gitops 1.9.0__tar.gz → 1.10.0__tar.gz

{gitops-1.9.0 → gitops-1.10.0}/.release-please-manifest.json

@@ -1,5 +1,5 @@
 {
-    ".": "1.9.0",
+    ".": "1.10.0",
     "gitops_server": "0.15.1",
     "charts/gitops": "1.3.0"
 }

{gitops-1.9.0 → gitops-1.10.0}/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [1.10.0](https://github.com/uptick/gitops/compare/gitops-v1.9.0...gitops-v1.10.0) (2026-09-22)
+
+
+### Features
+
+* **deploy:** setting to skip helm's client-side OpenAPI validation ([3671513](https://github.com/uptick/gitops/commit/36715132c8e04efeb3b7f389595f6dc49c80c3f6))
+* helm 3.22.0, and a setting to skip its OpenAPI validation ([d66fe4a](https://github.com/uptick/gitops/commit/d66fe4a6362498ec7d85e19b57dbae5f6d8ddd6c))
+* **image:** helm 3.22.0, with helm-secrets 4.7.7 to match ([2d871bf](https://github.com/uptick/gitops/commit/2d871bfefe85d1f25e2748519cea0155e7f499bd))
+
+
+### Bug Fixes
+
+* upgrade urllib3 to 2.8.0 and anyio to the patched release ([dcd9699](https://github.com/uptick/gitops/commit/dcd96990444176abdddb0e70b8db8e5c0c8d55b1))
+* upgrade urllib3 to 2.8.0 and anyio to the patched release ([14bad7c](https://github.com/uptick/gitops/commit/14bad7c39c6743ff20054c3101ae5802eac8fc9c))
+
 ## [1.9.0](https://github.com/uptick/gitops/compare/gitops-v1.8.0...gitops-v1.9.0) (2026-09-09)
 
 

{gitops-1.9.0 → gitops-1.10.0}/Dockerfile

@@ -14,7 +14,7 @@ ARG TARGETARCH
 ## Install kubectl and dependencies.
 ##
 ENV KUBE_LATEST_VERSION="v1.21.3"
-ENV HELM_VERSION="v3.6.2" \
+ENV HELM_VERSION="v3.22.0" \
     VIRTUAL_ENV="/app/.venv" \
     PATH="/app/.venv/bin:$PATH"
 
@@ -30,7 +30,7 @@ RUN apt-get update \
     && chmod +x /usr/local/bin/helm \
     \
     # Install helm-secrets plugin
-    && helm plugin install https://github.com/jkroepke/helm-secrets --version v4.2.2 \
+    && helm plugin install https://github.com/jkroepke/helm-secrets --version v4.7.7 \
     \
     # Download sops
     && wget -q https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v3.7.3.linux.${TARGETARCH} -O /usr/local/bin/sops \

{gitops-1.9.0 → gitops-1.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: gitops
-Version: 1.9.0
+Version: 1.10.0
 Summary: Manage multiple apps across one or more k8s clusters.
 Author-email: Jarek Głowacki <jarekwg@gmail.com>
 License-File: LICENSE

{gitops-1.9.0 → gitops-1.10.0}/gitops/__init__.py

@@ -6,7 +6,7 @@ from gitops.utils.apps import App, get_app_details, get_apps  # type: ignore[att
 
 from .utils.cli import success, warning
 
-__version__ = "1.9.0"
+__version__ = "1.10.0"
 
 
 # Checking gitops version matches cluster repo version.

{gitops-1.9.0 → gitops-1.10.0}/gitops_server/settings.py

@@ -21,3 +21,13 @@ GITOPS_MAX_PARALLEL_DEPLOYS = os.environ.get("GITOPS_MAX_PARALLEL_DEPLOYS", "5")
 # two commits before it reaches GITOPS_MAX_PARALLEL_DEPLOYS, so without a bound
 # here a burst of pushes is only limited by how fast they arrive.
 GITOPS_MAX_CONCURRENT_DEPLOYMENTS = os.environ.get("GITOPS_MAX_CONCURRENT_DEPLOYMENTS", "20")
+
+# Pass --disable-openapi-validation to helm. Off by default: helm keeps checking
+# manifests against the cluster schema before applying them, which costs each
+# helm process a download and parse of that schema. The API server still
+# rejects wrong types and missing fields either way.
+GITOPS_DISABLE_OPENAPI_VALIDATION = os.environ.get("GITOPS_DISABLE_OPENAPI_VALIDATION", "").lower() in (
+    "1",
+    "true",
+    "yes",
+)

gitops-1.10.0/gitops_server/version.py

@@ -0,0 +1 @@
+__version__ = "1.10.0"

{gitops-1.9.0 → gitops-1.10.0}/gitops_server/workers/deployer/deploy.py

@@ -280,6 +280,7 @@ class Deployer:
                                     f" --history-max {MAX_HELM_HISTORY}"
                                     " --install"
                                     " --timeout=600s"
+                                    f"{' --disable-openapi-validation' if settings.GITOPS_DISABLE_OPENAPI_VALIDATION else ''}"
                                     f"{' --set skip_migrations=true' if self.skip_migrations else ''}"
                                     f" -f {cfg.name}"
                                     f" --namespace={app.namespace}"
@@ -312,6 +313,7 @@ class Deployer:
                                 f" --history-max {MAX_HELM_HISTORY}"
                                 " --install"
                                 " --timeout=600s"
+                                f"{' --disable-openapi-validation' if settings.GITOPS_DISABLE_OPENAPI_VALIDATION else ''}"
                                 f"{' --set skip_migrations=true' if self.skip_migrations else ''}"
                                 f" -f {cfg.name}"
                                 f" --namespace={app.namespace}"

{gitops-1.9.0 → gitops-1.10.0}/pyproject.toml

@@ -1,7 +1,7 @@
 
 [project]
 name = "gitops"
-version = "1.9.0"
+version = "1.10.0"
 description = "Manage multiple apps across one or more k8s clusters."
 requires-python = ">=3.12"
 readme = "README.md"

{gitops-1.9.0 → gitops-1.10.0}/tests/test_deploy.py

@@ -145,6 +145,27 @@ class TestDeploy:
         )
         assert post_mock.call_count == 2
 
+    @patch("gitops_server.workers.deployer.deploy.settings.GITOPS_DISABLE_OPENAPI_VALIDATION", True)
+    @patch("gitops_server.workers.deployer.deploy.run")
+    @patch("gitops_server.utils.slack.post")
+    @patch("gitops_server.workers.deployer.deploy.load_app_definitions", mock_load_app_definitions)
+    @patch("gitops_server.workers.deployer.deploy.temp_repo")
+    async def test_deployer_disable_openapi_validation_setting_adds_the_helm_flag(
+        self, temp_repo_mock, post_mock, run_mock
+    ):
+        run_mock.return_value = {"exit_code": 0, "output": ""}
+        temp_repo_mock.return_value.__aenter__.return_value = "mock-repo"
+        semaphore_manager = AppSemaphoreManager()
+        deployer = await Deployer.from_push_event(SAMPLE_GITHUB_PAYLOAD, semaphore_manager)
+        await deployer.deploy()
+        assert run_mock.call_count == 4
+        for call in (run_mock.call_args_list[1], run_mock.call_args_list[3]):
+            assert re.match(
+                r"helm secrets upgrade --create-namespace --history-max 3 --install --timeout=600s"
+                r" --disable-openapi-validation -f .+\.yml --namespace=mynamespace sample-app-\d mock-repo",
+                call[0][0],
+            )
+
     @patch("gitops_server.workers.deployer.deploy.run")
     @patch("gitops_server.utils.slack.post")
     @patch("gitops_server.workers.deployer.deploy.Deployer.post_result")

{gitops-1.9.0 → gitops-1.10.0}/uv.lock

@@ -7,6 +7,12 @@ resolution-markers = [
     "python_full_version < '3.13'",
 ]
 
+[options]
+
+[options.exclude-newer-package]
+anyio = "2026-09-19T14:00:00Z"
+urllib3 = "2026-09-16T14:00:00Z"
+
 [[package]]
 name = "aiohappyeyeballs"
 version = "2.6.2"
@@ -149,16 +155,15 @@ wheels = [
 
 [[package]]
 name = "anyio"
-version = "4.8.0"
+version = "4.14.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "idna" },
-    { name = "sniffio" },
     { name = "typing-extensions", marker = "python_full_version < '3.13'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/a3/73/199a98fc2dae33535d6b8e8e6ec01f8c1d76c9adb096c6b7d64823038cde/anyio-4.8.0.tar.gz", hash = "sha256:1d9fe889df5212298c0c0723fa20479d1b94883a2df44bd3897aa91083316f7a", size = 181126, upload-time = "2025-01-05T13:13:11.095Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/61/cc/a381afa6efea9f496eff839d4a6a1aed3bfafc7b3ab4b0d1b243a12573dd/anyio-4.14.2.tar.gz", hash = "sha256:cfa139f3ed1a23ee8f88a145ddb5ac7605b8bbfd8592baacd7ce3d8bb4313c7f", size = 260176, upload-time = "2026-07-12T20:29:07.082Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/46/eb/e7f063ad1fec6b3178a3cd82d1a3c4de82cccf283fc42746168188e1cdd5/anyio-4.8.0-py3-none-any.whl", hash = "sha256:b5011f270ab5eb0abf13385f851315585cc37ef330dd88e27ec3d34d651fd47a", size = 96041, upload-time = "2025-01-05T13:13:07.985Z" },
+    { url = "https://files.pythonhosted.org/packages/da/35/f2287558c17e29fafc8ef3daf819bb9834061cfa43bff8014f7df7f63bdc/anyio-4.14.2-py3-none-any.whl", hash = "sha256:9f505dda5ac9f0c8309b5e8bd445a8c2bf7246f3ce950121e45ea15bc41d1494", size = 125813, upload-time = "2026-07-12T20:29:05.763Z" },
 ]
 
 [[package]]
@@ -495,7 +500,7 @@ wheels = [
 
 [[package]]
 name = "gitops"
-version = "1.9.0"
+version = "1.10.0"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },
@@ -631,7 +636,7 @@ resolution-markers = [
     "python_full_version >= '3.14'",
 ]
 dependencies = [
-    { name = "typing-extensions", marker = "python_full_version >= '3.14'" },
+    { name = "typing-extensions" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/b7/48/af6173dbca4454f4637a4678b67f52ca7e0c1ed7d5894d89d434fecede05/grpcio-1.80.0.tar.gz", hash = "sha256:29aca15edd0688c22ba01d7cc01cb000d72b2033f4a3c72a81a19b56fd143257", size = 12978905, upload-time = "2026-03-30T08:49:10.502Z" }
 wheels = [
@@ -1532,15 +1537,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/25/2d/8724ef191cb64907de1e4e4436462955501e00f859a53d0aa794d0d060ff/slack_sdk-3.34.0-py2.py3-none-any.whl", hash = "sha256:c61f57f310d85be83466db5a98ab6ae3bb2e5587437b54fa0daa8fae6a0feffa", size = 292480, upload-time = "2024-12-17T22:20:28.949Z" },
 ]
 
-[[package]]
-name = "sniffio"
-version = "1.3.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/a2/87/a6771e1546d97e7e041b6ae58d80074f81b7d5121207425c964ddf5cfdbd/sniffio-1.3.1.tar.gz", hash = "sha256:f4324edc670a0f49750a81b895f35c3adb843cca46f0530f79fc1babb23789dc", size = 20372, upload-time = "2024-02-25T23:20:04.057Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e9/44/75a9c9421471a6c4805dbf2356f7c181a29c1879239abab1ea2cc8f38b40/sniffio-1.3.1-py3-none-any.whl", hash = "sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2", size = 10235, upload-time = "2024-02-25T23:20:01.196Z" },
-]
-
 [[package]]
 name = "starlette"
 version = "1.3.1"
@@ -1667,11 +1663,11 @@ fastapi = [
 
 [[package]]
 name = "urllib3"
-version = "2.7.0"
+version = "2.8.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953/urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c", size = 433602, upload-time = "2026-05-07T16:13:18.596Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e3/05/b17359e1cefb4f909b5e40b1b90a496d987258916dbbf88e842c729f510e/urllib3-2.8.0.tar.gz", hash = "sha256:63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63", size = 458972, upload-time = "2026-09-15T19:29:36.253Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
+    { url = "https://files.pythonhosted.org/packages/92/9d/c4e665119135114480843e7ab388fa94d8480650450e6f8e26b70d323a4c/urllib3-2.8.0-py3-none-any.whl", hash = "sha256:0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3", size = 135717, upload-time = "2026-09-15T19:29:34.577Z" },
 ]
 
 [[package]]

gitops-1.9.0/gitops_server/version.py

@@ -1 +0,0 @@
-__version__ = "1.9.0"