From bb59b678dd07b98d6a398ec80bc529a3b45cfd98 Mon Sep 17 00:00:00 2001 From: CircleCI Date: Sat, 4 Jul 2026 12:22:53 +0000 Subject: [PATCH] Automated update --- gha-runner-scale-set-helmfile/Dockerfile | 2 +- gha-runner-scale-set-helmfile/goss/goss.yaml | 2 +- gha-runner-scale-set-helmfile/variant.lock | 459 ++----------------- 3 files changed, 48 insertions(+), 415 deletions(-) diff --git a/gha-runner-scale-set-helmfile/Dockerfile b/gha-runner-scale-set-helmfile/Dockerfile index 8f0e48c914..53a517a133 100644 --- a/gha-runner-scale-set-helmfile/Dockerfile +++ b/gha-runner-scale-set-helmfile/Dockerfile @@ -6,7 +6,7 @@ ARG TARGETARCH ARG RUNNER_VERSION=2.335.1 ARG KUBECTL_VERSION=1.35.4 -ARG HELMFILE_VERSION=1.6.0 +ARG HELMFILE_VERSION=1.7.0 ARG HELM_VERSION=4.2.2 ARG HELM_FILE_NAME=helm-v${HELM_VERSION}-${TARGETOS}-${TARGETARCH}.tar.gz ARG HELMFILE_FILE_NAME=helmfile_${HELMFILE_VERSION}_${TARGETOS}_${TARGETARCH}.tar.gz diff --git a/gha-runner-scale-set-helmfile/goss/goss.yaml b/gha-runner-scale-set-helmfile/goss/goss.yaml index 9682e0f345..a5e0af0a12 100644 --- a/gha-runner-scale-set-helmfile/goss/goss.yaml +++ b/gha-runner-scale-set-helmfile/goss/goss.yaml @@ -19,7 +19,7 @@ command: /usr/local/bin/helmfile -v: exit-status: 0 stdout: - - "1.6.0" + - "1.7.0" /usr/local/bin/helm plugin list: exit-status: 0 stdout: diff --git a/gha-runner-scale-set-helmfile/variant.lock b/gha-runner-scale-set-helmfile/variant.lock index 7e41a808cd..227fd5be1b 100644 --- a/gha-runner-scale-set-helmfile/variant.lock +++ b/gha-runner-scale-set-helmfile/variant.lock @@ -1329,313 +1329,16 @@ dependencies: url: https://api.github.com/repos/helm/helm/releases/341038643 zipball_url: https://api.github.com/repos/helm/helm/zipball/v4.2.2 helmfile: - version: 1.6.0 - previousVersion: 1.5.5 + version: 1.7.0 + previousVersion: 1.6.0 versions: - 0.144.0 - 0.145.2 - 0.145.3 - "0145.4" githubRelease: - assets: - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_checksums.txt - content_type: text/plain; charset=utf-8 - created_at: "2026-06-22T23:29:51Z" - digest: sha256:6bd8a8c085a5aecf6e240098d40cdc5c438cb6bc55023b715342471649fe75ca - download_count: 2 - id: 455061350 - label: "" - name: helmfile_1.6.0_checksums.txt - node_id: RA_kwDOHEifes4bH69m - size: 804 - state: uploaded - updated_at: "2026-06-22T23:29:52Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061350 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_darwin_amd64.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:49Z" - digest: sha256:6a1b197e43262de2ab2c08ff532764693345bc522d7b2eedc7bf8bfd2fe08780 - download_count: 1 - id: 455061308 - label: "" - name: helmfile_1.6.0_darwin_amd64.tar.gz - node_id: RA_kwDOHEifes4bH688 - size: 48291346 - state: uploaded - updated_at: "2026-06-22T23:29:51Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061308 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_darwin_arm64.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:46Z" - digest: sha256:49bb9f88bf264f0c004213971cd308925676f6e5200bb940498f5acbc06107fc - download_count: 2 - id: 455061276 - label: "" - name: helmfile_1.6.0_darwin_arm64.tar.gz - node_id: RA_kwDOHEifes4bH68c - size: 45334121 - state: uploaded - updated_at: "2026-06-22T23:29:49Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061276 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_linux_386.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:46Z" - digest: sha256:0ca54dab6d7841ce6ee04b4660e5761811360db52607f8ca99a27384c22bf718 - download_count: 0 - id: 455061278 - label: "" - name: helmfile_1.6.0_linux_386.tar.gz - node_id: RA_kwDOHEifes4bH68e - size: 43910185 - state: uploaded - updated_at: "2026-06-22T23:29:49Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061278 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_linux_amd64.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:49Z" - digest: sha256:44c617bc12b5f7f1ca1da5333ccbd3865b314c132168b4ce1127f47e756008dc - download_count: 83 - id: 455061309 - label: "" - name: helmfile_1.6.0_linux_amd64.tar.gz - node_id: RA_kwDOHEifes4bH689 - size: 47270212 - state: uploaded - updated_at: "2026-06-22T23:29:51Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061309 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_linux_arm64.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:46Z" - digest: sha256:9f29b29ff017af7dc6feca632f9a683a6c8c5a0dc5a96dd1a2df3f1016c14823 - download_count: 2 - id: 455061275 - label: "" - name: helmfile_1.6.0_linux_arm64.tar.gz - node_id: RA_kwDOHEifes4bH68b - size: 42971243 - state: uploaded - updated_at: "2026-06-22T23:29:49Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061275 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_windows_386.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:49Z" - digest: sha256:a8544af3dd5efb2eef0c2cd1067e2870195976c0121b6eece6aa971c47942e75 - download_count: 0 - id: 455061304 - label: "" - name: helmfile_1.6.0_windows_386.tar.gz - node_id: RA_kwDOHEifes4bH684 - size: 46009348 - state: uploaded - updated_at: "2026-06-22T23:29:51Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061304 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_windows_amd64.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:46Z" - digest: sha256:6fe6bc2979dff6b709801f9addd5d5dccc0c3d7ac52e96f38151db3f30b8b2a8 - download_count: 1 - id: 455061277 - label: "" - name: helmfile_1.6.0_windows_amd64.tar.gz - node_id: RA_kwDOHEifes4bH68d - size: 48469057 - state: uploaded - updated_at: "2026-06-22T23:29:49Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061277 - - browser_download_url: https://github.com/helmfile/helmfile/releases/download/v1.6.0/helmfile_1.6.0_windows_arm64.tar.gz - content_type: application/gzip - created_at: "2026-06-22T23:29:49Z" - digest: sha256:32bc447480189fd046e876ec71ad823e5a7c5f71cade617cb8ee816c9f383439 - download_count: 0 - id: 455061307 - label: "" - name: helmfile_1.6.0_windows_arm64.tar.gz - node_id: RA_kwDOHEifes4bH687 - size: 43083239 - state: uploaded - updated_at: "2026-06-22T23:29:51Z" - uploader: - avatar_url: https://avatars.githubusercontent.com/in/15368?v=4 - events_url: https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy} - followers_url: https://api.github.com/users/github-actions%5Bbot%5D/followers - following_url: https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user} - gists_url: https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id} - gravatar_id: "" - html_url: https://github.com/apps/github-actions - id: 41898282 - login: github-actions[bot] - node_id: MDM6Qm90NDE4OTgyODI= - organizations_url: https://api.github.com/users/github-actions%5Bbot%5D/orgs - received_events_url: https://api.github.com/users/github-actions%5Bbot%5D/received_events - repos_url: https://api.github.com/users/github-actions%5Bbot%5D/repos - site_admin: false - starred_url: https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo} - subscriptions_url: https://api.github.com/users/github-actions%5Bbot%5D/subscriptions - type: Bot - url: https://api.github.com/users/github-actions%5Bbot%5D - user_view_type: public - url: https://api.github.com/repos/helmfile/helmfile/releases/assets/455061307 - assets_url: https://api.github.com/repos/helmfile/helmfile/releases/343203150/assets + assets: [] + assets_url: https://api.github.com/repos/helmfile/helmfile/releases/348944151/assets author: avatar_url: https://avatars.githubusercontent.com/u/11087727?v=4 events_url: https://api.github.com/users/yxxhero/events{/privacy} @@ -1656,122 +1359,52 @@ dependencies: type: User url: https://api.github.com/users/yxxhero user_view_type: public - body: "# Helmfile v1.6.0\r\n\r\nThis release introduces **`helmfile doctor`** - — an AI-assisted diff analyzer that\r\nreads your `helmfile diff` output and - asks an LLM to summarize the changes and\r\nflag risks before you apply them. - We also ship **parallel kubedog tracking**\r\nso resource convergence now - happens alongside (not after) helm execution.\r\n\r\n---\r\n\r\n## \U0001FA7A - `helmfile doctor`: AI-assisted diff analysis\r\n\r\n`helmfile doctor` runs - `helmfile diff`, then sends the diff to any\r\n**OpenAI-compatible Chat Completions - endpoint** to produce a structured risk\r\nreport. It is designed to drop - into a CI pipeline *before* `helmfile apply` so a\r\nhuman reviewer (or a - gate) gets a fast, opinionated second opinion on what is\r\nabout to change.\r\n\r\n### - Quick start\r\n\r\n```bash\r\n# Configure via env (lowest precedence)...\r\nexport - HELMFILE_LLM_API_KEY=\"sk-...\"\r\nexport HELMFILE_LLM_MODEL=\"gpt-4o\"\r\n\r\n# - ...or helmfile.yaml...\r\nllm:\r\n baseURL: \"https://api.openai.com/v1\"\r\n - \ apiKey: {{ env \"OPENAI_API_KEY\" }}\r\n model: \"gpt-4o\"\r\n\r\n# ...or - flags (highest precedence)\r\nhelmfile doctor --llm-model claude-3-5-sonnet\r\n```\r\n\r\n```bash\r\nhelmfile - doctor\r\n```\r\n\r\nExample output:\r\n\r\n```\r\n# Helmfile Doctor Report\r\n\r\n## - Summary\r\nUpgrades the checkout Deployment from v1.4 to v1.5 and raises the - replica\r\ncount from 3 to 5. The database StatefulSet is unchanged.\r\n\r\n## - Risks\r\n\r\n### \U0001F534 [HIGH] data-loss\r\nThe PVC `data-checkout-0` - is marked for deletion ...\r\n**Suggestion:** `kubectl get pvc data-checkout-0 - -o yaml` before applying.\r\n\r\n### \U0001F7E1 [MEDIUM] downtime\r\nNo PodDisruptionBudget - found for the checkout Deployment ...\r\n**Suggestion:** Add a PDB before - scaling.\r\n\r\n---\r\nModel: gpt-4o | Duration: 8.2s | Secrets redacted: - 3\r\n```\r\n\r\n### How it works\r\n\r\n1. Runs `helmfile diff` (with `--context` - defaulting to **3** so the model gets\r\n enough surrounding YAML to ground - its analysis).\r\n2. Runs the diff through a **defense-in-depth secret redactor** - (see below).\r\n3. Sends the redacted diff to the LLM with a system prompt - that frames it as a\r\n senior Kubernetes/Helm reviewer and locks the output - to a known JSON schema.\r\n4. Renders a markdown report (or `--output json` - for programmatic consumption).\r\n\r\n### Risk model\r\n\r\nThe model evaluates - the diff across six categories and three severity levels:\r\n\r\n| Category - | What it catches |\r\n| --- | --- |\r\n| `data-loss` | PVCs, databases, stateful - workloads deleted/recreated |\r\n| `security` | New privileges, host networking, - plaintext secrets |\r\n| `breaking-change` | Renamed values, dropped labels, - apiVersion downgrades |\r\n| `downtime` | Missing PDBs, rolling-update storms, - missing readiness gates |\r\n| `performance` | Huge resource requests, removed - HPA, expensive sidecars |\r\n| `best-practice` | Missing namespace, hardcoded - images, misaligned labels |\r\n\r\nSeverity drives the **exit code**, making - doctor a CI gate:\r\n\r\n- **0** — success, or only low/medium risks, or LLM - call failed (degraded mode).\r\n- **2** — at least one **high** risk and `--force` - was not passed.\r\n (helm-diff's own \"detected changes\" exit-2 is intentionally - swallowed —\r\n changes are doctor's whole job.)\r\n- **1** — other error - (state load failure, helm-diff runtime failure, etc.).\r\n\r\nPass `--force` - to keep the report but skip the high-risk gate.\r\n\r\n### Secret safety\r\n\r\nSecrets - are **always** redacted before any byte leaves the process — there is\r\nno - opt-out. This is enforced in two layers:\r\n\r\n1. `--show-secrets` is **silently - ignored**; the diff config is wrapped so\r\n `ShowSecrets()` returns false, - making helm-diff itself emit ``.\r\n2. A built-in `SecretRedactor` - then strips any residual secret-looking content\r\n (Secret resource `data:` - blocks, sensitive key names like `password` /\r\n `apiKey` / `token`, free-form - long base64, and JWT-shaped tokens). The\r\n redaction **count is always - shown in the report footer** so you can spot\r\n unexpected leaks.\r\n\r\nJSON - output (`--output json`) exposes only post-redaction diffs — doctor never\r\nechoes - raw pre-redaction content through stdout or JSON.\r\n\r\n### Graceful degradation\r\n\r\nWhen - no LLM is configured (no `HELMFILE_LLM_API_KEY` / model / `llm:` block /\r\n`--llm-*` - flags), doctor **degrades to a plain `helmfile diff`** with\r\n`--show-secrets` - forced off — byte-for-byte identical behavior, just safer.\r\n\r\n### Configuration - precedence\r\n\r\n```\r\nenv (HELMFILE_LLM_*) < helmfile.yaml (llm:) < - \ CLI flags (--llm-*)\r\n```\r\n\r\n| Flag | Purpose |\r\n| --- | --- |\r\n| - `--llm-base-url` | OpenAI-compatible endpoint URL |\r\n| `--llm-api-key` | - API key (prefer `helmfile.yaml` + `{{ env }}` over the CLI) |\r\n| `--llm-model` - | Model id (`gpt-4o`, `claude-3-5-sonnet` via gateway, ...) |\r\n| `--llm-timeout` - | Per-request timeout (default 60s) |\r\n| `--llm-max-tokens` | Completion - cap (default 4096) |\r\n| `--force` | Skip the high-risk exit-2 gate |\r\n| - `--output` | Report format: `text` (default) or `json` |\r\n| `--diff-output` - | helm-diff plugin output format (renamed from `--output`) |\r\n\r\nMost `helmfile - diff` flags are accepted for parity. See `helmfile doctor --help`.\r\n\r\nSee - [#2660](https://github.com/helmfile/helmfile/pull/2660).\r\n\r\n---\r\n\r\n## - ⚡ Parallel kubedog tracking with progress printer\r\n\r\nWith `--track-mode - kubedog`, resource tracking now runs **in parallel with\r\nhelm** instead - of waiting for helm to finish. Helmfile templates the release\r\nupfront, - launches the kubedog tracker in a goroutine, and streams live progress\r\nwhile - helm installs/upgrades.\r\n\r\nSafety valves protect against the known upstream-kubedog - races:\r\n\r\n- **Cluster-convergence confirmation** — when kubedog's resource - graph stalls,\r\n helmfile queries the live API to confirm convergence and - cancels the tracker.\r\n- **helm-killer** — if the cluster confirms all resources - converged but helm is\r\n wedged on its hook waiter, helmfile deliberately - interrupts the stuck helm\r\n subprocess and treats it as success.\r\n- **Hard - timeout** — a tracker that never returns within the release timeout is\r\n - \ treated as a failure.\r\n- **Buffered helm output** — helm's stdout is captured - into a per-release buffer\r\n and replayed as a single block so it never - interleaves with kubedog progress.\r\n\r\nSee [#2654](https://github.com/helmfile/helmfile/pull/2654).\r\n\r\n---\r\n\r\n## - \U0001F41B Bug fixes\r\n\r\n- **Fix OCI chart dependency resolution when the - chart path contains underscores.**\r\n Paths like `oci://registry/charts_my_app` - were being mis-split, breaking\r\n `helmfile deps`. [#2648](https://github.com/helmfile/helmfile/pull/2648)\r\n- - **Resolve symlinked plugin directories in `GetPluginVersion`.** Plugin\r\n - \ directories reached through symlinks (e.g. via `XDG_DATA_DIRS`) are now\r\n - \ followed correctly, fixing spurious \"plugin not installed\" errors.\r\n - \ [#2661](https://github.com/helmfile/helmfile/pull/2661)\r\n\r\n---\r\n\r\n## - \U0001F4E6 Dependencies\r\n\r\n- bump `github.com/aws/aws-sdk-go-v2/service/s3` - 1.103.3 → 1.104.0\r\n- bump `github.com/containerd/containerd` 1.7.32 → 1.7.33\r\n- - bump `github.com/helmfile/vals` 0.44.1 → 0.44.2\r\n- bump `github.com/helmfile/chartify` - 0.26.5 → 0.27.0\r\n- bump helm to v4.2.2 (and v3.21.2 for the v3 track)\r\n- - bump `actions/checkout` v6 → v7\r\n\r\n---\r\n\r\n## \U0001F4DA Docs\r\n\r\n- - Fix a duplicated word in the `hcl_funcs` log description.\r\n [#2647](https://github.com/helmfile/helmfile/pull/2647) - — thanks @s3onghyun\r\n (first contribution!)\r\n- Small documentation indentation - fixes.\r\n [#2655](https://github.com/helmfile/helmfile/pull/2655) — thanks - @fiete2017\r\n (first contribution!)\r\n\r\n---\r\n\r\n**Full Changelog**: - https://github.com/helmfile/helmfile/compare/v1.5.5...v1.6.0\r\n" - created_at: "2026-06-22T22:59:18Z" + body: "## What's Changed\r\n* build(deps): bump azure/setup-helm from 5.0.0 + to 5.0.1 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2664\r\n* + fix: ensure OCI charts are prepared for needed releases with --include-needs + by @yxxhero in https://github.com/helmfile/helmfile/pull/2663\r\n* fix: serialize + concurrent helm operations for same chart to fix #768 by @yxxhero in https://github.com/helmfile/helmfile/pull/2662\r\n* + fix: clean up chartify temp directories after helm operations by @yxxhero + in https://github.com/helmfile/helmfile/pull/2668\r\n* feat: add --template-args + flag to template/apply/sync for helm lookup() support by @yxxhero in https://github.com/helmfile/helmfile/pull/2666\r\n* + fix: support go-getter URLs in ad-hoc dependencies to fix #821 by @yxxhero + in https://github.com/helmfile/helmfile/pull/2670\r\n* test: add integration + test for issue #1880 transformers with file:// deps by @yxxhero in https://github.com/helmfile/helmfile/pull/2673\r\n* + fix: replace YAML-based DeepCopy with recursive deep copy to fix #973 by @yxxhero + in https://github.com/helmfile/helmfile/pull/2675\r\n* build(deps): bump github.com/helmfile/vals + from 0.44.2 to 0.44.3 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2677\r\n* + test: add integration test for selector filtering with requiredEnv (#1172) + by @yxxhero in https://github.com/helmfile/helmfile/pull/2678\r\n* build(deps): + bump github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.32.26 by @dependabot[bot] + in https://github.com/helmfile/helmfile/pull/2681\r\n* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 + from 1.104.0 to 1.104.1 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2682\r\n* + feat: add `inherits:` for sub-helmfile config inheritance by @yxxhero in https://github.com/helmfile/helmfile/pull/2680\r\n* + feat: Add ConditionTemplate support in releaseSpec by @agarov in https://github.com/helmfile/helmfile/pull/2669\r\n* + build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.26 to 1.32.27 + by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2684\r\n* + build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.1 to + 1.104.2 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2685\r\n* + build(deps): bump github.com/helmfile/vals from 0.44.3 to 0.44.4 by @dependabot[bot] + in https://github.com/helmfile/helmfile/pull/2686\r\n\r\n## New Contributors\r\n* + @agarov made their first contribution in https://github.com/helmfile/helmfile/pull/2669\r\n\r\n**Full + Changelog**: https://github.com/helmfile/helmfile/compare/v1.6.0...v1.7.0" + created_at: "2026-07-04T08:50:48Z" draft: false - html_url: https://github.com/helmfile/helmfile/releases/tag/v1.6.0 - id: 343203150 + html_url: https://github.com/helmfile/helmfile/releases/tag/v1.7.0 + id: 348944151 immutable: false - mentions_count: 1 - name: v1.6.0 - node_id: RE_kwDOHEifes4UdN1O + mentions_count: 3 + name: v1.7.0 + node_id: RE_kwDOHEifes4UzHcX prerelease: false - published_at: "2026-06-22T23:06:01Z" - tag_name: v1.6.0 - tarball_url: https://api.github.com/repos/helmfile/helmfile/tarball/v1.6.0 + published_at: "2026-07-04T12:14:36Z" + tag_name: v1.7.0 + tarball_url: https://api.github.com/repos/helmfile/helmfile/tarball/v1.7.0 target_commitish: main - updated_at: "2026-06-22T23:29:52Z" - upload_url: https://uploads.github.com/repos/helmfile/helmfile/releases/343203150/assets{?name,label} - url: https://api.github.com/repos/helmfile/helmfile/releases/343203150 - zipball_url: https://api.github.com/repos/helmfile/helmfile/zipball/v1.6.0 + updated_at: "2026-07-04T12:14:36Z" + upload_url: https://uploads.github.com/repos/helmfile/helmfile/releases/348944151/assets{?name,label} + url: https://api.github.com/repos/helmfile/helmfile/releases/348944151 + zipball_url: https://api.github.com/repos/helmfile/helmfile/zipball/v1.7.0 runner: version: 2.335.1 previousVersion: 2.334.0