chore(release): k8s-stack-manager 0.4.0

[omattsson]

Summary

Bumps helm/k8s-stack-manager/Chart.yaml to 0.4.0. Merging this triggers chart-releaser to publish chart + ghcr images at 0.4.0.

Release notes (paste into the GH release after chart-releaser runs)

Highlights

• Per-stack-namespace RoleBindings for cross-namespace add-ons (feat(deployer): per-stack-namespace RoleBindings for cross-namespace add-ons #304) — New backend.namespaceRoleBindings Helm value (env: NAMESPACE_ROLE_BINDINGS_JSON) lets a centrally-deployed add-on (e.g. refresh-db in its own namespace) act inside every stack namespace via least-privilege RBAC, instead of a cluster-wide ClusterRoleBinding. The deployer applies each (ClusterRole, ServiceAccount) spec as a RoleBinding at pre-install time, idempotently. The ClusterRole must already exist on the cluster — this is not a ClusterRole manager. Empty list (the default) disables the feature entirely.

• Chart-config merge-safe PUT (fix(api): chart-config GET + merge-safe PUT preserves unspecified fields #305) — PUT /api/v1/stack-definitions/:id/charts/:chartId now preserves fields the client didn't send instead of replacing the whole record. Fixes a class of bug where older stackctl definition update-chart calls were silently wiping repository_url, chart_path, build_pipeline_id, and deploy_order. Stack deploys would then fail with helm's non-absolute URLs should be in form of repo_name/path_to_chart.

• Chart-config definition-membership enforcement (fix(api): chart-config GET + merge-safe PUT preserves unspecified fields #305) — GET/PUT/DELETE on /api/v1/stack-definitions/:id/charts/:chartId now 404 if the chart exists but belongs to a different definition, instead of leaking it across definitions.

Required for upgrade

None — fully backward-compatible. New RBAC capability is opt-in (empty default).

Notes for downstream

• stackctl ≥ v0.3.1 pairs with this release. The merge-safe PUT means older stackctl versions also stop wiping fields, but v0.3.1 explicitly carries the full record + adds --repository-url.

Full changelog

Features

• feat(deployer): per-stack-namespace RoleBindings for cross-namespace add-ons (feat(deployer): per-stack-namespace RoleBindings for cross-namespace add-ons #304)

Fixes

• fix(api): chart-config GET + merge-safe PUT preserves unspecified fields + enforce definition membership (fix(api): chart-config GET + merge-safe PUT preserves unspecified fields #305)

Dependencies

• deps(go): bump github.com/coreos/go-oidc/v3 (deps(go): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 in /backend #299)
• deps(npm): bump js-yaml from 4.2.0 to 5.0.0 (deps(npm): bump js-yaml from 4.2.0 to 5.0.0 in /frontend #302)
• deps(npm): bump undici from 7.25.0 to 7.28.0 (deps(npm): bump undici from 7.25.0 to 7.28.0 in /frontend #297)
• deps(npm): bump @types/node from 25.9.3 to 26.0.0 (deps(npm): bump @types/node from 25.9.3 to 26.0.0 in /frontend #301)
• deps(npm): bump react-router-dom from 7.17.0 to 7.18.0 (deps(npm): bump react-router-dom from 7.17.0 to 7.18.0 in /frontend #303)
• deps(npm): bump frontend dev-dependencies group (4 updates) (deps(npm): bump the dev-dependencies group in /frontend with 4 updates #300)
• deps(actions): bump actions/checkout from 6 to 7 (deps(actions): bump actions/checkout from 6 to 7 #298)

Full diff: v0.3.1...HEAD

Test plan

• Chart bump only — no code change
• After merge, chart-releaser tags v0.4.0 and publishes the chart
• After merge, ghcr images tagged 0.4.0, 0.4, latest
• Smoke-install on rancher-desktop with default values

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated the Helm chart and app version to 0.4.0.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9ea4074c-3261-442c-ace6-17650bf0391f

📥 Commits

Reviewing files that changed from the base of the PR and between 53a5663 and 8f71daf.

📒 Files selected for processing (1)

• helm/k8s-stack-manager/Chart.yaml

---

📝 Walkthrough

Walkthrough

The Helm chart metadata in helm/k8s-stack-manager/Chart.yaml is updated: both version and appVersion fields are bumped from 0.3.1 to 0.4.0.

Changes

Helm Chart Version Bump

Layer / File(s)	Summary
Chart.yaml version and appVersion bump helm/k8s-stack-manager/Chart.yaml	Both version and appVersion fields are updated from 0.3.1 to 0.4.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~1 minutes

Possibly related PRs

• omattsson/k8s-stack-manager#296: Performs the same version and appVersion bump in the identical Chart.yaml file, for the previous release (0.3.0 → 0.3.1).

Poem

🐇 Hop, hop, hooray, the version is new!
From 0.3.1 to 0.4.0 we flew,
A tiny two-line change, but oh so grand,
The chart is updated, right on demand!
The rabbit stamps the version with glee~ 🎉

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately reflects the release bump to k8s-stack-manager 0.4.0.
Description check	✅ Passed	The PR includes a summary, upgrade notes, downstream notes, changelog, and test plan, though several template sections are omitted.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/release-0.4.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

Bumps the Helm chart metadata to release k8s-stack-manager v0.4.0, so chart-releaser can publish the chart and corresponding GHCR images tagged 0.4.0.

Changes:

• Update helm/k8s-stack-manager/Chart.yaml version to 0.4.0
• Update helm/k8s-stack-manager/Chart.yaml appVersion to 0.4.0