webgrip/infrastructure
5
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases 102 Packages Wiki Activity Actions

fix(helm-deploy): catch up yq, sops and doctl #128

Merged
ryangr0 merged 1 commit from fix/helm-deploy-tool-bumps into main 2026-08-11 05:01:05 +00:00
Conversation 0 Commits 1 Files changed 1 +6 -6
ryangr0 commented 2026-08-11 04:44:08 +00:00
Owner
Copy link

Real maintenance and the ADR-0009 acceptance test in one: yq 4.47.1→4.53.3 (now matches ci-runner — one yq in the estate), sops 3.10.2→3.13.3, doctl 1.141.0→1.166.0, checksums in lockstep. kubectl deliberately held (v1.36 is outside the cluster's skew window); helm held (4.x is a major).

Merge order: after #127 and semantic-release-config #8 (and its config release finishing). This PR's release is then the end-to-end proof: the verify build pushes :cand-<version>, and Distribute should log promoted webgrip/helm-deploy@sha256:… (byte-exact) and finish in seconds instead of rebuilding.

Generated with Claude Code

Real maintenance and the ADR-0009 acceptance test in one: yq 4.47.1→4.53.3 (now matches ci-runner — one yq in the estate), sops 3.10.2→3.13.3, doctl 1.141.0→1.166.0, checksums in lockstep. kubectl deliberately held (v1.36 is outside the cluster's skew window); helm held (4.x is a major). **Merge order**: after #127 and semantic-release-config #8 (and its config release finishing). This PR's release is then the end-to-end proof: the verify build pushes `:cand-<version>`, and Distribute should log `promoted webgrip/helm-deploy@sha256:… (byte-exact)` and finish in **seconds** instead of rebuilding. Generated with [Claude Code](https://claude.com/claude-code)
fix(helm-deploy): catch up yq, sops and doctl
All checks were successful
[Workflow] On Source Change / Guard: per-image .releaserc.cjs present (push) Successful in 32s
Details
[Workflow] On Source Change / Determine Changed Directories (push) Successful in 21s
Details
[Workflow] On Source Change / Determine changed images (push) Successful in 0s
Details
[Workflow] On Source Change / Resolve release matrix (push) Successful in 2s
Details
[Workflow] On Source Change / Build check (helm-deploy, ops/docker/helm-deploy) (push) Successful in 1m16s
Details
[Workflow] On Source Change / Release (helm-deploy, ops/docker/helm-deploy) (push) Has been skipped
Details
277f390ac3 
yq 4.47.1 -> 4.53.3 (now matches ci-runner's pin — one yq version in the
estate), sops 3.10.2 -> 3.13.3, doctl 1.141.0 -> 1.166.0, checksums moved in
lockstep so a mismatch fails the build. kubectl deliberately held at v1.34
(v1.36 is outside the cluster's version-skew window) and helm at 3.18.6
(4.x is a major with its own migration).

Also the first release through the ADR-0009 promote path once #127 and
config #8 land: its Distribute job should log
'promoted webgrip/helm-deploy@sha256:... (byte-exact)' and finish in
seconds — that line is the acceptance test.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

  
released
No labels
pull-request
released
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure!128
No description provided.