chore(deps): update oras-project/setup-oras action to v2

2026-04-14 15:30:46 +00:00
9 changed files with 63 additions and 46 deletions
@@ -10,15 +10,15 @@ jobs:
    name: "Upload artifacthub-repo.yml to OCI registry"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: docker/login-action@v4.2.0
+    - uses: actions/checkout@v6.0.2
+    - uses: docker/login-action@v4.1.0
      with:
        registry: ${{ github.server_url }}
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
    - uses: oras-project/setup-oras@v2.0.0
      with:
-        version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
+        version: 1.3.1 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
    - name: Extract meta information
      run: |
        echo "GITEA_SERVER_HOSTNAME=$(echo "${GITHUB_SERVER_URL}" | cut -d '/' -f 3)" >> $GITHUB_ENV
@@ -15,14 +15,14 @@ on:
 jobs:
  generate-parameters:
    container:
-      image: docker.io/library/node:26.3.0-alpine
+      image: docker.io/library/node:25.9.0-alpine
    runs-on: ubuntu-latest
    steps:
    - name: Install tooling
      run: |
        apk update
        apk add git npm
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@v6.0.2
    - name: Generate parameter section in README
      run: |
        npm install
@@ -14,10 +14,10 @@ jobs:
  helm-lint:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@v6.0.2
    - uses: azure/setup-helm@v5.0.0
      with:
-        version: "v4.2.0" # renovate: datasource=github-tags depName=helm/helm
+        version: "v4.0.1" # renovate: datasource=github-tags depName=helm/helm
    - name: Lint helm files
      run: |
        helm lint --values values.yaml .
@@ -25,10 +25,10 @@ jobs:
  helm-unittest:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@v6.0.2
    - uses: azure/setup-helm@v5.0.0
      with:
-        version: "v4.2.0" # renovate: datasource=github-tags depName=helm/helm
+        version: "v4.0.1" # renovate: datasource=github-tags depName=helm/helm
    - env:
        HELM_UNITTEST_VERSION: v1.0.0 #renovate: datasource=github-releases depName=helm-unittest/helm-unittest
      name: Install helm-unittest
@@ -15,14 +15,14 @@ on:
 jobs:
  markdown-link-checker:
    container:
-      image: docker.io/library/node:26.3.0-alpine
+      image: docker.io/library/node:25.9.0-alpine
    runs-on: ubuntu-latest
    steps:
    - name: Install tooling
      run: |
        apk update
        apk add git npm
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@v6.0.2
    - name: Verify links in markdown files
      run: |
        npm install
@@ -30,14 +30,14 @@ jobs:

  markdown-lint:
    container:
-      image: docker.io/library/node:26.3.0-alpine
+      image: docker.io/library/node:25.9.0-alpine
    runs-on: ubuntu-latest
    steps:
    - name: Install tooling
      run: |
        apk update
        apk add git
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@v6.0.2
    - name: Lint markdown files
      run: |
        npm install
@@ -14,19 +14,19 @@ jobs:
  publish-chart:
    runs-on: ubuntu-latest
    steps:
-      - uses: volker-raschek/cosign-installer@v4.1.2-rc4
+      - uses: sigstore/cosign-installer@v4.1.1
        with:
-          cosign-release: "v3.1.1" # renovate: datasource=github-tags depName=sigstore/cosign
+          cosign-release: "v2.6.3" # renovate: datasource=github-tags depName=sigstore/cosign

      - uses: azure/setup-helm@v5.0.0
        with:
-          version: "v4.2.0" # renovate: datasource=github-tags depName=helm/helm
+          version: "v4.0.1" # renovate: datasource=github-tags depName=helm/helm

      - name: Install helm plugins
        env:
          HELM_SIGSTORE_VERSION: "0.3.0" # renovate: datasource=github-tags depName=sigstore/helm-sigstore extractVersion='^v(?<version>\d+\.\d+\.\d+)$'
-          HELM_SCHEMA_VALUES_VERSION: "2.4.0" # renovate: datasource=github-tags depName=losisin/helm-values-schema-json extractVersion='^v(?<version>\d+\.\d+\.\d+)$'
-          HELM_UNITTEST_VERSION: "1.1.1" # renovate: datasource=github-tags depName=helm-unittest/helm-unittest extractVersion='^v(?<version>\d+\.\d+\.\d+)$'
+          HELM_SCHEMA_VALUES_VERSION: "2.3.1" # renovate: datasource=github-tags depName=losisin/helm-values-schema-json extractVersion='^v(?<version>\d+\.\d+\.\d+)$'
+          HELM_UNITTEST_VERSION: "1.0.3" # renovate: datasource=github-tags depName=helm-unittest/helm-unittest extractVersion='^v(?<version>\d+\.\d+\.\d+)$'
        run: |
          helm plugin install --verify=false https://github.com/sigstore/helm-sigstore.git --version "${HELM_SIGSTORE_VERSION}" 1> /dev/null
          helm plugin install --verify=false https://github.com/losisin/helm-values-schema-json.git --version "${HELM_SCHEMA_VALUES_VERSION}" 1> /dev/null
@@ -65,7 +65,7 @@ jobs:
          gpg --batch --yes --export "${GPG_PRIVATE_KEY_FINGERPRINT}" 1> "${HOME}/.gnupg/pubring.gpg"
          gpg --batch --yes --passphrase-fd 0 --export-secret-keys "${GPG_PRIVATE_KEY_FINGERPRINT}" 1> "${HOME}/.gnupg/secring.gpg" <<< "${GPG_PRIVATE_KEY_PASSPHRASE}"

-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v6.0.2
        with:
          fetch-depth: 0

@@ -95,7 +95,7 @@ jobs:
            --passphrase-file "${GPG_PRIVATE_KEY_PASSPHRASE_FILE}" \
            --version "${PACKAGE_VERSION}" ./

-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@v4.1.0
        with:
          registry: ${{ github.server_url }}
          username: ${{ github.repository_owner }}
@@ -121,21 +121,15 @@ jobs:
            --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz" \
              https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/charts

-          # NOTE:
-          # Gitea does currently not support uploading Helm chart provenance files, so we skip this step for now. Once
-          # Gitea supports this, we can simply uncomment the following lines to upload the provenance file as well.
-          #
-          #   https://github.com/helm/helm/issues/31866
-          #
-          # if [ -f "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" ]; then
-          #   curl \
-          #     --fail \
-          #     --show-error \
-          #     --request POST \
-          #     --user "${CHARTMUSEUM_USERNAME}:${CHARTMUSEUM_PASSWORD}" \
-          #     --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" \
-          #       https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/prov
-          # fi
+          if [ -f "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" ]; then
+            curl \
+              --fail \
+              --show-error \
+              --request POST \
+              --user "${CHARTMUSEUM_USERNAME}:${CHARTMUSEUM_PASSWORD}" \
+              --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" \
+                https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/prov
+          fi

      - name: Upload Chart to Chartmuseum (Helm)
        env:
@@ -3,7 +3,7 @@
    ".gitea/workflows/*.yaml": "github-actions-workflow"
  },
  "yaml.schemas": {
-    "https://raw.githubusercontent.com/helm-unittest/helm-unittest/v1.1.1/schema/helm-testsuite.json": [
+    "https://raw.githubusercontent.com/helm-unittest/helm-unittest/v1.0.3/schema/helm-testsuite.json": [
      "/unittests/**/*.yaml"
    ]
  },
@@ -4,7 +4,7 @@ CONTAINER_RUNTIME?=$(shell which podman)
 # HELM_IMAGE
 HELM_IMAGE_REGISTRY_HOST?=docker.io
 HELM_IMAGE_REPOSITORY?=volkerraschek/helm
-HELM_IMAGE_VERSION?=4.2.0 # renovate: datasource=docker registryUrl=https://docker.io depName=volkerraschek/helm
+HELM_IMAGE_VERSION?=3.19.0 # renovate: datasource=docker registryUrl=https://docker.io depName=docker.io/volkerraschek/helm
 HELM_IMAGE_FULLY_QUALIFIED=${HELM_IMAGE_REGISTRY_HOST}/${HELM_IMAGE_REPOSITORY}:${HELM_IMAGE_VERSION}

 # NODE_IMAGE
@@ -35,9 +35,9 @@ separate [chapter](#argocd).
 > time is not possible.

 ```bash
-helm repo add prometheus-exporters https://charts.cryptic.systems/prometheus-exporters
+helm repo add prometheus-postgres-exporters https://git.cryptic.systems/prometheus-exporters
 helm repo update
-CHART_VERSION=0.5.12
+CHART_VERSION=0.5.8
 helm install --version "${CHART_VERSION}" prometheus-postgres-exporter prometheus-exporters/prometheus-postgres-exporter \
  --set 'config.database.secret.databaseUsername=postgres' \
  --set 'config.database.secret.databasePassword=postgres' \
@@ -49,7 +49,7 @@ helm install --version "${CHART_VERSION}" prometheus-postgres-exporter prometheu
 Alternatively, the deployment of the helm charts can also be done via an OCI registry:

 ```bash
-CHART_VERSION=0.5.12
+CHART_VERSION=0.5.8
 helm install "oci://git.cryptic.systems/volker.raschek/prometheus-postgres-exporter:${CHART_VERSION}" \
  --set 'config.database.secret.databaseUsername=postgres' \
  --set 'config.database.secret.databasePassword=postgres' \
@@ -64,7 +64,7 @@ version of the chart must be in sync with the `values.yaml`. Newer *minor* versi
 versions can break something!

 ```bash
-CHART_VERSION=0.5.12
+CHART_VERSION=0.5.8
 helm show values --version "${CHART_VERSION}" prometheus-exporters/prometheus-postgres-exporter > values.yaml
 ```

@@ -102,7 +102,7 @@ Further information about this topic can be found in one of Kanishk's blog
 > Please take care the a CPU limit < `1000m` can also lead to CPU throttling. Please read the linked documentation carefully.

 ```bash
-CHART_VERSION=0.5.12
+CHART_VERSION=0.5.8
 helm install --version "${CHART_VERSION}" prometheus-postgres-exporter prometheus-exporters/prometheus-postgres-exporter \
  --set 'config.database.secret.databaseUsername=postgres' \
  --set 'config.database.secret.databasePassword=postgres' \
@@ -124,7 +124,7 @@ certification will be skipped by Prometheus.
 > `tls.key` and `tls.crt` of the secret can be mounted into the container filesystem for TLS authentication / encryption.

 ```bash
-CHART_VERSION=0.5.12
+CHART_VERSION=0.5.8
 helm install --version "${CHART_VERSION}" prometheus-postgres-exporter prometheus-exporters/prometheus-postgres-exporter \
  --set 'config.database.secret.databaseUsername=postgres' \
  --set 'config.database.secret.databasePassword=postgres' \
@@ -148,7 +148,7 @@ certificate for the metrics exporter - TLS certificate verification can be enabl
 replaced:

 ```diff
-  CHART_VERSION=0.5.12
+  CHART_VERSION=0.5.8
  helm install --version "${CHART_VERSION}" prometheus-postgres-exporter prometheus-exporters/prometheus-postgres-exporter \
    --set 'config.database.secret.databaseUsername=postgres' \
    --set 'config.database.secret.databasePassword=postgres' \
@@ -202,7 +202,7 @@ the Grafana container file system so that it is subsequently available to the us
 makes this possible.

 ```bash
-CHART_VERSION=0.5.12
+CHART_VERSION=0.5.8
 helm install --version "${CHART_VERSION}" prometheus-postgres-exporter prometheus-exporters/prometheus-postgres-exporter \
  --set 'config.database.secret.databaseUsername=postgres' \
  --set 'config.database.secret.databasePassword=postgres' \
@@ -4,7 +4,6 @@
    "local>volker.raschek/renovate-config:default#master",
    "local>volker.raschek/renovate-config:container#master",
    "local>volker.raschek/renovate-config:actions#master",
-    "local>volker.raschek/renovate-config:helm#master",
    "local>volker.raschek/renovate-config:npm#master",
    "local>volker.raschek/renovate-config:regexp#master"
  ],
@@ -32,9 +31,33 @@
      "packageNameTemplate": "https://git.cryptic.systems/volker.raschek/prometheus-postgres-exporter",
      "datasourceTemplate": "git-tags",
      "versioningTemplate": "semver"
+    },
+    {
+      "customType": "regex",
+      "datasourceTemplate": "github-releases",
+      "fileMatch": [
+        ".vscode/settings\\.json$"
+      ],
+      "matchStrings": [
+        "https:\\/\\/raw\\.githubusercontent\\.com\\/(?<depName>[^\\s]+?)\\/(?<currentValue>v[0-9.]+?)\\/schema\\/helm-testsuite\\.json"
+      ]
    }
  ],
  "packageRules": [
+    {
+      "automerge": true,
+      "groupName": "Update helm plugin 'unittest'",
+      "matchDepNames": [
+        "helm-unittest/helm-unittest"
+      ],
+      "matchDatasources": [
+        "github-releases"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ]
+    },
    {
      "groupName": "Update docker.io/library/node",
      "matchDepNames": [