chore(deps): update actions/checkout action to v7

chore(deps): update https://gitea.t000-n.de/t.behrendt/actions action to v0.2.8 (#61 )
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://gitea.t000-n.de/t.behrendt/actions](https://gitea.t000-n.de/t.behrendt/actions) | action | patch | `0.2.4` → `0.2.8` | --- ### Release Notes <details> <summary>t.behrendt/actions (https://gitea.t000-n.de/t.behrendt/actions)</summary> ### [`v0.2.8`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.7...0.2.8) [Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.7...0.2.8) ### [`v0.2.7`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.6...0.2.7) [Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.6...0.2.7) ### [`v0.2.6`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.5...0.2.6) [Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.5...0.2.6) ### [`v0.2.5`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.4...0.2.5) [Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.4...0.2.5) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: #61 Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>
2026-06-27 04:03:34 +00:00 · 2026-06-26 15:00:59 +02:00 · 2026-06-26 15:00:51 +02:00 · 2026-06-24 16:04:21 +02:00 · 2026-06-17 19:24:15 +02:00 · 2026-06-13 12:15:48 +02:00
4 changed files with 61 additions and 37 deletions
@@ -28,6 +28,11 @@ on:
        required: false
        default: "{}"
        type: string
+      namespace:
+        description: "Override the default namespace (extracted from repository name)"
+        required: false
+        default: ""
+        type: string

 jobs:
  detect-service-type:
@@ -36,7 +41,7 @@ jobs:
      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
      has_k8s: ${{ steps.check-k8s.outputs.exists }}
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      - name: Check if helmfile.yaml exists
        id: check-helmfile
        run: |
@@ -63,11 +68,20 @@ jobs:
    needs: detect-service-type
    if: inputs.skip_shared_secrets_deployment != 'true'
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Set restic backup secret
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
+        id: namespace
        with:
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          repo: ${{ github.repository }}
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+        with:
+          method: kubeconfig
+          kubeconfig: ${{ secrets.KUBECONFIG }}
+      - name: Set restic backup secret
+        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
+        with:
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
          secret-name: backupsidecar-secret
          secret-type: generic
          data: |
@@ -83,8 +97,8 @@ jobs:
    needs: detect-service-type
    if: needs.detect-service-type.outputs.has_k8s == 'true'
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
        id: namespace
        with:
          repo: ${{ github.repository }}
@@ -99,7 +113,7 @@ jobs:
          action: deploy
          manifests: "${{ inputs.k8s_dir }}"
          strategy: basic
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}

  deploy-helm:
    runs-on: ubuntu-latest
@@ -109,8 +123,8 @@ jobs:
      needs.detect-service-type.outputs.has_k8s == 'true' && 
      inputs.skip_helm_deployment != 'true'
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
        id: namespace
        with:
          repo: ${{ github.repository }}
@@ -121,9 +135,10 @@ jobs:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Deploy Helm
-        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        uses: helmfile/helmfile-action@daefb3e1fa5a91b7a88d30870d20da4896944818 # v2.4.5
        with:
          helmfile-args: apply
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
        env: ${{ fromJSON(inputs.helmfile_env) }}

  # Summary job that always runs to show what was deployed
@@ -5,23 +5,24 @@ on:
    branches:
      - main
    paths:
-      - ".gitea/workflows/cd.yaml"
-      - ".gitea/workflows/ci.yaml"
+      - ".gitea/workflows/deploy.yaml"
+      - ".gitea/workflows/validate.yaml"
+  workflow_dispatch:

 jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          fetch-depth: 0
      - name: Increment tag
        id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@ef0c23189db33220a73022d8c29a27709d0df440 # 0.1.32
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
        with:
          token: ${{ secrets.GITEA_TOKEN }}
      - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@29f50ea246d5d9a62ac3c611fa5c8a6e9846df5a # 0.2.8
        with:
          tag: ${{ steps.tag.outputs.new-tag }}
@@ -23,6 +23,11 @@ on:
        required: false
        default: "{}"
        type: string
+      namespace:
+        description: "Override the default namespace (extracted from repository name)"
+        required: false
+        default: ""
+        type: string

 jobs:
  detect-service-type:
@@ -31,7 +36,7 @@ jobs:
      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
      has_k8s: ${{ steps.check-k8s.outputs.exists }}
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      - name: Check if helmfile.yaml exists
        id: check-helmfile
        run: |
@@ -58,8 +63,8 @@ jobs:
    needs: detect-service-type
    if: needs.detect-service-type.outputs.has_k8s == 'true'
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
        id: namespace
        with:
          repo: ${{ github.repository }}
@@ -69,9 +74,9 @@ jobs:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate k8s manifests
-        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
+        uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
        with:
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
          lintType: dryrun
          manifests: "${{ inputs.k8s_dir }}"

@@ -83,8 +88,8 @@ jobs:
      needs.detect-service-type.outputs.has_k8s == 'true' && 
      inputs.skip_helm_validation != 'true'
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
        id: namespace
        with:
          repo: ${{ github.repository }}
@@ -95,9 +100,10 @@ jobs:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate Helm
-        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        uses: helmfile/helmfile-action@daefb3e1fa5a91b7a88d30870d20da4896944818 # v2.4.5
        with:
          helmfile-args: diff
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
        env: ${{ fromJSON(inputs.helmfile_env) }}

  # Summary job that always runs to show what was validated
@@ -50,22 +50,24 @@ jobs:

 ### CI (`.gitea/workflows/ci.yaml`)

-| Parameter              | Description                                  | Default         | Required |
-| ---------------------- | -------------------------------------------- | --------------- | -------- |
-| `k8s_dir`              | Path to Kubernetes manifests directory       | `k8s/`          | No       |
-| `helmfile_path`        | Path to helmfile.yaml                        | `helmfile.yaml` | No       |
-| `skip_helm_validation` | Skip Helm validation even if helmfile exists | `false`         | No       |
-| `helmfile_env`         | JSON object string passed as env to helmfile | `{}`            | No       |
+| Parameter              | Description                                                     | Default         | Required |
+| ---------------------- | --------------------------------------------------------------- | --------------- | -------- |
+| `k8s_dir`              | Path to Kubernetes manifests directory                          | `k8s/`          | No       |
+| `helmfile_path`        | Path to helmfile.yaml                                           | `helmfile.yaml` | No       |
+| `skip_helm_validation` | Skip Helm validation even if helmfile exists                    | `false`         | No       |
+| `helmfile_env`         | JSON object string passed as env to helmfile                    | `{}`            | No       |
+| `namespace`            | Override the default namespace (extracted from repository name) | `""`            | No       |

 ### CD (`.gitea/workflows/cd.yaml`)

-| Parameter                        | Description                                  | Default         | Required |
-| -------------------------------- | -------------------------------------------- | --------------- | -------- |
-| `k8s_dir`                        | Path to Kubernetes manifests directory       | `k8s/`          | No       |
-| `helmfile_path`                  | Path to helmfile.yaml                        | `helmfile.yaml` | No       |
-| `skip_helm_deployment`           | Skip Helm deployment even if helmfile exists | `false`         | No       |
-| `skip_shared_secrets_deployment` | Skip shared secrets deployment               | `false`         | No       |
-| `helmfile_env`                   | JSON object string passed as env to helmfile | `{}`            | No       |
+| Parameter                        | Description                                                     | Default         | Required |
+| -------------------------------- | --------------------------------------------------------------- | --------------- | -------- |
+| `k8s_dir`                        | Path to Kubernetes manifests directory                          | `k8s/`          | No       |
+| `helmfile_path`                  | Path to helmfile.yaml                                           | `helmfile.yaml` | No       |
+| `skip_helm_deployment`           | Skip Helm deployment even if helmfile exists                    | `false`         | No       |
+| `skip_shared_secrets_deployment` | Skip shared secrets deployment                                  | `false`         | No       |
+| `helmfile_env`                   | JSON object string passed as env to helmfile                    | `{}`            | No       |
+| `namespace`                      | Override the default namespace (extracted from repository name) | `""`            | No       |

 ## Directory Structure Requirements