externalize summary

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [azure/k8s-deploy](https://github.com/azure/k8s-deploy) | action | major | `v5.1.0` → `v6.0.0` |

---

### Release Notes

<details>
<summary>azure/k8s-deploy (azure/k8s-deploy)</summary>

### [`v6.0.0`](https://github.com/Azure/k8s-deploy/releases/tag/v6.0.0)

[Compare Source](https://github.com/azure/k8s-deploy/compare/v5.1.0...v6.0.0)

##### Changed

- [#&#8203;504](https://github.com/azure/k8s-deploy/issues/504) [Update Node.js runtime from node20 to node24](https://github.com/Azure/k8s-deploy/pull/504)
- [#&#8203;500](https://github.com/azure/k8s-deploy/issues/500) [Update action version references in README to latest majors](https://github.com/Azure/k8s-deploy/pull/500)

##### Security

- [#&#8203;506](https://github.com/azure/k8s-deploy/issues/506) [Bump undici from 6.23.0 to 6.24.1](https://github.com/Azure/k8s-deploy/pull/506)
- [#&#8203;513](https://github.com/azure/k8s-deploy/issues/513) [Bump vite from 8.0.3 to 8.0.5](https://github.com/Azure/k8s-deploy/pull/513)
- [#&#8203;509](https://github.com/azure/k8s-deploy/issues/509) [Bump the actions group across 1 directory with 4 updates](https://github.com/Azure/k8s-deploy/pull/509)
- [#&#8203;510](https://github.com/azure/k8s-deploy/issues/510) [Bump the actions group across 1 directory with 2 updates](https://github.com/Azure/k8s-deploy/pull/510)
- [#&#8203;511](https://github.com/azure/k8s-deploy/issues/511) [Bump vitest from 4.1.1 to 4.1.2](https://github.com/Azure/k8s-deploy/pull/511)
- [#&#8203;514](https://github.com/azure/k8s-deploy/issues/514) [Bump the actions group with 2 updates](https://github.com/Azure/k8s-deploy/pull/514)
- [#&#8203;501](https://github.com/azure/k8s-deploy/issues/501) [Bump @&#8203;types/node from 25.3.3 to 25.4.0](https://github.com/Azure/k8s-deploy/pull/501)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/pulls/45
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/actions/ci-summary/action.yaml

@@ -0,0 +1,41 @@
+name: "CI Summary"
+description: "Writes CI validation summary to GITHUB_STEP_SUMMARY"
+inputs:
+  has_k8s:
+    description: "Whether Kubernetes manifests were detected"
+    required: true
+  has_helmfile:
+    description: "Whether helmfile.yaml was detected"
+    required: true
+  skip_helm_validation:
+    description: "Whether Helm validation is manually disabled"
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - shell: bash
+      run: |
+        echo "## CI Validation Summary" >> "$GITHUB_STEP_SUMMARY"
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+
+        if [ "${{ inputs.has_k8s }}" = "true" ]; then
+          echo "✅ **Kubernetes validation**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "❌ **Kubernetes validation**: Skipped (no k8s/ directory found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        if [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_validation }}" != "true" ]; then
+          echo "✅ **Helm validation**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        elif [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_validation }}" = "true" ]; then
+          echo "⏭️ **Helm validation**: Skipped (manually disabled)" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "⏭️ **Helm validation**: Skipped (no helmfile.yaml found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+        if [ "${{ inputs.has_helmfile }}" = "true" ]; then
+          service_type="Helm + Kubernetes"
+        else
+          service_type="Kubernetes Only"
+        fi
+        echo "**Service Type**: ${service_type}" >> "$GITHUB_STEP_SUMMARY"

.gitea/actions/deployment-summary/action.yaml

@@ -0,0 +1,41 @@
+name: "Deployment Summary"
+description: "Writes deployment summary to GITHUB_STEP_SUMMARY"
+inputs:
+  has_k8s:
+    description: "Whether Kubernetes manifests were detected"
+    required: true
+  has_helmfile:
+    description: "Whether helmfile.yaml was detected"
+    required: true
+  skip_helm_deployment:
+    description: "Whether Helm deployment is manually disabled"
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - shell: bash
+      run: |
+        echo "## Deployment Summary" >> "$GITHUB_STEP_SUMMARY"
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+
+        if [ "${{ inputs.has_k8s }}" = "true" ]; then
+          echo "✅ **Kubernetes deployment**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "❌ **Kubernetes deployment**: Skipped (no k8s/ directory found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        if [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_deployment }}" != "true" ]; then
+          echo "✅ **Helm deployment**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        elif [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_deployment }}" = "true" ]; then
+          echo "⏭️ **Helm deployment**: Skipped (manually disabled)" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "⏭️ **Helm deployment**: Skipped (no helmfile.yaml found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+        if [ "${{ inputs.has_helmfile }}" = "true" ]; then
+          service_type="Helm + Kubernetes"
+        else
+          service_type="Kubernetes Only"
+        fi
+        echo "**Service Type**: ${service_type}" >> "$GITHUB_STEP_SUMMARY"

.gitea/actions/extract-chart-name-from-repo-name/action.yaml

@@ -1,19 +0,0 @@
-name: Extract chart name from repo name
-description: Extracts the chart name from the repo name, based on the convention of helm-<chart-name>
-inputs:
-  repo:
-    description: The full repository name (e.g., "helm-my-chart")
-    required: true
-outputs:
-  chart-name:
-    description: The extracted chart name
-    value: ${{ steps.extract.outputs.suffix }}
-runs:
-  using: "composite"
-  steps:
-    - id: extract
-      shell: bash
-      run: |
-        full_repo="${{ inputs.repo }}"
-        suffix="${full_repo##*helm-}" 
-        echo "suffix=$suffix" >> $GITHUB_OUTPUT

.gitea/actions/extract-namespace-from-repo-name/action.yaml

@@ -1,19 +0,0 @@
-name: "Extract namespace from repo name"
-description: "Extracts the namespace name from the repo name, based on the convention of k_<namespace-name>"
-inputs:
-  repo:
-    description: 'The repo name, get it from "github.repository"'
-    required: true
-outputs:
-  namespace:
-    description: "The namespace name"
-    value: ${{ steps.extract.outputs.suffix }}
-runs:
-  using: "composite"
-  steps:
-    - id: extract
-      shell: bash
-      run: |
-        full_repo="${{ inputs.repo }}"
-        suffix="${full_repo##*k_}" 
-        echo "suffix=$suffix" >> $GITHUB_OUTPUT

.gitea/workflows/cd.yaml

@@ -1,197 +0,0 @@
-name: Deploy
-
-on:
-  workflow_call:
-    inputs:
-      # Optional: Override the default k8s directory path
-      k8s_dir:
-        description: "Path to Kubernetes manifests directory"
-        required: false
-        default: "k8s/"
-        type: string
-      # Optional: Override the default helmfile path
-      helmfile_path:
-        description: "Path to helmfile.yaml"
-        required: false
-        default: "helmfile.yaml"
-        type: string
-      # Optional: Skip Helm deployment even if helmfile exists
-      skip_helm_deployment:
-        description: "Skip Helm deployment even if helmfile.yaml exists"
-        required: false
-        default: false
-        type: boolean
-      # Optional: Custom secrets to create (JSON array of secret objects)
-      custom_secrets:
-        description: "JSON array of secrets to create. Each secret should have: name, type, data"
-        required: false
-        default: "[]"
-        type: string
-      # Optional: Branch to deploy from
-      deploy_branch:
-        description: "Branch to deploy from"
-        required: false
-        default: "main"
-        type: string
-
-jobs:
-  detect-service-type:
-    runs-on: ubuntu-latest
-    outputs:
-      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
-      has_k8s: ${{ steps.check-k8s.outputs.exists }}
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Check if helmfile.yaml exists
-        id: check-helmfile
-        run: |
-          if [ -f "${{ inputs.helmfile_path }}" ]; then
-            echo "exists=true" >> $GITHUB_OUTPUT
-            echo "Found helmfile.yaml at ${{ inputs.helmfile_path }}"
-          else
-            echo "exists=false" >> $GITHUB_OUTPUT
-            echo "No helmfile.yaml found at ${{ inputs.helmfile_path }}"
-          fi
-      - name: Check if k8s directory exists
-        id: check-k8s
-        run: |
-          if [ -d "${{ inputs.k8s_dir }}" ]; then
-            echo "exists=true" >> $GITHUB_OUTPUT
-            echo "Found k8s directory at ${{ inputs.k8s_dir }}"
-          else
-            echo "exists=false" >> $GITHUB_OUTPUT
-            echo "No k8s directory found at ${{ inputs.k8s_dir }}"
-          fi
-
-  deploy-k8s:
-    runs-on: ubuntu-latest
-    needs: detect-service-type
-    if: needs.detect-service-type.outputs.has_k8s == 'true'
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          ref: ${{ inputs.deploy_branch }}
-      - uses: ./.gitea/actions/extract-namespace-from-repo-name
-        id: namespace
-        with:
-          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
-      - name: Create custom secrets
-        id: create-secrets
-        run: |
-          # Parse custom secrets from input
-          SECRETS='${{ inputs.custom_secrets }}'
-          if [ "$SECRETS" != "[]" ]; then
-            echo "Creating custom secrets..."
-            echo "$SECRETS" | jq -c '.[]' | while read -r secret; do
-              SECRET_NAME=$(echo "$secret" | jq -r '.name')
-              SECRET_TYPE=$(echo "$secret" | jq -r '.type // "generic"')
-              SECRET_DATA=$(echo "$secret" | jq -r '.data')
-              
-              echo "Creating secret: $SECRET_NAME (type: $SECRET_TYPE)"
-              
-              # Create the secret using kubectl
-              echo "$SECRET_DATA" | kubectl create secret $SECRET_TYPE $SECRET_NAME \
-                --from-literal=secret.json="$SECRET_DATA" \
-                --namespace=${{ steps.namespace.outputs.namespace }} \
-                --dry-run=client -o yaml | kubectl apply -f -
-            done
-          else
-            echo "No custom secrets to create"
-          fi
-      - name: Deploy Kubernetes manifests
-        uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
-        with:
-          action: deploy
-          manifests: "${{ inputs.k8s_dir }}"
-          strategy: basic
-          namespace: ${{ steps.namespace.outputs.namespace }}
-
-  deploy-helm:
-    runs-on: ubuntu-latest
-    needs: detect-service-type
-    if: |
-      needs.detect-service-type.outputs.has_helmfile == 'true' && 
-      needs.detect-service-type.outputs.has_k8s == 'true' && 
-      inputs.skip_helm_deployment != 'true'
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          ref: ${{ inputs.deploy_branch }}
-      - uses: ./.gitea/actions/extract-namespace-from-repo-name
-        id: namespace
-        with:
-          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
-      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
-      - name: Create custom secrets
-        id: create-secrets
-        run: |
-          # Parse custom secrets from input
-          SECRETS='${{ inputs.custom_secrets }}'
-          if [ "$SECRETS" != "[]" ]; then
-            echo "Creating custom secrets..."
-            echo "$SECRETS" | jq -c '.[]' | while read -r secret; do
-              SECRET_NAME=$(echo "$secret" | jq -r '.name')
-              SECRET_TYPE=$(echo "$secret" | jq -r '.type // "generic"')
-              SECRET_DATA=$(echo "$secret" | jq -r '.data')
-              
-              echo "Creating secret: $SECRET_NAME (type: $SECRET_TYPE)"
-              
-              # Create the secret using kubectl
-              echo "$SECRET_DATA" | kubectl create secret $SECRET_TYPE $SECRET_NAME \
-                --from-literal=secret.json="$SECRET_DATA" \
-                --namespace=${{ steps.namespace.outputs.namespace }} \
-                --dry-run=client -o yaml | kubectl apply -f -
-            done
-          else
-            echo "No custom secrets to create"
-          fi
-      - name: Deploy Helm
-        uses: helmfile/helmfile-action@99b1d18ad3989701cf26a54e65baf4a3ee8156b0 # v2.4.0
-        with:
-          helmfile-args: apply
-
-  # Summary job that always runs to show what was deployed
-  deployment-summary:
-    runs-on: ubuntu-latest
-    needs: [ detect-service-type, deploy-k8s, deploy-helm ]
-    if: always()
-    steps:
-      - name: Deployment Summary
-        run: |
-          echo "## Deployment Summary" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-
-          if [ "${{ needs.detect-service-type.outputs.has_k8s }}" == "true" ]; then
-            echo "✅ **Kubernetes deployment**: Completed" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "❌ **Kubernetes deployment**: Skipped (no k8s/ directory found)" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          if [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_deployment }}" != "true" ]; then
-            echo "✅ **Helm deployment**: Completed" >> $GITHUB_STEP_SUMMARY
-          elif [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_deployment }}" == "true" ]; then
-            echo "⏭️ **Helm deployment**: Skipped (manually disabled)" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "⏭️ **Helm deployment**: Skipped (no helmfile.yaml found)" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "**Service Type**: ${{ needs.detect-service-type.outputs.has_helmfile == 'true' && 'Helm + Kubernetes' || 'Kubernetes Only' }}" >> $GITHUB_STEP_SUMMARY
-
-          # Show custom secrets info
-          SECRETS='${{ inputs.custom_secrets }}'
-          if [ "$SECRETS" != "[]" ]; then
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**Custom Secrets Created**: $(echo "$SECRETS" | jq length)" >> $GITHUB_STEP_SUMMARY
-            echo "$SECRETS" | jq -r '.[] | "- " + .name + " (" + (.type // "generic") + ")"' >> $GITHUB_STEP_SUMMARY
-          fi

.gitea/workflows/deploy.yaml

@@ -0,0 +1,168 @@
+name: Deploy
+
+on:
+  workflow_call:
+    inputs:
+      k8s_dir:
+        description: "Override the default k8s directory path (k8s/)"
+        required: false
+        default: "k8s/"
+        type: string
+      helmfile_path:
+        description: "Override the default helmfile path (hemfile.yaml)"
+        required: false
+        default: "helmfile.yaml"
+        type: string
+      skip_helm_deployment:
+        description: "Skip Helm deployment even if helmfile.yaml exists"
+        required: false
+        default: false
+        type: boolean
+      skip_shared_secrets_deployment:
+        description: "Skip shared secrets deployment (e.g. restic backup secret)"
+        required: false
+        default: false
+        type: boolean
+      helmfile_env:
+        description: "Optional JSON object string of environment variables for Helmfile"
+        required: false
+        default: "{}"
+        type: string
+    outputs:
+      has_k8s:
+        description: "Whether Kubernetes manifests were detected"
+        value: ${{ jobs.summary-data.outputs.has_k8s }}
+      has_helmfile:
+        description: "Whether helmfile.yaml was detected"
+        value: ${{ jobs.summary-data.outputs.has_helmfile }}
+      skip_helm_deployment:
+        description: "Whether Helm deployment was manually skipped"
+        value: ${{ jobs.summary-data.outputs.skip_helm_deployment }}
+      service_type:
+        description: "Service type inferred from repository contents"
+        value: ${{ jobs.summary-data.outputs.service_type }}
+
+jobs:
+  detect-service-type:
+    runs-on: ubuntu-latest
+    outputs:
+      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
+      has_k8s: ${{ steps.check-k8s.outputs.exists }}
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Check if helmfile.yaml exists
+        id: check-helmfile
+        run: |
+          if [ -f "${{ inputs.helmfile_path }}" ]; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+            echo "Found helmfile.yaml at ${{ inputs.helmfile_path }}"
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+            echo "No helmfile.yaml found at ${{ inputs.helmfile_path }}"
+          fi
+      - name: Check if k8s directory exists
+        id: check-k8s
+        run: |
+          if [ -d "${{ inputs.k8s_dir }}" ]; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+            echo "Found k8s directory at ${{ inputs.k8s_dir }}"
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+            echo "No k8s directory found at ${{ inputs.k8s_dir }}"
+          fi
+
+  deploy-shared-secrets:
+    runs-on: ubuntu-latest
+    needs: detect-service-type
+    if: inputs.skip_shared_secrets_deployment != 'true'
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Set restic backup secret
+        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
+        with:
+          namespace: ${{ steps.namespace.outputs.namespace }}
+          secret-name: backupsidecar-secret
+          secret-type: generic
+          data: |
+            {
+              "restic_password": "${{ secrets.RESTIC_PASSWORD }}",
+              "restic_rest_username": "${{ secrets.RESTIC_REST_USERNAME }}",
+              "restic_rest_password": "${{ secrets.RESTIC_REST_PASSWORD }}",
+              "gotify_token": "${{ secrets.GOTIFY_TOKEN }}"
+            }
+
+  deploy-k8s:
+    runs-on: ubuntu-latest
+    needs: detect-service-type
+    if: needs.detect-service-type.outputs.has_k8s == 'true'
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+        id: namespace
+        with:
+          repo: ${{ github.repository }}
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+        with:
+          method: kubeconfig
+          kubeconfig: ${{ secrets.KUBECONFIG }}
+      - name: Deploy Kubernetes manifests
+        uses: azure/k8s-deploy@c7ebd0d5f39477a23f1b5dea0f52e6db04adf28e # v6.0.0
+        with:
+          action: deploy
+          manifests: "${{ inputs.k8s_dir }}"
+          strategy: basic
+          namespace: ${{ steps.namespace.outputs.namespace }}
+
+  deploy-helm:
+    runs-on: ubuntu-latest
+    needs: detect-service-type
+    if: |
+      needs.detect-service-type.outputs.has_helmfile == 'true' && 
+      needs.detect-service-type.outputs.has_k8s == 'true' && 
+      inputs.skip_helm_deployment != 'true'
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+        id: namespace
+        with:
+          repo: ${{ github.repository }}
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+        with:
+          method: kubeconfig
+          kubeconfig: ${{ secrets.KUBECONFIG }}
+      - name: Deploy Helm
+        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        with:
+          helmfile-args: apply
+        env: ${{ fromJSON(inputs.helmfile_env) }}
+
+  summary-data:
+    runs-on: ubuntu-latest
+    needs: [detect-service-type, deploy-k8s, deploy-helm]
+    if: always()
+    outputs:
+      has_k8s: ${{ steps.export.outputs.has_k8s }}
+      has_helmfile: ${{ steps.export.outputs.has_helmfile }}
+      skip_helm_deployment: ${{ steps.export.outputs.skip_helm_deployment }}
+      service_type: ${{ steps.export.outputs.service_type }}
+    steps:
+      - name: Export summary data
+        id: export
+        run: |
+          has_k8s="${{ needs.detect-service-type.outputs.has_k8s }}"
+          has_helmfile="${{ needs.detect-service-type.outputs.has_helmfile }}"
+          skip_helm_deployment="${{ inputs.skip_helm_deployment }}"
+
+          if [ "$has_helmfile" = "true" ]; then
+            service_type="Helm + Kubernetes"
+          else
+            service_type="Kubernetes Only"
+          fi
+
+          echo "has_k8s=$has_k8s" >> "$GITHUB_OUTPUT"
+          echo "has_helmfile=$has_helmfile" >> "$GITHUB_OUTPUT"
+          echo "skip_helm_deployment=$skip_helm_deployment" >> "$GITHUB_OUTPUT"
+          echo "service_type=$service_type" >> "$GITHUB_OUTPUT"

.gitea/workflows/release.yaml

@@ -18,10 +18,10 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@41b7e04221df8a033bec841d40a097b76e5f67ff # 0.1.29
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@ef0c23189db33220a73022d8c29a27709d0df440 # 0.1.32
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3925c92fc33f3d2bc87d28d21ab691b7e6dd6cdf # 0.2.1
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/validate.yaml

@@ -18,6 +18,24 @@ on:
         required: false
         default: false
         type: boolean
+      helmfile_env:
+        description: "Optional JSON object string of environment variables for Helmfile"
+        required: false
+        default: "{}"
+        type: string
+    outputs:
+      has_k8s:
+        description: "Whether Kubernetes manifests were detected"
+        value: ${{ jobs.summary-data.outputs.has_k8s }}
+      has_helmfile:
+        description: "Whether helmfile.yaml was detected"
+        value: ${{ jobs.summary-data.outputs.has_helmfile }}
+      skip_helm_validation:
+        description: "Whether Helm validation was manually skipped"
+        value: ${{ jobs.summary-data.outputs.skip_helm_validation }}
+      service_type:
+        description: "Service type inferred from repository contents"
+        value: ${{ jobs.summary-data.outputs.service_type }}
 
 jobs:
   detect-service-type:
@@ -54,12 +72,12 @@ jobs:
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ./.gitea/actions/extract-namespace-from-repo-name
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -79,45 +97,46 @@ jobs:
       inputs.skip_helm_validation != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ./.gitea/actions/extract-namespace-from-repo-name
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
-      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate Helm
-        uses: helmfile/helmfile-action@99b1d18ad3989701cf26a54e65baf4a3ee8156b0 # v2.4.0
+        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
         with:
           helmfile-args: diff
+        env: ${{ fromJSON(inputs.helmfile_env) }}
 
-  # Summary job that always runs to show what was validated
-  ci-summary:
+  summary-data:
     runs-on: ubuntu-latest
     needs: [detect-service-type, validate-k8s, validate-helm]
     if: always()
+    outputs:
+      has_k8s: ${{ steps.export.outputs.has_k8s }}
+      has_helmfile: ${{ steps.export.outputs.has_helmfile }}
+      skip_helm_validation: ${{ steps.export.outputs.skip_helm_validation }}
+      service_type: ${{ steps.export.outputs.service_type }}
     steps:
-      - name: CI Summary
+      - name: Export summary data
+        id: export
         run: |
-          echo "## CI Validation Summary" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
+          has_k8s="${{ needs.detect-service-type.outputs.has_k8s }}"
+          has_helmfile="${{ needs.detect-service-type.outputs.has_helmfile }}"
+          skip_helm_validation="${{ inputs.skip_helm_validation }}"
 
-          if [ "${{ needs.detect-service-type.outputs.has_k8s }}" == "true" ]; then
-            echo "✅ **Kubernetes validation**: Completed" >> $GITHUB_STEP_SUMMARY
+          if [ "$has_helmfile" = "true" ]; then
+            service_type="Helm + Kubernetes"
           else
-            echo "❌ **Kubernetes validation**: Skipped (no k8s/ directory found)" >> $GITHUB_STEP_SUMMARY
+            service_type="Kubernetes Only"
           fi
 
-          if [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_validation }}" != "true" ]; then
-            echo "✅ **Helm validation**: Completed" >> $GITHUB_STEP_SUMMARY
-          elif [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_validation }}" == "true" ]; then
-            echo "⏭️ **Helm validation**: Skipped (manually disabled)" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "⏭️ **Helm validation**: Skipped (no helmfile.yaml found)" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "**Service Type**: ${{ needs.detect-service-type.outputs.has_helmfile == 'true' && 'Helm + Kubernetes' || 'Kubernetes Only' }}" >> $GITHUB_STEP_SUMMARY
+          echo "has_k8s=$has_k8s" >> "$GITHUB_OUTPUT"
+          echo "has_helmfile=$has_helmfile" >> "$GITHUB_OUTPUT"
+          echo "skip_helm_validation=$skip_helm_validation" >> "$GITHUB_OUTPUT"
+          echo "service_type=$service_type" >> "$GITHUB_OUTPUT"

renovate.json

@@ -1,7 +1,4 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "local>t.behrendt/renovate-configs:common",
-    "local>t.behrendt/renovate-configs:action"
-  ]
+  "extends": ["local>t.behrendt/renovate-configs:action"]
 }