gitops 1.10.0__tar.gz → 1.10.2__tar.gz

{gitops-1.10.0 → gitops-1.10.2}/.github/workflows/release-please.yaml

@@ -14,6 +14,10 @@ permissions:
 env:
   MISE_PYTHON_COMPILE: false
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  ECR_REGISTRY: 610829907584.dkr.ecr.ap-southeast-2.amazonaws.com
+  ECR_HELM_PREFIX: helm
+  AWS_REGION: ap-southeast-2
+  AWS_ROLE_ARN: arn:aws:iam::610829907584:role/default-github-actions-ci-role
 
 jobs:
   release-please:
@@ -36,10 +40,31 @@ jobs:
     if: ${{ needs.release-please.outputs.helm-version }}
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # ratchet:actions/checkout@v6.0.1
-      - name: Publish Helm charts
-        uses: stefanprodan/helm-gh-pages@89c6698c192e70ed0e495bee7d3d1ca5b477fe82 # ratchet:stefanprodan/helm-gh-pages@master
+
+      - name: Install Helm
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # ratchet:azure/setup-helm@v4
+
+      - name: Lint chart
+        run: helm lint charts/gitops
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # ratchet:aws-actions/configure-aws-credentials@v5.1.1
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          role-to-assume: ${{ env.AWS_ROLE_ARN }}
+          role-session-name: ${{ github.repository_owner }}-${{ github.event.repository.name }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Login to ECR (Helm OCI)
+        run: |
+          aws ecr get-login-password --region "$AWS_REGION" \
+            | helm registry login --username AWS --password-stdin "$ECR_REGISTRY"
+
+      - name: Package and push chart
+        run: |
+          set -euo pipefail
+          chart_version=$(helm show chart charts/gitops | awk '/^version:/ {print $2}')
+          helm package charts/gitops --destination "$RUNNER_TEMP"
+          helm push "${RUNNER_TEMP}/gitops-${chart_version}.tgz" "oci://${ECR_REGISTRY}/${ECR_HELM_PREFIX}"
 
   publish_to_pypi:
     name: Publishes tag to pypi
@@ -59,7 +84,7 @@ jobs:
         shell: bash
 
       - name: Publish Pypi Package
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # ratchet:pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # ratchet:pypa/gh-action-pypi-publish@release/v1
 
   publish_docker_image:
     name: Build and Push Docker Image

{gitops-1.10.0 → gitops-1.10.2}/.github/workflows/test.yml

@@ -14,6 +14,9 @@ permissions:
 
 env:
   PYTHONUNBUFFERED: 1
+  ECR_REGISTRY: 610829907584.dkr.ecr.ap-southeast-2.amazonaws.com
+  ECR_HELM_PREFIX: helm
+  AWS_REGION: ap-southeast-2
 
 jobs:
   ci:
@@ -99,23 +102,43 @@ jobs:
           tags: |
             610829907584.dkr.ecr.ap-southeast-2.amazonaws.com/gitops:test-${{ env.GIT_SHORT_HASH }}
 
-      - name: Prepare Docker image comment
+      - name: Install Helm
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # ratchet:azure/setup-helm@v4
+
+      - name: Lint and render chart
+        run: |
+          helm lint charts/gitops
+          helm template gitops charts/gitops > /dev/null
+
+      # The SHA identifies the build; a fixed 0.0.0 base can't be mistaken for a release.
+      - name: Package and push test chart
+        if: github.event_name == 'pull_request'
+        run: |
+          set -euo pipefail
+          aws ecr get-login-password --region "$AWS_REGION" \
+            | helm registry login --username AWS --password-stdin "$ECR_REGISTRY"
+          chart_version="0.0.0-test-${GIT_SHORT_HASH}"
+          helm package charts/gitops --version "$chart_version" --destination "$RUNNER_TEMP"
+          helm push "${RUNNER_TEMP}/gitops-${chart_version}.tgz" "oci://${ECR_REGISTRY}/${ECR_HELM_PREFIX}"
+
+      - name: Prepare test build comment
         id: docker_comment
         if: github.event_name == 'pull_request'
         run: |
           {
             echo "comment<<EOF"
-            echo "## Docker Images"
+            echo "## Test builds"
             echo ""
             echo "**Commit:** \`${{ github.event.pull_request.head.sha }}\`"
             echo ""
-            echo "| Tag |"
-            echo "| --- |"
-            echo "| \`610829907584.dkr.ecr.ap-southeast-2.amazonaws.com/gitops:test-${{ env.GIT_SHORT_HASH }}\` |"
+            echo "| | Reference |"
+            echo "| --- | --- |"
+            echo "| Image | \`610829907584.dkr.ecr.ap-southeast-2.amazonaws.com/gitops:test-${{ env.GIT_SHORT_HASH }}\` |"
+            echo "| Chart | \`oci://610829907584.dkr.ecr.ap-southeast-2.amazonaws.com/helm/gitops\` version \`0.0.0-test-${{ env.GIT_SHORT_HASH }}\` |"
             echo "EOF"
           } >> "$GITHUB_OUTPUT"
 
-      - name: Comment Docker images on PR
+      - name: Comment test builds on PR
         if: github.event_name == 'pull_request'
         uses: marocchino/sticky-pull-request-comment@67d0dec7b07ed060a405f9b2a64b8ab319fdd7db # ratchet:marocchino/sticky-pull-request-comment@v2.9.2
         with:

{gitops-1.10.0 → gitops-1.10.2}/.mise.toml

@@ -1,6 +1,6 @@
 [tools]
 python = { version = "3.12.13", venv = ".venv" }
-uv = { version = "0.11.26"}
+uv = { version = "0.13.4"}
 
 [env]
 _.python.venv = { path = "{{config_root}}/.venv", create = true }

gitops-1.10.2/.release-please-manifest.json

@@ -0,0 +1,5 @@
+{
+    ".": "1.10.2",
+    "gitops_server": "0.15.1",
+    "charts/gitops": "1.4.1"
+}

{gitops-1.10.0 → gitops-1.10.2}/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [1.10.2](https://github.com/uptick/gitops/compare/gitops-v1.10.1...gitops-v1.10.2) (2026-10-22)
+
+
+### Bug Fixes
+
+* **ci:** upgrade pypa/gh-action-pypi-publish to v1.14.3 ([384631c](https://github.com/uptick/gitops/commit/384631cc0f931dcb82056969fcc9512b329f08a4))
+* **deps:** upgrade uv to 0.13.4 ([1f63116](https://github.com/uptick/gitops/commit/1f631162fc7b40b55bbdef6486a25d364666b637))
+* **deps:** upgrade uv to 0.13.4 and the PyPI publish action to v1.14.3 ([f20a90b](https://github.com/uptick/gitops/commit/f20a90bec048a682e730f393afd686493a5d91fc))
+
+## [1.10.1](https://github.com/uptick/gitops/compare/gitops-v1.10.0...gitops-v1.10.1) (2026-10-21)
+
+
+### Bug Fixes
+
+* **deps:** upgrade certifi to 2026.10.19 ([680d2ec](https://github.com/uptick/gitops/commit/680d2ec257595763a204e332ce603ade7affc5b6))
+* **deps:** upgrade certifi to 2026.10.19 (GHSA-6q48-6c7w-9gw2) ([6f5b494](https://github.com/uptick/gitops/commit/6f5b494bcfa7d6bd9393c45470ccf8f749758b78))
+
 ## [1.10.0](https://github.com/uptick/gitops/compare/gitops-v1.9.0...gitops-v1.10.0) (2026-09-22)
 
 

{gitops-1.10.0 → gitops-1.10.2}/Dockerfile

@@ -2,7 +2,7 @@
 # This is a multi-stage build to use uv for dependency management and is necessary to ensure the the image version we pull is for the right architecture.
 # This is automatically set by the buildx builder. when using --platoform linux/amd64,linux/arm64 argument and then
 # using FROM in the Dockerfile.
-FROM ghcr.io/astral-sh/uv:0.11.26 AS uv_extractor
+FROM ghcr.io/astral-sh/uv:0.13.4 AS uv_extractor
 
 
 # Stage 2: The main application build stage

{gitops-1.10.0 → gitops-1.10.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: gitops
-Version: 1.10.0
+Version: 1.10.2
 Summary: Manage multiple apps across one or more k8s clusters.
 Author-email: Jarek Głowacki <jarekwg@gmail.com>
 License-File: LICENSE

{gitops-1.10.0 → gitops-1.10.2}/charts/gitops/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [1.4.1](https://github.com/uptick/gitops/compare/helm-v1.4.0...helm-v1.4.1) (2026-10-21)
+
+
+### Documentation
+
+* **chart:** describe ECR publishing ([3b4374a](https://github.com/uptick/gitops/commit/3b4374a6b6f303d1ad445ea988141ab3ca166169))
+
+## [1.4.0](https://github.com/uptick/gitops/compare/helm-v1.3.0...helm-v1.4.0) (2026-09-24)
+
+
+### Features
+
+* **chart:** take resources from values ([7bc1791](https://github.com/uptick/gitops/commit/7bc17919a3fd0405a593ebd55584a5cc31f7bdc7))
+* **chart:** take resources from values ([3f05fab](https://github.com/uptick/gitops/commit/3f05fab5f24009f127177c055a7bdf4c1159bd0e))
+
 ## [1.3.0](https://github.com/uptick/gitops/compare/helm-v1.2.2...helm-v1.3.0) (2026-09-09)
 
 

{gitops-1.10.0 → gitops-1.10.2}/charts/gitops/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v1
 appVersion: "1.0"
 description: GitOps Server Helm chart.
 name: gitops
-version: 1.3.0
+version: 1.4.1

gitops-1.10.2/charts/gitops/README.md

@@ -0,0 +1,11 @@
+# GitOps Server Helm Chart
+
+Published to `oci://610829907584.dkr.ecr.ap-southeast-2.amazonaws.com/helm/gitops`.
+
+## Releases
+
+Release-please bumps `version` in `Chart.yaml`. Merging its release PR pushes that version to ECR.
+
+## Test versions
+
+Each PR build pushes `0.0.0-test-<short sha>` and lists it in the "Test builds" PR comment.

{gitops-1.10.0 → gitops-1.10.2}/charts/gitops/templates/deployment.yml

@@ -38,8 +38,7 @@ spec:
         ports:
         - containerPort: 8000
         resources:
-          requests:
-            memory: "750Mi"
+          {{- toYaml .Values.resources | nindent 10 }}
 
         envFrom:
         - configMapRef:

{gitops-1.10.0 → gitops-1.10.2}/charts/gitops/values.yaml

@@ -42,12 +42,8 @@ podDisruptionBudget: {}
 #   maxUnavailable: 1
 
 resources:
-  limits:
-    cpu: 500m
-    memory: 512Mi
   requests:
-    cpu: 100m
-    memory: 128Mi
+    memory: 750Mi
 serviceAccount:
   # Specifies whether a service account should be created
   create: true

{gitops-1.10.0 → gitops-1.10.2}/gitops/__init__.py

@@ -6,7 +6,7 @@ from gitops.utils.apps import App, get_app_details, get_apps  # type: ignore[att
 
 from .utils.cli import success, warning
 
-__version__ = "1.10.0"
+__version__ = "1.10.2"
 
 
 # Checking gitops version matches cluster repo version.

gitops-1.10.2/gitops_server/version.py

@@ -0,0 +1 @@
+__version__ = "1.10.2"

{gitops-1.10.0 → gitops-1.10.2}/pyproject.toml

@@ -1,7 +1,7 @@
 
 [project]
 name = "gitops"
-version = "1.10.0"
+version = "1.10.2"
 description = "Manage multiple apps across one or more k8s clusters."
 requires-python = ">=3.12"
 readme = "README.md"