chore(deps): update dependency devantler-tech/ksail to v7.138.0

[renovate]

This PR contains the following updates:

Package	Update	Change
devantler-tech/ksail	minor	7.137.0 → 7.138.0

---

Release Notes

devantler-tech/ksail (devantler-tech/ksail)

v7.138.0

Compare Source

Changelog

Features

• 4697f8b feat(provisioner): pre-seed the full shared kubeadm PKI at compose time (#​5798)

Other Changes

• 9d61d7b chore(copilot-plugin): release v7.137.0 (#​5799)
• 893c39b chore(provisioner): drop stale #​5514-gated comments on the Hetzner factory paths (#​5795)

Quick Start

Homebrew Cask (macOS):

# Standard installation:
brew install --cask devantler-tech/tap/ksail

# If you encounter macOS quarantine issues:
brew install --cask --no-quarantine devantler-tech/tap/ksail

Go Install:

go install github.com/devantler-tech/ksail/v7@​v7.138.0

Download Binary: Choose your platform from the assets above

Docker:

docker pull ghcr.io/devantler-tech/ksail:v7.138.0

---

Full Changelog: devantler-tech/ksail@v7.137.0...v7.138.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: abc7a510-65c9-4e5f-87fc-029b1456f710

📥 Commits

Reviewing files that changed from the base of the PR and between a59229a and 45f0ecd.

📒 Files selected for processing (4)

• .github/actions/deploy-prod/action.yml
• .github/workflows/ci.yaml
• .github/workflows/dr-rebuild.yaml
• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• devantler-tech/actions (auto-detected)
• devantler-tech/aws (auto-detected)
• devantler-tech/ksail (auto-detected)
• devantler-tech/reusable-workflows (auto-detected)
• devantler-tech/ascoachingogvaner (auto-detected)
• devantler-tech/unifi (auto-detected)
• devantler-tech/wedding-app (auto-detected)
• devantler-tech/provider-upjet-unifi (auto-detected)
• devantler-tech/agent-skills (auto-detected)

📜 Recent review details

⏰ Context from checks skipped due to timeout. (2)

• GitHub Check: 🧪 Validate Manifests
• GitHub Check: Analyze (python)

⚠️ CI failures not shown inline (2)

GitHub Actions: 🔀 Enable Auto-Merge / auto-merge: chore(deps): update dependency devantler-tech/ksail to v7.138.0

Conclusion: failure

View job details

##[group]Run set +e
 �[36;1mset +e�[0m
 �[36;1mREVIEW_OUTPUT=$(gh pr review "$PR_NUMBER" --approve --repo "$REPOSITORY" 2>&1)�[0m
 �[36;1mREVIEW_EXIT_CODE=$?�[0m
 �[36;1mset -e�[0m
 �[36;1m�[0m
 �[36;1mif [[ $REVIEW_EXIT_CODE -eq 0 ]]; then�[0m
 �[36;1m  echo "✅ PR #${PR_NUMBER} approved"�[0m
 �[36;1melif [[ "$REVIEW_OUTPUT" == *"Can not approve your own pull request"* ]]; then�[0m
 �[36;1m  echo "::warning::Could not approve PR #${PR_NUMBER} because GitHub does not allow self-approval. Skipping approval."�[0m
 �[36;1melse�[0m
 �[36;1m  echo "::error::Failed to approve PR #${PR_NUMBER}."�[0m

---

GitHub Actions: 🔀 Enable Auto-Merge / 0_auto-merge.txt: chore(deps): update dependency devantler-tech/ksail to v7.138.0

Conclusion: failure

View job details

##[group]Run set +e
 �[36;1mset +e�[0m
 �[36;1mREVIEW_OUTPUT=$(gh pr review "$PR_NUMBER" --approve --repo "$REPOSITORY" 2>&1)�[0m
 �[36;1mREVIEW_EXIT_CODE=$?�[0m
 �[36;1mset -e�[0m
 �[36;1m�[0m
 �[36;1mif [[ $REVIEW_EXIT_CODE -eq 0 ]]; then�[0m
 �[36;1m  echo "✅ PR #${PR_NUMBER} approved"�[0m
 �[36;1melif [[ "$REVIEW_OUTPUT" == *"Can not approve your own pull request"* ]]; then�[0m
 �[36;1m  echo "::warning::Could not approve PR #${PR_NUMBER} because GitHub does not allow self-approval. Skipping approval."�[0m
 �[36;1melse�[0m
 �[36;1m  echo "::error::Failed to approve PR #${PR_NUMBER}."�[0m

🧰 Additional context used

📓 Path-based instructions (4)

**/*.{yaml,yml}

📄 CodeRabbit inference engine (AGENTS.md)

**/*.{yaml,yml}: Use Kustomize overlays rather than editing base resources directly; k8s/bases/ is immutable from overlays and changes should be made with patches: in provider or cluster overlays.
Keep manifest changes small and use YAML/schema validation before submitting a manifest PR; for files with cluster context, prefer ksail workload validate / kubectl kustomize / kubectl apply --dry-run=client as appropriate.

Files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

k8s/**

📄 CodeRabbit inference engine (AGENTS.md)

k8s/**: Respect Flux dependency order: bootstrap → infrastructure-controllers → infrastructure → apps, with the prod-only infrastructure-overprovisioning layer hanging off infrastructure without gating apps.
Follow the hierarchical Kustomization flow: base configurations in k8s/bases/ feed provider overlays in k8s/providers/, which feed cluster overlays in k8s/clusters/.

Files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

k8s/bases/infrastructure/**

📄 CodeRabbit inference engine (AGENTS.md)

k8s/bases/infrastructure/**: Under k8s/bases/infrastructure/, organize resources component-folder-first: a component's HelmRelease/HelmRepository and its own CRs should live together in a folder named after the component unless a split is required.
Split a custom resource into its own plural-Kind folder only when it cannot live with its component, such as for CRD dependency ordering or because it is cluster-scoped/cross-cutting.

Files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

k8s/bases/infrastructure/**/*.{yaml,yml}

📄 CodeRabbit inference engine (AGENTS.md)

k8s/bases/infrastructure/**/*.{yaml,yml}: For component-folder files, name manifests after the resource Kind in kebab-case; if a folder contains multiple resources of the same Kind, qualify filenames with a purpose suffix.
For CR-folder files, omit the folder-implied Kind from the filename and use the verb-purpose.yaml form.
Name Flux Kustomization resources flux-kustomization*.yaml; keep the kustomize build file named exactly kustomization.yaml.

Files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

🧠 Learnings (1)

📚 Learning: 2026-07-01T21:13:36.950Z

Learnt from: devantler
Repo: devantler-tech/platform PR: 2359
File: k8s/bases/apps/actual-budget/helm-release.yaml:62-111
Timestamp: 2026-07-01T21:13:36.950Z
Learning: When reviewing Kustomize/Helm YAML in this repo, keep the base vs provider overlay split: `k8s/bases/apps/**` and `k8s/bases/infrastructure/**` should contain each app’s full, environment-agnostic configuration (including base-level postRenderer Kustomize patches such as deployment strategy, topology spread, probes, and env injection). `k8s/providers/{docker,hetzner}/**` should only add small provider-specific deltas (e.g., `interval`, `persistence.size`) via patch files (like `k8s/providers/<provider>/apps/<app>/patches/helm-release-patch.yaml`). If configuration is identical across providers (e.g., OIDC/OAuth env vars where `${domain}` is resolved per cluster via envsubst), it belongs in the base and must not be duplicated into provider overlays.

Applied to files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

🔀 Multi-repo context devantler-tech/actions, devantler-tech/reusable-workflows, devantler-tech/ksail

Linked repositories findings

devantler-tech/actions

• setup-ksail-cli/action.yaml:25-32 installs KSail from the devantler-tech/formulas tap and then runs brew install ksail, so this repo is a direct consumer of the released KSail package and will pick up v7.138.0. [::devantler-tech/actions::]
• README.md:40 / setup-ksail-cli/README.md:3,10 document this action as the KSail installer used by downstream workflows, so any runtime behavior change in the CLI can affect consumers through this path. [::devantler-tech/actions::]

devantler-tech/reusable-workflows

• No direct references to ksail, KSAIL_VERSION, or the bumped versions were found in the explored output. [::devantler-tech/reusable-workflows::]

devantler-tech/ksail

• The search output shows the repo’s internal ksail command surface and v7 module path, but no cross-repo consumer mismatch or incompatible exported API change was observed in the explored files. [::devantler-tech/ksail::]

🔇 Additional comments (4)

.github/actions/deploy-prod/action.yml (1)

46-46: LGTM!

.github/workflows/ci.yaml (1)

78-78: LGTM!

.github/workflows/dr-rebuild.yaml (1)

81-81: LGTM!

k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml (1)

21-21: LGTM!

---

📝 Walkthrough

Walkthrough

This pull request bumps the pinned KSail CLI/operator version from 7.137.0 to 7.138.0 across four files: the deploy-prod composite action, the CI workflow, the DR rebuild workflow, and the ksail-operator HelmRelease chart version. No logic, inputs, steps, or other configuration were changed.

Changes

File	Change
.github/actions/deploy-prod/action.yml	KSAIL_VERSION bumped 7.137.0 → 7.138.0
.github/workflows/ci.yaml	KSAIL_VERSION bumped 7.137.0 → 7.138.0
.github/workflows/dr-rebuild.yaml	KSAIL_VERSION bumped 7.137.0 → 7.138.0
k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml	spec.chart.spec.version bumped 7.137.0 → 7.138.0

Sequence Diagram(s)

Not applicable; this change is limited to version string updates.

Related Issues: None provided.

Related PRs: None provided.

Suggested labels: dependencies, ci

Suggested reviewers: devantler

Poem
A rabbit hops through YAML fields anew,
Bumping numbers, seven-thirty-eight in view,
From actions to charts, the version climbs,
A tiny hop, but timed just fine,
Carrots counted, versions aligned. 🥕

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly states the ksail dependency bump to v7.138.0, matching the main change.
Description check	✅ Passed	The description accurately describes the ksail update from 7.137.0 to 7.138.0 and is on-topic.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}