Skip to content

Bump azure/setup-helm from 4.3.1 to 5.0.0#353

Open
dependabot[bot] wants to merge 65 commits into
mainfrom
dependabot/github_actions/azure/setup-helm-5.0.0
Open

Bump azure/setup-helm from 4.3.1 to 5.0.0#353
dependabot[bot] wants to merge 65 commits into
mainfrom
dependabot/github_actions/azure/setup-helm-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 24, 2026

Bumps azure/setup-helm from 4.3.1 to 5.0.0.

Release notes

Sourced from azure/setup-helm's releases.

v5.0.0

Changed

Changelog

Sourced from azure/setup-helm's changelog.

[5.0.0] - 2026-03-23

Changed

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot Bot and others added 30 commits March 16, 2026 07:23
Bumps [renovatebot/github-action](https://github.com/renovatebot/github-action) from 46.1.4 to 46.1.5.
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](renovatebot/github-action@v46.1.4...v46.1.5)

---
updated-dependencies:
- dependency-name: renovatebot/github-action
  dependency-version: 46.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.33.0 to 0.34.0.
- [Commits](golang/mod@v0.33.0...v0.34.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…device-plugin

Update nvcr.io/nvidia/k8s-device-plugin Docker tag to v0.19.0
…d-nativek8s-driver-manager

Update nvcr.io/nvidia/cloud-native/k8s-driver-manager Docker tag to v0.10.0
…/golang.org/x/mod-0.34.0

Bump golang.org/x/mod from 0.33.0 to 0.34.0
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
…d-nativevgpu-device-manager

Update nvcr.io/nvidia/cloud-native/vgpu-device-manager Docker tag to v0.4.2
This commit does the following:
- Fix typo in the k8s-cc-manager image name
- Update rules for container-toolkit and k8s-mig-manager as their image tags no longer have a distro suffix
- Add nvidia-sandbox-device-plugin to list of images

Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
…d-nativek8s-mig-manager

Update nvcr.io/nvidia/cloud-native/k8s-mig-manager Docker tag to v0.14.0
[renovate] fix renovate config for a few operands
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
Bump nvidia-sandbox-device-plugin to v0.0.2
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
…d-nativek8s-cc-manager

Update nvcr.io/nvidia/cloud-native/k8s-cc-manager Docker tag to v0.3.0
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
remove stale code which is no longer in use
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
remove e2e tests as they are no longer needed
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
ArangoGutierrez and others added 26 commits March 31, 2026 14:43
Add forward-compatibility.yaml workflow that runs weekly to test the
GPU operator against latest upstream component images (toolkit,
device-plugin, mig-manager). Includes get-latest-images.sh with
retry/backoff for image verification and generate-values-overrides.sh
for Helm values generation.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
- Restore Holodeck to v0.2.18 matching the original ci.yaml
- Remove unused operator_version input from release workflow and caller
- Skip Slack notification when SLACK_BOT_TOKEN secret is not configured

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
- Remove push: triggers from reusable workflows (config-checks,
  golang-checks, image-builds, release) to prevent double-execution
  when called from ci.yaml
- Eliminate ~80 lines of duplicated variable calculation logic in
  image-builds.yaml and release.yaml
- Make yq a hard requirement for YAML merging instead of falling back
  to cat concatenation which produces invalid YAML
- Replace echo -e with printf '%b' in env-to-values.sh for portability
- Add use_values_override input to e2e-tests workflow_dispatch
- Fix shebang consistency in get-latest-images.sh (#!/usr/bin/env bash)
- Document 8-char SHA truncation assumption in get-latest-images.sh
- Remove non-deterministic date from generated values file headers
- Remove trailing whitespace in code-scanning.yaml

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
- Pin mikefarah/yq action to v4 version tag
- Restore SHA-pinned regctl action (v0.11.1)
- Add workflow-level permissions: {} for least privilege
- Move expression interpolations from run: to env: blocks

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
- Restore bundle CSV update and commit-SHA-tagged bundle image
- Derive OPERATOR_IMAGE_BASE from GITHUB_REPOSITORY_OWNER
- Decouple coverage from blocking image builds
- Remove duplicate pull_request trigger from code-scanning

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
- Add timeout-minutes to all workflow jobs

- Add set -euo pipefail and quote variables in install-operator.sh

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
The addition of `set -euo pipefail` made `${SKIP_INSTALL}` fail when
unset. Use `${SKIP_INSTALL:-}` for safe default expansion.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
The `set -euo pipefail` in install-operator.sh propagates to sourced
.definitions.sh where `${DEBUG}` is used without a default value.
Use `${DEBUG:-}` for safe expansion under nounset.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
- Use least-privilege secrets in ci.yaml: enumerate specific secrets
  for e2e-tests instead of secrets:inherit; remove secrets:inherit
  from release job (only uses automatic GITHUB_TOKEN)
- Add permissions (contents:read, id-token:write) to
  forward-compatibility run-e2e-tests job
- Enumerate secrets in forward-compatibility.yaml for consistency
- Fix container-toolkit GitHub repo name (NVIDIA/nvidia-container-toolkit)
- Fix mig-manager GitHub repo name (NVIDIA/mig-parted, not k8s-mig-manager)
- Replace yq-based YAML merge with Helm native multi-file values
  (-f file1 -f file2) since remote test machines lack yq
- Pass OPERATOR_OPTIONS in values-file helm install path to avoid
  silently dropping test-case-specific flags

Co-authored-by: Rajath Agasthya <rajathagasthya@users.noreply.github.com>
Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
…stributions

Signed-off-by: Frederic Crozat <fcrozat@suse.com>
…olm-bundle

fix: use multi-arch digest for kubevirt-dp instead of amd64 digest
mount /lib/modules from host when using precompiled driver
… errorprone

Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
store os release name and use it than recalculating from tag which is errorprone
The use of this variable has been obsoleted in k8s-cc-manager,
hence removing the variable from values.yaml

Signed-off-by: Manuel Huber <manuelh@nvidia.com>
Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>
Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>
(cherry picked from commit 80300ee)
add support for gpu driver 595.58.03
Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>
[R595] fix driver image entries in clusterserviceversion manifest
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 4.3.1 to 5.0.0.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@v4.3.1...v5.0.0)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/azure/setup-helm-5.0.0 branch from e802dd1 to 69a03b5 Compare April 9, 2026 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants