10fc5f335b
chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.41.0 to 0.42.0.
- [Commits](https://github.com/golang/term/compare/v0.41.0...v0.42.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
36030c947b
Merge pull request #32029 from helm/dependabot/go_modules/main/golang.org/x/text-0.36.0
...
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0
5 months ago
d89e7c6076
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.35.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
8a95461925
chore: Update release notes script for Helm v4
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
5 months ago
213c869a98
refactor(cli): share RetryingRoundTripper via pkg/kubeenv
...
Move implementation to pkg/kubeenv per review; kube.RetryingRoundTripper
remains a type alias for API compatibility. pkg/cli uses kubeenv only.
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
5 months ago
be5aaf7e34
Merge pull request #32024 from helm/dependabot/go_modules/main/github.com/fluxcd/cli-utils-1.0.0
...
chore(deps): bump github.com/fluxcd/cli-utils from 0.37.2-flux.1 to 1.0.0
5 months ago
bd5027a9cf
chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.2 to 1.12.3.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.2...v1.12.3 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
fa194a0609
Merge pull request #32025 from gjenkins8/gjenkins/fix_lint
...
fix: unnecessary-format lint issues from merge
5 months ago
087736b66e
fix: unnecessary-format lint issues from merge
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
5 months ago
bc215d8c19
Merge commit from fork
...
fix: Plugin missing provenance bypass
5 months ago
586eb57338
fix: Plugin missing provenance bypass
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
5 months ago
f7c4d75574
Merge commit from fork
...
fix: Chart dot-name path bug
5 months ago
f8afb35f4e
Merge commit from fork
...
fix: Plugin version path traversal
5 months ago
c8c5dfad63
chore(deps): bump github.com/fluxcd/cli-utils
...
Bumps [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils ) from 0.37.2-flux.1 to 1.0.0.
- [Release notes](https://github.com/fluxcd/cli-utils/releases )
- [Commits](https://github.com/fluxcd/cli-utils/compare/v0.37.2-flux.1...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/fluxcd/cli-utils
dependency-version: 1.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
8985aed4e3
Merge pull request #32022 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp-1.43.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0
5 months ago
998466cfcf
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
e8988d3ead
Merge pull request #32021 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.43.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0
5 months ago
b0cec589f5
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
7a76d370e4
Merge pull request #32020 from helm/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp-0.19.0
...
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0
5 months ago
6ebfb29dbf
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go ) from 0.18.0 to 0.19.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v0.18.0...v0.19.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
dependency-version: 0.19.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
995f667e55
Merge pull request #31983 from helm/dependabot/github_actions/main/actions/setup-go-6.4.0
...
chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0
5 months ago
2e36897f7c
Merge pull request #32015 from helm/dependabot/go_modules/main/github.com/distribution/distribution/v3-3.1.0
...
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0
5 months ago
a4e61a1c77
Merge pull request #32012 from helm/dependabot/go_modules/github.com/distribution/distribution/v3-3.1.0
...
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0
5 months ago
a7f84439aa
test(kube): fix flaky WaitForDelete test by avoiding informer sync race
...
The previous fix (increasing timeout / reducing deletion delay) did not
work because the flakiness is not a timing problem at all.
Root cause: fluxcd/cli-utils HasSynced() returns true after the initial
list item is *popped* from DeltaFIFO, which is before AddFunc delivers
the ResourceUpdateEvent to the collector. This creates a race where the
SyncEvent can arrive at the statusObserver *before* the pod's Current
status is recorded. When that happens:
- statusObserver sees pod as Unknown
- Unknown is skipped for WaitForDelete (by design, to handle resources
that were already deleted before watching started)
- AggregateStatus([], NotFoundStatus) == NotFoundStatus → cancel()
- The watch context is cancelled before DeleteFunc can fire
- Final check: pod still Current → error
The test intent is to verify that waitForDeleteCtx (not the cancelled
generalCtx) is selected. A non-existent resource satisfies this:
- With waitForDeleteCtx=Background(): informer syncs with empty list
→ Unknown → cancel → success ✓
- With generalCtx (cancelled, wrong): context immediately done
→ ctx.Err() appended → error returned ✓
Remove the goroutine-based deletion and the pod creation to eliminate
the race while preserving the context-selection assertion.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
5 months ago
c004f4ddfe
Merge pull request #32014 from AnmolVirdi/doc-import-minor
...
Minor fix (docs.go): fix import instructions to comply with canonical import paths
5 months ago
4c0d21f53f
test(kube): fix flaky WaitForDelete timing in status wait tests
...
TestMethodContextOverridesGeneralContext/WaitForDelete used a 1s
timeout with a 500ms deletion delay, leaving only ~500ms for the
fake watcher to propagate the delete event. On loaded CI runners
this window is too tight and causes intermittent failures.
Increase the timeout to 5s and reduce the deletion delay to 100ms
so there is ample headroom. Apply the same deletion-delay reduction
to TestStatusWaitForDelete which shares the same pattern.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
5 months ago
08dea9c140
chore(deps): bump github.com/distribution/distribution/v3
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
de58531ca7
Minor nit: fix import instructions to comply with canonical import paths
...
Signed-off-by: Anmol Virdi <anmolvirdi2000@gmail.com>
5 months ago
9b1ad4cf02
chore(deps): bump github.com/distribution/distribution/v3
...
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/distribution/distribution/releases )
- [Commits](https://github.com/distribution/distribution/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
dependency-version: 3.1.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
8ef2d45934
fix(action): return correct error variable in prepareUpgrade
...
When Deployed() succeeds but releaserToV1Release() fails, prepareUpgrade
returned err (nil) instead of cerr (the conversion error), causing a
silent nil return that could lead to nil pointer dereferences downstream.
Closes #32007
Signed-off-by: Rhys McNeill <rhysmcneill7@hotmail.co.uk>
5 months ago
1be395e7aa
Merge pull request #31996 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.2
...
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
5 months ago
cd7cf76a17
chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
4d4642b83f
Merge pull request #31994 from helm/dependabot/github_actions/main/github/codeql-action-4.35.1
...
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
5 months ago
45ee55b83f
chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.7 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e296a93559...c10b8064de
5 months ago
67ef801c98
Merge pull request #31974 from TerryHowe/fix/pin-actions-to-sha
...
fix: pin codeql-action/upload-sarif to commit SHA
5 months ago
e2a2ed5009
Merge pull request #31984 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.1
...
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
5 months ago
9a06741884
chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
d1e31ca507
chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.2.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](7a3fe6cf4c...4a3601121d
5 months ago
f257c95c78
fix(kube): clarify server-side apply patch errors
...
Signed-off-by: abhay1999 <abhaychaurasiya19@gmail.com>
6 months ago
7e149c7229
Merge pull request #31973 from Debasish-87/fix-registry-comments
...
docs(registry): fix incorrect and improve clarity of comments in client.go
6 months ago
7025480397
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
...
Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.
Signed-off-by: Terry Howe <thowe@nvidia.com>
6 months ago
64f1d0af5b
refactor(cli): decouple EnvSettings from pkg/kube
...
Move the retrying HTTP round-tripper used by EnvSettings into pkg/cli so
pkg/cli no longer imports pkg/kube, avoiding import cycles for Helm
library consumers while preserving retry behavior for transient API
server errors.
Add pkg/cli/roundtripper_test.go with parity coverage for the moved logic.
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
Made-with: Cursor
6 months ago
85bf56ea82
docs(registry): fix incorrect and improve clarity of comments in client.go
...
- Fixed incorrect comment in ClientOptPlainHTTP
- Improved clarity of LoginOptPlainText comment
- Enhanced Login function documentation
- Improved wording for ClientOptHTTPClient
No functional changes.
Signed-off-by: Debasish Mohanty <139056705+Debasish-87@users.noreply.github.com>
6 months ago
154993723a
refactor(cli): decouple EnvSettings from pkg/kube to avoid import cycles
...
Move the retrying round tripper used by EnvSettings into pkg/cli so
pkg/cli no longer imports pkg/kube. This preserves retry behavior while
breaking the import edge that triggers cycles for Helm library consumers
(such as the kustomize integration described in #31965 ).
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
6 months ago
b3927b3900
Merge pull request #31961 from helm/dependabot/go_modules/main/github.com/ProtonMail/go-crypto-1.4.1
...
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
6 months ago
23a25f67ff
Merge pull request #31960 from helm/dependabot/go_modules/main/github.com/lib/pq-1.12.0
...
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
6 months ago
8e44f8e3fe
Merge pull request #31957 from Mentigen/add-mustToToml
...
feat(engine): add mustToToml template function
6 months ago
7369ac0eaa
Merge pull request #31959 from helm/dependabot/go_modules/main/github.com/fatih/color-1.19.0
...
chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0
6 months ago
c7a75b16cb
chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1
...
Bumps [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto ) from 1.3.0 to 1.4.1.
- [Release notes](https://github.com/ProtonMail/go-crypto/releases )
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.3.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
dependency-version: 1.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
3a7573a81e
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.11.2 to 1.12.0.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.11.2...v1.12.0 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
Terry Howe
George Jenkins
Sumit Solanki
Matt Farina
Robert Sirchia
Anmol Virdi
Rhys McNeill
abhay1999
Terry Howe
Debasish Mohanty