Add otpional release generation to helm publish + security fixes #3

Merged

cloudymax merged 0 commits from release-tests into main

2026-05-14 09:59:05 +00:00

cloudymax commented

2026-05-14 09:04:44 +00:00

(Migrated from git.smallhack.org)

Features

A new boolean option release is available which will create a new release in a Forgejo instance.

Example release: kubevirt-community-stack/kubevirt-vm-0.11.5

Supported options:

verbose_tags: When true, prepends the chart name to the version eg: my-chart-1.0.0. This is useful when releasing multiple charts in the same repo.
pre_release: When true, Marks the release as a 'pre-release'
force: When true, overwrites any existing release with the same tag
Release notes will be automatically generated from the repo's git history using the script: https://git.smallhack.org/small-hack/reusable-workflows/src/branch/main/.forgejo/reusable-scripts/generate-release-notes.sh

Breaking Changes

Secret names are no-longer hard-coded in the reusable action and must be passed in from the caller as shown in the example below:

jobs:
  # Push chart to Harbor via authenticated service account
  push-to-harbor:
    uses: small-hack/reusable-workflows/.forgejo/workflows/publish-charts.yaml@release-tests
    with:
      harbor_url: harbor.smallhack.org
      harbor_project: charts
      force: false
      chart_dir: charts
      chart: kubevirt-vm
      release: false
    secrets:
      harbor_user: ${{ secrets.HARBOR_USER }}
      harbor_token: ${{ secrets.HARBOR_TOKEN }}

## Features A new boolean option `release` is available which will create a new release in a Forgejo instance. - Example release: [kubevirt-community-stack/kubevirt-vm-0.11.5](https://git.smallhack.org/small-hack/kubevirt-community-stack/releases/tag/kubevirt-vm-0.11.5) Supported options: - `verbose_tags`: When true, prepends the chart name to the version eg: `my-chart-1.0.0`. This is useful when releasing multiple charts in the same repo. - `pre_release`: When true, Marks the release as a 'pre-release' - `force`: When true, overwrites any existing release with the same tag - Release notes will be automatically generated from the repo's git history using the script: https://git.smallhack.org/small-hack/reusable-workflows/src/branch/main/.forgejo/reusable-scripts/generate-release-notes.sh ## Breaking Changes Secret names are no-longer hard-coded in the reusable action and must be passed in from the caller as shown in the example below: ```yaml jobs: # Push chart to Harbor via authenticated service account push-to-harbor: uses: small-hack/reusable-workflows/.forgejo/workflows/publish-charts.yaml@release-tests with: harbor_url: harbor.smallhack.org harbor_project: charts force: false chart_dir: charts chart: kubevirt-vm release: false secrets: harbor_user: ${{ secrets.HARBOR_USER }} harbor_token: ${{ secrets.HARBOR_TOKEN }} ```

jessebot (Migrated from git.smallhack.org) approved these changes

2026-05-14 09:58:59 +00:00