Update dependency helmfile/helmfile to v1#1306
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
ab2a485 to
d3f6a77
Compare
d3f6a77 to
da01c36
Compare
da01c36 to
4e8311c
Compare
4e8311c to
8b50e7d
Compare
6e6b2fe to
b4d6516
Compare
b4d6516 to
2a5f4f4
Compare
6c9a545 to
3e2c224
Compare
98cabb6 to
f6dc9d9
Compare
f6dc9d9 to
5048449
Compare
5048449 to
150a056
Compare
5555735 to
f770047
Compare
abe06c4 to
ae6097a
Compare
ae6097a to
9fc5804
Compare
9fc5804 to
77523b3
Compare
77523b3 to
8ba6a1f
Compare
627f29a to
7cf4313
Compare
7cf4313 to
95e9dbf
Compare
95e9dbf to
4650203
Compare
54763c7 to
c6258cc
Compare
c6258cc to
959c69f
Compare
959c69f to
6f84ff3
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.166.0→v1.6.0Release Notes
helmfile/helmfile (helmfile/helmfile)
v1.6.0Compare Source
Helmfile v1.6.0
This release introduces
helmfile doctor— an AI-assisted diff analyzer thatreads your
helmfile diffoutput and asks an LLM to summarize the changes andflag risks before you apply them. We also ship parallel kubedog tracking
so resource convergence now happens alongside (not after) helm execution.
🩺
helmfile doctor: AI-assisted diff analysishelmfile doctorrunshelmfile diff, then sends the diff to anyOpenAI-compatible Chat Completions endpoint to produce a structured risk
report. It is designed to drop into a CI pipeline before
helmfile applyso ahuman reviewer (or a gate) gets a fast, opinionated second opinion on what is
about to change.
Quick start
Example output:
How it works
helmfile diff(with--contextdefaulting to 3 so the model getsenough surrounding YAML to ground its analysis).
senior Kubernetes/Helm reviewer and locks the output to a known JSON schema.
--output jsonfor programmatic consumption).Risk model
The model evaluates the diff across six categories and three severity levels:
data-losssecuritybreaking-changedowntimeperformancebest-practiceSeverity drives the exit code, making doctor a CI gate:
--forcewas not passed.(helm-diff's own "detected changes" exit-2 is intentionally swallowed —
changes are doctor's whole job.)
Pass
--forceto keep the report but skip the high-risk gate.Secret safety
Secrets are always redacted before any byte leaves the process — there is
no opt-out. This is enforced in two layers:
--show-secretsis silently ignored; the diff config is wrapped soShowSecrets()returns false, making helm-diff itself emit<REDACTED>.SecretRedactorthen strips any residual secret-looking content(Secret resource
data:blocks, sensitive key names likepassword/apiKey/token, free-form long base64, and JWT-shaped tokens). Theredaction count is always shown in the report footer so you can spot
unexpected leaks.
JSON output (
--output json) exposes only post-redaction diffs — doctor neverechoes raw pre-redaction content through stdout or JSON.
Graceful degradation
When no LLM is configured (no
HELMFILE_LLM_API_KEY/ model /llm:block /--llm-*flags), doctor degrades to a plainhelmfile diffwith--show-secretsforced off — byte-for-byte identical behavior, just safer.Configuration precedence
--llm-base-url--llm-api-keyhelmfile.yaml+{{ env }}over the CLI)--llm-modelgpt-4o,claude-3-5-sonnetvia gateway, ...)--llm-timeout--llm-max-tokens--force--outputtext(default) orjson--diff-output--output)Most
helmfile diffflags are accepted for parity. Seehelmfile doctor --help.See #2660.
⚡ Parallel kubedog tracking with progress printer
With
--track-mode kubedog, resource tracking now runs in parallel withhelm instead of waiting for helm to finish. Helmfile templates the release
upfront, launches the kubedog tracker in a goroutine, and streams live progress
while helm installs/upgrades.
Safety valves protect against the known upstream-kubedog races:
helmfile queries the live API to confirm convergence and cancels the tracker.
wedged on its hook waiter, helmfile deliberately interrupts the stuck helm
subprocess and treats it as success.
treated as a failure.
and replayed as a single block so it never interleaves with kubedog progress.
See #2654.
🐛 Bug fixes
Paths like
oci://registry/charts_my_appwere being mis-split, breakinghelmfile deps. #2648GetPluginVersion. Plugindirectories reached through symlinks (e.g. via
XDG_DATA_DIRS) are nowfollowed correctly, fixing spurious "plugin not installed" errors.
#2661
📦 Dependencies
github.com/aws/aws-sdk-go-v2/service/s31.103.3 → 1.104.0github.com/containerd/containerd1.7.32 → 1.7.33github.com/helmfile/vals0.44.1 → 0.44.2github.com/helmfile/chartify0.26.5 → 0.27.0actions/checkoutv6 → v7📚 Docs
hcl_funcslog description.#2647 — thanks @s3onghyun
(first contribution!)
#2655 — thanks @fiete2017
(first contribution!)
Full Changelog: helmfile/helmfile@v1.5.5...v1.6.0
v1.5.5Compare Source
What's Changed
Full Changelog: helmfile/helmfile@v1.5.4...v1.5.5
v1.5.4Compare Source
What's Changed
trackLogsfunctionality in Kubedog tracker by @ggillies in #2630New Contributors
Full Changelog: helmfile/helmfile@v1.5.3...v1.5.4
v1.5.3Compare Source
What's Changed
Full Changelog: helmfile/helmfile@v1.5.2...v1.5.3
v1.5.2Compare Source
What's Changed
New Contributors
Full Changelog: helmfile/helmfile@v1.5.1...v1.5.2
v1.5.1Compare Source
What's Changed
Full Changelog: helmfile/helmfile@v1.5.0...v1.5.1
v1.5.0Compare Source
What's Changed
Full Changelog: helmfile/helmfile@v1.4.5...v1.5.0
v1.4.5Compare Source
What's Changed
skipSchemaValidationduring chartification whenforceNamespaceis set by @Copilot in #2550New Contributors
Full Changelog: helmfile/helmfile@v1.4.4...v1.4.5
v1.4.4Compare Source
What's Changed
New Contributors
Full Changelog: helmfile/helmfile@v1.4.3...v1.4.4
v1.4.3Compare Source
What's Changed
helm upgradecommand by @swimablefish in #2497New Contributors
Full Changelog: helmfile/helmfile@v1.4.2...v1.4.3
v1.4.2Compare Source
What's Changed
New Contributors
Full Changelog: helmfile/helmfile@v1.4.1...v1.4.2
v1.4.1Compare Source
What's Changed
Full Changelog: helmfile/helmfile@v1.4.0...v1.4.1
v1.4.0Compare Source
Release v1.4.0
🎯 Highlight: Kubedog Integration
This release introduces kubedog-based resource tracking as a powerful alternative to Helm's native
--waitflag, providing:Getting Started
Try it with the new
--track-modeflag:We Need Your Feedback!
🚀 This is a new feature and we'd love to hear from you!
Please try kubedog tracking in your environments and share your experience:
Your feedback will help us improve this feature in future releases.
What's Changed
✨ New Features
🐛 Bug Fixes
🔧 Build & Dependencies
New Contributors
Full Changelog: helmfile/helmfile@v1.3.2...v1.4.0
v1.3.2Compare Source
What's Changed
New Contributors
Full Changelog: helmfile/helmfile@v1.3.1...v1.3.2
v1.3.1Compare Source
What's Changed
Full Changelog: helmfile/helmfile@v1.3.0...v1.3.1
v1.3.0Compare Source
What's Changed
helmfile unittestcommand for helm-unittest integration by @aditmeno in #2400Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.