dependabot[bot]
04299856ef
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.9 to 1.32.10 ( #2422 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.9 to 1.32.10.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.9...config/v1.32.10 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 07:44:35 +08:00
dependabot[bot]
ccd21fdd7c
build(deps): bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 ( #2423 )
...
Bumps [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty ) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/zclconf/go-cty/releases )
- [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md )
- [Commits](https://github.com/zclconf/go-cty/compare/v1.17.0...v1.18.0 )
---
updated-dependencies:
- dependency-name: github.com/zclconf/go-cty
dependency-version: 1.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 07:43:20 +08:00
dependabot[bot]
ef008169eb
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.0 to 1.96.1 ( #2421 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.96.0 to 1.96.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.96.0...service/s3/v1.96.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.96.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 07:39:16 +08:00
dependabot[bot]
c0a9e228be
build(deps): bump github.com/helmfile/vals from 0.43.3 to 0.43.5 ( #2407 )
...
Bumps [github.com/helmfile/vals](https://github.com/helmfile/vals ) from 0.43.3 to 0.43.5.
- [Release notes](https://github.com/helmfile/vals/releases )
- [Commits](https://github.com/helmfile/vals/compare/v0.43.3...v0.43.5 )
---
updated-dependencies:
- dependency-name: github.com/helmfile/vals
dependency-version: 0.43.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 18:51:51 +08:00
dependabot[bot]
b05dbd3e98
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.8 to 1.32.9 ( #2405 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.8 to 1.32.9.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.8...config/v1.32.9 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 17:26:05 +08:00
dependabot[bot]
c669d9f13c
build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 ( #2404 )
...
Bumps [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519 ) from 1.1.0 to 1.1.1.
- [Commits](https://github.com/FiloSottile/edwards25519/compare/v1.1.0...v1.1.1 )
---
updated-dependencies:
- dependency-name: filippo.io/edwards25519
dependency-version: 1.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 12:32:00 +08:00
dependabot[bot]
3ad52efb62
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.8 ( #2403 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.7 to 1.32.8.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.7...v1.32.8 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 10:46:20 +08:00
dependabot[bot]
3a0703425f
build(deps): bump k8s.io/client-go from 0.35.0 to 0.35.1 ( #2394 )
...
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go ) from 0.35.0 to 0.35.1.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.0...v0.35.1 )
---
updated-dependencies:
- dependency-name: k8s.io/client-go
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-12 11:43:02 +08:00
dependabot[bot]
5b9f52d7b9
build(deps): bump k8s.io/apimachinery from 0.35.0 to 0.35.1 ( #2395 )
...
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) from 0.35.0 to 0.35.1.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.0...v0.35.1 )
---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-12 08:56:06 +08:00
dependabot[bot]
58fd57166d
build(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 ( #2390 )
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/term/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 09:02:56 +08:00
dependabot[bot]
8b128c101d
build(deps): bump helm.sh/helm/v4 from 4.1.0 to 4.1.1 ( #2391 )
...
Bumps [helm.sh/helm/v4](https://github.com/helm/helm ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v4
dependency-version: 4.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 07:40:35 +08:00
dependabot[bot]
f4adb3bd0b
build(deps): bump github.com/helmfile/vals from 0.43.1 to 0.43.3 ( #2392 )
...
Bumps [github.com/helmfile/vals](https://github.com/helmfile/vals ) from 0.43.1 to 0.43.3.
- [Release notes](https://github.com/helmfile/vals/releases )
- [Commits](https://github.com/helmfile/vals/compare/v0.43.1...v0.43.3 )
---
updated-dependencies:
- dependency-name: github.com/helmfile/vals
dependency-version: 0.43.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 07:40:09 +08:00
dependabot[bot]
11def2e7e8
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.1 to 1.96.0 ( #2385 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.95.1 to 1.96.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.95.1...service/s3/v1.96.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.96.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 16:00:03 -05:00
yxxhero
e555ade4c0
feat: upgrade Helm version to v3.20.0 and v4.1.0 ( #2373 )
...
* feat: upgrade Helm version to v3.20.0 and v4.1.0
This commit updates the recommended Helm version from v3.19.5/v4.0.5 to
v3.20.0/v4.1.0 across all workflows, Dockerfiles, and application constants.
Changes:
- Update CI matrix to test with Helm v3.20.0 and v4.1.0
- Update .github/workflows/Makefile HELM_VERSION to v4.1.0
- Update Dockerfiles with new version and SHA256 checksums
- Update pkg/app/init.go HelmRecommendedVersion to v4.1.0
- Update go.mod helm.sh/helm/v3 to v3.20.0 and helm.sh/helm/v4 to v4.1.0
Signed-off-by: yxxhero <aiopsclub@163.com >
* fix: remove source field from e2e test helm plugin configs
Signed-off-by: yxxhero <aiopsclub@163.com >
* fix: remove source field from integration test helm plugin config
Signed-off-by: yxxhero <aiopsclub@163.com >
---------
Signed-off-by: yxxhero <aiopsclub@163.com >
2026-01-23 12:02:58 +08:00
dependabot[bot]
75896ff0ce
build(deps): bump github.com/helmfile/chartify from 0.26.1 to 0.26.2 ( #2366 )
...
Bumps [github.com/helmfile/chartify](https://github.com/helmfile/chartify ) from 0.26.1 to 0.26.2.
- [Release notes](https://github.com/helmfile/chartify/releases )
- [Commits](https://github.com/helmfile/chartify/compare/v0.26.1...v0.26.2 )
---
updated-dependencies:
- dependency-name: github.com/helmfile/chartify
dependency-version: 0.26.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-18 07:58:48 +08:00
dependabot[bot]
212d1fba77
build(deps): bump github.com/helmfile/vals from 0.43.0 to 0.43.1 ( #2360 )
...
Bumps [github.com/helmfile/vals](https://github.com/helmfile/vals ) from 0.43.0 to 0.43.1.
- [Release notes](https://github.com/helmfile/vals/releases )
- [Commits](https://github.com/helmfile/vals/compare/v0.43.0...v0.43.1 )
---
updated-dependencies:
- dependency-name: github.com/helmfile/vals
dependency-version: 0.43.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-17 08:40:44 +08:00
dependabot[bot]
8a66d26a10
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.6 to 1.32.7 ( #2358 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.6 to 1.32.7.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.6...v1.32.7 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 09:13:42 +08:00
dependabot[bot]
6c6fbcbaee
build(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 ( #2357 )
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.38.0 to 0.39.0.
- [Commits](https://github.com/golang/term/compare/v0.38.0...v0.39.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.39.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 07:59:53 +08:00
dependabot[bot]
7101046279
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.95.1 ( #2359 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.95.0 to 1.95.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.95.0...service/s3/v1.95.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.95.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 07:58:47 +08:00
dependabot[bot]
39f984a4b8
build(deps): bump github.com/helmfile/vals from 0.42.6 to 0.43.0 ( #2345 )
...
Bumps [github.com/helmfile/vals](https://github.com/helmfile/vals ) from 0.42.6 to 0.43.0.
- [Release notes](https://github.com/helmfile/vals/releases )
- [Commits](https://github.com/helmfile/vals/compare/v0.42.6...v0.43.0 )
---
updated-dependencies:
- dependency-name: github.com/helmfile/vals
dependency-version: 0.43.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-30 16:53:38 +08:00
dependabot[bot]
3743bf3644
build(deps): bump github.com/hashicorp/go-getter/v2 from 2.2.2 to 2.2.3 ( #2344 )
...
Bumps [github.com/hashicorp/go-getter/v2](https://github.com/hashicorp/go-getter ) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/hashicorp/go-getter/releases )
- [Commits](https://github.com/hashicorp/go-getter/compare/v2.2.2...v2.2.3 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter/v2
dependency-version: 2.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-28 16:21:41 +08:00
Salvatore Mazzarino and Salvatore Mazzarino
ef16648829
Upgrades go-getter to v2 ( #2341 )
...
feat: Upgrade go-getter to v2 and adapt API usage
Signed-off-by: Salvatore Mazzarino <salvatore.mazzarino@damedic.ai >
Co-authored-by: Salvatore Mazzarino <salvatore.mazzarino@damedic.ai >
2025-12-26 21:06:34 +08:00
dependabot[bot]
0b065412ca
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.94.0 to 1.95.0 ( #2343 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.94.0 to 1.95.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.94.0...service/s3/v1.95.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.95.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-26 21:02:27 +08:00
dependabot[bot]
6b8c18a79e
build(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 ( #2338 )
...
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go ) from 0.34.3 to 0.35.0.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.3...v0.35.0 )
---
updated-dependencies:
- dependency-name: k8s.io/client-go
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 20:20:05 +08:00
dependabot[bot]
2446583ab8
build(deps): bump github.com/zclconf/go-cty-yaml from 1.1.0 to 1.2.0 ( #2340 )
...
Bumps [github.com/zclconf/go-cty-yaml](https://github.com/zclconf/go-cty-yaml ) from 1.1.0 to 1.2.0.
- [Changelog](https://github.com/zclconf/go-cty-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/zclconf/go-cty-yaml/compare/v1.1.0...v1.2.0 )
---
updated-dependencies:
- dependency-name: github.com/zclconf/go-cty-yaml
dependency-version: 1.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 08:38:41 +08:00
dependabot[bot]
89631cd790
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.5 to 1.32.6 ( #2336 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.5 to 1.32.6.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.5...v1.32.6 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-18 21:36:21 +08:00
dependabot[bot]
fab7dc5fa8
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.93.2 to 1.94.0 ( #2333 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.93.2 to 1.94.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.93.2...service/s3/v1.94.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.94.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-17 08:20:38 +08:00
dependabot[bot]
d4434a8c16
build(deps): bump helm.sh/helm/v4 from 4.0.3 to 4.0.4 ( #2329 )
...
Bumps [helm.sh/helm/v4](https://github.com/helm/helm ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/commits/v4.0.4 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v4
dependency-version: 4.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-16 12:24:57 +08:00
dependabot[bot]
b6284c6a8a
build(deps): bump helm.sh/helm/v3 from 3.19.3 to 3.19.4 ( #2328 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.19.3 to 3.19.4.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.19.3...v3.19.4 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.19.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-16 08:59:33 +08:00
dependabot[bot]
758f5467d5
build(deps): bump helm.sh/helm/v4 from 4.0.1 to 4.0.2 ( #2326 )
...
Bumps [helm.sh/helm/v4](https://github.com/helm/helm ) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v4.0.1...v4.0.2 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v4
dependency-version: 4.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-13 13:39:29 +08:00
dependabot[bot]
cff6f44655
build(deps): bump helm.sh/helm/v3 from 3.19.2 to 3.19.3 ( #2325 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.19.2 to 3.19.3.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.19.2...v3.19.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.19.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-13 09:07:23 +08:00
dependabot[bot]
17e1a1307f
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.3 to 1.32.5 ( #2320 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.3 to 1.32.5.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.3...v1.32.5 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-13 09:06:22 +08:00
dependabot[bot]
1e6839a5d9
build(deps): bump k8s.io/client-go from 0.34.2 to 0.34.3 ( #2321 )
...
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go ) from 0.34.2 to 0.34.3.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.2...v0.34.3 )
---
updated-dependencies:
- dependency-name: k8s.io/client-go
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:17:42 +08:00
dependabot[bot]
8729590bcd
build(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 ( #2317 )
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/term/compare/v0.37.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-11 18:08:01 +08:00
dependabot[bot]
3fbee9eee7
build(deps): bump k8s.io/apimachinery from 0.34.2 to 0.34.3 ( #2322 )
...
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) from 0.34.2 to 0.34.3.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.34.2...v0.34.3 )
---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-11 18:07:11 +08:00
dependabot[bot]
64a6b41c7d
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.93.0 to 1.93.2 ( #2323 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.93.0 to 1.93.2.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.93.0...service/s3/v1.93.2 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.93.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-11 18:06:52 +08:00
dependabot[bot]
0d7309f2b7
build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 ( #2315 )
2025-12-09 06:28:18 +00:00
dependabot[bot]
7a9175b7c4
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.92.1 to 1.93.0 ( #2307 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.92.1 to 1.93.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.92.1...service/s3/v1.93.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.93.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-06 11:35:13 +08:00
dependabot[bot]
8c658e27c5
build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 ( #2310 )
...
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra ) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/spf13/cobra/releases )
- [Commits](https://github.com/spf13/cobra/compare/v1.10.1...v1.10.2 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-version: 1.10.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 12:37:18 +08:00
dependabot[bot]
9d0fc5fae0
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.2 to 1.32.3 ( #2308 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.2 to 1.32.3.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.2...v1.32.3 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 20:02:53 +08:00
Aditya Menon
534d0b618c
build(deps): update Helm v4 to 4.0.1 and helm-secrets to 4.7.4 ( #2304 )
...
* build(deps): update Helm v4 from 4.0.0 to 4.0.1
Update Helm v4 binary and Go library dependency to version 4.0.1.
Changes:
- Update helm.sh/helm/v4 Go module from v4.0.0 to v4.0.1
- Update Helm binary version in all Dockerfiles (alpine, ubuntu, debian)
- Update SHA256 checksums for linux/amd64 and linux/arm64
- Update CI workflow matrix to test against v4.0.1
- Update HelmRecommendedVersion constant in pkg/app/init.go
- Update test mocks to return v4.0.1 version string
- Update test plugin fixture version
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
* build(deps): update helm-secrets from 4.7.0 to 4.7.4
Update helm-secrets plugin version across all configurations:
- Docker images (all 3 variants) - use ARG variable for version
- CI test matrix
- Integration test defaults
- Unit test fixtures and expectations
- HelmSecretsRecommendedVersion constant
- Dynamic plugin installation in exec.go
Also update plugin filename format from helm-secrets-*.tgz to
secrets-{version}.tgz to match the new release naming convention.
Update suppress-output-line-regex test expected output for Helm 4.0.1
which now suppresses Service diff after ipFamily normalization.
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
---------
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
2025-11-28 08:43:54 +08:00
dependabot[bot]
6c93fc7e4d
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.92.0 to 1.92.1 ( #2299 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.92.0 to 1.92.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.92.0...service/s3/v1.92.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.92.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-27 17:42:43 +08:00
dependabot[bot]
de24b71faa
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.1 to 1.32.2 ( #2300 )
2025-11-27 07:32:45 +08:00
Aditya Menon
d40bfced56
test: add integration test for issue #2291 (CRD preservation with strategicMergePatches) ( #2292 )
...
* test: add integration test for issue #2291 with all fixes
Add comprehensive integration test for issue #2291 that validates CRD
preservation when using strategicMergePatches with chartify.
Problem:
When using strategicMergePatches, chartify was relocating CRDs from
templates/crds/ to root crds/ directory, changing how Helm manages them.
This caused helm diff to incorrectly show CRDs as being removed, even
though they were still present.
Solution:
Chartify now preserves the original CRD location in templates/crds/.
This integration test validates the fix by:
1. Templating a chart with CRDs in templates/crds/
2. Applying the chart with strategicMergePatches
3. Verifying CRD is installed
4. Running helm diff to ensure CRD is NOT marked for removal
5. Verifying the strategic merge patch was applied
Additional fixes included in this commit:
- Fixed grep command error when matching YAML deletion patterns
- Updated expected test output for Helm 4 diff behavior
- Fixed EXIT trap interference between test cases
- Added --plain-http flag for Helm 4 OCI registry compatibility
- Ensured CRD templates are valid (cluster-scoped, no namespace)
- Fixed strategic merge patch namespace matching
Test coverage:
- CRD preservation in templates/crds/ subdirectory
- Strategic merge patch application
- Helm diff behavior with CRDs
- Integration with chartify kustomize processing
Fixes #2291
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
* switch chartify package to upstream one
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
* implement copilot suggestion
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
---------
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
2025-11-25 09:19:41 +08:00
Aditya Menon
83b4a8ffc7
Fix AWS SDK debug logging by making it configurable (issue #2270 ) ( #2290 )
...
* fix: make AWS SDK debug logging configurable (issue #2270 )
This PR fixes issue #2270 where AWS SDK debug logs expose sensitive
credentials in helmfile output, by adding flexible, configurable AWS SDK
logging with secure defaults.
Problem:
--------
Despite PR #2288 's fix, AWS SDK debug logs still appeared in helmfile
output, exposing sensitive information:
- AWS tokens and authorization headers
- Request/response bodies containing credentials
- Secret metadata from vals providers
Root Cause:
-----------
1. PR #2288 only suppressed vals' own logging via LogOutput: io.Discard
2. AWS SDK v2 uses separate logging (AWS_SDK_GO_LOG_LEVEL, WithClientLogMode)
3. Vals library defaulted to verbose logging (aws.LogRetries | aws.LogRequest)
4. No programmatic way to control AWS SDK logging
Solution:
---------
Two-part fix in conjunction with vals PR #893 :
1. Vals library enhancement (helmfile/vals#893 ):
- Added Options.AWSLogLevel field for programmatic control
- Changed default from verbose to secure (no logging)
- Added preset levels: off, minimal, standard, verbose
- Maintains AWS_SDK_GO_LOG_LEVEL precedence
2. Helmfile changes (this PR):
- Added HELMFILE_AWS_SDK_LOG_LEVEL environment variable
- Enhanced vals configuration to use new AWSLogLevel field
- Added conditional AWS SDK log suppression in remote.go (3 locations)
- Comprehensive unit tests (15 test cases)
Configuration:
--------------
Preset levels via HELMFILE_AWS_SDK_LOG_LEVEL:
- "off" (default) - No logging, secure, prevents credential leakage
- "minimal" - Log retries only
- "standard" - Log retries + requests (previous default behavior)
- "verbose" - Log everything (requests, responses, bodies, signing)
- Custom - Comma-separated values (e.g., "request,response")
Priority order:
1. AWS_SDK_GO_LOG_LEVEL env var (highest)
2. HELMFILE_AWS_SDK_LOG_LEVEL env var
3. Secure default ("off")
Testing:
--------
Added comprehensive unit tests:
- pkg/plugins/vals_test.go: 9 test cases
* TestAWSSDKLogLevelConfiguration - all preset levels
* TestEnvironmentVariableReading - env var parsing
- pkg/remote/remote_test.go: 6 test cases
* TestAWSSDKLogLevelInit - init() logic
All tests passing:
- pkg/plugins: PASS (3/3 test suites)
- pkg/remote: PASS (all test suites)
- golangci-lint: 0 issues
Files changed: 7 files, 271 insertions(+), 31 deletions(-)
Security:
---------
Before: Credentials exposed by default (aws.LogRetries | aws.LogRequest)
After: Credentials protected by default (no logging unless explicitly enabled)
Follows security principles:
- Secure by default
- Principle of least privilege
- Explicit opt-in for sensitive logging
- Defense in depth
Dependency:
-----------
Depends on: helmfile/vals#893
Currently using: aditmeno/vals@a97336ce2b (via go.mod replace)
After vals PR merges: Update to official release
Fixes : #2270
Related: #2288 , #2289 , helmfile/vals#893
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
* chore: update vals to use parameter-based AWS log level configuration
Updated vals dependency to commit 06d7cd29 which implements clean
parameter-based AWS SDK logging configuration instead of using
global state mutation.
Changes in vals implementation:
- AWS log level passed through function parameters to each provider
- No os.Setenv() - no environment mutation
- No package-level global variables
- No sync/atomic dependency needed
- Thread-safe by design - each provider instance has its own log level
This maintains the same functionality as before but with a cleaner
implementation that avoids global state mutation.
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
* deps: update vals to upstream v0.42.6
Update from vals fork (aditmeno/vals) to official release v0.42.6.
Remove replace directive now that vals PR #893 has been merged upstream.
This brings in the AWS SDK log level configuration improvements:
- SetDefaultLogLevel() package-level function
- Options.AWSLogLevel field support
- Secure default (no logging)
- Preset log levels (off, minimal, standard, verbose)
Also updates related dependencies:
- Azure SDK and auth libraries
- AWS SDK config and credentials
- OAuth2 library
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
---------
Signed-off-by: Aditya Menon <amenon@canarytechnologies.com >
2025-11-24 18:27:04 +08:00
dependabot[bot]
570ee3a8bb
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.91.1 to 1.92.0 ( #2286 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.91.1 to 1.92.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.91.1...service/s3/v1.92.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.92.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-23 17:32:52 +08:00
dependabot[bot]
9fc8ead633
build(deps): bump k8s.io/client-go from 0.34.1 to 0.34.2 ( #2285 )
...
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go ) from 0.34.1 to 0.34.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.1...v0.34.2 )
---
updated-dependencies:
- dependency-name: k8s.io/client-go
dependency-version: 0.34.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-22 08:28:06 +08:00
dependabot[bot]
13d206388e
build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.31.20 to 1.32.0 ( #2282 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/config
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.31.20 to 1.32.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.31.20...v1.32.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-21 08:36:09 +08:00
dependabot[bot]
86bdbd5c8f
build(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 ( #2283 )
...
Bumps [go.uber.org/zap](https://github.com/uber-go/zap ) from 1.27.0 to 1.27.1.
- [Release notes](https://github.com/uber-go/zap/releases )
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uber-go/zap/compare/v1.27.0...v1.27.1 )
---
updated-dependencies:
- dependency-name: go.uber.org/zap
dependency-version: 1.27.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-21 08:34:56 +08:00
dependabot[bot]
eaf1470884
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.90.2 to 1.91.1 ( #2284 )
...
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.90.2 to 1.91.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.90.2...service/s3/v1.91.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.91.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-21 08:12:06 +08:00