Aggregated dep updates

.github/workflows/ci.yaml

@@ -10,21 +10,17 @@ permissions: read-all
 jobs:
   lint:
     runs-on: ubuntu-22.04
-    container: ghcr.io/chgl/kube-powertools:v2.1.31@sha256:3c0e9cda457f9f6ed3d1ea51a02d54893f53074d98da7469c0da9d28fbbc69b5
+    container: ghcr.io/chgl/kube-powertools:v2.2.17@sha256:4f1aaaf3b01e7fabca46e66392de838b1722b2065dec108bc4ed1c1c6a9407a5
     steps:
       - name: Add workspace as safe directory
         run: |
           git config --global --add safe.directory /__w/charts/charts
 
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
 
-      # via <https://github.com/helm/chart-testing/issues/577>
-      - run: |
-          git branch "master" "origin/master"
-
       - name: Check if documentation is up-to-date
         run: |
           generate-docs.sh
@@ -63,12 +59,12 @@ jobs:
         k8s-version: [1.25.11, 1.26.6, 1.27.3, 1.28.0]
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Run chart-testing (list-changed)
         id: list-changed
@@ -79,7 +75,7 @@ jobs:
           fi
 
       - name: Create k8s Kind Cluster
-        uses: helm/kind-action@fa81e57adff234b2908110485695db0f181f3c67 # v1.7.0
+        uses: helm/kind-action@dda0770415bac9fc20092cacbc54aa298604d140 # v1.8.0
         if: ${{ steps.list-changed.outputs.changed == 'true' }}
         with:
           cluster_name: kind-cluster-k8s-${{ matrix.k8s-version }}

.github/workflows/release.yaml

@@ -1,6 +1,6 @@
 name: Release Charts
 
 on:
   push:
     branches:
       - master
@@ -13,7 +13,7 @@
 jobs:
   release:
     runs-on: ubuntu-22.04
-    container: ghcr.io/chgl/kube-powertools:v2.1.31@sha256:3c0e9cda457f9f6ed3d1ea51a02d54893f53074d98da7469c0da9d28fbbc69b5
+    container: ghcr.io/chgl/kube-powertools:v2.2.17@sha256:4f1aaaf3b01e7fabca46e66392de838b1722b2065dec108bc4ed1c1c6a9407a5
     permissions:
       contents: write
       packages: write
@@ -24,7 +24,7 @@
           git config --global --add safe.directory /__w/charts/charts
 
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
 
@@ -45,7 +45,7 @@
         run: generate-chart-changelog.sh
 
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0
+        uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         with:
           config: .github/ct/ct.yaml
         env:

.github/workflows/scorecards.yaml

@@ -3,7 +3,7 @@
 # policy, and support documentation.
 
 name: Scorecards supply-chain security
 on:
   # For Branch-Protection check. Only the default branch is supported. See
   # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
   branch_protection_rule:
@@ -32,12 +32,12 @@
 
     steps:
       - name: "Checkout code"
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@483ef80eb98fb506c348f7d62e28055e49fe2398 # v2.3.0
+        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
         with:
           results_file: results.sarif
           results_format: sarif
@@ -59,7 +59,7 @@
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
         uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: SARIF file
           path: results.sarif
@@ -67,6 +67,6 @@
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2.21.9
+        uses: github/codeql-action/upload-sarif@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2.22.5
         with:
           sarif_file: results.sarif

README.md

@@ -33,7 +33,7 @@ helm repo update
 1. Mount the folder in the [kube-powertools](https://github.com/chgl/kube-powertools) container to easily run linters and checks
 
    ```sh
-   docker run --rm -it -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.1.31
+   docker run --rm -it -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.2.17
    ```
 
 1. Run chart-testing and the `chart-powerlint.sh` script to lint the chart
@@ -45,7 +45,7 @@ helm repo update
 1. (Optional) View the results of the [polaris audit check](https://github.com/FairwindsOps/polaris) in your browser
 
    ```sh
-   $ docker run --rm -it -p 9090:8080 -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.1.31
+   $ docker run --rm -it -p 9090:8080 -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.2.17
    bash-5.0: helm template charts/fhir-gateway/ | polaris dashboard --config .polaris.yaml --audit-path -
    ```
 

charts/blaze/Chart.yaml

@@ -12,7 +12,7 @@ maintainers:
   - name: miracum
 deprecated: false
 kubeVersion: ">= 1.19.0"
-version: 0.3.5
+version: 0.3.6
 appVersion: "0.x"
 annotations:
   artifacthub.io/license: Apache-2.0
@@ -24,9 +24,5 @@ annotations:
   # When using the list of objects option the valid supported kinds are
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
-    - kind: changed
-      description: updated ghcr.io/samply/blaze image tag to v0.22.3
-    - kind: changed
-      description: update docker.io/curlimages/curl docker tag to v8.4.0
     - kind: changed
       description: refreshed docs with latest helm-docs

charts/blaze/README.md

@@ -58,4 +58,4 @@ helm install blaze oci://ghcr.io/miracum/charts/blaze -n blaze
 
 ---
 
-Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
+Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)

charts/cloudera-hue/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
     version: 12.5.6
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql.enabled
-version: 0.1.4
+version: 0.1.5
 appVersion: "4.11.0"
 annotations:
   artifacthub.io/license: Apache-2.0
@@ -30,7 +30,5 @@ annotations:
   # When using the list of objects option the valid supported kinds are
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
-    - kind: changed
-      description: update docker.io/curlimages/curl docker tag to v8.4.0
     - kind: changed
       description: refreshed docs with latest helm-docs

charts/cloudera-hue/README.md

@@ -1,6 +1,6 @@
 # cloudera-hue
 
-![Version: 0.1.4](https://img.shields.io/badge/Version-0.1.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.11.0](https://img.shields.io/badge/AppVersion-4.11.0-informational?style=flat-square)
+![Version: 0.1.5](https://img.shields.io/badge/Version-0.1.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.11.0](https://img.shields.io/badge/AppVersion-4.11.0-informational?style=flat-square)
 
 A Helm chart for deploying Cloudera Hue.
 
@@ -84,4 +84,4 @@ Kubernetes: `>= 1.19.0`
 
 ---
 
-Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
+Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)

charts/datashield/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     condition: postgresql.enabled
 deprecated: false
 kubeVersion: ">= 1.19.0"
-version: 0.5.3
+version: 0.5.4
 annotations:
   artifacthub.io/license: Apache-2.0
   artifacthub.io/containsSecurityUpdates: "false"
@@ -31,9 +31,5 @@ annotations:
   # When using the list of objects option the valid supported kinds are
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
-    - kind: changed
-      description: update docker.io/curlimages/curl docker tag to v8.4.0
     - kind: changed
       description: refreshed docs with latest helm-docs
-    - kind: changed
-      description: updated docker.io/obiba/opal:4.6 image digest to 79782ac

charts/datashield/README.md

@@ -97,4 +97,4 @@ helm install --create-namespace -n datashield datashield oci://ghcr.io/miracum/c
 
 ---
 
-Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
+Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)

charts/fhir-gateway/Chart.yaml

@@ -14,14 +14,12 @@ dependencies:
     condition: fhir-pseudonymizer.enabled
     version: 0.5.6
     repository: oci://ghcr.io/miracum/charts
-version: 6.0.19
+version: 6.0.20
 annotations:
   # When using the list of objects option the valid supported kinds are
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: update docker.io/curlimages/curl docker tag to v8.4.0
+      description: update ghcr.io/miracum/fhir-gateway docker tag to v3.12.6
     - kind: changed
-      description: refreshed docs with latest helm-docs
-    - kind: changed
-      description: fixed missing seccompProfile in initContainer
+      description: switch to ghcr.io image from miraucm harbor for loincConverter