Commit graph

7773 commits

Author SHA1 Message Date
dependabot[bot]
f1db83f78f
build(deps): bump github.com/evanphx/json-patch
Bumps [github.com/evanphx/json-patch](https://github.com/evanphx/json-patch) from 5.9.0+incompatible to 5.9.11+incompatible.
- [Release notes](https://github.com/evanphx/json-patch/releases)
- [Commits](https://github.com/evanphx/json-patch/compare/v5.9.0...v5.9.11)

---
updated-dependencies:
- dependency-name: github.com/evanphx/json-patch
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-28 22:12:04 +00:00
George Jenkins
80f87ab636
Merge pull request #13654 from ryanhockstad/subchart-null
[backport] bugfix: Override subcharts with null values
2025-01-26 21:18:13 -08:00
Robert Sirchia
b85e21c8e3
Merge pull request #13645 from helm/dependabot/go_modules/dev-v3/k8s-io-71beb23250
build(deps): bump the k8s-io group with 7 updates
2025-01-24 15:14:51 -05:00
dependabot[bot]
3bc3751f70
build(deps): bump the k8s-io group with 7 updates
Bumps the k8s-io group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.0` | `0.32.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.0` | `0.32.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.32.0` | `0.32.1` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.32.0` | `0.32.1` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.32.0` | `0.32.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.32.0` | `0.32.1` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.32.0` | `0.32.1` |


Updates `k8s.io/api` from 0.32.0 to 0.32.1
- [Commits](https://github.com/kubernetes/api/compare/v0.32.0...v0.32.1)

Updates `k8s.io/apiextensions-apiserver` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.32.0...v0.32.1)

Updates `k8s.io/apimachinery` from 0.32.0 to 0.32.1
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.32.0...v0.32.1)

Updates `k8s.io/apiserver` from 0.32.0 to 0.32.1
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.32.0...v0.32.1)

Updates `k8s.io/cli-runtime` from 0.32.0 to 0.32.1
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.32.0...v0.32.1)

Updates `k8s.io/client-go` from 0.32.0 to 0.32.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.32.0...v0.32.1)

Updates `k8s.io/kubectl` from 0.32.0 to 0.32.1
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/kubectl
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-22 22:07:14 +00:00
Matt Farina
9aff8bdaa0
Merge pull request #13644 from mattfarina/backport-13583
fix: check group for resource info match (v3 backport)
2025-01-22 14:58:30 +01:00
George Jenkins
6ed9d2f2d5
Merge pull request #13592 from stevehipwell/add-plugin-platform-hooks-v3
feat: Add multi-platform plugin hook support [v3 backport]
2025-01-18 08:18:47 -08:00
Jiasheng Zhu
2ebce786ba
fix: check group for resource info match
Closes: #13582

Signed-off-by: Jiasheng Zhu <gnehsaijuhz@hotmail.com>
(cherry picked from commit f5d488122b)
2025-01-17 15:33:33 -05:00
Robert Sirchia
023d788ce8
Merge pull request #13634 from mattfarina/cleanup-securejoin-v3
Ensuring the file paths are clean prior to passing to securejoin (v3 backport)
2025-01-17 15:25:42 -05:00
Robert Sirchia
4840b66d4b
Merge pull request #13631 from helm/dependabot/go_modules/dev-v3/github.com/cyphar/filepath-securejoin-0.4.0
Bump github.com/cyphar/filepath-securejoin from 0.3.6 to 0.4.0
2025-01-17 15:22:11 -05:00
dependabot[bot]
8e86e76d50
Bump github.com/cyphar/filepath-securejoin from 0.3.6 to 0.4.0
Bumps [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) from 0.3.6 to 0.4.0.
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/cyphar/filepath-securejoin/compare/v0.3.6...v0.4.0)

---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-17 20:16:03 +00:00
Robert Sirchia
e600cb6547
Merge pull request #13620 from helm/dependabot/go_modules/dev-v3/github.com/containerd/containerd-1.7.25
Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
2025-01-17 15:14:41 -05:00
Ryan Hockstad
326c1e3f67 add test for nullifying nested global value
Signed-off-by: Ryan Hockstad <ryanhockstad@gmail.com>
2025-01-17 07:29:48 -05:00
Matt Farina
fba9d08dce
Ensuring the file paths are clean prior to passing to securejoin
securejoin v0.4.0 made a possibly breaking change. Only clean paths
are safe to pass to SecureJoin or they could return an error or
have the wrong path. The details are in the release notes for v0.4.0.

This change ensures the paths are clean prior to passing to SecureJoin.

Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 35a9ead998)
2025-01-14 15:35:47 -05:00
dependabot[bot]
a79be7d5d3
Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.24 to 1.7.25.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.24...v1.7.25)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-10 21:24:04 +00:00
Robert Sirchia
20db22293f
Merge pull request #13596 from helm/dependabot/go_modules/dev-v3/github.com/moby/term-0.5.2
Bump github.com/moby/term from 0.5.0 to 0.5.2
2025-01-08 15:42:39 -05:00
Matt Farina
2dfb447d2b
Merge pull request #13612 from helm/dependabot/go_modules/dev-v3/golang.org/x/crypto-0.32.0
Bump golang.org/x/crypto from 0.31.0 to 0.32.0
2025-01-08 21:36:30 +01:00
dependabot[bot]
b029d74a52
Bump golang.org/x/crypto from 0.31.0 to 0.32.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/crypto/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-07 21:21:50 +00:00
Matt Farina
da6f9c4637
Merge pull request #13606 from helm/dependabot/go_modules/dev-v3/golang.org/x/term-0.28.0
Bump golang.org/x/term from 0.27.0 to 0.28.0
2025-01-07 18:08:46 +01:00
dependabot[bot]
a1c0ae88a7
Bump golang.org/x/term from 0.27.0 to 0.28.0
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.27.0 to 0.28.0.
- [Commits](https://github.com/golang/term/compare/v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-06 21:18:53 +00:00
Matt Farina
99e2544b87
Merge pull request #13605 from mattfarina/bump-version-3.17
bump version to v3.17.0
2025-01-06 20:50:03 +01:00
Matt Farina
d6db69ed66
bump version to v3.17.0
Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 301108edc7)
2025-01-06 14:20:59 -05:00
dependabot[bot]
54ffefbcf7
Bump github.com/moby/term from 0.5.0 to 0.5.2
Bumps [github.com/moby/term](https://github.com/moby/term) from 0.5.0 to 0.5.2.
- [Commits](https://github.com/moby/term/compare/v0.5.0...v0.5.2)

---
updated-dependencies:
- dependency-name: github.com/moby/term
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-03 22:02:33 +00:00
Ryan Hockstad
ef2eb55283 Add test case for removing an entire object
Signed-off-by: Ryan Hockstad <ryanhockstad@gmail.com>
2025-01-02 22:19:19 -05:00
Scott Rigby
60fcce18d1 Tests for bugfix: Override subcharts with null values #12879
- Add consistency for null test in given values, parent chart, subchart, and
  sub-sub-chart
- Remove bar null test to keep consistent with boat=null at top level

Signed-off-by: Scott Rigby <scott@r6by.com>
2025-01-02 21:17:30 -05:00
Andrew Block
83dddb1839
feat: Added multi-platform plugin hook support to v3
Signed-off-by: Steve Hipwell <steve.hipwell@gmail.com>
2025-01-02 12:45:36 +00:00
George Jenkins
0ac5d28c3e
Merge pull request #13588 from mattfarina/v3-backport-oci-digest
feat: OCI install by digest (v3 backport)
2025-01-01 20:04:50 -08:00
Terry Howe
949b2e6040 fix: make ORAS reference private
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
(cherry picked from commit d2b94f6200)
2025-01-01 11:50:58 -05:00
Terry Howe
aba95b9cb4 fix: issue with helm template and oci chart
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
(cherry picked from commit aca7e8d775)
2025-01-01 11:50:43 -05:00
Terry Howe
c3e5217d85 feat: allow installation by OCI digest
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
(cherry picked from commit ad9fb68fa3)
2025-01-01 11:50:26 -05:00
Matt Farina
fbfbf1aae6
Merge pull request #13555 from helm/dependabot/go_modules/dev-v3/k8s-io-b022215331
Bump the k8s-io group with 7 updates
2024-12-31 22:38:24 +01:00
dependabot[bot]
33a0ee7b9a
Bump the k8s-io group with 7 updates
Bumps the k8s-io group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.31.3` | `0.32.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.31.3` | `0.32.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.3` | `0.32.0` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.31.3` | `0.32.0` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.31.3` | `0.32.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.3` | `0.32.0` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.31.3` | `0.32.0` |


Updates `k8s.io/api` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/api/compare/v0.31.3...v0.32.0)

Updates `k8s.io/apiextensions-apiserver` from 0.31.3 to 0.32.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.31.3...v0.32.0)

Updates `k8s.io/apimachinery` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.3...v0.32.0)

Updates `k8s.io/apiserver` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.31.3...v0.32.0)

Updates `k8s.io/cli-runtime` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.31.3...v0.32.0)

Updates `k8s.io/client-go` from 0.31.3 to 0.32.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.3...v0.32.0)

Updates `k8s.io/kubectl` from 0.31.3 to 0.32.0
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.31.3...v0.32.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/kubectl
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-31 18:05:34 +00:00
Matt Farina
c6b8d2b359
Merge pull request #13585 from mattfarina/backport-xnet-33-fix
Upgrade golang.org/x/net to v0.33.0 to address CVE-2024-45338 (v3 backport)
2024-12-31 19:04:26 +01:00
cx
79993d2e5b Upgrade golang.org/x/net to v0.33.0 to address CVE-2024-45338
fixed: #13551

Signed-off-by: cx <1249843194@qq.com>
(cherry picked from commit e00ab86567)
2024-12-31 12:01:38 -05:00
Matt Farina
9ade3b502a
Merge pull request #13574 from gjenkins8/v3_13343
Add annotations and dependencies to get metadata output [v3 backport]
2024-12-30 15:06:08 +01:00
Matt Farina
4f0b63483e
Merge pull request #13575 from gjenkins8/v3_13232
ref(create): don't render empty resource fields [v3 backport]
2024-12-30 14:31:02 +01:00
Matt Farina
391a90752d
Merge pull request #13512 from gjenkins8/shadow_oras_remoteclient_type
fix: Shadow ORAS remote.Client interface [v3 backport]
2024-12-30 14:19:38 +01:00
Matt Farina
2bfcedd7b6
Merge pull request #13580 from mattfarina/go-1.23-v3
Go 1.23 v3
2024-12-30 01:02:35 +01:00
Matt Farina
037c18af35 Update golangci-lint version
Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 66f84e510e)
2024-12-28 12:06:54 -05:00
Matt Farina
9f620b857a Update to Go 1.23
Multiple changes were made to pass linting. Some Go built-in names
are being used for variables (e.g., min). This happens in the Go
source itself including the Go standard library and is not always
a bad practice.

To handle allowing some built-in names to be used the linter config
is updated to allow (via opt-in) some names to pass. This allows us
to still check for re-use of Go built-in names and opt-in to any
new uses.

There were also several cases where a value was checked for nil
before checking its length when this is already handled by len()
or the types default value. These were cleaned up.

The license validation was updated because it was checking everything
in the .git directory including all remote content that was local.
The previous vendor directory was from a time prior to Go modules
when Helm handled dependencies differently. It was no longer needed.

Signed-off-by: Matt Farina <matt.farina@suse.com>
(cherry picked from commit 5727f56a96)
2024-12-28 12:06:27 -05:00
dnskr
ba180a3b6a ref(create): don't render empty resource fields
Signed-off-by: Denis Krivenko <dnskrv88@gmail.com>
Signed-off-by: dnskr <dnskrv88@gmail.com>
2024-12-27 08:17:27 -08:00
Niladri Halder
7321579092 Add annotations and dependencies to get metadata output
The output of helm get metadata includes a subset of the fields contained in
the chart.Metadata struct. This change adds the values of the annotations field
and the dependencies field to the output.

Signed-off-by: Niladri Halder <niladri.halder26@gmail.com>
2024-12-27 08:11:15 -08:00
Matt Farina
0a588c264c
Merge pull request #13567 from mattfarina/backport-fix-dev-v3-pr-tests
Backport #13563 (fix testing on dev-v3 PRs)
2024-12-27 13:50:57 +01:00
George Jenkins
2042f7d35a Run build-test action on dev-v3 branch
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
(cherry picked from commit bfada38aa9)
2024-12-26 16:39:05 -05:00
Matt Farina
498d03d09d
Merge pull request #13566 from mattfarina/fix-dev-v3-from-take-ownership 2024-12-21 18:24:52 +01:00
Matt Farina
a3a9e4f643 Fix dev-v3 from take ownership changes
When #13531 was merged in the tests were not passing. This is because
it took into account #13444 but that had not been backported to v3.
Tests had not been automatically run on dev-v3 but that was fixed
via #13563.

Signed-off-by: Matt Farina <matt.farina@suse.com>
2024-12-21 08:41:36 -05:00
Matt Farina
35cdbead6e
Merge pull request #13565 from helm/dependabot/go_modules/dev-v3/github.com/rubenv/sql-migrate-1.7.1
Bump github.com/rubenv/sql-migrate from 1.7.0 to 1.7.1
2024-12-21 14:21:22 +01:00
Matt Farina
b83fe3bfc1
Merge pull request #13559 from helm/dependabot/go_modules/dev-v3/github.com/cyphar/filepath-securejoin-0.3.6
Bump github.com/cyphar/filepath-securejoin from 0.3.4 to 0.3.6
2024-12-21 14:20:42 +01:00
dependabot[bot]
c7cd1772c7
Bump github.com/rubenv/sql-migrate from 1.7.0 to 1.7.1
Bumps [github.com/rubenv/sql-migrate](https://github.com/rubenv/sql-migrate) from 1.7.0 to 1.7.1.
- [Commits](https://github.com/rubenv/sql-migrate/compare/v1.7.0...v1.7.1)

---
updated-dependencies:
- dependency-name: github.com/rubenv/sql-migrate
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-20 22:11:50 +00:00
dependabot[bot]
ca61226c03
Bump github.com/cyphar/filepath-securejoin from 0.3.4 to 0.3.6
Bumps [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) from 0.3.4 to 0.3.6.
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/cyphar/filepath-securejoin/compare/v0.3.4...v0.3.6)

---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-20 20:56:04 +00:00
George Jenkins
e49dfab22a
Merge pull request #13560 from helm/dependabot/go_modules/dev-v3/github.com/stretchr/testify-1.10.0
Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
2024-12-20 12:48:22 -08:00