chore(deps): update local-start-crossplane-bootstrap - #119
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.1.0→v1.4.0v1.2.0→v1.3.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
crossplane-contrib/provider-helm (crossplane-contrib/provider-helm)
v1.4.0Compare Source
Release v1.4.0
Summary
This release upgrades the provider to Helm SDK v4, adds a new
ssaForceConflictsfield to theReleaseAPI, adds Nebius authentication support, fixes a long-standing bug that caused continuous no-op release upgrades, and includes security and dependency updates.Highlights
helm.sh/helmfromv3.21.1tov4.2.3spec.forProvider.ssaForceConflictsonReleasefor forcing server-side apply conflict resolutionNebiusServiceAccountCredentialsidentity type onProviderConfigReleaseeven when there were no changesoras.land/oras-go/v2bumped tov2.6.2(addresses CVE-2026-50163 / GHSA-f36w-mj3v-6jqv and GHSA-fxhp-mv3v-67qp)Helm SDK v4
The provider now embeds Helm v4 (#333, fixes #314 and #214). The
ReleaseAPI group and version are unchanged; existing manifests keep working. Notable behavioral changes inherited from Helm v4:spec.forProvider.wait: truenow uses Helm v4's status-watcher strategy, which waits for the kstatus readiness of all objects deployed by the chart;wait: falsemaps to the hook-only strategy. This mirrors the Helm CLI's mapping of the legacy--waitflag and makes release readiness an aggregation of the readiness of the deployed objects (#214).slog; the provider bridges Helm's internal logs (including wait/kstatus diagnostics) into the provider logger, so they remain visible when running with--debug.New Features
spec.forProvider.ssaForceConflictsfield toRelease(both cluster-scoped and namespaced APIs). When set totrue, the provider forces server-side apply to overwrite field conflicts ("become sole manager") when installing, upgrading, or rolling back the release. See the Kubernetes server-side apply conflicts documentation for details. (#333)ProviderConfignow accepts theNebiusServiceAccountCredentialsidentity type for authenticating to Nebius-managed Kubernetes clusters. See the example ProviderConfig. (#361)Bug Fixes
Releaseeven though there were no changes: release configuration is now compared semantically with numeric type normalization instead of byte-by-byte, which was sensitive to map ordering. Thanks @doxsch! (#327, fixes #318)--metrics-bind-address(default:8080),--health-probe-bind-addr(default:8081), and--webhook-port(default9443). Thanks @ctenberge-oneid! (#285, fixes #274)Security & Dependency Updates
oras.land/oras-go/v2tov2.6.2, addressing CVE-2026-50163 / GHSA-f36w-mj3v-6jqv and GHSA-fxhp-mv3v-67qp (#372)crossplane-runtimefromv2.2.3tov2.3.3(#367)github.com/crossplane/crossplane/apis/v2tov2.3.4(#376)v0.35.5tov0.36.3(#375)1.26.5(#333)gcr.io/distroless/staticbase image digest (#364)Full Changelog: crossplane-contrib/provider-helm@v1.3.0...v1.4.0
v1.3.0Compare Source
Summary
This release includes important bug fixes, dependency updates, and new features.
Highlights
spec.forProvider.takeOwnershipAPI that allows provider-helm to ignore Helm annotation checks and take ownership of existing Helm releases.Bug Fixes
Dependencies
v1.2.0Compare Source
Summary
This release includes new features and security fixes.
Highlights
PlainHTTPflag support for flexibility in chart downloads, allowing HTTP connections when HTTPS is not available or requiredcrossplane-contrib/provider-kubernetes (crossplane-contrib/provider-kubernetes)
v1.3.1Compare Source
What's Changed
37fe631by @renovate[bot] in #545f2ea270by @renovate[bot] in #550Full Changelog: crossplane-contrib/provider-kubernetes@v1.3.0...v1.3.1
v1.3.0Compare Source
v1.3.0
New Features
Health and readiness probes (#301): The provider now exposes HTTP health (
/healthz) and readiness (/readyz) endpoints. Probe configuration is aligned with standard Crossplane provider conventions.Configurable webhook port and metrics bind address (#301): Webhook port and metrics bind address are now configurable via flags, making it easier to deploy the provider in restricted network environments.
Nebius in-process service account identity auth (#499): A new
NebiusServiceAccountCredentialsidentity type authenticates to Nebius Managed Kubernetes clusters by minting IAM tokens in-process from a service account's credentials, without requiring an exec credential plugin. Token sources are cached per-credentials to avoid leaks across reconciles.Configurable
DeletionPropagationPolicyfor Object (#437): TheObjectspec now accepts adeletionPropagationPolicyfield. Defaults toBackground. Set toForegroundto ensure dependent resources are fully cleaned up before the owner is removed.Remove managed fields from observed objects (#483): Managed fields are now stripped from objects returned by the provider, reducing noise in status and stored state.
Strip managed fields in informer caches (#425): The controller-runtime cache is now configured to strip managed fields from informer objects and uses
PartialObjectMetadatawhere appropriate, reducing memory usage when watching resources.Bug Fixes
Redact Secret data from debug logs (#533): Secret values are no longer logged at debug level, preventing accidental credential exposure in log aggregators.
Do not block Object deletion on failed connection details (#531): A failure to publish connection details no longer prevents an
Objectfrom being deleted, avoiding stuck finalizers.Honor proxy-url from kubeconfig cluster config (#530): The provider now correctly picks up the
proxy-urlfield from the kubeconfig cluster entry when building the Kubernetes client.Fix OpenAPI v3 ServerRelativeURL root prefix stripping (#507): SSA apply no longer fails when the OpenAPI discovery server returns a URL with an unexpected root path prefix.
Fix ProviderConfig readiness for wrapped providers (#423): An
Objectthat creates ak8s.m ProviderConfignow correctly transitions toReadyonce the inner provider config is healthy.Dependency & Security Updates
google.golang.org/grpc→ v1.82.1,golang.org/x/net→ v0.55.0,go.opentelemetry.io/otel→ v1.41.0,github.com/google/cel-go→ v0.29.0Contributors
Thank you to everyone who contributed to this release:
What's Changed
75cd116by @renovate[bot] in #44647b2d72by @renovate[bot] in #454fb8b358by @renovate[bot] in #4870611638by @renovate[bot] in #4913592aa8by @renovate[bot] in #492d7f5e7fby @renovate[bot] in #48896fe6efby @renovate[bot] in #505bb05f3fby @renovate[bot] in #5099197324by @renovate[bot] in #516New Contributors
Full Changelog: crossplane-contrib/provider-kubernetes@v1.2.1...v1.3.0
v1.2.1Compare Source
Summary
This release includes security fixes addressing multiple CVE vulnerabilities.
Highlights
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.