chore(deps): update helmfile/helmfile-action action to v2.4.6 (#69)

Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/deploy.yaml

@@ -28,6 +28,11 @@ on:
         required: false
         default: "{}"
         type: string
+      namespace:
+        description: "Override the default namespace (extracted from repository name)"
+        required: false
+        default: ""
+        type: string
 
 jobs:
   detect-service-type:
@@ -36,7 +41,7 @@ jobs:
       has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
       has_k8s: ${{ steps.check-k8s.outputs.exists }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Check if helmfile.yaml exists
         id: check-helmfile
         run: |
@@ -63,20 +68,20 @@ jobs:
     needs: detect-service-type
     if: inputs.skip_shared_secrets_deployment != 'true'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set restic backup secret
-        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
+        uses: azure/k8s-create-secret@ba774cded95cc0d795806a986fecd1205a6c2320 # v6.0.1
         with:
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
           secret-name: backupsidecar-secret
           secret-type: generic
           data: |
@@ -92,13 +97,13 @@ jobs:
     needs: detect-service-type
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -108,7 +113,7 @@ jobs:
           action: deploy
           manifests: "${{ inputs.k8s_dir }}"
           strategy: basic
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
 
   deploy-helm:
     runs-on: ubuntu-latest
@@ -118,21 +123,22 @@ jobs:
       needs.detect-service-type.outputs.has_k8s == 'true' && 
       inputs.skip_helm_deployment != 'true'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Deploy Helm
-        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        uses: helmfile/helmfile-action@54b1d14bdfb9ae815b1f4ef213273a9025b6bdee # v2.4.6
         with:
           helmfile-args: apply
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
         env: ${{ fromJSON(inputs.helmfile_env) }}
 
   # Summary job that always runs to show what was deployed

.gitea/workflows/release.yaml

@@ -14,15 +14,15 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@ef0c23189db33220a73022d8c29a27709d0df440 # 0.1.32
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@29f50ea246d5d9a62ac3c611fa5c8a6e9846df5a # 0.2.8
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/validate.yaml

@@ -23,6 +23,11 @@ on:
         required: false
         default: "{}"
         type: string
+      namespace:
+        description: "Override the default namespace (extracted from repository name)"
+        required: false
+        default: ""
+        type: string
 
 jobs:
   detect-service-type:
@@ -31,7 +36,7 @@ jobs:
       has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
       has_k8s: ${{ steps.check-k8s.outputs.exists }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Check if helmfile.yaml exists
         id: check-helmfile
         run: |
@@ -58,20 +63,20 @@ jobs:
     needs: detect-service-type
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate k8s manifests
         uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
         with:
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
           lintType: dryrun
           manifests: "${{ inputs.k8s_dir }}"
 
@@ -83,21 +88,22 @@ jobs:
       needs.detect-service-type.outputs.has_k8s == 'true' && 
       inputs.skip_helm_validation != 'true'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate Helm
-        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        uses: helmfile/helmfile-action@54b1d14bdfb9ae815b1f4ef213273a9025b6bdee # v2.4.6
         with:
           helmfile-args: diff
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
         env: ${{ fromJSON(inputs.helmfile_env) }}
 
   # Summary job that always runs to show what was validated

README.md

@@ -51,21 +51,23 @@ jobs:
 ### CI (`.gitea/workflows/ci.yaml`)
 
 | Parameter              | Description                                                     | Default         | Required |
-| ---------------------- | -------------------------------------------- | --------------- | -------- |
+| ---------------------- | --------------------------------------------------------------- | --------------- | -------- |
 | `k8s_dir`              | Path to Kubernetes manifests directory                          | `k8s/`          | No       |
 | `helmfile_path`        | Path to helmfile.yaml                                           | `helmfile.yaml` | No       |
 | `skip_helm_validation` | Skip Helm validation even if helmfile exists                    | `false`         | No       |
 | `helmfile_env`         | JSON object string passed as env to helmfile                    | `{}`            | No       |
+| `namespace`            | Override the default namespace (extracted from repository name) | `""`            | No       |
 
 ### CD (`.gitea/workflows/cd.yaml`)
 
 | Parameter                        | Description                                                     | Default         | Required |
-| -------------------------------- | -------------------------------------------- | --------------- | -------- |
+| -------------------------------- | --------------------------------------------------------------- | --------------- | -------- |
 | `k8s_dir`                        | Path to Kubernetes manifests directory                          | `k8s/`          | No       |
 | `helmfile_path`                  | Path to helmfile.yaml                                           | `helmfile.yaml` | No       |
 | `skip_helm_deployment`           | Skip Helm deployment even if helmfile exists                    | `false`         | No       |
 | `skip_shared_secrets_deployment` | Skip shared secrets deployment                                  | `false`         | No       |
 | `helmfile_env`                   | JSON object string passed as env to helmfile                    | `{}`            | No       |
+| `namespace`                      | Override the default namespace (extracted from repository name) | `""`            | No       |
 
 ## Directory Structure Requirements