chore(deps): update volkerraschek/helm docker tag to v4

.gitea/scripts/add-annotations.sh

@@ -1,125 +0,0 @@
-#!/bin/bash
-
-set -e -o pipefail
-
-chart_file="Chart.yaml"
-if [ ! -f "${chart_file}" ]; then
-  echo "ERROR: ${chart_file} not found!" 1>&2
-  exit 1
-fi
-
-default_new_tag="$(git tag --sort=-version:refname | head -n 1)"
-default_old_tag="$(git tag --sort=-version:refname | head -n 2 | tail -n 1)"
-
-if [ -z "${1}" ]; then
-  echo "Enter start tag [${default_old_tag}]:"
-  read -r old_tag
-  if [ -z "${old_tag}" ]; then
-    old_tag="${default_old_tag}"
-  fi
-
-  while [ -z "$(git tag --list "${old_tag}")" ]; do
-    echo "ERROR: Tag '${old_tag}' not found!" 1>&2
-    echo "Enter start tag [${default_old_tag}]:"
-    read -r old_tag
-    if [ -z "${old_tag}" ]; then
-      old_tag="${default_old_tag}"
-    fi
-  done
-else
-  old_tag=${1}
-  if [ -z "$(git tag --list "${old_tag}")" ]; then
-    echo "ERROR: Tag '${old_tag}' not found!" 1>&2
-    exit 1
-  fi
-fi
-
-if [ -z "${2}" ]; then
-  echo "Enter end tag [${default_new_tag}]:"
-  read -r new_tag
-  if [ -z "${new_tag}" ]; then
-    new_tag="${default_new_tag}"
-  fi
-
-  while [ -z "$(git tag --list "${new_tag}")" ]; do
-    echo "ERROR: Tag '${new_tag}' not found!" 1>&2
-    echo "Enter end tag [${default_new_tag}]:"
-    read -r new_tag
-    if [ -z "${new_tag}" ]; then
-      new_tag="${default_new_tag}"
-    fi
-  done
-else
-  new_tag=${2}
-
-  if [ -z "$(git tag --list "${new_tag}")" ]; then
-    echo "ERROR: Tag '${new_tag}' not found!" 1>&2
-    exit 1
-  fi
-fi
-
-change_log_yaml=$(mktemp)
-echo "[]" > "${change_log_yaml}"
-
-function map_type_to_kind() {
-  case "${1}" in
-    feat)
-      echo "added"
-    ;;
-    fix)
-      echo "fixed"
-    ;;
-    chore|style|test|ci|docs|refac)
-      echo "changed"
-    ;;
-    revert)
-      echo "removed"
-    ;;
-    sec)
-      echo "security"
-    ;;
-    *)
-      echo "skip"
-    ;;
-  esac
-}
-
-commit_titles="$(git log --pretty=format:"%s" "${old_tag}..${new_tag}")"
-
-echo "INFO: Generate change log entries from ${old_tag} until ${new_tag}"
-
-while IFS= read -r line; do
-  if [[ "${line}" =~ ^([a-zA-Z]+)(\([^\)]+\))?\:\ (.+)$ ]]; then
-    type="${BASH_REMATCH[1]}"
-    kind=$(map_type_to_kind "${type}")
-
-    if [ "${kind}" == "skip" ]; then
-      continue
-    fi
-
-    desc="${BASH_REMATCH[3]}"
-
-    echo "- ${kind}: ${desc}"
-
-    jq --arg kind "${kind}" --arg description "${desc}" '. += [ $ARGS.named ]' < "${change_log_yaml}" > "${change_log_yaml}.new"
-    mv "${change_log_yaml}.new" "${change_log_yaml}"
-
-  fi
-done <<< "${commit_titles}"
-
-if [ -s "${change_log_yaml}" ]; then
-  yq --inplace --input-format json --output-format yml "${change_log_yaml}"
-  yq --no-colors --inplace ".annotations.\"artifacthub.io/changes\" |= loadstr(\"${change_log_yaml}\") | sort_keys(.)" "${chart_file}"
-else
-  echo "ERROR: Changelog file is empty: ${change_log_yaml}" 1>&2
-  exit 1
-fi
-
-rm "${change_log_yaml}"
-
-regexp=".*-alpha-[0-9]+(\.[0-9]+){,2}$"
-if [[ "${new_tag}" =~ $regexp ]]; then
-  yq --inplace '.annotations."artifacthub.io/prerelease" = "true"' "${chart_file}"
-else
-  yq --inplace '.annotations."artifacthub.io/prerelease" = "false"' "${chart_file}"
-fi

.gitea/workflows/artifacthub-metadata.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
-    - uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
       with:
         registry: ${{ github.server_url }}
         username: ${{ github.repository_owner }}

.gitea/workflows/generate-readme.yaml

@@ -15,7 +15,7 @@ on:
 jobs:
   generate-parameters:
     container:
-      image: docker.io/library/node:26.5.0-alpine
+      image: docker.io/library/node:26.7.0-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling

.gitea/workflows/helm.yaml

@@ -17,7 +17,7 @@ jobs:
     - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
       with:
-        version: "v4.2.3" # renovate: datasource=github-tags depName=helm/helm
+        version: "v4.2.4" # renovate: datasource=github-tags depName=helm/helm
     - name: Lint helm files
       run: |
         helm lint --values values.yaml .
@@ -28,7 +28,7 @@ jobs:
     - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
       with:
-        version: "v4.2.3" # renovate: datasource=github-tags depName=helm/helm
+        version: "v4.2.4" # renovate: datasource=github-tags depName=helm/helm
     - env:
         HELM_UNITTEST_VERSION: v1.0.0 #renovate: datasource=github-releases depName=helm-unittest/helm-unittest
       name: Install helm-unittest

.gitea/workflows/markdown-linters.yaml

@@ -15,7 +15,7 @@ on:
 jobs:
   markdown-link-checker:
     container:
-      image: docker.io/library/node:26.5.0-alpine
+      image: docker.io/library/node:26.7.0-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling
@@ -30,7 +30,7 @@ jobs:
 
   markdown-lint:
     container:
-      image: docker.io/library/node:26.5.0-alpine
+      image: docker.io/library/node:26.7.0-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling

.gitea/workflows/release.yaml

@@ -16,11 +16,11 @@ jobs:
     steps:
       - uses: volker-raschek/cosign-installer@7643eed6736a199595ed2a31e9979ec353a88adb # v4.1.3-rc3
         with:
-          cosign-release: "v3.1.2" # renovate: datasource=github-tags depName=sigstore/cosign
+          cosign-release: "v3.1.3" # renovate: datasource=github-tags depName=sigstore/cosign
 
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: "v4.2.3" # renovate: datasource=github-tags depName=helm/helm
+          version: "v4.2.4" # renovate: datasource=github-tags depName=helm/helm
 
       - name: Install helm plugins
         env:
@@ -69,11 +69,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Add Artifacthub.io annotations
-        run: |
-          NEW_TAG="$(git tag --sort=-version:refname | head -n 1)"
-          OLD_TAG="$(git tag --sort=-version:refname | head -n 2 | tail -n 1)"
-          .gitea/scripts/add-annotations.sh "${OLD_TAG}" "${NEW_TAG}"
+      - uses: volker-raschek/ah-annotations@994de3ecec889e7c52f2efb1607cbe96f1924fcc # v0.2.0
 
       - name: Extract meta information
         run: |
@@ -95,7 +91,7 @@ jobs:
             --passphrase-file "${GPG_PRIVATE_KEY_PASSPHRASE_FILE}" \
             --version "${PACKAGE_VERSION}" ./
 
-      - uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ github.server_url }}
           username: ${{ github.repository_owner }}