George Jenkins
d817c54d51
Merge pull request #32372 from gjenkins8/gjenkins/gitignore_ai_vendor_paths
2 weeks ago
George Jenkins
8cd3a48c34
chore: Add AI Vendor specific paths to `.gitignore`
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 weeks ago
Terry Howe
ba6c9a29ef
Merge pull request #32290 from mahesh-sadupalli/fix/files-lines-empty-panic
...
fix(engine): prevent Files.Lines panic on empty file
2 weeks ago
Terry Howe
7ed8959dc2
Merge pull request #32370 from gjenkins8/gjenkins/darwin_gocritic_lint_fixes
...
fix: 'gocritic: filepathJoin path seperator' lint error
2 weeks ago
George Jenkins
96a25ab4f8
fix: 'gocritic: filepathJoin path seperator' lint error
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 weeks ago
George Jenkins
1367d76f0a
Merge pull request #32343 from mmorel-35/testifylint-manual-assert-internal-3
...
chore(internal): refactor: convert tests to testify assert/require part 3
2 weeks ago
George Jenkins
9c373bf4fc
Merge pull request #32327 from fluxcd/fix-32326
...
Fix vanishing empty lines
2 weeks ago
Matthieu MOREL
caac755f19
chore(internal): refactor: convert tests to testify assert/require part 3
...
refactor: convert tests to testify assert/require in internal/chart/v3/lint/rules
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2 weeks ago
Lohit Kolluri
ad93b7df63
feat: honor SOURCE_DATE_EPOCH for chart archives ( #32162 )
...
* feat: honor SOURCE_DATE_EPOCH for chart archives
Add StampModTimes() on Chart struct to recursively set ModTime on
all chart file entries. CLI reads SOURCE_DATE_EPOCH env var and wires
through all 5 commands: package, install, upgrade, dep build, dep update.
Removes unused v3 duplicate source_date_epoch.go (YAGNI).
Inlines env var parsing to CLI layer from chart util.
Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com>
* docs: document SOURCE_DATE_EPOCH in environment variables help
Add a short entry for $SOURCE_DATE_EPOCH to the env var table shown
in 'helm help'. The variable is honored by 'helm package', 'install',
'upgrade', 'dep build', and 'dep update' to produce reproducible chart
archives. Full documentation belongs in helm-www.
Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com>
* fix: adapt SourceDateEpoch to upstream refactored dep check
Upstream/main restructured the dependency error handling in install.go
and upgrade.go from a nested-if block (if DependencyUpdate) to an
early-return pattern (if !DependencyUpdate). Adapt the feature's
Manager construction to match the new code structure.
Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com>
---------
Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com>
2 weeks ago
George Jenkins
d0e56d4362
Merge pull request #31884 from ouillie/main
...
Properly format the extra field in gzipped packages
2 weeks ago
Jakub Jaruszewski
aa1ae3a360
Fix missing conflict retry with server-side apply ( #32088 )
...
* Fix missing conflict retry with server-side apply
Signed-off-by: Jakub Jaruszewski <jjaruszewski@man.poznan.pl>
* Only retry on resourcequota transient conflict
Signed-off-by: Jakub Jaruszewski <jjaruszewski@man.poznan.pl>
* Use isServerSideRetryable + naming nitpick
Signed-off-by: Jakub Jaruszewski <jjaruszewski@man.poznan.pl>
---------
Signed-off-by: Jakub Jaruszewski <jjaruszewski@man.poznan.pl>
2 weeks ago
George Jenkins
74b41286e8
Merge pull request #32336 from TerryHowe/chore/dependabot-github-actions-dev-v3
...
ci: track GitHub Actions updates on dev-v3 via Dependabot
2 weeks ago
George Jenkins
9aa7778886
Merge pull request #32342 from mmorel-35/testifylint-manual-assert-internal-2
...
chore(internal): refactor: convert tests to testify assert/require part 2
2 weeks ago
Matthieu MOREL
a02a5713de
chore: fix elseif and ifElseChain issues from gocritic ( #32289 )
...
* chore: fix elseif and ifElseChain issues from gocritic
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
* test: enhance assertions in OCIInstaller and list tests using testify
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
---------
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2 weeks ago
George Jenkins
7a7b328ba5
Merge pull request #32319 from mmorel-35/revive
...
feat(linters): add new revive rules for better code quality
2 weeks ago
George Jenkins
b46d116afe
Merge pull request #32320 from mmorel-35/gomodguard_v2
...
fix(linters): update golangci-lint to 2.12.2
2 weeks ago
George Jenkins
66c1232dc7
Merge pull request #32321 from mmorel-35/gocritic
...
refactor: enable several checks from gocritic
2 weeks ago
George Jenkins
c3b336af15
Merge pull request #32341 from mmorel-35/testifylint-manual-assert-internal-1
...
chore(internal): refactor: convert tests to testify assert/require part 1
2 weeks ago
Matthieu MOREL
f280d9c1b5
chore(internal): refactor: convert tests to testify assert/require part 2
...
refactor: convert tests to testify assert/require in internal/chart/v3/util
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2 weeks ago
Matthieu MOREL
d72b28ebcb
chore(internal): refactor: convert tests to testify assert/require part 1
...
refactor: convert tests to testify assert/require in internal/chart/v3/lint/rules
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2 weeks ago
秀吉
68977ec0b5
fix(ci): pin govulncheck-action to the v1.1.0 release ( #32304 )
...
golang/govulncheck-action published v1.1.0 on 2026-07-10, tagging the
master commit (032d455) the govulncheck step was already pinned to.
Update the pin comment to # pin@v1.1.0 so it matches the repo's
pin@<tag> convention and Dependabot can track the action by semver
again.
The pinned SHA is unchanged; v1.1.0 points to that commit, so CI
behavior is identical and only the trailing comment changes.
Closes : #32301
Signed-off-by: thc1006 <84045975+thc1006@users.noreply.github.com>
2 weeks ago
Terry Howe
b963afaddf
ci: track GitHub Actions updates on dev-v3 via Dependabot
...
Dependabot reads its config only from the default branch, and the
github-actions ecosystem was configured for main only. As a result,
Action version bumps never flowed to dev-v3, leaving its workflows
(e.g. govulncheck-action) frozen and drifting from main.
Add a github-actions update block targeting dev-v3 so Action bumps are
opened there too, matching the existing gomod/dev-v3 arrangement.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
2 weeks ago
dependabot[bot]
fb53c00ae7
chore(deps): bump actions/stale from 10.3.0 to 10.4.0 ( #32330 )
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.3.0 to 10.4.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](eb5cf3af3a...1e223db275 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
dependabot[bot]
dad026acb8
chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 ( #32334 )
...
Bumps [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords ) from 1.0.13 to 1.0.14.
- [Commits](https://github.com/mattn/go-shellwords/compare/v1.0.13...v1.0.14 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-shellwords
dependency-version: 1.0.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
dependabot[bot]
84e63e5c38
chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 ( #32333 )
...
Bumps [oras.land/oras-go/v2](https://github.com/oras-project/oras-go ) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/oras-project/oras-go/releases )
- [Commits](https://github.com/oras-project/oras-go/compare/v2.6.1...v2.6.2 )
---
updated-dependencies:
- dependency-name: oras.land/oras-go/v2
dependency-version: 2.6.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
Matheus Pimenta
73c1fb2451
Address review comments
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2 weeks ago
Matheus Pimenta
bfebbb7c1a
Fix vanishing empty lines
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
3 weeks ago
Akanksha Trehun
7b9a5c8911
fix: add missing https:// to Oracle link in ADOPTERS.md ( #32324 )
...
Signed-off-by: Akanksha Trehun <akankshatrehun@gmail.com>
3 weeks ago
Akanksha Trehun
cfa3b24fe6
fix: remove trailing whitespace in .golangci.yml ( #32325 )
...
Signed-off-by: Akanksha Trehun <akankshatrehun@gmail.com>
3 weeks ago
Akanksha Trehun
a91e9f6a24
fix(Makefile): update outdated .sha256 comment for Helm v4 ( #32323 )
...
Signed-off-by: Akanksha Trehun <akankshatrehun@gmail.com>
3 weeks ago
Matthieu MOREL
16787d65f5
feat(linters): add new revive rules for better code quality
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
3 weeks ago
Matthieu MOREL
9662fdd73b
refactor: enable several checks from gocritic
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
3 weeks ago
Matthieu MOREL
7bfcdb0fc3
fix(linters): update golangci-lint to 2.12.2
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
3 weeks ago
Matt Farina
d5465e930e
Merge pull request #32317 from TerryHowe/chore/bump-x-crypto-0.54.0
...
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0
3 weeks ago
Matt Farina
950ce2e121
Merge pull request #32316 from helm/fix/codeql-analyze-4.37.0
...
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0
3 weeks ago
Terry Howe
8118a4da1e
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0
...
The init and autobuild steps were bumped to 4.37.0 (#32313 , #32305 ) but the analyze step remained at 4.36.2, causing CodeQL to fail on main with: "Loaded a configuration file for version '4.37.0', but running version '4.36.2'". Align analyze with the other codeql-action steps.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
3 weeks ago
Terry Howe
0fc3b93853
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0
...
x/crypto v0.54.0 raises golang.org/x/term to v0.45.0 and golang.org/x/sys to v0.47.0 via minimum version selection.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
3 weeks ago
Terry Howe
71901a4c7c
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0
...
The init and autobuild steps were bumped to 4.37.0 (#32313 , #32305 ) but the analyze step remained at 4.36.2, causing CodeQL to fail on main with: "Loaded a configuration file for version '4.37.0', but running version '4.36.2'". Align analyze with the other codeql-action steps.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
3 weeks ago
dependabot[bot]
a71eb99db4
chore(deps): bump github/codeql-action/init from 4.36.2 to 4.37.0 ( #32313 )
...
Bumps [github/codeql-action/init](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...99df26d4f1 )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
ea52bdf7e2
chore(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 ( #32305 )
...
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...99df26d4f1 )
---
updated-dependencies:
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
a242855a7e
chore(deps): bump golang.org/x/text from 0.39.0 to 0.40.0 ( #32309 )
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
f25f955578
chore(deps): bump github/codeql-action/upload-sarif ( #32311 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.3 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](54f647b7e1...99df26d4f1 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
Terry Howe
d461463085
Merge pull request #32299 from benoittgt/avoid-issue-with-govuln-deprecation
...
fix(ci): resolve Node 20 deprecation in govulncheck
3 weeks ago
Benoit Tigeot
ed651de9b1
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Benoit Tigeot <benoittgt@users.noreply.github.com>
3 weeks ago
Benoit Tigeot
ca24a55c31
fix(ci): resolve Node 20 deprecation in govulncheck
...
The pinned v1.0.4 used actions/checkout@v4 and
actions/setup-go@v5 internally, both built on Node 20.
Latest main uses v6 of both, which run on Node 24.
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
3 weeks ago
Terry Howe
d262c7ca79
Merge pull request #32296 from mmorel-35/gocritic-singleCaseSwitch
...
chore: fix emptyStringTest, nestingReduce and singleCaseSwitch checks issues from gocritic
3 weeks ago
Terry Howe
50fb6ff85b
Merge pull request #32294 from mmorel-35/testifylint
...
chore: fix several checks issues from testifylint
3 weeks ago
Terry Howe
a572f23b82
Merge pull request #32298 from helm/dependabot/go_modules/main/golang.org/x/text-0.39.0
...
chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0
3 weeks ago
dependabot[bot]
e3fbe2e9d1
chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.38.0 to 0.39.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.38.0...v0.39.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-version: 0.39.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 weeks ago
Matthieu MOREL
96b315f188
chore: fix emptyStringTest, nestingReduce and singleCaseSwitch checks issues from gocritic
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
3 weeks ago