Maxime Grenu
dad0b59d43
feat(util): respect SOURCE_DATE_EPOCH for reproducible chart archives
...
Add ParseSourceDateEpoch and ApplySourceDateEpoch helpers to the v2
and v3 chart util packages. The caller (helm package, dependency
build) now reads the environment variable, stamps every zero-valued
ModTime field on the chart tree, and lets the existing tar writer
pick up those times.
This keeps Save() free from environment side effects: the epoch is
parsed and applied at the call site. Entries that already carry a
non-zero ModTime are left untouched.
Signed-off-by: Maxime Wojtczak <maxime@cluster2600.com>
Signed-off-by: Maxime Grenu <maxime.grenu@gmail.com>
7 months ago
Terry Howe
2f51ffe93c
Merge pull request #31909 from helm/dependabot/go_modules/main/sigs.k8s.io/controller-runtime-0.23.3
...
chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3
7 months ago
dependabot[bot]
74e7cf877a
chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3
...
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) from 0.23.1 to 0.23.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.1...v0.23.3 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
dependency-version: 0.23.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
Terry Howe
3e7b38fd04
Merge pull request #31868 from matheuscscp/fix-31867
...
fix: insert newline after doc separators glued to content by template trimming
7 months ago
Terry Howe
790d5d9276
Merge pull request #31864 from helm/dependabot/go_modules/github.com/cloudflare/circl-1.6.3
...
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
7 months ago
Matheus Pimenta
af94abf976
fix: insert newline after doc separators glued to content by template trimming
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
7 months ago
dependabot[bot]
16073b1e3c
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
...
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl ) from 1.6.1 to 1.6.3.
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-version: 1.6.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
Terry Howe
e5ef11c52a
Merge pull request #31898 from TerryHowe/fix/bump-otel-sdk-vuln
...
fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394
7 months ago
Terry Howe
0a3fe6aa52
Merge pull request #31897 from TerryHowe/fix/bump-cli-utils-transient-pod-failure
...
fix: bump fluxcd/cli-utils to v0.37.2-flux.1
7 months ago
Matthieu MOREL
e31a078e6e
chore: enable modernize linter ( #31860 )
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Terry Howe
b4f4c4c2dd
Merge pull request #31901 from tleed5/restore-atomic-on-install-command
...
Restore --atomic flag on install command
7 months ago
Travis Leeden
16573f87f5
Restored --atomic flag on install command
...
Signed-off-by: Travis Leeden <travis.leeden@octopus.com>
7 months ago
Terry Howe
b550ce9094
fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394
...
Bump the OpenTelemetry Go SDK and related packages to fix
GO-2026-4394 (arbitrary code execution via PATH hijacking).
The vulnerable sdk@v1.36.0 is replaced with sdk@v1.40.0.
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
7 months ago
Terry Howe
1dfa77ed8b
fix: bump fluxcd/cli-utils to v0.37.2-flux.1
...
Bumps fluxcd/cli-utils from v0.37.1-flux.1 to v0.37.2-flux.1, which
includes a fix to exclude transient pod failures from controller
status (fluxcd/cli-utils#22).
This resolves intermittent failures with `helm upgrade --install` when
using the watcher wait strategy, where StatefulSets were prematurely
reported as Failed when pods were unschedulable (e.g., waiting for
cluster autoscaler/Karpenter to provision nodes). The upstream fix
treats unschedulable pods and pods being deleted during rolling updates
as transient states rather than terminal failures.
Fixes #31896
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
7 months ago
George Jenkins
df8e0301ed
Merge pull request #31878 from mmorel-35/perfsprint-pkg-3-39f7a9f
...
chore(pkg): fix perfsprint linter issues part 3
7 months ago
George Jenkins
4f9f18c453
Merge pull request #31875 from mmorel-35/perfsprint-pkg-2-0e1acbc
...
chore(pkg): fix perfsprint linter issues part 2
7 months ago
George Jenkins
c4392033cc
Merge pull request #31853 from atombrella/feature/fmt_unneeded
...
Replace non-format use of t.Fatalf with t.Fatal
7 months ago
Terry Howe
58f066b9a5
Merge pull request #31879 from mmorel-35/perfsprint-pkg-7-a389500
...
chore(pkg): fix perfsprint linter issues part 7
7 months ago
Terry Howe
c0f6b13e0e
Merge pull request #31877 from mmorel-35/perfsprint-internal-3-dda677a
...
chore(internal): fix perfsprint linter issues part 3
7 months ago
Terry Howe
8fd0231b2f
Merge pull request #31876 from mmorel-35/perfsprint-pkg-1-3ece938
...
chore(pkg): fix perfsprint linter issues part 1
7 months ago
Matthieu MOREL
5d40f17011
Update pkg/cmd/status.go
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Robert Sirchia
58b8545073
Merge pull request #31880 from helm/dependabot/github_actions/main/actions/upload-artifact-7.0.0
...
chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
7 months ago
Terry Howe
2c1c34f214
Merge pull request #31857 from gjenkins8/gjenkins/improve_agents.md
...
chore: Improve `AGENTS.md`
7 months ago
Matthieu MOREL
d4f6193a7e
chore(internal): enable perfsprint linter ( #31871 )
...
#### Description
enable perfsprint linter in internal/plugin
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
dependabot[bot]
82d9bedea7
chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b7c566a772...bbbca2ddaa )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
Terry Howe
d888ca7787
Merge pull request #31870 from mmorel-35/perfsprint-internal-2-d8ab396
...
chore(internal): fix perfsprint linter issues part 2
7 months ago
Matthieu MOREL
e3c74fd9fa
chore(pkg): enable perfsprint linter
...
#### Description
enable perfsprint linter in pkg/storage/driver
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Matthieu MOREL
1d2d63cc43
chore(pkg): enable perfsprint linter
...
#### Description
enable perfsprint linter in pkg/cmd
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Matthieu MOREL
0fecfd04c2
chore(pkg): enable perfsprint linter
...
#### Description
enable perfsprint linter in pkg/cmd
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Matthieu MOREL
6524162a0e
chore(internal): enable perfsprint linter
...
#### Description
enable perfsprint linter in internal/tlsutil
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Matthieu MOREL
6c2cb2f547
chore(pkg): enable perfsprint linter
...
#### Description
enable perfsprint linter in pkg/cmd
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Matthieu MOREL
9409226e15
chore(internal): enable perfsprint linter
...
#### Description
enable perfsprint linter in internal/plugin/installer
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
7 months ago
Mads Jensen
36cb3a2fe9
Replace unneeded use of t.Fatalf with t.Fatal
...
Signed-off-by: Mads Jensen <atombrella@users.noreply.github.com>
7 months ago
George Jenkins
bd334848b4
Merge pull request #31861 from mmorel-35/nolintlint
...
fix: enable nolinlint linter
7 months ago
Matthieu MOREL
5b6c6bbfc7
fix: enable nolinlint linter
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
8 months ago
Terry Howe
d275b925c4
Merge pull request #31852 from rohansood10/fix/31846-import-comment
...
fix: correct import comment in statuswait.go from v3 to v4
8 months ago
George Jenkins
bc43812115
Merge pull request #31807 from mmorel-35/errorlint-internal-3-48c7a5a
...
fix(internal): errorlint linter
8 months ago
George Jenkins
be7cdb69e5
Merge pull request #31806 from mmorel-35/errorlint-pkg-4-15f432a
...
fix(pkg): errorlint linter
8 months ago
George Jenkins
1455d12abb
Merge pull request #31796 from mmorel-35/modernize-pkg-2-8b02e3a
...
chore(pkg): fix modernize linter
8 months ago
George Jenkins
3dfc4f3cf6
Merge pull request #31858 from helm/gjenkins/go_fix
...
chore: `go fix` fixes
8 months ago
George Jenkins
3ad9ccdb19
Merge pull request #31563 from Mujib-Ahasan/dry-run-fix
...
fix: --dry-run=server now respect generateName
8 months ago
George Jenkins
b667317422
fixup `strings.Cut` variables
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
8 months ago
George Jenkins
956c7245c3
chore: Improve `AGENTS.md`
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
8 months ago
George Jenkins
92b64e87ad
chore: fixes
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
8 months ago
rohansood10
c59c140ce0
fix: correct import comment in statuswait.go from v3 to v4
...
The import comment in pkg/kube/statuswait.go still referenced
helm.sh/helm/v3/pkg/kube while all other files in the package
correctly reference helm.sh/helm/v4/pkg/kube. This mismatch
causes downstream processing errors (e.g. kythe) when vendoring
Helm.
Fixes #31846
Signed-off-by: rohansood10 <rohansood10@users.noreply.github.com>
8 months ago
Evans Mungai
ee018608f6
fix: handle OCI digest algorithm prefix in chart downloader ( #31601 )
...
* fix: strip digest algorithm prefix before hex decoding
OCI references with tag+digest (e.g., chart:1.0@sha256:abc...) failed with "invalid byte" error because the sha256: prefix was passed to hex.DecodeString().
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Add cmd test for OCI references with tag+digest
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Move oci registry push result to a struct
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Review comments from PR review
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
* Fix failing test
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
---------
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
8 months ago
Terry Howe
b26ec6b09e
Merge pull request #31566 from TerryHowe/fix-test-concurrency-download-index
...
fix: test concurrency download index
8 months ago
Matt Farina
794372e317
Merge pull request #31816 from mmorel-35/errorlint-pkg-7-6d6a660
...
fix(pkg): errorlint linter
8 months ago
Matt Farina
580d6aecea
Merge pull request #31840 from helm/dependabot/github_actions/main/actions/stale-10.2.0
...
chore(deps): bump actions/stale from 10.1.1 to 10.2.0
8 months ago
Matt Farina
9c08c2554e
Merge pull request #31831 from helm/dependabot/go_modules/main/k8s-io-5943130ff0
...
chore(deps): bump the k8s-io group with 7 updates
8 months ago