chore(deps): update helmfile/helmfile-action action to v2.4.2 (#41)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [helmfile/helmfile-action](https://github.com/helmfile/helmfile-action) | action | patch | `v2.4.1` → `v2.4.2` |

---

### Release Notes

<details>
<summary>helmfile/helmfile-action (helmfile/helmfile-action)</summary>

### [`v2.4.2`](https://github.com/helmfile/helmfile-action/releases/tag/v2.4.2)

[Compare Source](https://github.com/helmfile/helmfile-action/compare/v2.4.1...v2.4.2)

##### What's Changed

- build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.57.2 to 8.58.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;666](https://github.com/helmfile/helmfile-action/pull/666)
- build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.57.2 to 8.58.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;665](https://github.com/helmfile/helmfile-action/pull/665)
- build(deps-dev): bump [@&#8203;types/node](https://github.com/types/node) from 25.5.0 to 25.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;668](https://github.com/helmfile/helmfile-action/pull/668)
- build(deps-dev): bump [@&#8203;swc/core](https://github.com/swc/core) from 1.15.21 to 1.15.24 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;667](https://github.com/helmfile/helmfile-action/pull/667)

**Full Changelog**: <https://github.com/helmfile/helmfile-action/compare/v2.4.1...v2.4.2>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: #41
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/cd.yaml

@@ -41,7 +41,7 @@ jobs:
       has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
       has_k8s: ${{ steps.check-k8s.outputs.exists }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check if helmfile.yaml exists
         id: check-helmfile
         run: |
@@ -68,15 +68,15 @@ jobs:
     needs: detect-service-type
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ inputs.deploy_branch }}
       - uses: ./.gitea/actions/extract-namespace-from-repo-name
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -104,7 +104,7 @@ jobs:
             echo "No custom secrets to create"
           fi
       - name: Deploy Kubernetes manifests
-        uses: azure/k8s-deploy@v5.0.4
+        uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
         with:
           action: deploy
           manifests: "${{ inputs.k8s_dir }}"
@@ -119,16 +119,16 @@ jobs:
       needs.detect-service-type.outputs.has_k8s == 'true' && 
       inputs.skip_helm_deployment != 'true'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ inputs.deploy_branch }}
       - uses: ./.gitea/actions/extract-namespace-from-repo-name
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/setup-helm@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -156,14 +156,14 @@ jobs:
             echo "No custom secrets to create"
           fi
       - name: Deploy Helm
-        uses: helmfile/helmfile-action@v2
+        uses: helmfile/helmfile-action@8676eae58f17e6232c519147a0729f5f3d67a8a0 # v2.4.2
         with:
           helmfile-args: apply
 
   # Summary job that always runs to show what was deployed
   deployment-summary:
     runs-on: ubuntu-latest
-    needs: [detect-service-type, deploy-k8s, deploy-helm]
+    needs: [ detect-service-type, deploy-k8s, deploy-helm ]
     if: always()
     steps:
       - name: Deployment Summary

.gitea/workflows/ci.yaml

@@ -26,7 +26,7 @@ jobs:
       has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
       has_k8s: ${{ steps.check-k8s.outputs.exists }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check if helmfile.yaml exists
         id: check-helmfile
         run: |
@@ -53,18 +53,18 @@ jobs:
     needs: detect-service-type
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: ./.gitea/actions/extract-namespace-from-repo-name
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate k8s manifests
-        uses: azure/k8s-lint@v3
+        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           lintType: dryrun
@@ -78,26 +78,26 @@ jobs:
       needs.detect-service-type.outputs.has_k8s == 'true' && 
       inputs.skip_helm_validation != 'true'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: ./.gitea/actions/extract-namespace-from-repo-name
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/setup-helm@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate Helm
-        uses: helmfile/helmfile-action@v2.1.0
+        uses: helmfile/helmfile-action@8676eae58f17e6232c519147a0729f5f3d67a8a0 # v2.4.2
         with:
           helmfile-args: diff
 
   # Summary job that always runs to show what was validated
   ci-summary:
     runs-on: ubuntu-latest
-    needs: [detect-service-type, validate-k8s, validate-helm]
+    needs: [ detect-service-type, validate-k8s, validate-helm ]
     if: always()
     steps:
       - name: CI Summary

.gitea/workflows/release.yaml

@@ -13,15 +13,15 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.15
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@11c694022eefab5876ac346fc9ffc0464b2548c7 # 0.1.30
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.3
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@f386e2570df6a796ba0a69865c89ea0c1a7109ab # 0.2.2
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

renovate.json

@@ -1,3 +1,7 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>t.behrendt/renovate-configs:common",
+    "local>t.behrendt/renovate-configs:action"
+  ]
 }