Skip to content

chore(ghost): bump ghost to 6.50.0#712

Merged
mberlofa merged 2 commits into
mainfrom
chore/ghost-6.50.0
Jul 7, 2026
Merged

chore(ghost): bump ghost to 6.50.0#712
mberlofa merged 2 commits into
mainfrom
chore/ghost-6.50.0

Conversation

@mberlofa

@mberlofa mberlofa commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Closes #693.

Summary

  • Bump Ghost from 6.47.0 to 6.50.0.
  • Update the Docker Official Ghost image tag, values schema default, README upgrade notes, and image assertion tests.
  • Add the standard chart validate helper/template so template standards are clean.

Upstream Evidence

  • GitHub release: https://github.com/TryGhost/Ghost/releases/tag/v6.50.0
  • Docker Official image manifest verified: docker.io/library/ghost:6.50.0
  • Manifest platforms: linux/amd64, linux/arm, linux/arm64, linux/s390x.
  • Ghost 6.50.0 includes publisher/admin improvements and fixes including stored XSS hardening in JSON-LD output.

Site Sync

Validation

  • make image-verify IMAGE=docker.io/library/ghost:6.50.0
  • make deps-check CHART=ghost
  • helm unittest charts/ghost passed: 6 suites, 23 tests.
  • make validate-chart CHART=ghost passed fully: 16 layers, including k3d behavioral validation for default and all CI values scenarios.
  • make standards-check CHART=ghost
  • node scripts/charts/template-standards-check.js --chart ghost
  • make site-sync-check CHART=ghost
  • make release-check REPO=charts
  • make attribution-check REPO=charts

Summary by CodeRabbit

  • New Features

    • Updated the Ghost application to 6.50.0 across the chart, default image tags, documentation, and automated tests.
  • Bug Fixes

    • Added stricter install/upgrade-time configuration validation for external database connectivity, ingress host requirements, gateway parent references, and external secrets setup to fail fast when required values are missing.
  • Documentation

    • Refreshed upgrade notes with additional 6.50.0 patch highlights, including admin/session updates and security improvements.

@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Standards Check (GR-079) — PASS

Every changed chart fully passes standards-check.

@coderabbitai

coderabbitai Bot commented Jul 7, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

This PR bumps the Ghost chart to 6.50.0 across chart metadata, defaults, docs, and tests. It also adds a render-time ghost.validate helper and a templates/validate.yaml entry point with new validation test coverage.

Changes

Ghost chart update

Layer / File(s) Summary
Version bump across chart metadata, values, schema, docs, tests
charts/ghost/Chart.yaml, charts/ghost/values.yaml, charts/ghost/values.schema.json, charts/ghost/README.md, charts/ghost/tests/deployment_test.yaml
appVersion, image defaults, README references, and the deployment test image assertion are updated to 6.50.0.
New ghost.validate render-time validation helper
charts/ghost/templates/_helpers.tpl, charts/ghost/templates/validate.yaml, charts/ghost/tests/validation_test.yaml
A new helper enforces database, ingress, gateway, and externalSecrets value requirements, validate.yaml includes it, and validation tests cover the expected failures and pass cases.

Estimated code review effort: 2 (Simple) | ~10 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Helm
  participant ValidateTemplate as templates/validate.yaml
  participant ValidateHelper as ghost.validate

  Helm->>ValidateTemplate: render chart
  ValidateTemplate->>ValidateHelper: include ghost.validate
  ValidateHelper->>ValidateHelper: check database, ingress, gateway, externalSecrets
  ValidateHelper-->>Helm: fail when required values are missing
Loading

Possibly related PRs

  • helmforgedev/charts#643: Adds a similar chart-specific validation helper and templates/validate.yaml wiring with validation tests.
  • helmforgedev/charts#645: Adds the same fail-fast Helm validation pattern for ingress and Gateway API values.
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly states the Ghost chart is being bumped to 6.50.0.
Linked Issues check ✅ Passed The PR updates the image tag, appVersion, and docs/tests for Ghost 6.50.0, matching the issue's coding requirements.
Out of Scope Changes check ✅ Passed The new validation helper and tests are directly related to the Ghost chart update and are not unrelated scope creep.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/ghost-6.50.0

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

🟢 Security Scan: ghost

Framework Score
MITRE + NSA + SOC2 89.393936%

✅ Security posture acceptable.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
charts/ghost/templates/_helpers.tpl (1)

46-78: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Add unittest coverage for the new ghost.validate failure branches.

This helper enforces several hard render-time gates (database, ingress, gateway, externalSecrets). None of the provided files add a corresponding helm-unittest test asserting these fail conditions trigger/don't trigger as expected. Given this directly blocks helm install/helm template, tests would help catch regressions when values defaults change.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@charts/ghost/templates/_helpers.tpl` around lines 46 - 78, Add helm-unittest
coverage for the new failure paths in ghost.validate by creating tests that
render the chart with invalid values and assert each fail branch is triggered,
plus a few happy-path cases to confirm valid combinations pass. Focus the tests
around the ghost.validate helper and the related gates for
mysql/database.external.host, database.external.password or
database.external.existingSecret, ingress.enabled/ingress.hosts,
gateway.enabled/gateway.parentRefs, and externalSecrets.enabled with
database.external.existingSecret, externalSecrets.secretStoreRef.name, and
externalSecrets.data.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@charts/ghost/templates/_helpers.tpl`:
- Around line 46-78: Add helm-unittest coverage for the new failure paths in
ghost.validate by creating tests that render the chart with invalid values and
assert each fail branch is triggered, plus a few happy-path cases to confirm
valid combinations pass. Focus the tests around the ghost.validate helper and
the related gates for mysql/database.external.host, database.external.password
or database.external.existingSecret, ingress.enabled/ingress.hosts,
gateway.enabled/gateway.parentRefs, and externalSecrets.enabled with
database.external.existingSecret, externalSecrets.secretStoreRef.name, and
externalSecrets.data.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ec050b1a-e075-4781-88b1-8eb5168f9757

📥 Commits

Reviewing files that changed from the base of the PR and between 66a35d5 and ea57411.

📒 Files selected for processing (7)
  • charts/ghost/Chart.yaml
  • charts/ghost/README.md
  • charts/ghost/templates/_helpers.tpl
  • charts/ghost/templates/validate.yaml
  • charts/ghost/tests/deployment_test.yaml
  • charts/ghost/values.schema.json
  • charts/ghost/values.yaml

@mberlofa

mberlofa commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

Handled the CodeRabbit top-level nitpick in 4a8c71a.

Added charts/ghost/tests/validation_test.yaml with helm-unittest coverage for the ghost.validate failure branches and happy paths around external database settings, ingress hosts, Gateway API parentRefs, and External Secrets settings.

Validation:

  • helm unittest charts/ghost
  • make validate-chart CHART=ghost
  • make release-check REPO=charts
  • make attribution-check REPO=charts

This CodeRabbit item was posted only in the review summary, so there is no resolvable review thread to close.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
charts/ghost/tests/validation_test.yaml (1)

1-132: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Add backup validation coverage. ghost.validate also calls ghost.backupEnabled, but this suite doesn’t exercise the backup.enabled failure paths or a passing backup config. Add cases for missing backup.s3.endpoint, backup.s3.bucket, and backup.s3.accessKey/backup.s3.existingSecret.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@charts/ghost/tests/validation_test.yaml` around lines 1 - 132, Add validation
coverage for the backup-related checks in the Validation suite so
`ghost.validate` exercises `ghost.backupEnabled` as well. Extend the existing
tests with failure cases for `backup.enabled` when `backup.s3.endpoint`,
`backup.s3.bucket`, or both `backup.s3.accessKey`/`backup.s3.existingSecret` are
missing, and add at least one passing case with a complete backup S3
configuration. Use the existing `ghost.validate` and `ghost.backupEnabled` paths
as the reference points for where the validation behavior should be covered.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@charts/ghost/tests/validation_test.yaml`:
- Around line 1-132: Add validation coverage for the backup-related checks in
the Validation suite so `ghost.validate` exercises `ghost.backupEnabled` as
well. Extend the existing tests with failure cases for `backup.enabled` when
`backup.s3.endpoint`, `backup.s3.bucket`, or both
`backup.s3.accessKey`/`backup.s3.existingSecret` are missing, and add at least
one passing case with a complete backup S3 configuration. Use the existing
`ghost.validate` and `ghost.backupEnabled` paths as the reference points for
where the validation behavior should be covered.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 999f35c0-b3f9-442c-8146-09dbe875f18d

📥 Commits

Reviewing files that changed from the base of the PR and between ea57411 and 4a8c71a.

📒 Files selected for processing (1)
  • charts/ghost/tests/validation_test.yaml

@mberlofa mberlofa merged commit b4b0602 into main Jul 7, 2026
17 checks passed
@mberlofa mberlofa deleted the chore/ghost-6.50.0 branch July 7, 2026 22:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore(ghost): upstream image update available (6.47.0 → 6.50.0)

1 participant