 from helm/dependabot/github_actions/main/github/codeql-action-4.35.1
...
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
5 days ago
45ee55b83f
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.7 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e296a93559...c10b8064de
6 days ago
67ef801c98
Merge pull request #31974 from TerryHowe/fix/pin-actions-to-sha
...
fix: pin codeql-action/upload-sarif to commit SHA
6 days ago
e2a2ed5009
Merge pull request #31984 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.1
...
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
1 week ago
9a06741884
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago
7e149c7229
Merge pull request #31973 from Debasish-87/fix-registry-comments
...
docs(registry): fix incorrect and improve clarity of comments in client.go
2 weeks ago
7025480397
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
...
Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.
Signed-off-by: Terry Howe <thowe@nvidia.com>
2 weeks ago
85bf56ea82
docs(registry): fix incorrect and improve clarity of comments in client.go
...
- Fixed incorrect comment in ClientOptPlainHTTP
- Improved clarity of LoginOptPlainText comment
- Enhanced Login function documentation
- Improved wording for ClientOptHTTPClient
No functional changes.
Signed-off-by: Debasish Mohanty <139056705+Debasish-87@users.noreply.github.com>
2 weeks ago
b3927b3900
Merge pull request #31961 from helm/dependabot/go_modules/main/github.com/ProtonMail/go-crypto-1.4.1
...
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
2 weeks ago
23a25f67ff
Merge pull request #31960 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.0
...
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
2 weeks ago
8e44f8e3fe
Merge pull request #31957 from Mentigen/add-mustToToml
...
feat(engine): add mustToToml template function
2 weeks ago
7369ac0eaa
Merge pull request #31959 from helm/dependabot/go_modules/main/github.com/fatih/color-1.19.0
...
chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0
2 weeks ago
c7a75b16cb
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
...
Bumps [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto ) from 1.3.0 to 1.4.1.
- [Release notes](https://github.com/ProtonMail/go-crypto/releases )
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.3.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
dependency-version: 1.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
3a7573a81e
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.11.2 to 1.12.0.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.11.2...v1.12.0 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
0229da1803
chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0
...
Bumps [github.com/fatih/color](https://github.com/fatih/color ) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/fatih/color/releases )
- [Commits](https://github.com/fatih/color/compare/v1.18.0...v1.19.0 )
---
updated-dependencies:
- dependency-name: github.com/fatih/color
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
ce203dc568
Merge pull request #31938 from mmorel-35/perfsprint
...
chore: enable perfsprint linter
2 weeks ago
563d1cfa73
Merge pull request #31934 from helm/dependabot/go_modules/main/golang.org/x/crypto-0.49.0
...
chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0
2 weeks ago
dde23c5e9c
Merge pull request #31945 from helm/dependabot/go_modules/google.golang.org/grpc-1.79.3
...
chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3
2 weeks ago
aa5e205b3b
Merge pull request #31953 from mmorel-35/revive-unnecessary-format
...
chore: fix unnecessary-format issues from revive
2 weeks ago
c1a5a6e260
docs(engine): fix misleading toTOML doc comment
...
The toTOML doc comment said "returns empty string on marshal error"
but the implementation actually returns err.Error(). Fix the comment
to match the real behavior. Also mention mustToToml as the strict
alternative.
Signed-off-by: Ilya Kiselev <kis-ilya-a@yandex.ru>
2 weeks ago
b075f7a35d
feat(engine): add mustToToml template function
...
Add `mustToToml` that panics on marshal error, consistent with
`mustToYaml` and `mustToJson`. This makes it possible for chart authors
to get a hard failure when TOML serialization fails, rather than having
to inspect the output manually.
`toToml` behavior is unchanged in this commit.
Closes #31430
Signed-off-by: Ilya Kiselev <kis-ilya-a@yandex.ru>
2 weeks ago
7edfff33eb
chore: fix unnecessary-format issues from revive
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2 weeks ago
37185d2ea6
chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
62494896e9
chore: enable perfsprint linter
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
3 weeks ago
42f78ba60e
Merge pull request #31872 from mmorel-35/perfsprint-pkg-6-5f845e3
...
chore(pkg): fix perfsprint linter issues part 6
4 weeks ago
e3b4808450
Merge pull request #31874 from mmorel-35/perfsprint-pkg-4-fb6db58
...
chore(pkg): fix perfsprint linter issues part 4
4 weeks ago
610547b570
Merge pull request #31873 from mmorel-35/perfsprint-pkg-5-3294250
...
chore(pkg): fix perfsprint linter issues part 5
4 weeks ago
3d06fd1feb
chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.48.0 to 0.49.0.
- [Commits](https://github.com/golang/crypto/compare/v0.48.0...v0.49.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.49.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
d3df72e560
Merge pull request #31932 from TerryHowe/fix/remove-legacy-import-comments-test-files
...
pkg/kube: remove legacy import comments from test files
4 weeks ago
2cba43c8bf
Merge pull request #31931 from abhay1999/fix/remove-legacy-import-comments-pkg-kube
...
pkg/kube: remove legacy import comments
4 weeks ago
e64d628a13
fix(kube): remove legacy import comments from test files
...
Remove pre-Go modules import path comments from pkg/kube test files
(ready_test.go, resource_test.go, statuswait_test.go) for consistency
with the rest of the package.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
4 weeks ago
d7cdc9e8fb
pkg/kube: remove legacy import comments
...
Import path comments (e.g. `// import "helm.sh/helm/v4/pkg/kube"`) are
a pre-Go modules convention no longer needed in module-aware builds.
Some files in pkg/kube had these comments while others did not, causing
inconsistency that triggered downstream Kythe indexing errors.
Remove the import comments from all affected files to make the package
declaration consistent across the directory.
Fixes #31846
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: abhay1999 <abhaychaurasiya19@gmail.com>
4 weeks ago
72657d0eb2
Merge pull request #31927 from helm/dependabot/go_modules/main/golang.org/x/term-0.41.0
...
chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0
4 weeks ago
c4be7af2a1
chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.40.0 to 0.41.0.
- [Commits](https://github.com/golang/term/compare/v0.40.0...v0.41.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
b4bd6b7688
Merge pull request #31921 from tsinglua/main
...
chore: fix some minor issues in the comments
4 weeks ago
259f181808
chore: fix some minor issues in the comments
...
Signed-off-by: tsinglua <tsinglua@outlook.com>
4 weeks ago
2f51ffe93c
Merge pull request #31909 from helm/dependabot/go_modules/main/sigs.k8s.io/controller-runtime-0.23.3
...
chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3
4 weeks ago
74e7cf877a
chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3
...
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) from 0.23.1 to 0.23.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.1...v0.23.3 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
dependency-version: 0.23.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
3e7b38fd04
Merge pull request #31868 from matheuscscp/fix-31867
...
fix: insert newline after doc separators glued to content by template trimming
4 weeks ago
790d5d9276
Merge pull request #31864 from helm/dependabot/go_modules/github.com/cloudflare/circl-1.6.3
...
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
4 weeks ago
af94abf976
fix: insert newline after doc separators glued to content by template trimming
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
4 weeks ago
16073b1e3c
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
...
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl ) from 1.6.1 to 1.6.3.
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-version: 1.6.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
e5ef11c52a
Merge pull request #31898 from TerryHowe/fix/bump-otel-sdk-vuln
...
fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394
4 weeks ago
0a3fe6aa52
Merge pull request #31897 from TerryHowe/fix/bump-cli-utils-transient-pod-failure
...
fix: bump fluxcd/cli-utils to v0.37.2-flux.1
4 weeks ago
e31a078e6e
chore: enable modernize linter ( #31860 )
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
1 month ago
b4f4c4c2dd
Merge pull request #31901 from tleed5/restore-atomic-on-install-command
...
Restore --atomic flag on install command
1 month ago
16573f87f5
Restored --atomic flag on install command
...
Signed-off-by: Travis Leeden <travis.leeden@octopus.com>
1 month ago
b550ce9094
fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394
...
Bump the OpenTelemetry Go SDK and related packages to fix
GO-2026-4394 (arbitrary code execution via PATH hijacking).
The vulnerable sdk@v1.36.0 is replaced with sdk@v1.40.0.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
1 month ago
1dfa77ed8b
fix: bump fluxcd/cli-utils to v0.37.2-flux.1
...
Bumps fluxcd/cli-utils from v0.37.1-flux.1 to v0.37.2-flux.1, which
includes a fix to exclude transient pod failures from controller
status (fluxcd/cli-utils#22).
This resolves intermittent failures with `helm upgrade --install` when
using the watcher wait strategy, where StatefulSets were prematurely
reported as Failed when pods were unschedulable (e.g., waiting for
cluster autoscaler/Karpenter to provision nodes). The upstream fix
treats unschedulable pods and pods being deleted during rolling updates
as transient states rather than terminal failures.
Fixes #31896
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
1 month ago
dependabot[bot]
Terry Howe
Terry Howe
Debasish Mohanty
George Jenkins
Ilya Kiselev
Matthieu MOREL
abhay1999
tsinglua
Matheus Pimenta
Travis Leeden