chore(deps): update ghcr.io/helmfile/helmfile-debian-stable-slim docker tag to v1.7.4

[opi-cloud-renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/helmfile/helmfile-debian-stable-slim	final	minor	v1.1.9 → v1.7.4

---

Release Notes

helmfile/helmfile (ghcr.io/helmfile/helmfile-debian-stable-slim)

v1.7.4

Compare Source

What's Changed

• build(deps): bump github.com/sashabaranov/go-openai from 1.41.2 to 1.42.0 by @​dependabot[bot] in #​2735
• build(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs by @​dependabot[bot] in #​2737
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.3 to 1.106.4 by @​dependabot[bot] in #​2736
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.4 to 1.107.0 by @​dependabot[bot] in #​2740
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.34 to 1.32.35 by @​dependabot[bot] in #​2739
• fix(#​2741): prefetch shared remote charts instead of serializing sync by @​toms-place in #​2743
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.107.1 by @​dependabot[bot] in #​2744
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.35 to 1.32.36 by @​dependabot[bot] in #​2745
• Bumping Helm versions to 3.21.4 and 4.2.4 by @​yxxhero with @​Copilot in #​2746
• refactor: drop empty-render workaround now that chartify handles it natively by @​yxxhero in #​2747

New Contributors

• @​toms-place made their first contribution in #​2743

Full Changelog: helmfile/helmfile@v1.7.3...v1.7.4

v1.7.3

Compare Source

What's Changed

• build(deps): bump docker/login-action from 4 to 4.5.2 by @​dependabot[bot] in #​2723
• fix: skip chartification when chart renders zero resources by @​ankit090701 in #​2724
• feat: add --skip-diff-validation-on-install CLI flag by @​henrichter-sap in #​2728
• bump helm-diff to v3.15.11 by @​yxxhero with @​Copilot in #​2725
• fix: update helm plugins via uninstall+reinstall to honor pinned version by @​yxxhero in #​2727
• build(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @​dependabot[bot] in #​2729
• build(deps): bump gitpython from 3.1.54 to 3.1.57 in /docs by @​dependabot[bot] in #​2730
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.2 to 1.106.3 by @​dependabot[bot] in #​2731
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.31 to 1.32.34 by @​dependabot[bot] in #​2732
• build(deps): bump github.com/helmfile/chartify from v0.28.0 to v0.28.1 by @​yxxhero in #​2733

New Contributors

• @​ankit090701 made their first contribution in #​2724
• @​henrichter-sap made their first contribution in #​2728

Full Changelog: helmfile/helmfile@v1.7.2...v1.7.3

v1.7.2

Compare Source

What's Changed

• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.1 to 1.105.2 by @​dependabot[bot] in #​2707
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.30 to 1.32.31 by @​dependabot[bot] in #​2708
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.2 to 1.106.0 by @​dependabot[bot] in #​2709
• build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @​dependabot[bot] in #​2711
• build(deps): bump gitpython from 3.1.50 to 3.1.52 in /docs by @​dependabot[bot] in #​2710
• feat: add --repo-retries for helm repo and registry login commands by @​yxxhero in #​2683
• build(deps): bump github.com/helmfile/vals from 0.44.5 to 0.45.0 by @​dependabot[bot] in #​2713
• build(deps): bump github.com/mattn/go-runewidth from 0.0.24 to 0.0.27 by @​dependabot[bot] in #​2714
• build(deps): bump gitpython from 3.1.52 to 3.1.54 in /docs by @​dependabot[bot] in #​2715
• build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 by @​dependabot[bot] in #​2716
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.0 to 1.106.2 by @​dependabot[bot] in #​2719
• feat: support Helm 4 --rollback-on-failure alongside deprecated --atomic by @​yxxhero in #​2722

Full Changelog: helmfile/helmfile@v1.7.1...v1.7.2

v1.7.1

Compare Source

What's Changed

• build(deps): bump github.com/zclconf/go-cty from 1.18.1 to 1.19.0 by @​dependabot[bot] in #​2692
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.28 by @​dependabot[bot] in #​2693
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0 by @​dependabot[bot] in #​2694
• build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @​dependabot[bot] in #​2695
• build(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 by @​dependabot[bot] in #​2696
• chore: bump helm to v4.2.3 and v3.21.3 by @​yxxhero in #​2699
• feat: center section divider to match table width by @​yxxhero in #​2698
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.28 to 1.32.29 by @​dependabot[bot] in #​2697
• build(deps): bump github.com/mattn/go-runewidth from 0.0.19 to 0.0.24 by @​dependabot[bot] in #​2700
• docs: add OCI auth troubleshooting by @​dashitongzhi in #​2679
• fix: ensure OCI registry login when SkipRepos is set by @​yxxhero in #​2701
• build(deps): bump github.com/helmfile/chartify from 0.27.0 to 0.28.0 by @​dependabot[bot] in #​2702
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.0 to 1.105.1 by @​dependabot[bot] in #​2703
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.29 to 1.32.30 by @​dependabot[bot] in #​2704
• feat: support disabling hooks by @​fabiobaiao in #​2691
• build(deps): bump github.com/helmfile/vals from 0.44.4 to 0.44.5 by @​dependabot[bot] in #​2706
• build(deps): bump actions/setup-go from 6 to 7 by @​dependabot[bot] in #​2705
• feat: support disabling insecure template functions only by @​fabiobaiao in #​2689

New Contributors

• @​dashitongzhi made their first contribution in #​2679
• @​fabiobaiao made their first contribution in #​2691

Full Changelog: helmfile/helmfile@v1.7.0...v1.7.1

v1.7.0

Compare Source

What's Changed

• build(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by @​dependabot[bot] in #​2664
• fix: ensure OCI charts are prepared for needed releases with --include-needs by @​yxxhero in #​2663
• fix: serialize concurrent helm operations for same chart to fix #​768 by @​yxxhero in #​2662
• fix: clean up chartify temp directories after helm operations by @​yxxhero in #​2668
• feat: add --template-args flag to template/apply/sync for helm lookup() support by @​yxxhero in #​2666
• fix: support go-getter URLs in ad-hoc dependencies to fix #​821 by @​yxxhero in #​2670
• test: add integration test for issue #​1880 transformers with file:// deps by @​yxxhero in #​2673
• fix: replace YAML-based DeepCopy with recursive deep copy to fix #​973 by @​yxxhero in #​2675
• build(deps): bump github.com/helmfile/vals from 0.44.2 to 0.44.3 by @​dependabot[bot] in #​2677
• test: add integration test for selector filtering with requiredEnv (#​1172) by @​yxxhero in #​2678
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.32.26 by @​dependabot[bot] in #​2681
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.0 to 1.104.1 by @​dependabot[bot] in #​2682
• feat: add inherits: for sub-helmfile config inheritance by @​yxxhero in #​2680
• feat: Add ConditionTemplate support in releaseSpec by @​agarov in #​2669
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.26 to 1.32.27 by @​dependabot[bot] in #​2684
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.1 to 1.104.2 by @​dependabot[bot] in #​2685
• build(deps): bump github.com/helmfile/vals from 0.44.3 to 0.44.4 by @​dependabot[bot] in #​2686

New Contributors

• @​agarov made their first contribution in #​2669

Full Changelog: helmfile/helmfile@v1.6.0...v1.7.0

v1.6.0

Compare Source

Helmfile v1.6.0

This release introduces helmfile doctor — an AI-assisted diff analyzer that
reads your helmfile diff output and asks an LLM to summarize the changes and
flag risks before you apply them. We also ship parallel kubedog tracking
so resource convergence now happens alongside (not after) helm execution.

---

🩺 helmfile doctor: AI-assisted diff analysis

helmfile doctor runs helmfile diff, then sends the diff to any
OpenAI-compatible Chat Completions endpoint to produce a structured risk
report. It is designed to drop into a CI pipeline before helmfile apply so a
human reviewer (or a gate) gets a fast, opinionated second opinion on what is
about to change.

Quick start

# Configure via env (lowest precedence)...
export HELMFILE_LLM_API_KEY="sk-..."
export HELMFILE_LLM_MODEL="gpt-4o"

# ...or helmfile.yaml...
llm:
  baseURL: "https://api.openai.com/v1"
  apiKey: {{ env "OPENAI_API_KEY" }}
  model: "gpt-4o"

# ...or flags (highest precedence)
helmfile doctor --llm-model claude-3-5-sonnet

helmfile doctor

Example output:

# Helmfile Doctor Report

## Summary
Upgrades the checkout Deployment from v1.4 to v1.5 and raises the replica
count from 3 to 5. The database StatefulSet is unchanged.

## Risks

### 🔴 [HIGH] data-loss
The PVC `data-checkout-0` is marked for deletion ...
**Suggestion:** `kubectl get pvc data-checkout-0 -o yaml` before applying.

### 🟡 [MEDIUM] downtime
No PodDisruptionBudget found for the checkout Deployment ...
**Suggestion:** Add a PDB before scaling.

---
Model: gpt-4o | Duration: 8.2s | Secrets redacted: 3

How it works

1. Runs helmfile diff (with --context defaulting to 3 so the model gets
   enough surrounding YAML to ground its analysis).
2. Runs the diff through a defense-in-depth secret redactor (see below).
3. Sends the redacted diff to the LLM with a system prompt that frames it as a
   senior Kubernetes/Helm reviewer and locks the output to a known JSON schema.
4. Renders a markdown report (or --output json for programmatic consumption).

Risk model

The model evaluates the diff across six categories and three severity levels:

Category	What it catches
data-loss	PVCs, databases, stateful workloads deleted/recreated
security	New privileges, host networking, plaintext secrets
breaking-change	Renamed values, dropped labels, apiVersion downgrades
downtime	Missing PDBs, rolling-update storms, missing readiness gates
performance	Huge resource requests, removed HPA, expensive sidecars
best-practice	Missing namespace, hardcoded images, misaligned labels

Severity drives the exit code, making doctor a CI gate:

• 0 — success, or only low/medium risks, or LLM call failed (degraded mode).
• 2 — at least one high risk and --force was not passed.
  (helm-diff's own "detected changes" exit-2 is intentionally swallowed —
  changes are doctor's whole job.)
• 1 — other error (state load failure, helm-diff runtime failure, etc.).

Pass --force to keep the report but skip the high-risk gate.

Secret safety

Secrets are always redacted before any byte leaves the process — there is
no opt-out. This is enforced in two layers:

1. --show-secrets is silently ignored; the diff config is wrapped so
   ShowSecrets() returns false, making helm-diff itself emit <REDACTED>.
2. A built-in SecretRedactor then strips any residual secret-looking content
   (Secret resource data: blocks, sensitive key names like password /
   apiKey / token, free-form long base64, and JWT-shaped tokens). The
   redaction count is always shown in the report footer so you can spot
   unexpected leaks.

JSON output (--output json) exposes only post-redaction diffs — doctor never
echoes raw pre-redaction content through stdout or JSON.

Graceful degradation

When no LLM is configured (no HELMFILE_LLM_API_KEY / model / llm: block /
--llm-* flags), doctor degrades to a plain helmfile diff with
--show-secrets forced off — byte-for-byte identical behavior, just safer.

Configuration precedence

env (HELMFILE_LLM_*)  <  helmfile.yaml (llm:)  <  CLI flags (--llm-*)

Flag	Purpose
--llm-base-url	OpenAI-compatible endpoint URL
--llm-api-key	API key (prefer helmfile.yaml + {{ env }} over the CLI)
--llm-model	Model id (gpt-4o, claude-3-5-sonnet via gateway, ...)
--llm-timeout	Per-request timeout (default 60s)
--llm-max-tokens	Completion cap (default 4096)
--force	Skip the high-risk exit-2 gate
--output	Report format: text (default) or json
--diff-output	helm-diff plugin output format (renamed from --output)

Most helmfile diff flags are accepted for parity. See helmfile doctor --help.

See #​2660.

---

⚡ Parallel kubedog tracking with progress printer

With --track-mode kubedog, resource tracking now runs in parallel with
helm instead of waiting for helm to finish. Helmfile templates the release
upfront, launches the kubedog tracker in a goroutine, and streams live progress
while helm installs/upgrades.

Safety valves protect against the known upstream-kubedog races:

• Cluster-convergence confirmation — when kubedog's resource graph stalls,
  helmfile queries the live API to confirm convergence and cancels the tracker.
• helm-killer — if the cluster confirms all resources converged but helm is
  wedged on its hook waiter, helmfile deliberately interrupts the stuck helm
  subprocess and treats it as success.
• Hard timeout — a tracker that never returns within the release timeout is
  treated as a failure.
• Buffered helm output — helm's stdout is captured into a per-release buffer
  and replayed as a single block so it never interleaves with kubedog progress.

See #​2654.

---

🐛 Bug fixes

• Fix OCI chart dependency resolution when the chart path contains underscores.
  Paths like oci://registry/charts_my_app were being mis-split, breaking
  helmfile deps. #​2648
• Resolve symlinked plugin directories in GetPluginVersion. Plugin
  directories reached through symlinks (e.g. via XDG_DATA_DIRS) are now
  followed correctly, fixing spurious "plugin not installed" errors.
  #​2661

---

📦 Dependencies

• bump github.com/aws/aws-sdk-go-v2/service/s3 1.103.3 → 1.104.0
• bump github.com/containerd/containerd 1.7.32 → 1.7.33
• bump github.com/helmfile/vals 0.44.1 → 0.44.2
• bump github.com/helmfile/chartify 0.26.5 → 0.27.0
• bump helm to v4.2.2 (and v3.21.2 for the v3 track)
• bump actions/checkout v6 → v7

---

📚 Docs

• Fix a duplicated word in the hcl_funcs log description.
  #​2647 — thanks @​s3onghyun
  (first contribution!)
• Small documentation indentation fixes.
  #​2655 — thanks @​fiete2017
  (first contribution!)

---

Full Changelog: helmfile/helmfile@v1.5.5...v1.6.0

v1.5.5

Compare Source

What's Changed

• fix: restore s3:: vhost-style remote source support (#​2643) by @​yxxhero in #​2644
• feat: add helm 4 --server-side flag support for diff and bump helm-diff to v3.15.10 by @​yxxhero in #​2645

Full Changelog: helmfile/helmfile@v1.5.4...v1.5.5

v1.5.4

Compare Source

What's Changed

• build(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 by @​dependabot[bot] in #​2629
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.23 to 1.32.24 by @​dependabot[bot] in #​2627
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.2 to 1.103.3 by @​dependabot[bot] in #​2628
• fix: Fix broken trackLogs functionality in Kubedog tracker by @​ggillies in #​2630
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.24 to 1.32.25 by @​dependabot[bot] in #​2632
• Bump Helm support to 4.2.1 and 3.21.1 by @​Copilot in #​2635
• build(deps): bump github.com/helmfile/vals from 0.44.0 to 0.44.1 by @​dependabot[bot] in #​2637
• build(deps): bump github.com/helmfile/chartify from 0.26.4 to 0.26.5 by @​dependabot[bot] in #​2636
• Add App.WithFileSystem by @​toyamagu-2021 in #​2638
• fix: include release values in .Values for patch template rendering by @​yxxhero in #​2556
• build(deps): bump helm-diff to v3.15.9 by @​yxxhero in #​2642
• feat: add support for helm 4 --server-side upgrade flag by @​yxxhero in #​2641

New Contributors

• @​ggillies made their first contribution in #​2630

Full Changelog: helmfile/helmfile@v1.5.3...v1.5.4

v1.5.3

Compare Source

What's Changed

• build(deps): bump github.com/gookit/color from 1.5.4 to 1.6.1 by @​dependabot[bot] in #​2608
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.18 by @​dependabot[bot] in #​2610
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.102.0 by @​dependabot[bot] in #​2612
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.0 to 1.102.1 by @​dependabot[bot] in #​2613
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.20 by @​dependabot[bot] in #​2614
• fix: support array of maps in set/setTemplate values by @​yxxhero in #​2615
• fix: remove naked return by returning expected values by @​ceriath in #​2617
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.1 to 1.103.0 by @​dependabot[bot] in #​2619
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.20 to 1.32.21 by @​dependabot[bot] in #​2618
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.0 to 1.103.1 by @​dependabot[bot] in #​2620
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.21 to 1.32.22 by @​dependabot[bot] in #​2621
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.1 to 1.103.2 by @​dependabot[bot] in #​2622
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.22 to 1.32.23 by @​dependabot[bot] in #​2623
• Bump helm-diff to v3.15.8 across runtime defaults and execution environments by @​Copilot in #​2624
• build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by @​dependabot[bot] in #​2625

Full Changelog: helmfile/helmfile@v1.5.2...v1.5.3

v1.5.2

Compare Source

What's Changed

• Bump Helm support to 3.21.0 and 4.2.0 by @​Copilot in #​2588
• bump helm-diff to v3.15.7 by @​Copilot in #​2591
• fix: refresh Chart.lock after rewriting file:// dependencies by @​sstarcher in #​2587
• feat: support HELMFILE_KUBE_CONTEXT env var for default kube context by @​dschmidt in #​2593
• feat: support HELMFILE_NAMESPACE env var for default namespace by @​dschmidt in #​2592
• fix: normalize dependency chart path before DirectoryExistsAt check by @​yxxhero in #​2598
• Add jsonPatches regression coverage for chartify lookup rendering by @​Copilot in #​2586
• feat: add defaultInherit for automatic release template inheritance by @​yxxhero in #​2600
• fix: restore kubedog status progress output during tracking by @​yxxhero in #​2602
• feat: show diff preview when sync --interactive is used by @​vomba in #​2603
• build(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 by @​dependabot[bot] in #​2607
• feat: support HELMFILE_* env vars for more global flags by @​dschmidt in #​2606

New Contributors

• @​vomba made their first contribution in #​2603

Full Changelog: helmfile/helmfile@v1.5.1...v1.5.2

v1.5.1

Compare Source

What's Changed

• fix: add trackFailOnError option to control kubedog exit code by @​yxxhero in #​2576
• docs: update helmfile skill to reflect v1.1 documentation by @​yxxhero in #​2577
• fix(state): resolve OCI repo prefix in ad-hoc release dependencies by @​dschmidt in #​2579
• feat(state): add mergeStrategy: fallback for first-file-wins env values by @​dschmidt in #​2578
• Expose internal apis by @​ceriath in #​2520
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.100.1 to 1.101.0 by @​dependabot[bot] in #​2581
• chore: Deduplicate preparation code of sync and apply by @​ceriath in #​2523
• build(deps): bump gitpython from 3.1.47 to 3.1.49 in /docs by @​dependabot[bot] in #​2582
• chore: Emit "cleanup" events later to match the behavior in "apply" by @​ceriath in #​2522
• build(deps): bump golang.org/x/term from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​2584
• build(deps): bump gitpython from 3.1.49 to 3.1.50 in /docs by @​dependabot[bot] in #​2585
• fix: template helmDefaults.postRendererArgs with release data by @​yxxhero in #​2583

Full Changelog: helmfile/helmfile@v1.5.0...v1.5.1

v1.5.0

Compare Source

What's Changed

• feat: add --write-output flag to helmfile fetch for air-gapped environments by @​yxxhero in #​2572
• feat: add 'create' subcommand to scaffold helmfile deployment projects by @​yxxhero in #​2574
• docs: restructure documentation and improve newcomer experience by @​yxxhero in #​2573
• docs: deduplicate Technical Details sections in values-and-merging.md by @​yxxhero in #​2575

Full Changelog: helmfile/helmfile@v1.4.5...v1.5.0

v1.4.5

Compare Source

What's Changed

• build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @​dependabot[bot] in #​2524
• chore: rename variables to match in apply and sync by @​ceriath in #​2521
• chore: bump Helm to v4.1.4 by @​Copilot in #​2525
• build(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​2529
• bump helm v3.20.1 to v3.20.2 by @​Copilot in #​2530
• build(deps): bump github.com/helmfile/vals from 0.43.8 to 0.43.9 by @​dependabot[bot] in #​2533
• Update Go from 1.25.8 to 1.26.2 by @​Copilot in #​2535
• fix: boolean false overrides dropped in multi-document helmfiles (#​2527) by @​yxxhero in #​2532
• build(deps): bump github.com/helmfile/chartify from 0.26.2 to 0.26.3 by @​dependabot[bot] in #​2538
• fix: add mutex lock for concurrent rewriteChartDependencies access by @​yxxhero in #​2509
• fix: update state values files handling to replace arrays instead of merging by @​Moglum in #​2537
• fix: helmDefaults.postRendererArgs not passed to helm commands by @​yxxhero in #​2510
• enabledns flags available on template command by @​Diliz in #​2511
• build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 by @​dependabot[bot] in #​2540
• build(deps): bump k8s.io/client-go from 0.35.3 to 0.35.4 by @​dependabot[bot] in #​2539
• build(deps): bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 by @​dependabot[bot] in #​2542
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.14 to 1.32.15 by @​dependabot[bot] in #​2543
• fix: eliminate race condition in rewriteChartDependencies by @​yxxhero in #​2541
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.99.0 to 1.99.1 by @​dependabot[bot] in #​2546
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.15 to 1.32.16 by @​dependabot[bot] in #​2547
• build(deps): bump k8s.io/apimachinery from 0.35.4 to 0.36.0 by @​dependabot[bot] in #​2553
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.99.1 to 1.100.0 by @​dependabot[bot] in #​2552
• Fix helmfile init failing to update outdated helm plugins with Helm v4 by @​Copilot in #​2554
• fix: skip subhelmfiles when selectors conflict with CLI selectors by @​yxxhero in #​2545
• build(deps): bump gitpython from 3.1.41 to 3.1.47 in /docs by @​dependabot[bot] in #​2555
• fix: apply post-renderer to output-dir-template output by @​yxxhero in #​2531
• build(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0 by @​dependabot[bot] in #​2557
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.100.0 to 1.100.1 by @​dependabot[bot] in #​2558
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.16 to 1.32.17 by @​dependabot[bot] in #​2559
• update readme add install from source by @​Sianao in #​2561
• Honor skipSchemaValidation during chartification when forceNamespace is set by @​Copilot in #​2550
• build(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​2565
• fix: deduplicate chart dependencies in helmfile.lock by @​yxxhero in #​2567
• build(deps): replace werf/kubedog-for-werf-helm with werf/kubedog by @​yxxhero in #​2568
• build(deps): bump helmfile/vals from v0.43.9 to v0.44.0 by @​yxxhero in #​2569
• fix: use --post-renderer-args=VALUE format to prevent Helm flag parsing failure by @​yxxhero in #​2570

New Contributors

• @​Moglum made their first contribution in #​2537
• @​Diliz made their first contribution in #​2511
• @​Sianao made their first contribution in #​2561

Full Changelog: helmfile/helmfile@v1.4.4...v1.4.5

v1.4.4

Compare Source

What's Changed

• build(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 by @​dependabot[bot] in #​2499
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.2 by @​dependabot[bot] in #​2500
• fix: helmfile fetch fails for kustomization directories by @​yxxhero in #​2504
• fix: keep all chart dependencies key / values by @​champtar in #​2501
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.2 to 1.97.3 by @​dependabot[bot] in #​2505
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.12 to 1.32.13 by @​dependabot[bot] in #​2506
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.3 to 1.98.0 by @​dependabot[bot] in #​2512
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in #​2513
• chore: update go version to 1.25.8 by @​eadred in #​2514
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.13 to 1.32.14 by @​dependabot[bot] in #​2516
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.98.0 to 1.99.0 by @​dependabot[bot] in #​2517
• build(deps): bump github.com/helmfile/vals from 0.43.7 to 0.43.8 by @​dependabot[bot] in #​2518

New Contributors

• @​champtar made their first contribution in #​2501
• @​eadred made their first contribution in #​2514

Full Changelog: helmfile/helmfile@v1.4.3...v1.4.4

v1.4.3

Compare Source

What's Changed

• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.0 to 1.97.1 by @​dependabot[bot] in #​2488
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.11 to 1.32.12 by @​dependabot[bot] in #​2487
• Fix interactive apply asks in no change situation by @​tarrow in #​945
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @​dependabot[bot] in #​2490
• fix: helmfile list now reflects version from helmfile.lock by @​yxxhero in #​2486
• build(deps): bump k8s.io/client-go from 0.35.2 to 0.35.3 by @​dependabot[bot] in #​2492
• build(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 by @​dependabot[bot] in #​2494
• fix: cleanup hooks not receiving error signal by @​yxxhero in #​2475
• fix: pass --timeout flag through to helm for sync and apply by @​hristiy4n in #​2495
• fix: error on missing secret key when using vals by @​yxxhero in #​2496
• build: update helm-diff to v3.15.3 by @​yxxhero in #​2498
• feat: add an arg that passing description to helm upgrade command by @​swimablefish in #​2497

New Contributors

• @​tarrow made their first contribution in #​945
• @​hristiy4n made their first contribution in #​2495
• @​swimablefish made their first contribution in #​2497

Full Changelog: helmfile/helmfile@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.2 to 1.96.3 by @​dependabot[bot] in #​2456
• build(deps): bump docker/login-action from 3 to 4 by @​dependabot[bot] in #​2454
• build(deps): bump docker/setup-qemu-action from 3 to 4 by @​dependabot[bot] in #​2453
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.10 to 1.32.11 by @​dependabot[bot] in #​2455
• Add CHANGELOG.md by @​PhilipLudington in #​2457
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @​dependabot[bot] in #​2462
• build(deps): bump markdown from 3.6 to 3.8.1 in /docs by @​dependabot[bot] in #​2463
• build(deps): bump docker/build-push-action from 6 to 7 by @​dependabot[bot] in #​2469
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.3 to 1.96.4 by @​dependabot[bot] in #​2470
• build(deps): bump docker/metadata-action from 5 to 6 by @​dependabot[bot] in #​2468
• feat: add helm-legacy track mode for Helm v4 compatibility by @​yxxhero in #​2466
• docs: add comprehensive values merging and data flow guide by @​yxxhero in #​2461
• fix: nested helmfile values should replace arrays, not merge element-by-element by @​aditmeno in #​2458
• build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 by @​dependabot[bot] in #​2473
• build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 by @​dependabot[b

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.