Skip to content

ci: Align the release-please Helm pin with the other workflows - #900

Open
bupd wants to merge 1 commit into
mainfrom
ci/setup-helm-pin-release-please
Open

bupd wants to merge 1 commit into
mainfrom
ci/setup-helm-pin-release-please

Conversation

@bupd

@bupd bupd commented Sep 14, 2026

Copy link
Copy Markdown
Member

release-please.yml installs Helm a release behind every other workflow that
installs Helm.

chart-ci.yml:45          azure/setup-helm@9bc31f4 # v5.0.1
pr-chart.yml:119         azure/setup-helm@9bc31f4 # v5.0.1
publish-chart.yml:97     azure/setup-helm@9bc31f4 # v5.0.1
release-please.yml:429   azure/setup-helm@dda3372 # v5.0.0   <-

How it drifted

#799 moved azure/setup-helm to v5.0.1 on 2026-09-07, covering the three call
sites that existed then. #796 landed the next day and added a new Install Helm
step to the chart release job, carrying the v5.0.0 SHA over from a branch that
predated the bump.

Renovate pins by commit SHA, and it had already closed #799 for these versions,
so the occurrence that arrived afterwards was never revisited. It will be caught
on some future v5.0.2, but until then the job that publishes the chart is the one
running the older Helm.

Change

The chart release job now installs the same Helm as the three workflows that
lint, preview and publish the chart. One line, same SHA and comment already in
use elsewhere in the tree.

Found while checking what of #805 main is still missing — the answer is nothing
except this, which #805 does not carry either.

#799 bumped azure/setup-helm to v5.0.1 on 2026-09-07. A day later #796
added a new "Install Helm" step to release-please.yml and carried the
v5.0.0 SHA over from an older branch, so that one call site has been a
release behind ever since. Renovate pins by commit SHA and had already
closed #799 for these versions, so it never revisited the new occurrence.

The chart release job now installs the same Helm as chart-ci, pr-chart
and publish-chart.

Signed-off-by: Prasanth Baskar <prasanth@8gears.com>
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 49 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: d34c38fc-d1bc-474b-854a-318d6c3b1ce7

📥 Commits

Reviewing files that changed from the base of the PR and between 58adb87 and cf43ccb.

📒 Files selected for processing (1)
  • .github/workflows/release-please.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/azure/setup-helm 9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 UnknownUnknown

Scanned Files

  • .github/workflows/release-please.yml

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Re-trigger cubic

@github-actions

Copy link
Copy Markdown
Contributor

This change may need patch-release backports. Comment with one of these commands to open a cherry-pick PR:

/backport v2.15

@bupd bupd added prio/P1 Wanted this cycle; schedule it into a merge wave state/needs-review Green and rebased; waiting on a human labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component/ci prio/P1 Wanted this cycle; schedule it into a merge wave state/needs-review Green and rebased; waiting on a human

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants