helmsnap 2.1.1 → 2.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 134cce8d5f91b94af2dbd9732af2adf6d6ebb7efb05b87432ec4c988e3daab88
-  data.tar.gz: cf9efa208a10c3108a174908a0401a2b6b9f1c30e7dae858896dd3a4b842452a
+  metadata.gz: 8adeb92708c24dbb21d540db523763c373082cdd7bd8fb858acc7c3e96e886f9
+  data.tar.gz: 7198095d5beb7bb1de0575e845025ca94da8418217cbe05da8e9a1173c26d095
 SHA512:
-  metadata.gz: 66b422d0e5d1dc6931bfdde666c8a916e11c0e8e7e1b63832fdea15653dee521cefb44e92f9a6ab473911fd241119ff20cc273202befb3ef387bc1feee51507e
-  data.tar.gz: f6f565fb2b0f8b1fbd99f05e1187283cff8d8fb04f4bd503cb13b98f3b4b29a64a3742786bf38461ddb7c6f92a6d551eb1826f79c8bdeade0778402a8eb06c4b
+  metadata.gz: 5824dee4d33d05516e563d7475285fd5de9d3de27d21850410ca5680752fa20741bae4ad27801c332af031fc7c42c545c7d40817332d6877ff4dc0aa70b707df
+  data.tar.gz: 484dafc35896c1f688e9b836ded1a54905aef43a2178ae7355e623115c723bf8684e968511806fd2515bf7213b3a90f67edd42ecc60bbd239c9db092b1531c8b

data/README.md

@@ -55,7 +55,13 @@ You can also override configuration file location using `--config` option.
 
 ## Dependencies
 
-- Ruby 3.0+.
+The Docker runtime pins Helm 4.3.0 and Helmfile 1.8.1 by version and immutable multi-architecture image digest. For example, `helm version --short` reports `v4.3.0` and `helmsnap --version` reports the packaged library version. Runtime builds copy only the gem specification, library, executable and public documentation; they do not depend on Git metadata or include checkout credentials and local dependency caches.
+
+Helm 4.3 supports Kubernetes 1.34–1.37 according to [Helm's version policy](https://helm.sh/docs/topics/version_skew/). Rendering local chart snapshots does not establish compatibility with an older live API server. The [upgrade sequence](https://github.com/zapravila-org/mevbot/issues/2183) must supply its separately verified compatible client and cluster-version gate before live operations on earlier versions.
+
+The Docker build refreshes Alpine packages before adding runtime dependencies. The Docker workflow checks packaged tool versions and scans the loaded image with Trivy 0.75.0 against the current vulnerability database before publication. HIGH and CRITICAL findings, including those without a published fix, fail the job; lower severities remain visible but do not block it. Branches and pull requests run the checks, and only a push to `master` publishes the workflow image. The separate release workflow preserves versioned gem/image publication. `bundle exec rake` checks the library, packaging from a source tree without Git, and Ruby style.
+
+- Ruby 3.3+.
 - [Helmfile](https://github.com/roboll/helmfile), which in turn relies on [Helm](https://github.com/helm/helm).
 - Colordiff or diff utility.
 

data/lib/helmsnap/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Helmsnap
-  VERSION = "2.1.1"
+  VERSION = "2.1.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: helmsnap
 version: !ruby/object:Gem::Version
-  version: 2.1.1
+  version: 2.1.2
 platform: ruby
 authors:
 - Yuri Smirnov
@@ -30,17 +30,8 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- ".dockerignore"
-- ".rspec"
-- ".rubocop.yml"
-- Dockerfile
-- Gemfile
-- Gemfile.lock
 - LICENSE.txt
 - README.md
-- Rakefile
-- bin/console
-- bin/setup
 - exe/helmsnap
 - lib/helmsnap.rb
 - lib/helmsnap/args_parser.rb

data/.dockerignore

@@ -1,8 +0,0 @@
-/.bundle/
-/.yardoc
-/_yardoc/
-/coverage/
-/doc/
-/pkg/
-/spec/reports/
-/tmp/

data/.rspec

@@ -1,3 +0,0 @@
---format documentation
---color
---require spec_helper

data/.rubocop.yml

@@ -1,17 +0,0 @@
-inherit_gem:
-  rubocop-config-umbrellio: lib/rubocop.yml
-
-AllCops:
-  DisplayCopNames: true
-  TargetRubyVersion: 3.3
-  Include:
-    - bin/console
-    - Gemfile
-    - helmsnap.gemspec
-    - Rakefile
-    - lib/**/*
-    - spec/**/*
-    - gemfile/**/*
-  Exclude:
-    - vendor/**/*
-    - gemfiles/**/*

data/Dockerfile

@@ -1,13 +0,0 @@
-FROM alpine/helm:4
-
-RUN apk add --update --no-cache ruby git colordiff
-
-WORKDIR /wd
-
-COPY --from=ghcr.io/helmfile/helmfile:v1.5.2  /usr/local/bin/helmfile /usr/local/bin/helmfile
-COPY . .
-
-RUN gem install colorize && gem build && gem install helmsnap --local
-
-ENTRYPOINT []
-CMD []

data/Gemfile

@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-
-source "https://rubygems.org"
-
-gemspec
-
-gem "logger"
-gem "pry"
-gem "rake"
-gem "rspec"
-gem "rubocop"
-gem "rubocop-config-umbrellio"

data/Gemfile.lock

@@ -1,141 +0,0 @@
-PATH
-  remote: .
-  specs:
-    helmsnap (2.1.1)
-      colorize (~> 1.1)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activesupport (8.1.3)
-      base64
-      bigdecimal
-      concurrent-ruby (~> 1.0, >= 1.3.1)
-      connection_pool (>= 2.2.5)
-      drb
-      i18n (>= 1.6, < 2)
-      json
-      logger (>= 1.4.2)
-      minitest (>= 5.1)
-      securerandom (>= 0.3)
-      tzinfo (~> 2.0, >= 2.0.5)
-      uri (>= 0.13.1)
-    ast (2.4.3)
-    base64 (0.3.0)
-    bigdecimal (4.1.2)
-    coderay (1.1.3)
-    colorize (1.1.0)
-    concurrent-ruby (1.3.6)
-    connection_pool (3.0.2)
-    diff-lcs (1.6.2)
-    drb (2.2.3)
-    i18n (1.14.8)
-      concurrent-ruby (~> 1.0)
-    io-console (0.8.2)
-    json (2.19.7)
-    language_server-protocol (3.17.0.5)
-    lint_roller (1.1.0)
-    logger (1.7.0)
-    method_source (1.1.0)
-    minitest (6.0.6)
-      drb (~> 2.0)
-      prism (~> 1.5)
-    parallel (1.28.0)
-    parser (3.3.11.1)
-      ast (~> 2.4.1)
-      racc
-    prism (1.9.0)
-    pry (0.16.0)
-      coderay (~> 1.1)
-      method_source (~> 1.0)
-      reline (>= 0.6.0)
-    racc (1.8.1)
-    rack (3.2.6)
-    rainbow (3.1.1)
-    rake (13.4.2)
-    regexp_parser (2.12.0)
-    reline (0.6.3)
-      io-console (~> 0.5)
-    rspec (3.13.2)
-      rspec-core (~> 3.13.0)
-      rspec-expectations (~> 3.13.0)
-      rspec-mocks (~> 3.13.0)
-    rspec-core (3.13.6)
-      rspec-support (~> 3.13.0)
-    rspec-expectations (3.13.5)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.13.0)
-    rspec-mocks (3.13.8)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.13.0)
-    rspec-support (3.13.7)
-    rubocop (1.84.2)
-      json (~> 2.3)
-      language_server-protocol (~> 3.17.0.2)
-      lint_roller (~> 1.1.0)
-      parallel (~> 1.10)
-      parser (>= 3.3.0.2)
-      rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 2.9.3, < 3.0)
-      rubocop-ast (>= 1.49.0, < 2.0)
-      ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 2.4.0, < 4.0)
-    rubocop-ast (1.49.1)
-      parser (>= 3.3.7.2)
-      prism (~> 1.7)
-    rubocop-config-umbrellio (1.84.118)
-      rubocop (~> 1.84.0)
-      rubocop-factory_bot (~> 2.28.0)
-      rubocop-performance (~> 1.26.0)
-      rubocop-rails (~> 2.34.0)
-      rubocop-rake (~> 0.7.0)
-      rubocop-rspec (~> 3.9.0)
-      rubocop-sequel (~> 0.4.0)
-    rubocop-factory_bot (2.28.0)
-      lint_roller (~> 1.1)
-      rubocop (~> 1.72, >= 1.72.1)
-    rubocop-performance (1.26.1)
-      lint_roller (~> 1.1)
-      rubocop (>= 1.75.0, < 2.0)
-      rubocop-ast (>= 1.47.1, < 2.0)
-    rubocop-rails (2.34.3)
-      activesupport (>= 4.2.0)
-      lint_roller (~> 1.1)
-      rack (>= 1.1)
-      rubocop (>= 1.75.0, < 2.0)
-      rubocop-ast (>= 1.44.0, < 2.0)
-    rubocop-rake (0.7.1)
-      lint_roller (~> 1.1)
-      rubocop (>= 1.72.1)
-    rubocop-rspec (3.9.0)
-      lint_roller (~> 1.1)
-      rubocop (~> 1.81)
-    rubocop-sequel (0.4.1)
-      lint_roller (~> 1.1)
-      rubocop (>= 1.72.1, < 2)
-    ruby-progressbar (1.13.0)
-    securerandom (0.4.1)
-    tzinfo (2.0.6)
-      concurrent-ruby (~> 1.0)
-    unicode-display_width (3.2.0)
-      unicode-emoji (~> 4.1)
-    unicode-emoji (4.2.0)
-    uri (1.1.1)
-
-PLATFORMS
-  arm64-darwin
-  ruby
-  x86_64-darwin
-  x86_64-linux
-
-DEPENDENCIES
-  helmsnap!
-  logger
-  pry
-  rake
-  rspec
-  rubocop
-  rubocop-config-umbrellio
-
-BUNDLED WITH
-  4.0.12

data/Rakefile

@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-require "rubocop/rake_task"
-
-RuboCop::RakeTask.new
-
-task default: %i[spec rubocop]

data/bin/console

@@ -1,11 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require "bundler/setup"
-require "helmsnap"
-
-# You can add fixtures and/or initialization code here to make experimenting
-# with your gem easier. You can also use a different console, if you like.
-
-require "pry"
-Pry.start

data/bin/setup

@@ -1,8 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-IFS=$'\n\t'
-set -vx
-
-bundle install
-
-# Do any other automated setup that you need to do here