Skip to content

Fix/publish oci artifacts#464

Merged
padraigmc merged 8 commits intofidelity:masterfrom
fidelity-contributions:fix/publish-oci-artifacts
Feb 10, 2026
Merged

Fix/publish oci artifacts#464
padraigmc merged 8 commits intofidelity:masterfrom
fidelity-contributions:fix/publish-oci-artifacts

Conversation

@padraigmc
Copy link
Member

This pull request updates the Helm chart packaging and publishing process, improves CI workflow security for GitHub Actions, and bumps several dependencies and image versions. The most significant changes are the move to an OCI-compliant Helm chart, enhancements to the integration and release workflows, and dependency updates.

Helm Chart Packaging and Publishing:

  • The Helm chart is renamed to kraan-controller-helm, and its version is bumped to v0.3.52 in both Chart.yaml and VERSION. The chart is now packaged and pushed as an OCI artifact to ghcr.io/fidelity, and the release process in the Makefile is updated accordingly.
  • Documentation is updated to show both legacy and OCI Helm install commands, reflecting the new chart name and repository.

CI/CD Workflow Improvements:

  • The GitHub Actions workflow now injects a GIT_TOKEN secret for integration tests and uses it to create a Kubernetes secret for private repo access.
  • The workflow adds packages: write permission and logs in to GHCR before publishing the Helm chart.

Dependency and Image Updates:

  • Updates Helm and source controller image tags in chart/values.yaml to v1.4.5 and v1.7.4 respectively.
  • Updates several Go module dependencies to their latest patch or minor versions in go.mod, including github.com/fluxcd/pkg/apis/meta, go.uber.org/zap, golang.org/x/mod, and k8s.io/apimachinery.

dependabot bot and others added 8 commits January 23, 2026 12:26
Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.27.0 to 1.27.1.
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

---
updated-dependencies:
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 58d75ab24e95fd6a7468602d0fa30739f807176e)
Bumps [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) from 1.22.0 to 1.24.0.
- [Commits](fluxcd/pkg@apis/meta/v1.22.0...apis/meta/v1.24.0)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit b4352a2896b2a4e7cc35899920ffa5f34d001cbd)
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.29.0 to 0.32.0.
- [Commits](golang/mod@v0.29.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit b8612baf77ea48eac9507b1ef4cf1bae996386ed)
Signed-off-by: McCarthy, Padraig <Padraig.McCarthy@fmr.com>
Signed-off-by: McCarthy, Padraig <Padraig.McCarthy@fmr.com>
Signed-off-by: McCarthy, Padraig <Padraig.McCarthy@fmr.com>
Signed-off-by: McCarthy, Padraig <Padraig.McCarthy@fmr.com>
Signed-off-by: McCarthy, Padraig <Padraig.McCarthy@fmr.com>
@padraigmc padraigmc self-assigned this Feb 10, 2026
Copy link

@kishoregv kishoregv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@padraigmc padraigmc merged commit 193bfb5 into fidelity:master Feb 10, 2026
5 checks passed
@padraigmc padraigmc deleted the fix/publish-oci-artifacts branch February 10, 2026 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants