fix(ci): add xterm

fix(ci): add bash unittests
chore(renovate): migrate the configuration to plain JSON
2026-09-14 20:59:24 +02:00 · 2026-09-14 20:57:01 +02:00 · 2026-09-14 20:42:40 +02:00 · 2026-09-14 20:38:05 +02:00 · 2026-09-14 20:33:19 +02:00 · 2026-09-14 20:32:37 +02:00
8 changed files with 178 additions and 173 deletions
@@ -0,0 +1,23 @@
 name: Bash
 on:
  pull_request:
    types: [ "opened", "reopened", "synchronize" ]
  push:
    branches:
    - '**'
    tags-ignore:
    - '**'
  workflow_dispatch: {}
 jobs:
  bash-unittest:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
      with:
        submodules: true
    - env:
          TERM: xterm
      name: Run bash unittests
      run: make bash/unittest
@@ -18,6 +18,8 @@ jobs:
    - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
      with:
        version: v4.3.0 # renovate: datasource=github-releases depName=helm/helm
    - name: Update helm dependencies
      run: helm dependency update
    - name: Lint helm files
      run: |
        helm lint --values values.yaml .
@@ -33,5 +35,7 @@ jobs:
        HELM_UNITTEST_VERSION: v1.0.0 #renovate: datasource=github-releases depName=helm-unittest/helm-unittest
      name: Install helm-unittest
      run: helm plugin install --verify=false --version "${HELM_UNITTEST_VERSION}" https://github.com/helm-unittest/helm-unittest
    - name: Update helm dependencies
      run: helm dependency update
    - name: Execute helm unittests
      run: helm unittest --strict --file 'unittests/**/*.yaml' .
@@ -36,6 +36,6 @@ unittests/
 .prettierignore
 .yamllint
 CODEOWNERS
-renovate.json5
+renovate.json
 .commitlintrc.json
 .gitsv/
@@ -4,8 +4,7 @@
            "/unittests/**/*.yaml"
        ],
        "https://docs.renovatebot.com/renovate-schema.json":[
-          "renovate.json",
+          "renovate.json"
          "renovate.json5"
        ]
    },
    "yaml.schemaStore.enable": true,
@@ -1,5 +1,11 @@
 SHELL := /usr/bin/env bash -O globstar
 # CLEAN
 # ==============================================================================
 PHONY+=clean
 clean:
 	-rm -rf charts *.tar.gz *.tar.gz.sig node_modules
 # MISSING DOT
 # ==============================================================================
 PHONY+=missing-dot
@@ -35,6 +41,13 @@ PHONY+=helm/unittest
 helm/unittest:
 	helm unittest --strict --file 'unittests/helm/**/*.yaml' --file 'unittests/helm/values-conflicting-checks.yaml' ./
 # BASH PREPARE
 # ==============================================================================
 PHONY+=bash/prepare
 bash/prepare:
 	git submodule init
 	git submodule update
 # BASH UNITTESTS
 # ==============================================================================
 PHONY+=bash/unittest
@@ -0,0 +1,136 @@
 {
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "gitea>gitea/renovate-config",
    "helpers:pinGitHubActionDigests",
    ":automergeMinor",
    "schedule:automergeDaily",
    "schedule:weekends"
  ],
  "labels": [
    "kind/dependency"
  ],
  "digest": {
    "automerge": true
  },
  "automergeStrategy": "squash",
  "git-submodules": {
    "enabled": true
  },
  "customManagers": [
    {
      "description": "Gitea-version of https://docs.renovatebot.com/presets-regexManagers/#regexmanagersgithubactionsversions",
      "customType": "regex",
      "managerFilePatterns": [
        "/.gitea/workflows/.+\\.ya?ml$/"
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-.]+?) depName=(?<depName>[^\\s]+?)(?: (?:lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[a-z-0-9]+?))?\\s+[A-Za-z0-9_]+?_VERSION\\s*:\\s*[\"']?(?<currentValue>.+?)[\"']?\\s"
      ]
    },
    {
      "description": "Detect helm-unittest yaml schema file",
      "customType": "regex",
      "managerFilePatterns": [
        "/.vscode/settings\\.json$/"
      ],
      "matchStrings": [
        "https:\\/\\/raw\\.githubusercontent\\.com\\/(?<depName>[^\\s]+?)\\/(?<currentValue>v[0-9.]+?)\\/schema\\/helm-testsuite\\.json"
      ],
      "datasourceTemplate": "github-releases"
    },
    {
      "description": "Automatically detect new Gitea releases",
      "customType": "regex",
      "datasourceTemplate": "github-releases",
      "depNameTemplate": "gitea/gitea",
      "extractVersionTemplate": "^v(?<version>.*)$",
      "managerFilePatterns": [
        "/(^|/)Chart\\.ya?ml$/"
      ],
      "matchStrings": [
        "^appVersion:\\s+[\"']?(?<currentVersion>\\S+)[\"']?$"
      ]
    }
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "commitMessageAction": "update",
    "commitMessageTopic": "lockfiles",
    "schedule": [
      "at any time"
    ]
  },
  "packageRules": [
    {
      "groupName": "subcharts (minor & patch)",
      "matchManagers": [
        "helmv3"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch",
        "digest"
      ]
    },
    {
      "groupName": "bats testing framework",
      "matchManagers": [
        "git-submodules"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch",
        "digest"
      ]
    },
    {
      "groupName": "workflow dependencies (minor & patch)",
      "matchManagers": [
        "github-actions",
        "npm",
        "custom.regex"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch",
        "digest"
      ],
      "matchFileNames": [
        "!Chart.yaml"
      ]
    },
    {
      "description": "Update README.md on changes in values.yaml",
      "matchManagers": [
        "helm-values"
      ],
      "postUpgradeTasks": {
        "commands": [
          "install-tool node",
          "make readme"
        ],
        "fileFilters": [
          "README.md"
        ],
        "executionMode": "update"
      }
    },
    {
      "description": "Override changelog url for Helm image, to have release notes in our PRs",
      "matchDepNames": [
        "alpine/helm"
      ],
      "changelogUrl": "https://github.com/helm/helm"
    },
    {
      "description": "Bump Gitea as fast as possible - not only on weekends",
      "matchDepNames": [
        "go-gitea/gitea"
      ],
      "schedule": [
        "at any time"
      ]
    }
  ]
 }
@@ -1,136 +0,0 @@
 {
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: [
    "gitea>gitea/renovate-config",
    "helpers:pinGitHubActionDigests",
    ":automergeMinor",
    "schedule:automergeDaily",
    "schedule:weekends",
  ],
  labels: [
    "kind/dependency",
  ],
  digest: {
    automerge: true,
  },
  automergeStrategy: "squash",
  "git-submodules": {
    enabled: true,
  },
  customManagers: [
    {
      description: "Gitea-version of https://docs.renovatebot.com/presets-regexManagers/#regexmanagersgithubactionsversions",
      customType: "regex",
      managerFilePatterns: [
        "/.gitea/workflows/.+\\.ya?ml$/",
      ],
      matchStrings: [
        "# renovate: datasource=(?<datasource>[a-z-.]+?) depName=(?<depName>[^\\s]+?)(?: (?:lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[a-z-0-9]+?))?\\s+[A-Za-z0-9_]+?_VERSION\\s*:\\s*[\"']?(?<currentValue>.+?)[\"']?\\s",
      ],
    },
    {
      description: "Detect helm-unittest yaml schema file",
      customType: "regex",
      managerFilePatterns: [
        "/.vscode/settings\\.json$/",
      ],
      matchStrings: [
        "https:\\/\\/raw\\.githubusercontent\\.com\\/(?<depName>[^\\s]+?)\\/(?<currentValue>v[0-9.]+?)\\/schema\\/helm-testsuite\\.json",
      ],
      datasourceTemplate: "github-releases",
    },
    {
      description: "Automatically detect new Gitea releases",
      customType: "regex",
      datasourceTemplate: "github-releases",
      depNameTemplate: "gitea/gitea",
      extractVersionTemplate: "^v(?<version>.*)$",
      managerFilePatterns: [
        "/(^|/)Chart\\.ya?ml$/",
      ],
      matchStrings: [
        "^appVersion:\\s+[\"']?(?<currentVersion>\\S+)[\"']?$",
      ],
    },
  ],
  lockFileMaintenance: {
    "enabled": true,
    "commitMessageAction": "update",
    "commitMessageTopic": "lockfiles",
    schedule: [
      "at any time",
    ]
  },
  packageRules: [
    {
      groupName: "subcharts (minor & patch)",
      matchManagers: [
        "helmv3",
      ],
      matchUpdateTypes: [
        "minor",
        "patch",
        "digest",
      ],
    },
    {
      groupName: "bats testing framework",
      matchManagers: [
        "git-submodules",
      ],
      matchUpdateTypes: [
        "minor",
        "patch",
        "digest",
      ],
    },
    {
      groupName: "workflow dependencies (minor & patch)",
      matchManagers: [
        "github-actions",
        "npm",
        "custom.regex",
      ],
      matchUpdateTypes: [
        "minor",
        "patch",
        "digest",
      ],
      matchFileNames: [
        "!Chart.yaml",
      ],
    },
    {
      description: "Update README.md on changes in values.yaml",
      matchManagers: [
        "helm-values",
      ],
      postUpgradeTasks: {
        commands: [
          "install-tool node",
          "make readme",
        ],
        fileFilters: [
          "README.md",
        ],
        executionMode: "update",
      },
    },
    {
      description: "Override changelog url for Helm image, to have release notes in our PRs",
      matchDepNames: [
        "alpine/helm",
      ],
      changelogUrl: "https://github.com/helm/helm",
    },
    {
      description: "Bump Gitea as fast as possible - not only on weekends",
      matchDepNames: [
        "go-gitea/gitea",
      ],
      schedule: [
        "at any time",
      ],
    },
  ],
 }
@@ -1,34 +0,0 @@
 suite: test connection template
 release:
  name: gitea-unittests
  namespace: testing
 templates:
  - templates/tests/test-http-connection.yaml
 tests:
  - it: renders openshift-compatible defaults for the test pod
    set:
      openshift.enabled: true
    asserts:
      - notExists:
          path: spec.hostUsers
      - equal:
          path: spec.containers[0].securityContext
          value:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
  - it: renders an explicit hostUsers=false override for the test pod
    set:
      openshift:
        enabled: true
      deployment:
        hostUsers: false
    asserts:
      - equal:
          path: spec.hostUsers
          value: false
Author	SHA1	Message	Date
volker.raschek	ccea2082c3	fix(ci): add xterm changelog / changelog (push) Successful in 20s Details Bash / bash-unittest (push) Successful in 29s Details Helm / helm-unittest (push) Successful in 1m12s Details Helm / helm-lint (push) Successful in 10s Details	2026-09-14 20:59:24 +02:00
volker.raschek	4016c5396d	fix(ci): add bash unittests changelog / changelog (push) Successful in 17s Details Bash / bash-unittest (push) Failing after 23s Details Helm / helm-lint (push) Successful in 8s Details Helm / helm-unittest (push) Successful in 1m11s Details	2026-09-14 20:57:01 +02:00
volker.raschekandCopilot	d35177ec71	chore(renovate): migrate the configuration to plain JSON Helm / helm-lint (push) Successful in 17s Details changelog / changelog (push) Successful in 20s Details Helm / helm-unittest (push) Successful in 1m9s Details The JSON5 syntax was not used for anything that JSON cannot express. The only comment-looking entry was already a `description` field, which renovate evaluates itself and which therefore survives the conversion. Plain JSON is the better default here, because it needs no dedicated parser in editors and tooling. The converted configuration was verified against the JSON5 parser to be structurally identical to its predecessor. Co-authored-by: Copilot <copilot@github.com>	2026-09-14 20:42:40 +02:00
volker.raschekandCopilot	e97f3b3bba	fix(ci): resolve the helm dependencies with `dependency update` changelog / changelog (push) Successful in 16s Details Helm / helm-lint (push) Successful in 16s Details Helm / helm-unittest (push) Successful in 31s Details `helm dependency build` only downloads charts from repositories that are already registered in the local repository cache. On a fresh runner that cache is empty, so the classic repository of the valkey dependency could not be resolved: "no repository definition for https://valkey.io/valkey-helm. Please add the missing repos via 'helm repo add'". The two bitnami dependencies were unaffected, because OCI references do not need a repository entry. `helm dependency update` resolves the repository URLs straight from `Chart.yaml` and therefore needs no additional `helm repo add` step. Repeating the URL in the workflow would only invite drift, since renovate updates `Chart.yaml` alone. All three dependencies are pinned to exact versions, so the resolution result is identical to `Chart.lock`. This corrects `0102563`, which introduced the `dependency build` step. Co-authored-by: Copilot <copilot@github.com>	2026-09-14 20:38:05 +02:00
volker.raschekandCopilot	70a033d519	chore(make): add a `clean` target Helm / helm-lint (push) Failing after 12s Details changelog / changelog (push) Successful in 16s Details Helm / helm-unittest (push) Failing after 22s Details Removes the artifacts that are produced by the other targets and ignored by git, so a broken state can be reset without remembering which directories are generated. `helm dependency build` populates `charts`, the readme generator installs `node_modules` and packaging leaves the chart archive and its signature behind. Co-authored-by: Copilot <copilot@github.com>	2026-09-14 20:33:19 +02:00
volker.raschekandCopilot	010256397a	fix(ci): build the helm dependencies before linting and testing The `charts` directory is ignored by git, so a fresh checkout does not contain the postgresql, postgresql-ha and valkey sub-charts. Locally the workflow appeared to work because `make helm/dependency-update` had populated the directory at some earlier point. Without the sub-charts every suite that asserts on a dependency template failed with "document index 0 is out of range" and "template gitea/charts/postgresql/templates/primary/svc.yaml not exists or not selected in test suite". `helm lint` was affected for the same reason. `helm dependency build` is used instead of `helm dependency update`, because `Chart.lock` is committed and the pinned versions should be resolved reproducibly rather than refreshed on every run. Co-authored-by: Copilot <copilot@github.com>	2026-09-14 20:32:37 +02:00