@leverege/build-tools 2.100.1-quinn.2 → 2.101.1

package/.vscode/launch.json

@@ -18,6 +18,26 @@
       },
       "outputCapture": "std"
     },
+    {
+      "name": "docker-to-registry pubsub-pulse",
+      "type": "node",
+      "request": "launch",
+      "program": "${workspaceFolder}/src/docker-to-registry.mjs",
+      "args": ["v4.2.1-debug.1"],
+      "cwd": "/Users/john/Work/leverege/cicd/@srv/pubsub-pulse",
+      "runtimeExecutable": "node",
+      "console": "integratedTerminal"
+    },
+    {
+      "name": "docker-to-registry pitcrew-vision",
+      "type": "node",
+      "request": "launch",
+      "program": "${workspaceFolder}/src/docker-to-registry.mjs",
+      "args": ["v1.9.13-john.1"],
+      "cwd": "/Users/john/Work/leverege/cicd/@pit/pitcrew-vision-logic-server",
+      "runtimeExecutable": "node",
+      "console": "integratedTerminal"
+    },
     {
       "name": "overwhelm tst-dense",
       "type": "node",

package/README.md

@@ -1,79 +1,353 @@
 # Leverege Build Tools
 
-A collection of build / support tools for all Leverege code. 
+A collection of build, deployment, and infrastructure tools for the Leverege platform.
 
 ## Installing
 
-Install build-tools
+```bash
+npm install -g @leverege/build-tools
+```
+
+## Prerequisites
+
+Most tools assume the following are installed and configured:
+
+- `gcloud` (authenticated, with appropriate project access)
+- `kubectl` (with a valid cluster context)
+- `helm` (v3+)
+- `fzf` (for interactive pod selection in `k8x` and `klog`)
+- Node.js 22+
+
+---
+
+## Tools
 
+### Core
+
+**`build-tools`** — Utility for locating the build-tools installation and exposing shared bash functions.
+```bash
+build-tools --bashfun      # output path to bash-funcs for sourcing
+build-tools --reporoot     # print the repo root path
+build-tools --version      # print installed version
 ```
-npm install -g @leverege/build-tools
+
+**`bash-funcs`** — Shared bash function library. Source it in any shell script:
+```bash
+. `build-tools --bashfun`
+```
+Provides: `color()`, `errorExit()`, `warnOnError()`, `exitOnError()`, `generatePassword()`,
+`showInstalling()`, `bindWorkloadIdentity()`, `createNamespaceIfNeeded()`, `waitForSA()`,
+`waitForIAM()`, `ifPluggedIn()`, and more.
+
+---
+
+### Helm & Kubernetes Deployment
+
+**`helmup`** — Context-safe Helm deployment tool. Installs or upgrades one or more services.
+```bash
+helmup <service> [service...]   # deploy one or more services
+helmup platform                 # deploy all platform services
+helmup system                   # deploy all system services
+```
+Aliases: `helmboot` (rerun bootstrap), `helmcycle` (down then up), `helminit` (clean reinstall),
+`helmwhat` (dry run). Handles workload identity binding, namespace creation, SA creation via
+service-man, and GCS bucket setup automatically.
+
+**`helmdn`** — Uninstalls Helm releases. Requires confirmation before proceeding.
+```bash
+helmdn <service> [service...]
+```
+
+**`overwhelm`** — Kubernetes context validator and YAML template processor. The configuration
+backbone of helmup — replaces `${VARIABLE}` placeholders in `.ovh` files, validates the active
+k8s context, and generates `values.yaml` files.
+```bash
+overwhelm --genvals            # generate values.yaml from values-local.yaml
+overwhelm --context            # print the current k8s context
+```
+
+**`helm-audit`** — Displays all deployed Helm releases with chart versions, app versions,
+and deployed image tags. Highlights version mismatches.
+```bash
+helm-audit
+```
+
+**`chart-compass`** — Locates Helm charts in GCP Artifact Registry for use by helmup.
+```bash
+chart-compass --service <name>
+chart-compass --init           # generate chart-compass.yaml
+```
+
+**`init-my-chart`** — Initializes a new Helm chart from Leverege leaf chart templates,
+or upgrades an existing chart to the current template structure.
+```bash
+init-my-chart [--dry-run] [--debug]
+```
+
+**`chart-to-registry`** — Pushes Helm charts to GCP Artifact Registry with version
+checking and dependency resolution.
+```bash
+chart-to-registry --chart <dir> [--project <id>] [--repository <name>] [--force] [--dry-run]
+```
+
+**`push-my-chart`** — Publishes Helm charts to both GCS Chartmuseum (legacy) and
+GCP Artifact Registry.
+```bash
+push-my-chart [--chart <dir>] [--no-registry]
+```
+
+---
+
+### Service & Infrastructure Management
+
+**`service-man`** — Manages GCP service accounts, IAM roles, and secrets for Kubernetes
+cluster bootstrapping. Runs during `helmup` for each service, and standalone for initial
+cluster setup.
+```bash
+service-man --create-service <name>   # create SA, IAM roles, and k8s SA
+service-man --setup-secrets           # write all secrets to GCP Secret Manager
+                                      # and apply ESO ExternalSecrets
+service-man --setup-roles             # bind IAM roles
+service-man --fetch-versions          # display deployed service versions
+service-man --sync-secrets <sm>=<k8s> # sync SM secret to k8s (legacy)
 ```
+Secrets are defined as JSON files in `src/service-man/config/secrets/`. See the
+[Secrets README](src/service-man/config/secrets/README.md) for the full format reference.
 
-## Tool Descriptions
+---
 
-### General Tools:
-* **build-tools**: a command to get the root of this repo, a latest version check, or bash functions to source
-* **bash-funcs**: handy set of commonly used bash function that can be sourced by adding this to a script:
+### Docker Image Management
+
+**`docker-to-registry`** — Builds and pushes Docker images (Node.js/general) to GCP
+Artifact Registry with git tagging.
 ```bash
-  . `build-tools --bashfun`
+docker-to-registry <version>          # e.g. docker-to-registry v1.2.3
+docker-to-registry latest             # beta build — any non-semver version skips git tagging
+docker-to-registry v1.2.3 --dry-run  # skip confirmation prompt
+docker-to-registry guide-me          # print helm/registry migration guidance
 ```
-* **docker-to-registry**: used to build and deploy application docker images to the GCP artifact registry
-* **pull-artifact**: used to pull generic artifacts from the GCP artifact registry
+
+**`build-cnpg-image`** — Builds a custom CloudNative PostgreSQL image with jsquery and
+timescaledb extensions using GCP Cloud Build.
 ```bash
-Usage: pull-artifact -f <artifact schema file path> -n <package name> -v <package version>
+build-cnpg-image <sub-tag> [--pg-version <version>]
+# e.g. build-cnpg-image final --pg-version 17.6
 ```
-* **push-artifact**: used to push generic artifacts to the GCP artifact registry
+
+---
+
+### Database & Snapshot Management
+
+**`snapshot-cnpg`** — Creates a volumeSnapshot backup of a CNPG cluster.
 ```bash
-Usage: push-artifact -f <artifact schema file path> -n <package name> -v <package version>
+snapshot-cnpg <cluster-name>
 ```
 
-### Helm Helpers:
-* **overwhelm**: a k8s context helper and yaml replacer *${REPLACE_ME}*
-* **helmup**: a context safe helm deployment tool
-* **helmdn**: a destroyer of helm deployments (danger zone)
-* **helm-audit** : fetch and display deployed service chart and application versions
+**`clone-cnpg-from-snapshot`** — Clones a CNPG database cluster from a snapshot,
+optionally across GCP projects or regions. Generates YAML and scripts; requires
+`--execute` for real operations.
+```bash
+clone-cnpg-from-snapshot \
+  --snapshot <name> \
+  --source-project <proj> \
+  --dest-project <proj> \
+  --dest-region <region> \
+  [--execute] [--dry-run] [--cleanup]
+```
 
-### Kubernetes Helpers:
-* **k8x**: a script to help run commands on active pods in a k8s cluster
+**`gcp-snapshots`** — Lists or deletes old GCP VM/disk snapshots.
 ```bash
-Usage: k8x [target] where target can be one of the following or omitted for bash
-  cnpg       - run bash on a cloudnative-pg cluster node
-  es8        - run bash on an elasticsearch8 node
-  grafana    - run bash on grafana in prometheus operator namespace
-  grafold    - run bash on grafana in legacy monitor namespace
-  prometheus - run bash on prometheus operator server
-  psql       - run psql on a legacy database node
-  redis      - run redis-cli on a redis master/replica
-  valkey     - run valkey-cli on a valkeymaster/replica
+gcp-snapshots --project <id> [--age <days>] [--list|--delete]
+# default age threshold: 180 days
+```
 
-  help       - this right here
+---
+
+### Kubernetes Utilities
+
+**`k8x`** — Opens an interactive shell (or specific CLI) on a running pod, with fuzzy
+finder support for pod selection. Requires `fzf`.
+```bash
+k8x               # open bash on any pod (fuzzy select)
+k8x cnpg          # bash on a cnpg cluster node
+k8x es8           # bash on an elasticsearch8 node
+k8x grafana       # bash on grafana
+k8x prometheus    # bash on prometheus
+k8x redis         # redis-cli on redis master
+k8x valkey        # valkey-cli on valkey master
 ```
-* **k8scale**: a script for scaling deployed services
+
+**`k8scale`** — Scales Kubernetes deployments or performs rolling restarts.
 ```bash
-Usage: k8scale <up|dn|down|roll> [services]
-  dn|down - scales a service to zero pods
-  up      - allows service to scale up to minReplicas
-  roll    - performs a rolling restart of pods in a service
+k8scale up [services]    # scale up to minReplicas
+k8scale dn [services]    # scale down to zero
+k8scale roll [services]  # rolling restart
 ```
-* **klog**: tails the logs of the specified service
 
+**`klog`** — Streams logs from a pod with pino-pretty formatting. Saves to a timestamped
+log file. Requires `fzf` for interactive selection.
+```bash
+klog                     # fuzzy-select pod and stream logs
+klog <app-name>          # stream logs for named app
+klog <app-name> <ns>     # specify namespace
+```
 
-### Git Helpers:
-* **git-tar**: a git safety net which is described [here on github](https://github.com/jphelps413/git-tar)
-* **dirty-git**: feed it a list of directories and it will show which are locally modified or stashed.
-* **prune-git**: performs maintenance on a list of git repositories.
-* **pull-git**: walks a list of git repos, pulling each if they are clean.
+---
 
-### Troubleshooting:
+### Artifact Management
 
-For additional debug level logging, set the environment variable `BUILD_TOOLS_DEBUG=1` before running the tool.
+**`pull-artifact`** — Pulls generic artifacts from GCP Artifact Registry based on an
+`artifacts.yaml` spec file.
+```bash
+pull-artifact [-f <spec-file>] [-n <name>] [-v <version>]
+```
 
-Example:
+**`push-artifact`** — Pushes generic artifacts to GCP Artifact Registry.
+```bash
+push-artifact [-f <spec-file>] [-n <name>] [-v <version>]
+```
+
+---
+
+### Package & Release Management
+
+**`hook-and-release`** — Manages git pre-commit hooks and version consistency for npm
+package releases. Runs automatically as the npm `prepare` lifecycle hook.
+
+**`prepack`** — Pre-publication build step that compiles code and creates git tags.
+```bash
+prepack [--compile] [--manual-tag] [--force-tag] [--push-tag]
+```
+
+**`refresh-npm-token`** — Refreshes the Leverege npm registry token from GCP Secret
+Manager, updating `.npmrc` / `.yarnrc.yml`. Skips refresh if the token is less than
+24 hours old.
+```bash
+refresh-npm-token [--project <id>] [--force] [--dry-run]
+```
+
+**`pkgck`** — Checks for common package configuration issues (babel, eslint, circleci,
+dockerfile, etc.) with visual pass/fail indicators.
+```bash
+pkgck
+```
+
+**`pkglint`** — Verifies required documentation files (README.md, LICENSE.md) are
+present before publishing.
+```bash
+pkglint
+```
+
+**`generate-docs`** — Generates JSDoc API documentation from source files.
+```bash
+generate-docs
+```
+
+**`count-lines-of-code`** — Counts lines of code in a project or monorepo workspaces.
+```bash
+count-lines-of-code [--src-only]
+```
+
+---
+
+### CI/CD Integration
+
+**`circle-orb-it`** — Installs or updates CircleCI configuration (Leverege orb) and
+GitHub Dependabot settings for a repository. Preserves existing customizations.
+```bash
+circle-orb-it [--dry-run] [--debug]
+```
+
+**`send-to-slack`** — Sends messages to a Slack channel, retrieving the webhook URL
+from GCP Secret Manager.
+```bash
+send-to-slack --project <id> --config <secret-name> --message <text> [--dry-run]
+```
+
+---
+
+### Git Utilities
+
+**`dirty-git`** — Shows the status of multiple git repositories (clean/dirty/stashed/unpushed).
+```bash
+dirty-git <dir1> [dir2] ...
+```
+
+**`prune-git`** — Garbage-collects and prunes remote branch references in clean repositories.
+```bash
+prune-git <dir1> [dir2] ...
+```
+
+**`pull-git`** — Pulls latest changes in clean repositories, skipping dirty ones.
+```bash
+pull-git <dir1> [dir2] ...
+```
+
+**`git-tar`** — Creates a tarball of a git repository with exclusion list support.
+```bash
+git-tar    # run from within the repository
+```
+
+---
+
+### Secrets & Encryption
+
+**`encrypt-secrets`** — Encrypts `.env` and `secrets/` directory using GCP KMS.
+```bash
+encrypt-secrets
+```
+
+**`decrypt-secrets`** — Decrypts KMS-encrypted files, restoring `.env` and `secrets/`.
+```bash
+decrypt-secrets
+```
+
+---
+
+### Helm Charts
+
+The `src/helm-charts/` directory contains bootstrapped chart configurations for all
+platform, auxiliary, and system services. Each chart directory may contain:
+
+- `helmup.bootstrap` — one-time setup script run on first deploy (SA creation, IAM, secrets)
+- `helmup.plugin` — helm install/upgrade logic
+- `helmdn.plugin` — teardown logic
+- `*.yaml.ovh` — overwhelm-processed Kubernetes manifests
+- `values-*.yaml` — helm values overrides
+
+**Platform services:** api-server, authz-server, db-curator, emailer, imagine,
+message-processor, messenger, reason, resource-server, rule-engine, scheduler,
+transponders (bq/dh/rt/tsdb)
+
+**Auxiliary services:** argocd, fota-server, geotile-server, pgbouncer, pubsub-pulse,
+push-notifier, pusher, vin-decoder-server
+
+**System services:** cnpg-operator, cnpg-db-psql-stack, cnpg-db-tsdb-basic,
+cnpg-db-tsdb-dense, elasticsearch8, eso, prom-operator, traefik, valkey, velero, pg-repack
+
+---
+
+## Configuration
+
+For additional debug logging, set `BUILD_TOOLS_DEBUG=1`:
 ```bash
 BUILD_TOOLS_DEBUG=1 docker-to-registry
 ```
 
+---
+
+## Deprecated Tools
+
+| Tool | Replacement |
+|------|-------------|
+| `docker-to-registry-py` | `docker-to-registry` |
+| `chart-to-museum` | `push-my-chart` |
+| `refresh-py-idx` | No longer needed |
+| `k8cryo` | `snapshot-cnpg` / `clone-cnpg-from-snapshot` |
+| `reflector` (helm) | ESO ExternalSecrets |
+
+---
+
 ## Authors
 
 * **DevOps and Friends**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.100.1-quinn.2",
+  "version": "2.101.1",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -16,6 +16,7 @@
     "prepack": "npm exec prepack"
   },
   "bin": {
+    "build-and-push": "src/build-and-push.sh",
     "build-cnpg-image": "src/build-cnpg-image.mjs",
     "build-tools": "src/build-tools.mjs",
     "change-up": "src/change-up.sh",
@@ -29,6 +30,7 @@
     "dirty-git": "src/dirty-git.sh",
     "docker-to-registry": "src/docker-to-registry.mjs",
     "docker-to-registry-py": "src/docker-to-registry-py.mjs",
+    "docker-to-registry.sh": "src/docker-to-registry.sh",
     "dockreate": "src/dockreate.sh",
     "encrypt-secrets": "src/encrypt-secrets.sh",
     "firebaseDeploy": "src/firebaseDeploy.mjs",
@@ -46,7 +48,7 @@
     "helmup": "src/helmup.sh",
     "helmwhat": "src/helmup.sh",
     "hook-and-release": "src/hook-and-release.mjs",
-    "init-my-chart": "src/init-my-chart.mjs",
+    "init-my-chart": "src/init-my-chart/init-my-chart.mjs",
     "k8scale": "src/k8scale.sh",
     "k8x": "src/k8x.sh",
     "klog": "src/klog.sh",
@@ -92,7 +94,7 @@
     "googleapis": "^171.4.0",
     "handlebars": "^4.7.9",
     "ignore": "^7.0.5",
-    "inquirer": "^13.3.2",
+    "inquirer": "^13.4.1",
     "js-yaml": "^4.1.1",
     "jsdoc": "^4.0.5",
     "ms": "^2.1.3",
@@ -103,7 +105,7 @@
     "readline-sync": "^1.4.10",
     "semver": "^7.7.4",
     "shell-quote": "^1.8.3",
-    "simple-git": "^3.33.0",
+    "simple-git": "^3.36.0",
     "sloc": "^0.3.2",
     "superstruct": "^2.0.2",
     "tmp": "^0.2.5",

package/src/Docker.mjs

@@ -9,6 +9,7 @@ import handlebars from 'handlebars'
 import {
   errorExit,
   getCleanTag,
+  getDateTimestamp,
   getGcpAccount,
   log,
   proceed,
@@ -25,7 +26,7 @@ const DIRNAME = path.dirname( url.fileURLToPath( import.meta.url ) )
 // See the latest docker images here => https://hub.docker.com/_/node
 //
 const dockerfileNodeVersion = process.env.DOCKER_BUILD_NODE_VERSION || '24.14.0-alpine3.23'
-const dockerfileNpmVersion = process.env.DOCKER_BUILD_NPM_VERSION || '11.9.0'
+const dockerfileNpmVersion = process.env.DOCKER_BUILD_NPM_VERSION || '11.12.0'
 
 // The contents of these variables were initially located in files that live in
 // the build-tools repository, but it just became simpler to pull the contents
@@ -59,8 +60,9 @@ const cloudBuildStepsMultiArch = fs.readFileSync( path.join( DIRNAME, './templat
 
 const defaultSettings = {
   apkadds : '',
-  nodeimage : 'jod-alpine',
+  date : getDateTimestamp(),
   imageBase : 'node:jod-alpine',
+  nodeimage : 'jod-alpine',
   npmlogging : process.env.VERBOSE_NPM_LOGGING ? '--ddd' : '--silent',
   npmVersion : `npm@${dockerfileNpmVersion}`,
   pluginfile : '# NO PLUGIN',
@@ -184,7 +186,8 @@ const buildContainerImage = async ( repoDescr ) => {
   const {
     artifactProject,
     artifactRegistry,
-    containerName, 
+    containerName,
+    dryRun,
     imagePlatform,
     imageVersion,
     isNodeJsProject,
@@ -242,7 +245,10 @@ const buildContainerImage = async ( repoDescr ) => {
 
   const { fullName } = await getGcpAccount()
   const imageBuilder = getCleanTag( fullName )
-  const imageInfoTag = `zzinfo_${defaultSettings.date}_${defaultSettings.nodeimage}_${imageBuilder}`
+  // TODO: this is a bit of a band-aid to get something working while we sort out the
+  // the best way to handle python versions and base images
+  const buildImage = isPythonProject ? 'python-3.12-slim' : defaultSettings.nodeimage
+  const imageInfoTag = `zzinfo_${defaultSettings.date}_${buildImage}_${imageBuilder}`
   const gcloudProjectNumber = await shellCmd( `gcloud projects describe ${artifactProject} --format="value(projectNumber)"` )
   
   // build the cloudbuild.yaml from the handlebars template
@@ -275,9 +281,9 @@ const buildContainerImage = async ( repoDescr ) => {
            ${cloudBuildSA}
   ` ) )
 
-  if ( process.env.DRY_RUN === '1' ) {
+  if ( dryRun ) {
     log( `Would have run => ${cloudBuildCmd} ${cloudBuildLogs} ${cloudBuildCfg} ${buildDir}` )
-    log( '\n***Exiting from DRY_RUN\n' )
+    log( '\n***Exiting from --dry-run\n' )
     process.exit( 0 )
   }
 

package/src/Utils.mjs

@@ -156,7 +156,7 @@ export const establishOauthAccess = async ( registryLocation = 'us-docker.pkg.de
     // -p is frowned upon but using a pipe | is problematic with shellCmd (execa)
     const registryLoginCommand = `helm registry login -u oauth2accesstoken -p ${accessToken}`
 
-    const loginResult = await shellCmd( `${registryLoginCommand} https://${registryLocation}` )
+    const loginResult = await shellCmd( `${registryLoginCommand} ${registryLocation}` )
     debug( { loginResult }, '<==registryLogin' )
   } catch ( error ) {
     // on exception we probably need to reestablish gcloud auth login
@@ -198,6 +198,14 @@ export const getDirectories = ( { path : srcPath = process.cwd(), respectGitigno
     .map( dirent => dirent.name )
 }
 
+// equivalent to Unix touch command to create an empty file
+export const touchFile = ( filename ) => {
+  if ( filename ) {
+    const handle = fs.openSync( filename, 'w' ) // eslint-disable-line security/detect-non-literal-fs-filename
+    fs.closeSync( handle )
+  }
+}
+
 // returns YYYMMDD-hhmm
 export const getDateTimestamp = () => {
   const fullDTS = new Date().toISOString().replace( /[-T:]/g, '' ).slice( 0, 14 )
@@ -285,16 +293,12 @@ export const parseJsonFile = async ( jsonFile ) => {
   // TODO: rework this file exists logic / throw
   if ( !fs.existsSync( jsonFile ) ) { return undefined } // eslint-disable-line security/detect-non-literal-fs-filename
   /* eslint-disable security/detect-non-literal-fs-filename */
-  if ( fs.existsSync( jsonFile ) ) {
-    try {
-      const json = JSON.parse( fs.readFileSync( jsonFile, 'utf8' ) )  
-      return json
-    } catch ( error ) {
-      throw new Error( `${error} in ${jsonFile}` )
-    }
-  } 
-  throw new Error( `Utils.parseJsonFile: file ${jsonFile} does not exist in ${process.cwd()}` )
-  /* eslint-enable security/detect-non-literal-fs-filename */
+  try {
+    const json = JSON.parse( fs.readFileSync( jsonFile, 'utf8' ) )  
+    return json
+  } catch ( error ) {
+    throw new Error( `${error} in ${jsonFile}` )
+  }
 }
 
 // Parses the ./package.json file and verifies there is a properly formatted
@@ -306,7 +310,7 @@ const deprecated = ( opts ) => {
 }
 
 export const parsePackageJson = async ( packageFileName = './package.json' ) => {
-  if ( !fs.existsSync( packageFileName ) ) { return undefined } // eslint-disable-line security/detect-non-literal-fs-filename
+  if ( !fs.existsSync( packageFileName ) ) { return undefined }  
   
   const packageJson = await parseJsonFile( packageFileName )
 
@@ -497,8 +501,8 @@ https://console.cloud.google.com/artifacts/browse/leverege-registry?project=leve
 }
 
 export const parsePyProjectToml = async ( packageFileName = './pyproject.toml' ) => {
-  if ( !fs.existsSync( packageFileName ) ) { return undefined } // eslint-disable-line security/detect-non-literal-fs-filename
-  const tomlStr = fs.readFileSync( packageFileName ) // eslint-disable-line security/detect-non-literal-fs-filename
+  if ( !fs.existsSync( packageFileName ) ) { return undefined }  
+  const tomlStr = fs.readFileSync( packageFileName )  
   const pyproject = toml.parse( tomlStr )
 
   const registry = pyproject?.leverege?.registry

package/src/bash-funcs

@@ -229,28 +229,6 @@ function waitForIAM() {
   done
 }
 
-# *** DEPRECATED *** REMOVE AFTER BITNAMI ERADICATED ***
-# *** DEPRECATED *** REMOVE AFTER BITNAMI ERADICATED ***
-# *** DEPRECATED *** REMOVE AFTER BITNAMI ERADICATED ***
-#
-function addBitnamiRepo() {
-  warning '*** the addBitnamiRepo function should be removed - DEPRECATED ***'
-  if [ ! -z "$BITNAMI_LATEST" ] || [ "$1" == "latest" ];
-  then
-    BITNAMI_URL="https://charts.bitnami.com/bitnami"
-  else
-    cat<<CATNAMI
-    Using the pre 2022 legacy charts from bitnami. To use latest run:
-
-        `color y "BITNAMI_LATEST=1 $HELMUP_ARGS"`
-
-CATNAMI
-    BITNAMI_URL="https://raw.githubusercontent.com/bitnami/charts/eb5f9a9513d987b519f0ecd732e7031241c50328/bitnami"
-  fi
-
-  addHelmRepo bitnami $BITNAMI_URL
-}
-
 function removeHelmRepo(){
   [ ! -z "$SKIP_RM_HELM_REPO" ] && return
   helm repo remove $1 &> $DEVNULL

package/src/circle-orb-it/circle-orb-it.mjs

@@ -15,7 +15,7 @@ import {
   proceed,
 } from '../Utils.mjs'
 
-const ORB_VERSION = '1.2.4' // Keep this in sync with the version in circle-orb.yml
+const ORB_VERSION = '1.2.6' // Keep this in sync with the version in circle-orb.yml
 const CIRCLE_DIR = '.circleci'
 const CIRCLE_YML = `${CIRCLE_DIR}/config.yml`
 const CIRCLE_YML_TEMPLATE = path.join( BUILD_TOOLS_ROOT, 'circle-orb-it', 'circle-orb.yml' )

package/src/circle-orb-it/circle-orb.yml

@@ -1,7 +1,7 @@
 version: 2.1
 
 orbs:
-  leverege: leverege/circle-nodejs-ci@1.2.4
+  leverege: leverege/circle-nodejs-ci@1.2.6
 
 workflows:
   build-and-verify: