feat(plugins): add PreSync Redpanda topics provisioner Job by ClaraTersi · Pull Request #1666 · LerianStudio/helm

ClaraTersi · 2026-07-17T11:20:33Z

What

Adds a PreSync Redpanda topics provisioner Job to the br-sisbajud chart, cloned from the existing migrations Job.

templates/topics/job.yaml — ArgoCD PreSync hook (weight -1), hardened securityContext (runAsNonRoot 65532, readOnlyRootFilesystem: true, drop ALL, seccomp RuntimeDefault) plus a writable /tmp emptyDir (for the decoded CA + rpk home). Resolves STREAMING_* from brSisbajud.extraEnvVars → configmap (same idiom the migrations Job uses for ALLOW_INSECURE_TLS), so gitops needs no duplicated secret refs. Runs the br-sisbajud-topics image.
templates/_helpers.tpl — br-sisbajud-topics.fullname / .labels.
values.yaml — top-level topics: block (enabled, image, partitions, replicationFactor, retentionMs, the 6-topic list, resources).
values.schema.json — added topics property (root is additionalProperties: false).
Chart.yaml — version 1.0.1 → 1.1.0.

Why

Companion to LerianStudio/br-sisbajud#<topics image PR>. Provisions the reactive-bridge topics at deploy time so the balance translator/consumer can't halt-loop on a fresh environment. See that PR for the full rationale.

Validation

helm lint — 0 failures.
helm template --set topics.enabled=true — Job renders with the PreSync hooks, hardened securityContext, /tmp emptyDir, and all env resolved. --set topics.enabled=false renders no Job.

Merge order (part of a 3-PR set)

Merge after the br-sisbajud image PR (so br-sisbajud-topics:<tag> exists) and before the gitops PR (which references chart 1.1.0). Publishing this chart makes 1.1.0 available.

Clone the migrations PreSync Job machinery for a topics provisioner Job that runs the br-sisbajud-topics image (rpk) to idempotently ensure the reactive-bridge topics and their .dlq siblings exist before the app boots, preventing the Midaz balance translator halt-loop and DLQ publish failures on a fresh broker. - templates/topics/job.yaml: PreSync hook (weight -1), hardened securityContext (65532, readOnlyRootFilesystem, drop ALL, seccomp RuntimeDefault) plus a writable /tmp emptyDir for rpk HOME/config + the decoded CA. STREAMING_* resolved from brSisbajud.extraEnvVars then configmap (same idiom the migrations Job uses) so gitops needs no duplicated secret refs. - _helpers.tpl: br-sisbajud-topics.fullname/.labels helpers. - values.yaml + values.schema.json: topics block (6 topics, partitions, replicationFactor, retentionMs, resources). - Chart.yaml: 1.0.1 -> 1.1.0 (additive template). Optional broker-reachability initContainer omitted; backoffLimit covers a transiently-unready broker.

coderabbitai · 2026-07-17T11:20:56Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 17a79c29-9c7a-4f21-95ce-ca850e619112

📥 Commits

Reviewing files that changed from the base of the PR and between 484e04e and 9886085.

📒 Files selected for processing (1)

charts/br-sisbajud/templates/topics/job.yaml

📝 Walkthrough

Walkthrough

Changes

The br-sisbajud Helm chart now defines configurable Redpanda topics and renders an Argo CD PreSync Job that provisions them before application startup. Topic naming helpers, schema metadata, security settings, resource limits, and chart version metadata were added or updated.

Topics provisioning

Layer / File(s)	Summary
Topics configuration and naming `charts/br-sisbajud/values.yaml`, `charts/br-sisbajud/values.schema.json`, `charts/br-sisbajud/templates/_helpers.tpl`, `charts/br-sisbajud/Chart.yaml`	Topic image, names, replication, retention, execution settings, schema support, helper names/labels, and chart version `1.1.0` are defined.
PreSync topic creation Job `charts/br-sisbajud/templates/topics/job.yaml`	A conditional Argo CD PreSync Job resolves streaming settings, creates configured topics and DLQ variants, supports pull secrets and resources, and uses hardened container and filesystem security settings.

Sequence Diagram(s)

sequenceDiagram
  participant ArgoCD
  participant TopicsJob
  participant Redpanda
  participant BrSisbajudApp
  ArgoCD->>TopicsJob: run PreSync hook
  TopicsJob->>Redpanda: provision configured topics
  Redpanda-->>TopicsJob: return provisioning result
  TopicsJob-->>ArgoCD: complete hook
  ArgoCD->>BrSisbajudApp: start application

✨ Finishing Touches

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch feat/br-sisbajud-topics-job

_{Comment @coderabbitai help to get the list of available commands.}

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@charts/br-sisbajud/templates/topics/job.yaml`:
- Around line 18-28: The extraEnv resolution in the topics Job currently
captures only literal value fields, dropping secret-backed STREAMING_* settings.
Update the range over extraEnv and the $resolved map so matching valueFrom
entries, including secretKeyRef sources, are rendered or otherwise preserved for
the existing $brokers, $tlsEnabled, $saslMech, $saslUser, $saslPass, and $caCert
lookups, while retaining literal-value handling.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 82e91bf0-e7a4-4907-987e-f275c965fb30

📥 Commits

Reviewing files that changed from the base of the PR and between a843166 and 484e04e.

📒 Files selected for processing (5)

charts/br-sisbajud/Chart.yaml
charts/br-sisbajud/templates/_helpers.tpl
charts/br-sisbajud/templates/topics/job.yaml
charts/br-sisbajud/values.schema.json
charts/br-sisbajud/values.yaml

The topics provisioner Job flattened only extraEnvVars[].value, so any STREAMING_* setting sourced via valueFrom.secretKeyRef (e.g. STREAMING_SASL_PASSWORD) was silently dropped: the PreSync Job fell back to empty/default values while the Deployment still received the secret-backed env. Resolve the STREAMING_* set by preserving full extraEnvVars entries verbatim (value OR valueFrom), mirroring how the Deployment renders them via toYaml, and fall back to configmap literals/defaults only when no extraEnvVar exists. STREAMING_BROKERS/STREAMING_TLS_ENABLED still always render (with defaults); optional SASL/CA entries render only when set. Default rendered output is unchanged. Also drops the multi-space-after-hyphen template indentation yamllint flagged. Addresses CodeRabbit review on PR #1666.

rpk needs a writable HOME; under readOnlyRootFilesystem the /tmp emptyDir is the only writable path.

## (2026-07-17) ### Features * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) ### Bug Fixes * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085))

## (2026-07-17) ### Features * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-17) ### Features * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **plugin-br-pix-indirect-btg:** give schedule worker PDB real disruption protection ([f90ecab](f90ecab)), closes [#1682](#1682) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-20) ### Features * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **plugin-br-pix-indirect-btg:** give schedule worker PDB real disruption protection ([f90ecab](f90ecab)), closes [#1682](#1682) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-23) ### Features * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **midaz:** update midaz-crm@3.8.0, midaz-ledger@3.8.0 ([f38da4c](f38da4c)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **plugin-fees:** update plugin-fees@3.4.0 ([0237f21](0237f21)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **plugin-br-pix-indirect-btg:** give schedule worker PDB real disruption protection ([f90ecab](f90ecab)), closes [#1682](#1682) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **fetcher:** update fetcher-manager@3.0.2, fetcher-worker@3.0.2 ([3c815a7](3c815a7)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **reporter:** update reporter-manager@2.3.0, reporter-worker@2.3.0 ([7b4ff5b](7b4ff5b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-24) ### Features * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **common:** add lerian-common library chart ([f7a8032](f7a8032)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **common:** promote lerian-common to 1.0.0 productization helpers ([cb9643d](cb9643d)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **midaz:** update midaz-crm@3.8.0, midaz-ledger@3.8.0 ([f38da4c](f38da4c)) * **plugin-fees:** update plugin-fees@3.4.0 ([0237f21](0237f21)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **plugin-br-pix-indirect-btg:** give schedule worker PDB real disruption protection ([f90ecab](f90ecab)), closes [#1682](#1682) * **common:** per-ingress annotations override global (mergeOverwrite) ([fdf5ead](fdf5ead)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **common:** respect explicit false/empty in lerian-common resolvers ([ecd0a46](ecd0a46)) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@3.0.2, fetcher-worker@3.0.2 ([3c815a7](3c815a7)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.2.0 ([034102c](034102c)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **reporter:** update reporter-manager@2.3.0, reporter-worker@2.3.0 ([7b4ff5b](7b4ff5b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

ClaraTersi requested a review from a team as a code owner July 17, 2026 11:20

coderabbitai Bot requested changes Jul 17, 2026

View reviewed changes

Comment thread charts/br-sisbajud/templates/topics/job.yaml Outdated

ClaraTersi changed the title ~~feat(br-sisbajud): add PreSync Redpanda topics provisioner Job~~ feat: add PreSync Redpanda topics provisioner Job Jul 17, 2026

coderabbitai Bot approved these changes Jul 17, 2026

View reviewed changes

ClaraTersi changed the title ~~feat: add PreSync Redpanda topics provisioner Job~~ feat(plugins): add PreSync Redpanda topics provisioner Job Jul 17, 2026

fix(br-sisbajud): set HOME=/tmp on topics provisioner Job

9886085

rpk needs a writable HOME; under readOnlyRootFilesystem the /tmp emptyDir is the only writable path.

prymax10 approved these changes Jul 17, 2026

View reviewed changes

ClaraTersi merged commit c48b729 into main Jul 17, 2026
4 checks passed

ClaraTersi deleted the feat/br-sisbajud-topics-job branch July 17, 2026 12:28

coderabbitai Bot mentioned this pull request Jul 17, 2026

chore(templates): back merge main into develop (conflicts resolved) #1679

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

feat(plugins): add PreSync Redpanda topics provisioner Job#1666

feat(plugins): add PreSync Redpanda topics provisioner Job#1666
ClaraTersi merged 3 commits into
mainfrom
feat/br-sisbajud-topics-job

ClaraTersi commented Jul 17, 2026

Uh oh!

coderabbitai Bot commented Jul 17, 2026 •

edited

Loading

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

coderabbitai Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

ClaraTersi commented Jul 17, 2026

What

Why

Validation

Merge order (part of a 3-PR set)

Uh oh!

coderabbitai Bot commented Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

coderabbitai Bot commented Jul 17, 2026 •

edited

Loading