feat(new): add lender chart by prymax10 · Pull Request #1672 · LerianStudio/helm

prymax10 · 2026-07-17T14:27:07Z

What

Migrates the lender-helm multi-component chart (API lender + UI lenderConsole) from helm-internal into this public product repo, so the credit product (Underwriter family) ships like the other products (midaz/fetcher/reporter/matcher).

How — pure identity-preserving lift-and-shift

Templates copied byte-for-byte from helm-internal/charts/lender, restructured into the public multi-component tree: templates/lender/, templates/lenderConsole/, shared _helpers.tpl + bootstrap-postgres.yaml at templates/ root — mirroring charts/matcher @ develop.
values.schema.json generated by generate-values-schemas (not hand-written).
README.md with the ## Chart Contract block; CI render fixture at .github/configs/helm-render-values/lender.yaml (both components enabled with dummy values).
pr-title.yml: added lender scope. Root README.md: added ### Lender version-mapping section.

Safety — rendered output is byte-identical to the live chart

Render-diff vs the live helm-internal chart with each tier's values: selectors / resource names / ports / probes identical; the only differences are # Source: paths (file relocation) and the helm.sh/chart label. This means the downstream gitops cutover swaps the chart source with zero selector churn (no immutable-field conflict, at most one rolling restart).

Gates

validate-helm-charts --strict → 0 violations (baseline empty).
validate-helm-charts --render-gate --charts lender → ok.
helm lint + helm template (console on/off) → pass.

Deferred to a follow-up hardening PR (kept out to preserve identity)

CodeRabbit findings on the copied chart are deliberately not applied here (applying them would break the byte-identity that de-risks the cutover; the Deployment-selector one is an immutable field that would force a recreate/outage). Tracked as the hardening backlog:

API Deployment selector component discriminator (immutable → needs deliberate per-tier recreate)
readOnlyRootFilesystem: true + emptyDir + init-container for the console
bootstrap PreSync Job: activeDeadlineSeconds, automountServiceAccountToken: false, psql \getenv
values default hygiene (PG host alignment, SSL-mode/insecure-TLS production defaults)
console probes → configurable values

After merge

semantic-release publishes oci://ghcr.io/lerianstudio/lender-helm (+ dockerhub). GitOps then swaps the helmfile chart ref off helm-internal, tier-by-tier, manual sync.

🤖 Generated with Claude Code

Lift-and-shift of the lender-helm multi-component chart (API lender + UI lenderConsole) from helm-internal into the public product repo, so the credit product ships like the other products (midaz/fetcher/reporter/matcher). - Templates copied byte-for-byte and restructured into the public multi-component tree (templates/lender/, templates/lenderConsole/, shared bootstrap + _helpers at templates root), mirroring matcher@develop. - values.schema.json generated by the repo generator; README with Chart Contract; CI render fixture; pr-title scope; root README version matrix. - Rendered output is byte-identical to the live helm-internal 1.0.2 chart (verified render-diff: selectors/names/ports/probes identical, only the helm.sh/chart label differs), so the gitops cutover carries no selector churn. Hardening findings (CodeRabbit) are deferred to a follow-up PR to keep this a pure identity-preserving migration - see lenderup3.md H6. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

coderabbitai · 2026-07-17T14:27:52Z

📝 Walkthrough

Walkthrough

Changes

Lender Helm chart

Layer / File(s)	Summary
Chart contract and configuration `charts/lender/Chart.yaml`, `charts/lender/values.yaml`, `charts/lender/values-template.yaml`, `charts/lender/values.schema.json`, `charts/lender/templates/_helpers.tpl`	Defines chart metadata, value schemas and defaults, component settings, naming helpers, labels, image tags, service accounts, and namespaces.
Lender API workload `charts/lender/templates/lender/*`	Adds API Deployment, configuration, Secret, ServiceAccount, Service, HPA, Ingress, and PDB templates.
PostgreSQL bootstrap `charts/lender/templates/bootstrap-postgres.yaml`	Adds an optional Argo CD PreSync Job that waits for PostgreSQL and provisions the lender role, database, and privileges.
Lender console workload `charts/lender/templates/lenderConsole/*`	Adds optional console ConfigMap, Deployment, Service, and Ingress templates with required image-tag validation and HTTP probes.
Release and documentation support `.github/configs/helm-render-values/lender.yaml`, `.github/workflows/pr-title.yml`, `README.md`, `charts/lender/README.md`	Adds CI render values, the `lender` pull-request scope, repository chart documentation, and Lender version mapping.

Sequence Diagram(s)

sequenceDiagram
  participant Helm as Helm renderer
  participant LenderAPI as lender API
  participant Console as lenderConsole
  participant PostgreSQL
  Helm->>LenderAPI: render Deployment and supporting resources
  Helm->>Console: render optional console resources
  Helm->>PostgreSQL: run optional bootstrap Job
  PostgreSQL-->>Helm: lender role, database, and privileges configured

✨ Finishing Touches

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch feat/add-lender-chart

_{Comment @coderabbitai help to get the list of available commands.}

coderabbitai

Actionable comments posted: 4

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@charts/lender/README.md`:
- Around line 52-57: Update the Install example in the README to include
required secret configuration so rendering succeeds: show a values file that
enables lender.useExistingSecret and references an existing Secret, or otherwise
supplies lender.secrets.POSTGRES_PASSWORD. Prefer the existing Secret approach
and ensure the helm install command passes that values file.
- Around line 18-24: Update the bootstrap Job secret documentation in the README
to reference the exact paths
global.externalPostgresDefinitions.postgresAdminLogin.useExistingSecret.name and
global.externalPostgresDefinitions.lenderCredentials.useExistingSecret.name,
replacing the ambiguous bare useExistingSecret.name wording while preserving the
existing password requirements.

In `@charts/lender/values.yaml`:
- Around line 60-66: The default API image tag in charts/lender/values.yaml must
match the published release metadata; set it to beta.49 or leave it empty to use
the helper fallback. Update appVersion in charts/lender/Chart.yaml to identify
the same beta.49 release.
- Around line 95-102: Remove the default maxUnavailable entry from the pdb
configuration in charts/lender/values.yaml, retaining minAvailable: 1. In
charts/lender/templates/lender/pdb.yaml, preserve explicit selection of either
availability mode or reject configurations that set both fields; update both
sites accordingly.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: d0652a5c-8ec8-4c8e-b6c8-be5e47f226f1

📥 Commits

Reviewing files that changed from the base of the PR and between f75a67f and 350a554.

📒 Files selected for processing (22)

.github/configs/helm-render-values/lender.yaml
.github/workflows/pr-title.yml
README.md
charts/lender/Chart.yaml
charts/lender/README.md
charts/lender/templates/_helpers.tpl
charts/lender/templates/bootstrap-postgres.yaml
charts/lender/templates/lender/configmap.yaml
charts/lender/templates/lender/deployment.yaml
charts/lender/templates/lender/hpa.yaml
charts/lender/templates/lender/ingress.yaml
charts/lender/templates/lender/pdb.yaml
charts/lender/templates/lender/secrets.yaml
charts/lender/templates/lender/service.yaml
charts/lender/templates/lender/serviceaccount.yaml
charts/lender/templates/lenderConsole/configmap.yaml
charts/lender/templates/lenderConsole/deployment.yaml
charts/lender/templates/lenderConsole/ingress.yaml
charts/lender/templates/lenderConsole/service.yaml
charts/lender/values-template.yaml
charts/lender/values.schema.json
charts/lender/values.yaml

coderabbitai · 2026-07-17T14:33:09Z

+- Required secrets: `lender.secrets.POSTGRES_PASSWORD` (install fails loud when unset,
+  unless `lender.useExistingSecret=true` — then `lender.existingSecretName` is required
+  instead). `REDIS_PASSWORD` and `AUTH_JWT_SECRET` are optional (emitted from
+  `lender.secrets.*` only when set). When the bootstrap Job is enabled
+  (`global.externalPostgresDefinitions.enabled=true`) without an `useExistingSecret.name`,
+  `global.externalPostgresDefinitions.postgresAdminLogin.password` and
+  `global.externalPostgresDefinitions.lenderCredentials.password` are also required.


🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash set -euo pipefail # Map the relevant chart docs and schema files first. git ls-files charts/lender | sed -n '1,200p' echo echo "== README excerpt ==" sed -n '1,120p' charts/lender/README.md echo echo "== Search for existing-secret related keys ==" rg -n "useExistingSecret|existingSecretName|externalPostgresDefinitions|postgresAdminLogin|lenderCredentials" charts/lender

Repository: LerianStudio/helm

Length of output: 9731

🏁 Script executed:

#!/bin/bash set -euo pipefail echo "== values.yaml relevant section ==" sed -n '1,70p' charts/lender/values.yaml echo echo "== values-template.yaml relevant section ==" sed -n '1,40p' charts/lender/values-template.yaml echo echo "== bootstrap template relevant section ==" sed -n '50,90p' charts/lender/templates/bootstrap-postgres.yaml echo echo "== schema hits ==" rg -n '"useExistingSecret"|"existingSecretName"|"postgresAdminLogin"|"lenderCredentials"' charts/lender/values.schema.json

Repository: LerianStudio/helm

Length of output: 5860

Document the exact bootstrap secret paths.
When global.externalPostgresDefinitions.enabled=true, use global.externalPostgresDefinitions.postgresAdminLogin.useExistingSecret.name and global.externalPostgresDefinitions.lenderCredentials.useExistingSecret.name instead of bare useExistingSecret.name.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@charts/lender/README.md` around lines 18 - 24, Update the bootstrap Job secret documentation in the README to reference the exact paths global.externalPostgresDefinitions.postgresAdminLogin.useExistingSecret.name and global.externalPostgresDefinitions.lenderCredentials.useExistingSecret.name, replacing the ambiguous bare useExistingSecret.name wording while preserving the existing password requirements.

coderabbitai · 2026-07-17T14:33:09Z

+## Install
+
+```console
+$ helm install lender oci://registry-1.docker.io/lerianstudio/lender-helm \
+    --version 1.0.2 -n lender --create-namespace
+```


🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Make the installation example satisfy required values.

The shown command provides neither lender.secrets.POSTGRES_PASSWORD nor an existing Secret, but charts/lender/templates/lender/secrets.yaml rejects rendering when that value is unset and lender.useExistingSecret=false. Show a values file containing the required inputs, preferably using an existing Secret rather than an inline password.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@charts/lender/README.md` around lines 52 - 57, Update the Install example in the README to include required secret configuration so rendering succeeds: show a values file that enables lender.useExistingSecret and references an existing Secret, or otherwise supplies lender.secrets.POSTGRES_PASSWORD. Prefer the existing Secret approach and ensure the helm install command passes that values file.

coderabbitai · 2026-07-17T14:33:09Z

+  image:
+    # -- Repository for the lender API container image
+    repository: ghcr.io/lerianstudio/lender
+    # -- Image pull policy
+    pullPolicy: IfNotPresent
+    # -- Image tag used for deployment (release pipeline sets this via lender.tag mapping)
+    tag: "1.0.0-beta.48"


🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Synchronize the chart metadata and default API image. The published metadata advertises beta.49 while the rendered workload uses beta.48.

charts/lender/values.yaml#L60-L66: set the API image tag to the intended release or leave it empty to use the helper fallback.

charts/lender/Chart.yaml#L15-L17: ensure appVersion identifies that same default release.

📍 Affects 2 files

charts/lender/values.yaml#L60-L66 (this comment)

charts/lender/Chart.yaml#L15-L17

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@charts/lender/values.yaml` around lines 60 - 66, The default API image tag in charts/lender/values.yaml must match the published release metadata; set it to beta.49 or leave it empty to use the helper fallback. Update appVersion in charts/lender/Chart.yaml to identify the same beta.49 release.

coderabbitai · 2026-07-17T14:33:09Z

+  # -- PodDisruptionBudget configuration
+  pdb:
+    # -- Enable or disable PodDisruptionBudget
+    enabled: true
+    # -- Minimum number of available pods
+    minAvailable: 1
+    # -- Maximum number of unavailable pods
+    maxUnavailable: 1


🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Fix the PDB’s mutually exclusive availability contract. The inherited maxUnavailable key always wins and, at 1, permits disruption of the chart’s only default replica.

charts/lender/values.yaml#L95-L102: remove the default maxUnavailable entry and retain minAvailable: 1.

charts/lender/templates/lender/pdb.yaml#L14-L18: preserve explicit mode selection or reject configurations that specify both fields.

📍 Affects 2 files

charts/lender/values.yaml#L95-L102 (this comment)

charts/lender/templates/lender/pdb.yaml#L14-L18

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@charts/lender/values.yaml` around lines 95 - 102, Remove the default maxUnavailable entry from the pdb configuration in charts/lender/values.yaml, retaining minAvailable: 1. In charts/lender/templates/lender/pdb.yaml, preserve explicit selection of either availability mode or reject configurations that set both fields; update both sites accordingly.

prymax10 · 2026-07-17T14:34:33Z

@coderabbitai — thanks. This PR is a pure identity-preserving lift-and-shift of a chart already running in 4 production-like tiers: every template was copied byte-for-byte from helm-internal/charts/lender, and the render-diff proves the output is identical (selectors/names/ports/probes) to the live chart bar the helm.sh/chart label. Applying the findings here would break that byte-identity (which is exactly what de-risks the downstream gitops cutover), and the Deployment-selector one touches an immutable field that would force a per-tier recreate/outage.

All findings are therefore deferred to a dedicated hardening PR (tracked as lenderup3.md H6), not dropped:

API Deployment selector component discriminator — immutable; needs a deliberate, tier-by-tier recreate.
readOnlyRootFilesystem: true + emptyDir + init-container for the console.
bootstrap PreSync Job: activeDeadlineSeconds, automountServiceAccountToken: false, psql \getenv.
values default hygiene (PG host alignment, SSL-mode / insecure-TLS production defaults).
console probes → configurable values.

The automated validate-helm-charts --strict gate passes with an empty baseline, so this is safe to merge as the migration step; hardening follows separately.

coderabbitai · 2026-07-17T14:35:04Z

Tip

For best results, initiate chat on the files or code changes.

@prymax10 Understood. The byte-identical migration and render-diff validation provide a sound rationale for deferring these hardening changes, especially the immutable API Deployment selector change that requires planned per-tier recreation.

I’ll treat the listed items as follow-up work tracked in lenderup3.md H6 rather than blockers for this identity-preserving cutover.

✏️ Learnings added

Learnt from: prymax10
URL: https://github.com/LerianStudio/helm/pull/1672

Timestamp: 2026-07-17T14:35:02.554Z
Learning: For the `charts/lender` Helm chart migration, preserve byte-level template identity with `helm-internal/charts/lender` to de-risk the tier-by-tier GitOps cutover. Rendered output is expected to match the live internal chart except for source paths and the `helm.sh/chart` label. Hardening changes—including the immutable API Deployment selector component discriminator, console read-only filesystem changes, PostgreSQL bootstrap Job restrictions, production-value hygiene, and configurable console probes—are intentionally deferred to the follow-up tracked in `lenderup3.md` H6.

Note: Learnings are effective only in the context of similar code segments. To apply general coding guidelines, please configure review instructions. You can manage existing learnings in the app.

## (2026-07-17) ### ⚠ BREAKING CHANGES * **plugin-br-payments:** any values overlay using the previous keys (app.configmap.PROVIDER_*, app.secrets.PROVIDER_*) must be updated in the same change set that pins to 1.0.0-beta.2 or later. The follow-up gitops PR in midaz-firmino-gitops (firmino/dev/plugin-br-payments/values.yaml) is the only known consumer today. * the onboarding and transaction services have been consolidated into the ledger service. All Kubernetes resources (Deployment, Service, ConfigMap, Secret, Ingress, HPA, PDB, ServiceAccount) for both services have been removed from the chart. If you are already using the ledger service, no action is required. Migration (only if you were using onboarding or transaction services): - Remove and blocks from your values overrides - Ensure is set - All configuration is now managed under Also adds missing env vars to ledger configmap/secrets (swagger, multi-tenant, overdraft events, balance sync worker) * **plugin-access-manager:** Values path changed from 'auth.backend.migrations.image' (string) to 'auth.backend.migrations.image.repository' + '.tag' (object). Same for 'auth.initUser.image' and 'auth.initUser.imagePullPolicy'. Existing values overrides using the old string format will need updating. * **midaz:** Ledger service is now enabled by default, replacing the separate onboarding and transaction services. - ledger.enabled now defaults to true - onboarding and transaction services are automatically disabled when ledger is enabled - Existing deployments using onboarding/transaction need to explicitly set ledger.enabled=false to maintain current behavior Migration guide: docs/UPGRADE-5.0.md * **rabbitmq:** Default Rabbitmq no longer uses the bitnami chart. Persistent volume claims from the bitnami Statefulset may not be reused automatically * **midaz:** chart bump version BREAKING CHANGE: The REDIS_PORT environment variable has been removed its value must now be included directly in the REDIS_HOST variable. * **midaz:** remove redis port env var BREAKING CHANGE: The REDIS_PORT environment variable has been removed its value must now be included directly in the REDIS_HOST variable. * **valkey:** Valkey no longer uses StatefulSet. Persistent volume claims from StatefulSet will not be reused automatically. * feat!(midaz): remove onboarding and transaction services from midaz chart ([41e88df](https://github.com/LerianStudio/helm/commit/41e88df0368450368cea9a001129d3d6d0f8bd02)) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](https://github.com/LerianStudio/helm/commit/9180459802ccf1dd2ffa98bdd4ce198aed6a920a)) * **chart:** add adapter-lerian template directories ([1882905](https://github.com/LerianStudio/helm/commit/1882905b6e081077caddbad56c9894a2ec2d52ee)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](https://github.com/LerianStudio/helm/commit/328b236a9a5a207e1fe2cd3a11ed1fba5980d662)) * add ALLOW_INSECURE_TLS configuration to multiple charts and update image tags ([e6cfb98](https://github.com/LerianStudio/helm/commit/e6cfb988be25319c0071b3fef2adfc250e251189)) * **values:** add app new version and reference default config ([b972952](https://github.com/LerianStudio/helm/commit/b97295261b87645884b197bbbf8aeea8dd78e452)) * **values:** add app new version and reference default secret ([ef8069c](https://github.com/LerianStudio/helm/commit/ef8069c403b3e7878571ddb3b92ee6f8be2f251f)) * **plugin-fees:** add APPLICATION_NAME, MULTI_TENANT_TIMEOUT, MULTI_TENANT_CACHE_TTL_SEC ([a7b6199](https://github.com/LerianStudio/helm/commit/a7b6199c800795da1300c47fd31412dd3f3b9853)) * **chart:** add auth backend helpers functions ([7248963](https://github.com/LerianStudio/helm/commit/72489636dfd8d57191e4d61da0369d6267b277df)) * **chart:** add auth backend templates ([57fb163](https://github.com/LerianStudio/helm/commit/57fb163b2c7cca15b1006ef493e3ee43b7cc616c)) * **onboarding:** add auth config ([8a055cb](https://github.com/LerianStudio/helm/commit/8a055cb83b9f6a9d9c76ca3343ab6a61c1d1c00c)) * **transaction:** add auth config ([a7ede5b](https://github.com/LerianStudio/helm/commit/a7ede5b29f6c69752cffad6970d5d73bd21062cb)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](https://github.com/LerianStudio/helm/commit/003b78320a2ad1ca2d067317027b95d641433434)) * **br-sta:** add background worker Deployment ([f8b02f5](https://github.com/LerianStudio/helm/commit/f8b02f5154ee80224b5f1b6a9762ee7cc266ccee)) * **plugin-br-pix-switch:** add bootstrap Jobs for postgres + mongodb ([79f12c7](https://github.com/LerianStudio/helm/commit/79f12c79a33464e64dd4c0dbfdab29ec116e3db9)) * add bootstrap-mongodb.yaml for idempotent MongoDB user/db provisioning ([c36e378](https://github.com/LerianStudio/helm/commit/c36e378b82a709e8ec50f659a19f9e654c3792b1)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](https://github.com/LerianStudio/helm/commit/cc65a6db6631ceaf62708a777f888d7c59ddb05e)), closes [#99](https://github.com/LerianStudio/helm/issues/99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](https://github.com/LerianStudio/helm/commit/82c420cd0185df870a631c749dd0d21ff84b9f05)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](https://github.com/LerianStudio/helm/commit/5d6bf6a3d210db1f257a2f7e116f47a886eb754f)), closes [#1607](https://github.com/LerianStudio/helm/issues/1607) * **br-sta:** add br-sta-helm chart ([b082dda](https://github.com/LerianStudio/helm/commit/b082ddad46f232749d3efd0babd24f49f0eec76f)) * **pipe:** add branch develop to generate beta release ([2990c0e](https://github.com/LerianStudio/helm/commit/2990c0e71d5b6773321b67c986b0a5a32b970cd3)) * **ci:** add chart standard validation and render gate ([9d4ab59](https://github.com/LerianStudio/helm/commit/9d4ab5980484335942ae7827954abcc0c97f633c)) * **fetcher:** add common configmap and secrets templates for shared configuration ([7f75dd0](https://github.com/LerianStudio/helm/commit/7f75dd089489faac6e797e657ea10a34f2e876d7)) * **midaz:** add conditional deployment logic for onboarding service and update ingress routing ([f2e3c76](https://github.com/LerianStudio/helm/commit/f2e3c76aa1fe0928439bf2cfbff401bd30078714)) * **midaz:** add conditional deployment logic for transaction service ([df12827](https://github.com/LerianStudio/helm/commit/df128273a67ebc2d6572c3bd0b798d534933489b)) * **plugin-smart-templates:** add configmap annotations ([adac247](https://github.com/LerianStudio/helm/commit/adac247e5d389e8587c8e5867d19547ce98bd810)) * **reporter:** add configurable secret for KEDA TriggerAuthentication ([d84a26d](https://github.com/LerianStudio/helm/commit/d84a26d398d1df7a487e053e25cdddc8cc37df88)) * **plugins:** add CRM data source secrets and disable ingress by default ([e262736](https://github.com/LerianStudio/helm/commit/e26273677fd0d683f02d79f7cb082b43e626a377)) * **midaz:** add CRM service with MongoDB integration and complete Kubernetes manifests ([a9368d2](https://github.com/LerianStudio/helm/commit/a9368d2d9a27d7f1278e0ec06ad7a4e25124b2d5)) * add crm ui functions ([3473c00](https://github.com/LerianStudio/helm/commit/3473c0089f1e0c6efe8eb71704e12c0913d07c55)) * add crm ui templates ([8089ad7](https://github.com/LerianStudio/helm/commit/8089ad7e7056b469abf9b07d880356ace2adbc3f)) * add dependencies to midaz helm ([e1e4095](https://github.com/LerianStudio/helm/commit/e1e4095c7e9fc48c69738c0610ee7ad4bd56c12a)) * **plugin-fees:** add deployment mode and readiness timeout settings ([fa5783b](https://github.com/LerianStudio/helm/commit/fa5783bb7cb7e64d32bb4c15c0e32b637aee5bb0)) * **values:** add deployment strategy definitions ([dd93837](https://github.com/LerianStudio/helm/commit/dd9383729db20e4f88265edde5900d35c7dbbafa)) * **console:** add deployment strategy ([0000ab0](https://github.com/LerianStudio/helm/commit/0000ab0a6c088e2eca167f396bff859638b478e4)) * **onboarding:** add deployment strategy ([220274b](https://github.com/LerianStudio/helm/commit/220274beb453eb54ec6e9c3a6020016cf8a7be91)) * **transaction:** add deployment strategy ([65076f4](https://github.com/LerianStudio/helm/commit/65076f421904b98f46329ff40cb31f7cf409476b)) * add doc ([5593a96](https://github.com/LerianStudio/helm/commit/5593a96ff02c3b968c4a703a5a7ccc2afa53be04)) * add doc ([97daf1e](https://github.com/LerianStudio/helm/commit/97daf1ecb4c2a51415c58cf0bc815a36d1e52cc3)) * add doc ([2f02d2e](https://github.com/LerianStudio/helm/commit/2f02d2ef0fad7ad80fe131253a8e232b66499430)) * add doc ([6e20f92](https://github.com/LerianStudio/helm/commit/6e20f92c1c31fa26560edfa77fec348783564de2)) * **product-console:** add dynamic OTEL host injection support ([4f473e9](https://github.com/LerianStudio/helm/commit/4f473e94c54955f11383f7f439a5c8d2454b47ae)) * **midaz:** add external OTEL collector support ([f38af29](https://github.com/LerianStudio/helm/commit/f38af29a9900c118d72e07481487b146e9dab02e)) * add external secret support for RabbitMQ and Postgres definitions in Helm chart ([0994db6](https://github.com/LerianStudio/helm/commit/0994db63ae8857fc4fd5540164b9334df58b3415)) * add external secret support paramters to values file ([e35c63e](https://github.com/LerianStudio/helm/commit/e35c63efac785fb1b5fa1c31643f1a3df1b143d4)) * add external secret support to deployment ([363ee02](https://github.com/LerianStudio/helm/commit/363ee020e997e8da492cfb284b10d33c08ab780a)) * add external secret support to worker job ([58809e1](https://github.com/LerianStudio/helm/commit/58809e1efded5775234e5bdc3018d3584694a7df)) * add external secret support to worker values file ([4e62d4f](https://github.com/LerianStudio/helm/commit/4e62d4fb02c8f17009f40e6f2d04d837d404feec)) * **scripts:** add fallback to root image.tag in chart version update script ([4fdcb77](https://github.com/LerianStudio/helm/commit/4fdcb77603969e24faab5a82527abddcb2517534)) * **plugin-fees:** add fees ui env var ([c1e52e1](https://github.com/LerianStudio/helm/commit/c1e52e1e525d168adce6be38a70470facaf18590)) * **fetcher:** add fetcher helm chart with manager and worker components ([363c0cf](https://github.com/LerianStudio/helm/commit/363c0cfd5b7c0049be06358ab34e8e4619897a98)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](https://github.com/LerianStudio/helm/commit/ed1a9c9152faf12c7d69c480992e41d4c297a422)) * **doc:** add general readme and moving midaz readme ([41f11fe](https://github.com/LerianStudio/helm/commit/41f11fe167c213be99413d4b0b82a9becbe482f6)) * add gpg key and clean file ([81630ce](https://github.com/LerianStudio/helm/commit/81630ce857b0e00600b63d602c3dec4df45eab61)) * add gRPC port configuration for transaction service ([1f9f761](https://github.com/LerianStudio/helm/commit/1f9f7612cf82f8dd2803c00d665f461fc13c2e12)) * add gRPC port to transaction service ([30351b9](https://github.com/LerianStudio/helm/commit/30351b9dc6622ed4ab3ac1010c777d518537c999)) * **plugins:** add Helm chart for BC Correios plugin ([81bc419](https://github.com/LerianStudio/helm/commit/81bc41948bc410bf1952ab23081e2d205bf1f51f)) * add helm chart for BR PIX direct JD plugin with PostgreSQL dependency ([0adcba2](https://github.com/LerianStudio/helm/commit/0adcba27ed3fd6158b4632d3223f4a2f211545fb)) * add Helm chart for plugin-br-bank-transfer-jd ([2ee97b9](https://github.com/LerianStudio/helm/commit/2ee97b9986a7fc2821c3c3935e34eb183f02daf8)) * **br-ccs:** add Helm chart ([0fa5f89](https://github.com/LerianStudio/helm/commit/0fa5f89f9d91e28a1de4c1c300d8870bb145e7d6)) * **plugin-br-payments:** add helm chart ([85cfe2a](https://github.com/LerianStudio/helm/commit/85cfe2a00eb299bc252b6fe6c496c4166d5cd390)) * **plugin-br-pix-switch:** add helm chart ([8977d4b](https://github.com/LerianStudio/helm/commit/8977d4b73d6f9d3df64153b89f976279e7a3a43d)) * add helm hook weights and delete policies for postgres and rabbitmq resources ([1bb5bf8](https://github.com/LerianStudio/helm/commit/1bb5bf8e3a02b547123d9e0a395163adca958729)) * add Helm hooks to onboarding and transaction ConfigMaps for pre-install/upgrade ordering ([a163833](https://github.com/LerianStudio/helm/commit/a163833ccd5c476f2a624252cea0169780fd55fd)) * add helm-compose config and karpenter node ([9a52467](https://github.com/LerianStudio/helm/commit/9a52467339718fd820e76355e97113cb6104fc2c)) * **plugin-br-pix-indirect-btg:** add HMAC validation and mTLS BTG config envs ([d1563c4](https://github.com/LerianStudio/helm/commit/d1563c48a40a1ef1dc9e8fd387203dc91c188261)) * add IAM Roles Anywhere sidecar support for fetcher and matcher ([a67b756](https://github.com/LerianStudio/helm/commit/a67b756fed6c39b62dfacda1f2ae34fecbd2b12e)) * **plugin-fees:** add IAM Roles Anywhere sidecar support ([d9621a1](https://github.com/LerianStudio/helm/commit/d9621a1da9d48355713f8d53ee881e01f8350143)) * **reporter:** add IAM Roles Anywhere sidecar support ([2b76810](https://github.com/LerianStudio/helm/commit/2b7681083e0bd731d3fc2e8605b1c0a02a3cc975)) * add imagePullSecrets and resource limits to nginx deployment ([73edcda](https://github.com/LerianStudio/helm/commit/73edcda18eb3f27c3c62ade6db7f353e8fdaa78c)) * **plugin-br-pix-switch:** add in-cluster sibling URL defaults ([c1f7b8f](https://github.com/LerianStudio/helm/commit/c1f7b8fdc42bae4bb588987df29a5e32a3969712)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](https://github.com/LerianStudio/helm/commit/1817beee8aad91199d16858f7829edf1470d7433)) * add index to semantic-release versioning ([4c98cf1](https://github.com/LerianStudio/helm/commit/4c98cf120e280bcdb252fed83aab285f1fa0f5e8)) * add index to semantic-release versioning ([af4c306](https://github.com/LerianStudio/helm/commit/af4c306d8e6ece405b451407c941eb1bf4eff5bd)) * add ingress template ([44b73b2](https://github.com/LerianStudio/helm/commit/44b73b2e3d2330af536435194930132e65d2ecc2)) * **ingress:** add ingress templates ([020369a](https://github.com/LerianStudio/helm/commit/020369a13b9696eb2e6e12c389ed211d2feb95f1)) * **ingress:** add ingress templates ([816fcee](https://github.com/LerianStudio/helm/commit/816fcee9d905744bcd47003fb16b974104c2d2d3)) * add init container in casdoor to check if the database is ready ([#48](https://github.com/LerianStudio/helm/issues/48)) ([8337771](https://github.com/LerianStudio/helm/commit/833777165ff6ed1d4183cc48757acd2d8b7ddd83)) * add initial helm chart for BR Pix Direct JD plugin ([2f097d0](https://github.com/LerianStudio/helm/commit/2f097d0f713783cf599888c880fc82fa6eec0ea3)) * **underwriter:** add initial Helm chart for Underwriter service ([7bbba1a](https://github.com/LerianStudio/helm/commit/7bbba1afcb883a261ef121710a9f5d0a854326ff)) * **plugin-br-pix-indirect-btg:** add INTERNAL_WEBHOOK_SECRET and bump to 1.0.0-rc.26 ([e5ef789](https://github.com/LerianStudio/helm/commit/e5ef7890094698e5bd5faceacc1e56746e0f2305)) * **dependencies:** add job to apply default definitions to external rabbitmq host ([c91db90](https://github.com/LerianStudio/helm/commit/c91db90f8311960f818d7f0b0046bc9eda1a4e6b)) * add Kubernetes manifests for PIX QR code service deployment ([8b1881f](https://github.com/LerianStudio/helm/commit/8b1881f157b140d02bed50cd6d7e70e67b074cb1)) * add Kubernetes manifests for plugin-br-pix-direct-jd job deployment ([9b67a67](https://github.com/LerianStudio/helm/commit/9b67a67fd073657a1c1dd7751288275fe24619d0)) * **midaz:** add ledger service configuration and restructure values files ([d4332f9](https://github.com/LerianStudio/helm/commit/d4332f9a122f4cf9045f76c8ce1e76dd080beda6)) * **midaz:** add ledger service with unified API and migration helpers ([0ee6e83](https://github.com/LerianStudio/helm/commit/0ee6e83a4a04e185585e7391f9ff7271ef8546b1)) * **new:** add lender chart ([#1672](https://github.com/LerianStudio/helm/issues/1672)) ([1540885](https://github.com/LerianStudio/helm/commit/15408857300206c791787cae57a3316b77ea876f)) * **doc:** add lerian banner ([35b904a](https://github.com/LerianStudio/helm/commit/35b904afb9d910e51b1508693aa7c3ce06ea9a75)) * add logical replication slot and improve SQL formatting ([ec2cfee](https://github.com/LerianStudio/helm/commit/ec2cfee6dab3fc571fb74e7e662c08000836a893)) * **plugin-fees:** add M2M and AWS_REGION env vars to chart ([f026d18](https://github.com/LerianStudio/helm/commit/f026d18e6b053f778b26d24dc1932a91f8c689d5)) * **fetcher:** add manager component Kubernetes manifests with full deployment configuration ([12ec0dd](https://github.com/LerianStudio/helm/commit/12ec0ddca52e9046324204ec7b717b87296e434b)) * **matcher:** add matcher helm chart ([6a235c1](https://github.com/LerianStudio/helm/commit/6a235c1fde13dc7ae70b3e719ed9b7dab4e3bb28)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](https://github.com/LerianStudio/helm/commit/ee6841dd7a18305d0c3018c674ac2e04e591128e)) * **matcher:** add missing env vars for matcher v1.0.0+ ([0bf1e7f](https://github.com/LerianStudio/helm/commit/0bf1e7f71c9dbb9ffea852f369def1d61ebfffac)) * **plugin-br-pix-indirect-btg:** add missing inbound webhook entity envs and security tier config ([ca62f49](https://github.com/LerianStudio/helm/commit/ca62f49564f7bf5c543028ec639870a762410605)) * **charts:** add missing NEU app env vars to reporter and fetcher ([8d4db13](https://github.com/LerianStudio/helm/commit/8d4db13cd6f1c1ebda31797c799b6d2ecebc7e5c)) * **product-console:** add MONGO_PARAMETERS env var for TLS/auth options ([164468c](https://github.com/LerianStudio/helm/commit/164468c7bbe92e069a3d4d25bd05eef17f8827c6)) * **plugin-br-pix-switch:** add mongodb + rabbitmq subchart dependencies ([0e9b3d4](https://github.com/LerianStudio/helm/commit/0e9b3d42d6cadd7e93d1ebd7e3d353d58c57f2cf)) * **console:** add mongodb environments ([256757e](https://github.com/LerianStudio/helm/commit/256757eb38cff41510d114572f4d18d92569fd6f)) * **console:** add mongodb environments ([88db3ba](https://github.com/LerianStudio/helm/commit/88db3bad7e8f2ec4fe5056980cbb7e41cdd02c38)) * **console:** add mongodb environments ([7c86ca0](https://github.com/LerianStudio/helm/commit/7c86ca00a65680a99b642d976ac36578c39c31f9)) * **console:** add mongodb port ([73ec8e2](https://github.com/LerianStudio/helm/commit/73ec8e27a619c333a6f2cfe60fcc0c8d49fd8295)) * **plugin-fees:** add MULTI_TENANT_ALLOW_INSECURE_HTTP to configmap template ([48cf209](https://github.com/LerianStudio/helm/commit/48cf20922c92bf3ece54122be84251913497c9a4)) * **plugin-fees:** add multi-tenant support and fix AVP secret rendering ([#1229](https://github.com/LerianStudio/helm/issues/1229)) ([04e12ac](https://github.com/LerianStudio/helm/commit/04e12acc2a1f0188fe78b227896880aa8f60bd28)) * **flowker:** add multi-tenant support and missing env vars ([9892b7d](https://github.com/LerianStudio/helm/commit/9892b7d9635f3b29d1159eccc60e5fd891d2badc)) * **tracer:** add multi-tenant support to chart (2.1.0-beta.1) ([a4c4a7e](https://github.com/LerianStudio/helm/commit/a4c4a7e62e71016696b0fc166eee66df2c76d61e)) * **console:** add new console env vars ([cf974b8](https://github.com/LerianStudio/helm/commit/cf974b8d696f9eb89e951fd144632d0e5817291f)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](https://github.com/LerianStudio/helm/commit/576992f928f6de2d88c7008b98130836801fe855)) * **plugin-fees:** add new env vars for v3.1.0 ([f824431](https://github.com/LerianStudio/helm/commit/f8244314c78d1bfc76a3a83dce58e5e29d330b17)), closes [#1195](https://github.com/LerianStudio/helm/issues/1195) * **console:** add new env vars ([a228e39](https://github.com/LerianStudio/helm/commit/a228e39c856f9f4b561d55949edcaa051d5b9af9)) * **console:** add new env vars ([8b8d76f](https://github.com/LerianStudio/helm/commit/8b8d76f525a96f36c1d694c65db51ed7280a68a5)) * **dependencies:** add new parameters to chart file ([#44](https://github.com/LerianStudio/helm/issues/44)) ([4796070](https://github.com/LerianStudio/helm/commit/4796070cb5ad4c32d28bbb7ffc085b5fb3aeb495)) * **doc:** add new version ([39c0a71](https://github.com/LerianStudio/helm/commit/39c0a71dacbe9c80aa095a580c5d42d153b0947b)) * **doc:** add new version ([f864ad2](https://github.com/LerianStudio/helm/commit/f864ad20353a26f7dbe525332ef3b54f6af6fb74)) * add nginx configuration templates ([5755baa](https://github.com/LerianStudio/helm/commit/5755baaef5a346db79dfb78c7638b74c928c442f)) * add nginx dependence for midaz-console ([baa0cd4](https://github.com/LerianStudio/helm/commit/baa0cd4e4a209c520a2cb8e7de67c154f8a39e24)) * **midaz:** add nginx paramters to midaz-console ([84ff310](https://github.com/LerianStudio/helm/commit/84ff3103d5cd01da01c64c15eec4a83c5df66f17)) * **fetcher:** add OpenTelemetry HOST_IP injection support ([0ea3d75](https://github.com/LerianStudio/helm/commit/0ea3d7570288ab2e6e99a8f81564b031e11af626)) * add option to use existing secrets in helm chart ([f810082](https://github.com/LerianStudio/helm/commit/f810082fe8ce19eb69823f12b92345e418bb68d8)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](https://github.com/LerianStudio/helm/commit/c95e7f23f7f38a451efde7c39371ea987f0f0966)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](https://github.com/LerianStudio/helm/commit/9bc7afc09bf929122e5437b59da074b91971185d)) * add plugin crm ui values ([493e4eb](https://github.com/LerianStudio/helm/commit/493e4eba4bf4457bbd75cf21334d33f16267b833)) * add plugin crm ui values ([c31de8d](https://github.com/LerianStudio/helm/commit/c31de8d30aedca6c9b4cc91b096c1e76a92a1a35)) * add plugin fees ui templates ([3451909](https://github.com/LerianStudio/helm/commit/345190944d3648c0ebae6e47890967cfefcc7e49)) * add plugin to semantic-release ([4ec01d8](https://github.com/LerianStudio/helm/commit/4ec01d8aceef35145239ae5b513977531798b329)) * add plugin to semantic-release ([d102c52](https://github.com/LerianStudio/helm/commit/d102c52039f5c1262f9dc00eb07728d226e656ef)) * add plugin to semantic-release ([a26017e](https://github.com/LerianStudio/helm/commit/a26017e363c87530e30e96e9b5fdc2581c19bb49)) * add plugin to semantic-release ([b001de0](https://github.com/LerianStudio/helm/commit/b001de0f2fad2b2b1cf05b5c0db9f48aa1af5265)) * add plugin to semantic-release ([f786586](https://github.com/LerianStudio/helm/commit/f7865866e41aad38bdf343e45fce351fa2af2a9b)) * add plugin to semantic-release ([13f0af3](https://github.com/LerianStudio/helm/commit/13f0af38e59cf9fb7a3596293a83dd3e6b9757a0)) * add postgres definitions and update security settings for console deployment ([6371b55](https://github.com/LerianStudio/helm/commit/6371b5568b94bc8f6fe57817132dee4644870ef3)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](https://github.com/LerianStudio/helm/commit/b9f5bea547af1631342c92e49f54e1133ce6b2f7)) * **migrations:** add PostgreSQL migrations job configuration and template ([f6e4695](https://github.com/LerianStudio/helm/commit/f6e469519784f6f301929066c55a152698e16d77)) * add pre-install and pre-upgrade hooks to onboarding and transaction secrets ([8199e92](https://github.com/LerianStudio/helm/commit/8199e92a9904adfc89adc6acf65a367d6c42b7e7)) * **product-console:** add product-console helm chart ([c956078](https://github.com/LerianStudio/helm/commit/c956078bd0959c13f42a018aa52b80862781b11d)) * **fetcher:** add RabbitMQ bootstrap job with definitions for external RabbitMQ instances ([90c5edc](https://github.com/LerianStudio/helm/commit/90c5edc90b4798ed0d31e56ca9479095889a521e)) * add RabbitMQ consumer credentials configuration in values-template ([da5c625](https://github.com/LerianStudio/helm/commit/da5c6255dfc8a2a671f9dfb88bb511d0536ddd6e)) * add rate limit configuration to midaz, fetcher, and reporter charts ([db2ec46](https://github.com/LerianStudio/helm/commit/db2ec461f6df0cc003cfe05fe4dd33df08d27d4e)) * add RBAC and nginx restart capability to service discovery job ([236e62f](https://github.com/LerianStudio/helm/commit/236e62f776e356b716fbd3059c37377cdbd154b6)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](https://github.com/LerianStudio/helm/commit/9d3645db0ae9e53f89341ad21c28aa38720d6cc1)) * **pipe:** add release step for ghcr ([f0e4f3f](https://github.com/LerianStudio/helm/commit/f0e4f3f5221b392bb68b2a5f87aa85facc5cfbee)) * **plugin-br-pix-indirect-btg:** add required validation for INTERNAL_WEBHOOK_SECRET ([df410e2](https://github.com/LerianStudio/helm/commit/df410e2d27b21a724447b44d50f9faaed7796be6)) * **plugin-fees:** Add SA template Fees ([14af5bd](https://github.com/LerianStudio/helm/commit/14af5bdd8e0cb45747c5d23797ed10ac6f4a96a3)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](https://github.com/LerianStudio/helm/commit/4dfe5ba2d15f5e59c9065a65e58a6093de73ca98)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](https://github.com/LerianStudio/helm/commit/df8f89fa55b45336befb14cbaa49eeb3b36a559c)) * **console:** add secrets ([ad89e3b](https://github.com/LerianStudio/helm/commit/ad89e3ba7bd1713686bc0546be1e6b11341b10da)) * add security context and service account to nginx deployment ([3eaa99e](https://github.com/LerianStudio/helm/commit/3eaa99e8ecf17e3992e0c952699c2c111cf3aac3)) * **chart:** add security context to plugin identity ([47b48fc](https://github.com/LerianStudio/helm/commit/47b48fc9ec49f706519fceb4a7007c0179f62317)) * **pipe:** Add semantic changelog ([8c65e59](https://github.com/LerianStudio/helm/commit/8c65e5970101edc9ac621ec30b783bbc4fc3225c)) * **pipe:** Add semantic changelog ([452b6e7](https://github.com/LerianStudio/helm/commit/452b6e78b97a10aa4cd94daf5c95cd1545dc8222)) * **pipe:** Add semantic changelog ([c54115e](https://github.com/LerianStudio/helm/commit/c54115ebf8bd43a0dc8d41233d1100ac136ba8c3)) * **pipe:** Add semantic changelog ([d9befbb](https://github.com/LerianStudio/helm/commit/d9befbb65561716987a9825587f5ac0c9b63be3b)) * **ci:** Add Semantic Release changelog ([6537310](https://github.com/LerianStudio/helm/commit/6537310682b459b7f9fd48ed3c18dd739a816b0f)) * add service discovery job to plugins ui ([2bdaf78](https://github.com/LerianStudio/helm/commit/2bdaf789279b7cbefef51dbc4ad4db219325df73)) * **reporter:** add ServiceAccount annotations support for IRSA ([3685103](https://github.com/LerianStudio/helm/commit/3685103f9547e595667f85a9267272e337f3b077)) * **fetcher:** add ServiceAccount support for worker ([aa616c7](https://github.com/LerianStudio/helm/commit/aa616c7e00827621e525f75e3eb23c44fa2c9993)) * add step to update gh-pages ([bd762c7](https://github.com/LerianStudio/helm/commit/bd762c72ead853758a349d52913a63b45ed40a5c)) * add step to update gh-pages ([ddffd1b](https://github.com/LerianStudio/helm/commit/ddffd1b3dfbd179e26958361965f93a62273af07)) * **charts:** add streaming-hub Helm chart ([#1569](https://github.com/LerianStudio/helm/issues/1569)) ([637014c](https://github.com/LerianStudio/helm/commit/637014cf233a763fa4e9fd8c48bdaa5a148cd70d)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](https://github.com/LerianStudio/helm/commit/8f279f4abb834de38ef176958a65874878187619)) * **midaz:** add support to external screts ([ab13b87](https://github.com/LerianStudio/helm/commit/ab13b878fdf8c280dc9e95cf015a459ce8b1edc6)) * **tracer:** add tracer helm chart ([275c30e](https://github.com/LerianStudio/helm/commit/275c30e44dcc66052cfc459e997dd0618e5ca766)) * add transaction gRPC configuration and update service versions ([cb48384](https://github.com/LerianStudio/helm/commit/cb4838437068d4e616c864c7cd37340399c0f504)) * **midaz:** add user consumer config to rabbitmq ([fb28359](https://github.com/LerianStudio/helm/commit/fb28359f8a4634317aeebd56e40af1a9083eb857)) * **plugin-br-pix-indirect-btg:** add validation to ensure INTERNAL_WEBHOOK_SECRET matches ([0f485b2](https://github.com/LerianStudio/helm/commit/0f485b225b9b5cd23e01e6154770550df8a69043)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](https://github.com/LerianStudio/helm/commit/3f5fe0bc8bb7db528adecf06bb7756f0367e8199)) * **plugin-smart-templates:** add valkey to smart templates chart ([709876b](https://github.com/LerianStudio/helm/commit/709876bb3b4d9c61a301d554f2f093615ad91084)) * add values template file ([7252f36](https://github.com/LerianStudio/helm/commit/7252f36fe7070fe18675073c21bb9269443270e8)) * **matcher:** add values-template and rabbitmq definitions ([3063245](https://github.com/LerianStudio/helm/commit/30632451da1ae248b1eeaf1dce680411b075f334)) * **matcher:** add VERSION env var and OTEL support ([cee8f96](https://github.com/LerianStudio/helm/commit/cee8f9682f769b77f6d2a5d52964b53dc92f9253)) * **plugin-br-pix-switch:** add wait-for-dependencies init container ([281226e](https://github.com/LerianStudio/helm/commit/281226e570ce08ce0ba412525986cb0766df77a2)) * **fetcher:** add worker component Kubernetes manifests with deployment, configmap and secrets ([fd8d8f3](https://github.com/LerianStudio/helm/commit/fd8d8f325262e945ed1e738efea2558e5ce9e2c6)) * add worker reconciliation config ([596c5a9](https://github.com/LerianStudio/helm/commit/596c5a91ed1fd498a7efc964f65cad94cc6b47c8)) * **console:** adds new env vars ([473cf5a](https://github.com/LerianStudio/helm/commit/473cf5a8d681e42c9ad8318b42b08dbea1e3e045)) * ajuste utilização recursos console ([44c7e64](https://github.com/LerianStudio/helm/commit/44c7e641170ad5e9b0a3629971c2cdc731059928)) * allow custom nginx configmap names and update plugins.conf path to snippets directory ([fe69b7b](https://github.com/LerianStudio/helm/commit/fe69b7b26b86c85a8d916afae4c9c9b009d8ba0d)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](https://github.com/LerianStudio/helm/commit/6521ba7d0092d6943eedd5021d36008c9e46ff5f)) * **plugin-br-pix-switch:** auto-derive OTEL service version + node-IP OTLP endpoint ([15e6196](https://github.com/LerianStudio/helm/commit/15e6196cf549401084b7c6a1d7afd55c13f194b5)) * **reporter,fetcher:** auto-set VERSION and OTEL_RESOURCE_SERVICE_VERSION from image tag ([bcc28f1](https://github.com/LerianStudio/helm/commit/bcc28f1bdc02b51347e677a8d26ac5ab7d7c40b6)) * **plugin-br-pix-switch:** auto-wire URLs to in-cluster subcharts ([561b398](https://github.com/LerianStudio/helm/commit/561b39871e2a17028eb56b9f3c0490ee74c5df43)) * **plugin-access-manager:** bump auth version ([12d5453](https://github.com/LerianStudio/helm/commit/12d54531235c76ccb25de1e976336505a0c51c91)) * **plugin-access-manager:** bump auth version ([10b5e4c](https://github.com/LerianStudio/helm/commit/10b5e4c9d7cc99ed93ff254b3e5c2632df25b9c6)) * **plugin-access-manager:** bump auth version ([90c6906](https://github.com/LerianStudio/helm/commit/90c6906ac94512dc14308f871aa4ed82717de49d)) * **midaz:** bump chart version BREAKING CHANGE: The REDIS_PORT environment variable has been removed its value must now be included directly in the REDIS_HOST variable ([bb157a4](https://github.com/LerianStudio/helm/commit/bb157a4472446033b94ab96837433e4df160555f)) * casdoor bump version ([bf5e28c](https://github.com/LerianStudio/helm/commit/bf5e28c0d3a259c192e94023fe1701bcca3d4fe4)) * **midaz:** config internal collector in midaz ([07d310e](https://github.com/LerianStudio/helm/commit/07d310ef840b1b95f86b6bdf1f75eba1a7e5b64a)) * **midaz:** config internal collector in midaz ([fb7d829](https://github.com/LerianStudio/helm/commit/fb7d8290ad20cb4e92ccd7eea19c07bb46b46bc7)) * **chart:** configure pdb to auth backend ([112bc47](https://github.com/LerianStudio/helm/commit/112bc47d72db94b57e81138297d973cb31d4ddf6)) * **helm:** create chart file to plugin crm ([69b01c8](https://github.com/LerianStudio/helm/commit/69b01c868752eb91973e2d292eb2e7ffaa57c1e0)) * **helm:** create chart file to plugin-fees ([38a0e81](https://github.com/LerianStudio/helm/commit/38a0e81c29d53bb81bb1895869b058942bc1d116)) * create chart midaz opensource ([afeadcf](https://github.com/LerianStudio/helm/commit/afeadcf46aef60af8b74055695a55fc00131f029)) * **helm:** create chart templates to plugin crm ([777ea2f](https://github.com/LerianStudio/helm/commit/777ea2fa1582d1530fbc4946c4ef184ae90598e9)) * **chart:** create chart templates to plugin-fees ([adabbaa](https://github.com/LerianStudio/helm/commit/adabbaaf405b471b111abe208408fce9c0772e99)) * **chart:** create chart templates to plugin-fees ([303caf0](https://github.com/LerianStudio/helm/commit/303caf06a48ff63e20fcdd13fd2c5d0629aae33c)) * **helm:** create doc to plugin crm ([4cbaa9d](https://github.com/LerianStudio/helm/commit/4cbaa9d4e8377260508c5687f292cfec8dbeee36)) * **plugin-smart-templates:** create functions to plugin-smart-templates ui ([d660619](https://github.com/LerianStudio/helm/commit/d6606192c1c6f0c0bd404e3b44c660079ce653b9)) * **plugin-smart-templates:** create helm templates to plugin-smart-templates ui ([a06f9c0](https://github.com/LerianStudio/helm/commit/a06f9c06c2d89de0a7f8ce6ba845057a8af3c268)) * **dependencies:** create init config file ([bddd6f0](https://github.com/LerianStudio/helm/commit/bddd6f025782740e3fc021ae4d7e64c0e78fd580)) * **dependencies:** create init sql file ([dcca103](https://github.com/LerianStudio/helm/commit/dcca103dcf229a307833685ad04711f662099219)) * **midaz:** create internal collector helm chart ([d17a5a4](https://github.com/LerianStudio/helm/commit/d17a5a45388428c30fa2133a58e275d445b634c7)) * **dependencies:** create job to apply migrations in casdoor db ([5a74bcc](https://github.com/LerianStudio/helm/commit/5a74bcc6ca8691159c4a3d11826a5afb34909e49)) * **values:** create pdb definitions ([fe34974](https://github.com/LerianStudio/helm/commit/fe34974aaa497979e0d13b610b77b4d1d7895f2f)) * **console:** create pdb template ([102c56a](https://github.com/LerianStudio/helm/commit/102c56a6e697623317585b8808f09f3cb7458882)) * **onboarding:** create pdb template ([8bc0d48](https://github.com/LerianStudio/helm/commit/8bc0d489407c8c5181a20f2c731e5abc7946b8b6)) * **transaction:** create pdb template ([738f5d3](https://github.com/LerianStudio/helm/commit/738f5d3ff33cc62f155186af1514340fa3133503)) * **chart:** create plugin access manager auth templates ([2fdd9ac](https://github.com/LerianStudio/helm/commit/2fdd9ac466966c5557757afae07a52f9894240fd)) * **chart:** create plugin access manager chart file ([094eecc](https://github.com/LerianStudio/helm/commit/094eeccff09029260104c7428a254c25260d20d6)) * **chart:** create plugin access manager identity templates ([c52068d](https://github.com/LerianStudio/helm/commit/c52068d228e3a79bbf4904e9823fb29407694add)) * **chart:** create plugin access manager templates ([c4221ad](https://github.com/LerianStudio/helm/commit/c4221adf91b52acc3c590d9d7b1f8db314f01d88)) * **values:** create plugin access manager values file ([b1727d0](https://github.com/LerianStudio/helm/commit/b1727d0f162fb1c464b35559f5684740a5af819e)) * create plugin fees ui functions ([0d2c127](https://github.com/LerianStudio/helm/commit/0d2c127d3d4f1aed530a864937e4e0e5fe7c8332)) * **plugin-smart-templates:** create secret to plugin-smart-templates ui ([552d061](https://github.com/LerianStudio/helm/commit/552d06115d589ceb41ac5d201fe972e82fc4c588)) * **plugin-smart-templates:** create values defintions to plugin-smart-templates ui ([48a25ca](https://github.com/LerianStudio/helm/commit/48a25ca3f4d889ba827a3674a284a563dbcbb105)) * **helm:** create values file to plugin crm ([de6b154](https://github.com/LerianStudio/helm/commit/de6b1547947f91d580a9ff5f7fb14c1e5efa4d0d)) * **values:** create values file to plugin-fees ([304f228](https://github.com/LerianStudio/helm/commit/304f22871b76180f4b299daa3ecaac06571ffd92)) * **values:** create values file to plugin-fees ([f383281](https://github.com/LerianStudio/helm/commit/f383281421b709744823d9de1bc053288ab6d747)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](https://github.com/LerianStudio/helm/commit/9b6537872ce115d4c086947959d8395c44829910)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](https://github.com/LerianStudio/helm/commit/055b42888c1a2ef394eb9298f85136a0b530bcf2)) * **plugin-br-pix-switch:** default DEPLOYMENT_MODE to byoc (1.1.0-beta.3) ([aa12385](https://github.com/LerianStudio/helm/commit/aa12385a12d159121c021f53350ebac3f90b3668)) * **plugin-br-bank-transfer:** default rate-limit off, expose ALLOW_INSECURE_TLS toggle ([4946cb5](https://github.com/LerianStudio/helm/commit/4946cb505bb4ee121910113c4ca78a74e8a97269)) * dependency update ([18bd991](https://github.com/LerianStudio/helm/commit/18bd9910348f05785a975b38d8b11068f1069407)) * dependency update ([b56d142](https://github.com/LerianStudio/helm/commit/b56d1421e7251dc932d4b025cc6be4be31ee3c42)) * dependency update ([55eb548](https://github.com/LerianStudio/helm/commit/55eb5489f192d16508b7ecfd93bddcf71aa42feb)) * **grafana:** disable grafana ([423a6f5](https://github.com/LerianStudio/helm/commit/423a6f5495c50c4ccae86c5391cb52841af300e8)) * **plugni-fees:** Disable SA create ([4074905](https://github.com/LerianStudio/helm/commit/4074905ddec1dec2c62eab214fdbff1b548ef329)) * **plugin-fees:** enable extra env vars to configmap template ([5f60cea](https://github.com/LerianStudio/helm/commit/5f60ceac653f34a021d0db1a10447113fb693005)) * **plugin-fees:** enable extra env vars to values yaml ([dc626a7](https://github.com/LerianStudio/helm/commit/dc626a7a5825e0afbd1d44c1f56594f3a97f14fe)) * **plugin-crm:** enable extra env vars ([5ea9e2f](https://github.com/LerianStudio/helm/commit/5ea9e2fc7cda9500fe728d4bf2cd877844b666a4)) * **plugin-smart-templates:** enable extra env vars ([c03007b](https://github.com/LerianStudio/helm/commit/c03007bf50902abd45c54d5bee3296450a13d50b)) * enable karpenter node ([02b029d](https://github.com/LerianStudio/helm/commit/02b029d1a18e462be5c5c11c5d0c5f0cceee6122)) * **midaz:** enable ledger service by default ([1abf1f1](https://github.com/LerianStudio/helm/commit/1abf1f1b1944583717002bd23d2fb72fae71a676)) * enable telemetry for onboarding and transaction services ([2497433](https://github.com/LerianStudio/helm/commit/2497433be24d42829985604f47cf983705c05f6e)) * **console:** enforce absolute DNS resolution ([8e519fe](https://github.com/LerianStudio/helm/commit/8e519fe25255119d50ecfef91ca8ab5a01df5f78)) * **onboarding:** enforce absolute DNS resolution ([c471521](https://github.com/LerianStudio/helm/commit/c471521eb53ce2e100f080247c2ff25bc1255650)) * **transaction:** enforce absolute DNS resolution ([1759a5b](https://github.com/LerianStudio/helm/commit/1759a5b1ce44339302482bd5ccabed5056c33a2f)) * **ci:** enforce single-source infra secrets ([3b787d5](https://github.com/LerianStudio/helm/commit/3b787d508ba556c21b036b41ff990245e7258427)) * **lerian-notification:** expose all MULTI_TENANT_* vars via ConfigMap ([756a1f9](https://github.com/LerianStudio/helm/commit/756a1f9c85d570a539866b54f070192d40cb2f59)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](https://github.com/LerianStudio/helm/commit/5df8bab769de86b41d22cc579abbc1d846dddc86)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](https://github.com/LerianStudio/helm/commit/25390d4357f0c0a82106635f1ef3d9b60fcf46f6)) * **midaz:** extend RBAC permissions for discovery service to access replicasets and list/watch deployments ([9285689](https://github.com/LerianStudio/helm/commit/9285689f5bbb1ae361741668834473809cb7c86b)) * **matcher:** finalize matcher helm chart for v1.0.0 ([2be45e9](https://github.com/LerianStudio/helm/commit/2be45e958cbc4fc001831c1f87b11a1aea472d15)) * **ci:** harden validator with collapse gate ([cc324ee](https://github.com/LerianStudio/helm/commit/cc324ee94663baa3228d6b4ed754cc09d0ac4fbf)) * helm doc ([#26](https://github.com/LerianStudio/helm/issues/26)) ([ccb3021](https://github.com/LerianStudio/helm/commit/ccb30211fbd9ab5b1ff5e3151f1f9361d25e3cff)) * improve Helm setup reliability in release workflow ([eb49cc3](https://github.com/LerianStudio/helm/commit/eb49cc348065b87027112371b4496080b25dd4e4)) * **midaz:** improve RabbitMQ bootstrap script with smart URL handling and enhanced logging ([8d99add](https://github.com/LerianStudio/helm/commit/8d99addbd1dec7b570ccdb9fc7f6add52564172d)) * **plugin-br-payments-fakebtg:** initial chart for the BTG provider mock ([e67d89c](https://github.com/LerianStudio/helm/commit/e67d89c3fffa8154989f6d71f65582331fba98d9)), closes [#138](https://github.com/LerianStudio/helm/issues/138) * **lerian-notification:** initial chart ([2a001d4](https://github.com/LerianStudio/helm/commit/2a001d4ba433a61cd3317929cc96045c42561bfd)) * **bootstrap-mongodb:** make app user and roles configurable via values ([5a37252](https://github.com/LerianStudio/helm/commit/5a37252bc760b70a50ad1814d5fb7955065f7400)) * **plugin-access-manager:** make createDatabase configurable ([1574601](https://github.com/LerianStudio/helm/commit/1574601cb8d8a8d2a8cdf9f360dc695f5f102bfb)) * midaz helm chart ([8768a8e](https://github.com/LerianStudio/helm/commit/8768a8e1f97dbe82d0cb96b899c3865e7b9c95c3)) * midaz helm chart ([94b2a6e](https://github.com/LerianStudio/helm/commit/94b2a6eab897bb6c1cd6f336fc9cf12f642ad697)) * **rabbitmq:** migrate from Bitnami chart to groundhog2k chart ([454c850](https://github.com/LerianStudio/helm/commit/454c850bb9bce3b24f62bea34cf65997a55fcf2b)) * **valkey:** migrate from StatefulSet to Deployment ([3854dfe](https://github.com/LerianStudio/helm/commit/3854dfe3430eaf7f4d99e39d032103eca4ff10fd)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](https://github.com/LerianStudio/helm/commit/4d7c3ae0c57167c2f16baf5f7eea3c92e0cd6a28)) * **plugin-br-bank-transfer:** move CLIENT_IDs to secrets ([d3e36c0](https://github.com/LerianStudio/helm/commit/d3e36c03dce5f43305daf1c6da2da4f65a142f76)) * **pipe:** new pipe to deploy all charts ([20629f5](https://github.com/LerianStudio/helm/commit/20629f50ce386463a83ac0ebc0fce367430f04a0)) * **pipe:** new releaserc template ([24dc653](https://github.com/LerianStudio/helm/commit/24dc653adae4f036f7d5b9da044f42c43e9acd09)) * onboarding bump version ([4fc43e7](https://github.com/LerianStudio/helm/commit/4fc43e748f50fc4afd34e475a1c7d7360efaf3bc)) * onboarding rabbitmq protocol variable ([add46ac](https://github.com/LerianStudio/helm/commit/add46ac46bdcf1e629db5f92d4e129f550e93cfb)) * onboarding rabbitmq protocol variable ([01b91e6](https://github.com/LerianStudio/helm/commit/01b91e690ca469e58800047c055c872b90ab00d8)) * onboarding rabbitmq protocol variable ([9980d0c](https://github.com/LerianStudio/helm/commit/9980d0cd82b658b34d9244cc524630222f0cf61e)) * onboarding rabbitmq protocol variable ([3d44fa1](https://github.com/LerianStudio/helm/commit/3d44fa1c77b8442600f272497fd4fe79351aadf9)) * **plugins:** parameterize bc-correios probes following plugin-fees pattern ([82dbb81](https://github.com/LerianStudio/helm/commit/82dbb81fda6cb8611844cabdaff52b9cc65758b1)) * **charts:** parametrize probe path and timing for all charts using /readyz ([c4d15a2](https://github.com/LerianStudio/helm/commit/c4d15a20995b4edbcf11ce8576c1b80b5a05287d)) * **ci:** per-chart values.schema.json generator ([d295433](https://github.com/LerianStudio/helm/commit/d2954334953f15a1db0ee47064d5885bcec89f6b)) * **plugin-br-pix-switch:** per-component command/args for single-image multi-binary support ([d607978](https://github.com/LerianStudio/helm/commit/d607978e45aedec2137b0ecf5505529a08a254cd)) * **plugin-br-pix-switch:** per-component image repository defaults (1.1.0-beta.6) ([48b9d17](https://github.com/LerianStudio/helm/commit/48b9d17c3930e97c3d84355f6c56c39f739913b8)), closes [#137](https://github.com/LerianStudio/helm/issues/137) * plugin auth bump version ([f99a6fb](https://github.com/LerianStudio/helm/commit/f99a6fb0ad500f482703e87bb47ff5a87be857ff)) * plugin identity bump version ([d98f1b5](https://github.com/LerianStudio/helm/commit/d98f1b57ca9d5445651721904a16587d7689241d)) * **midaz:** plugins ui support to console ([17f2376](https://github.com/LerianStudio/helm/commit/17f23766c70f1e1784f7cb83fccff7f54fcd5333)) * **midaz:** plugins ui support to console ([7eced23](https://github.com/LerianStudio/helm/commit/7eced23afd42a256af0f28f308e814058b046f17)) * **midaz:** plugins ui support to console ([495afa4](https://github.com/LerianStudio/helm/commit/495afa420d2395027082a7b8b14fc7402512ede2)) * **midaz:** plugins ui support to console ([3b8ad93](https://github.com/LerianStudio/helm/commit/3b8ad93dfac6f20ab87a23f3c7e1e0eca853c252)) * **midaz:** plugins ui support to console ([3af6680](https://github.com/LerianStudio/helm/commit/3af668074fe67d2c6abf5a9a15dacb906d9200db)) * **midaz:** plugins ui support to console ([8303bad](https://github.com/LerianStudio/helm/commit/8303badc38db540dbbbb60ad0cf6384a3642ca50)) * **midaz:** plugins ui support to console ([d902801](https://github.com/LerianStudio/helm/commit/d90280110322bed7b0b54fd781320c361582ad36)) * postgres replication ([fa57f99](https://github.com/LerianStudio/helm/commit/fa57f99ed9d8dc8a157b776c65a02beb6f3453b4)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](https://github.com/LerianStudio/helm/commit/88686caa6279e4df49206666240e34943a8637ef)) * **plugin-br-pix-switch:** providersIngress for outbound-provider adapters (1.1.0-beta.8) ([061f8b9](https://github.com/LerianStudio/helm/commit/061f8b9ed0bc9ac7d94629980121a32022edc020)) * **plugin-br-pix-switch:** refactor chart to multi-component (1.1.0-beta.2) ([ea1ff08](https://github.com/LerianStudio/helm/commit/ea1ff08c41a4c3f6d94715977f9792d307d9ee1d)) * refactor plugin fees templates folder ([af27cba](https://github.com/LerianStudio/helm/commit/af27cbaaf3255ca7b4bb62acd7cbdc221b3ab2bb)) * **midaz:** remove console service and nginx components ([68be4ac](https://github.com/LerianStudio/helm/commit/68be4aca05f97e0a3bcdf35058dfccf8ee8e192a)) * **doc:** remove old components ([954dd09](https://github.com/LerianStudio/helm/commit/954dd097b1be74841efa6022a94d807e228c6ec4)) * **github:** remove pgbouncer reference ([49924e8](https://github.com/LerianStudio/helm/commit/49924e811d918e8ed136e878bb480da51096d98a)) * **pipe:** remove step commit history ([b0fd599](https://github.com/LerianStudio/helm/commit/b0fd5993ef1eecb84d34759552871d9f1447b7a3)) * **pipe:** remove step commit history ([e42b665](https://github.com/LerianStudio/helm/commit/e42b665d1bda4e9461e08b855e120fcb596c6521)) * **pipe:** remove step commit history ([ed1ec98](https://github.com/LerianStudio/helm/commit/ed1ec98c8132bd84ee4c344cd70ac9da355bf9af)) * **pipe:** remove step commit history ([b8b256d](https://github.com/LerianStudio/helm/commit/b8b256d997e838caea71ced0ed190e24aa73896a)) * **pipe:** remove step commit history ([a56f7c6](https://github.com/LerianStudio/helm/commit/a56f7c6027fe4e5c90f08231b2cab83e1dc4cc30)) * **pipe:** remove step commit history ([323b43a](https://github.com/LerianStudio/helm/commit/323b43aa1b8b73d103cdaba3b692d2bde73ff772)) * rename Smart Templates to Reporter and enhance RabbitMQ config ([1b1c269](https://github.com/LerianStudio/helm/commit/1b1c269a3e43625c48535e7d759dff9fb5b159f8)) * **plugins:** restructur plugins with frontend add support for external secrets and create guide to upgrade ([ea4a669](https://github.com/LerianStudio/helm/commit/ea4a66964a13c4331f7cdd4ade710fe29177a23f)) * **plugin-br-pix-switch:** schema migration Jobs (1.1.0-beta.9) ([8e88410](https://github.com/LerianStudio/helm/commit/8e884103cf1e251711f442cec4055d703626d561)), closes [plugin-br-pix-switch#143](https://github.com/LerianStudio/plugin-br-pix-switch/issues/143) [plugin-br-pix-switch#143](https://github.com/LerianStudio/plugin-br-pix-switch/issues/143) * **plugin-br-pix-switch:** shared multi-path ingresses (1.2.0-beta.1) ([78c74f4](https://github.com/LerianStudio/helm/commit/78c74f4ef0129663ce13ae4e2155927b02140468)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](https://github.com/LerianStudio/helm/commit/75f8cdbbe2335ae44d56833250b8b3c811b7640e)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](https://github.com/LerianStudio/helm/commit/3e18fa66235d61134b20d2d4dfd7da72bbd41495)) * **reporter:** support external KEDA operator ([0f19cbe](https://github.com/LerianStudio/helm/commit/0f19cbecb1208201f6413921a6726e89616a09b1)) * support external secrets for RabbitMQ admin credentials in Helm chart ([76fa832](https://github.com/LerianStudio/helm/commit/76fa832de626e9ad6c8d44fb366c75cdd900f55d)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](https://github.com/LerianStudio/helm/commit/9d8b5e3c4957978ab0896ab9d7a2a7f6bf212bfc)) * **plugin-br-bank-transfer:** template CORS_ALLOWED_ORIGINS/METHODS/HEADERS in configmap ([86eb651](https://github.com/LerianStudio/helm/commit/86eb65124a2e4c5a5590908fe5b6365c825215e8)) * **tracer:** template ENV_NAME in configmap ([50a6f50](https://github.com/LerianStudio/helm/commit/50a6f501b24164485475f64529514293e1e83211)) * transaction bump version ([84028fb](https://github.com/LerianStudio/helm/commit/84028fb3c2be79e976ac9bea48707696db4f40c4)) * transaction rabbitmq protocol variable ([27e075c](https://github.com/LerianStudio/helm/commit/27e075c1b2762d6648ed26c666491c6c039dd0ae)) * transaction rabbitmq protocol variable ([f0f8334](https://github.com/LerianStudio/helm/commit/f0f8334ff61cbcdad9b434e08547dab328fbf2fa)) * transaction rabbitmq protocol variable ([60ff71f](https://github.com/LerianStudio/helm/commit/60ff71f7b07e90ecfdb8c55895225682b25c2694)) * transaction rabbitmq protocol variable ([7fdc26c](https://github.com/LerianStudio/helm/commit/7fdc26c4bcdf7a7ebffe8bc5aaa662964c9a7605)) * **chart:** update app version ([348b0cc](https://github.com/LerianStudio/helm/commit/348b0ccb5fea5042fe08da2af81cbd0b323a7aca)) * **chart:** update app version ([6f40285](https://github.com/LerianStudio/helm/commit/6f402851add6d9898c04e263d5706644645cacb2)) * **helm:** update app version ([fb2f841](https://github.com/LerianStudio/helm/commit/fb2f84162e5951495e2ab12296f6855edb09fce7)) * **midaz:** update app version ([e18a30b](https://github.com/LerianStudio/helm/commit/e18a30b59c5f33cb462d6ac4bdd8c675097f2d9d)) * **values:** update app version ([598ed6d](https://github.com/LerianStudio/helm/commit/598ed6d478240d26ee9baa9560d73db1912ba05d)) * **values:** update apps version and add backend config ([7cb17c2](https://github.com/LerianStudio/helm/commit/7cb17c2225d0863ee655b6ea5fc5532421ffa93d)) * **dependencies:** update auth backend init file ([be72215](https://github.com/LerianStudio/helm/commit/be72215937655d4adb136ae9802d68ade6a279b9)) * **chart:** update auth backend templates ([8659b67](https://github.com/LerianStudio/helm/commit/8659b6758e533c9a0922d481107ba59656d3f0a5)) * **chart:** update auth templates ([a6221e4](https://github.com/LerianStudio/helm/commit/a6221e4b89edec63f40b80bd31574588d9204a5b)) * **chart:** update auth templates ([c5bcb23](https://github.com/LerianStudio/helm/commit/c5bcb23959466580106b98f7e3312195f7f42f35)) * **values:** update auth version ([b549735](https://github.com/LerianStudio/helm/commit/b54973599235c3f52058e68dcd499c8c21c8dac7)) * **doc:** update charts documentation ([422e771](https://github.com/LerianStudio/helm/commit/422e7717a8f7c79d96f4cdd110421f0c68857d82)) * **doc:** update charts documentation ([b9618c4](https://github.com/LerianStudio/helm/commit/b9618c462cf3f0ad6b3f237347ffae01fc23cb09)) * **midaz:** update console configmap ([bf616a3](https://github.com/LerianStudio/helm/commit/bf616a3ee69f10ab2ffa21fce05ed92a21d10c6e)) * **console:** update console image ([0cf1135](https://github.com/LerianStudio/helm/commit/0cf11350d345410c751d99cf8c5347793219b469)) * **console:** update console image ([4da311d](https://github.com/LerianStudio/helm/commit/4da311d8968411a29d129ef02e133b3ddd0bb25e)) * **console:** update console version ([d789c7d](https://github.com/LerianStudio/helm/commit/d789c7dc7596e65c90c0e18072687b2ea828b295)) * **values:** update console version ([778eea0](https://github.com/LerianStudio/helm/commit/778eea0d86f62b9257f4f94892ef2b340df945da)) * **values:** update extra env vars for postgres ([9852143](https://github.com/LerianStudio/helm/commit/9852143eff1ca1bbc3e6c33660d80ec4bb337d6d)) * **fetcher:** update fetcher-manager@1.1.0, fetcher-worker@1.1.0 - new env vars ([345798a](https://github.com/LerianStudio/helm/commit/345798aca7179ec1b36958b22b4f702fe772ce9a)) * **fetcher:** update fetcher-manager@1.2.0, fetcher-worker@1.2.0 - new env vars ([47785ab](https://github.com/LerianStudio/helm/commit/47785abc7269481a7b2365b49589b5bd614d0f41)) * **fetcher:** update fetcher-manager@1.3.0, fetcher-worker@1.3.0 - new env vars ([679fd73](https://github.com/LerianStudio/helm/commit/679fd73b41b0019aa0c75c782adae169826f1053)) * **pipe:** update gitignore ([6ae09d6](https://github.com/LerianStudio/helm/commit/6ae09d68f21e21e5b93834017c0525511baaf94a)) * **chart:** update identity templates ([f8def52](https://github.com/LerianStudio/helm/commit/f8def529a453cf4c2db448df07ba167ff14d6c83)) * **values:** update identity version ([f8ee875](https://github.com/LerianStudio/helm/commit/f8ee875bb51ac52300d683e366f976aa903077b2)) * **product-console:** update image tag to 1.5.0 and add upgrade guide ([a289f8c](https://github.com/LerianStudio/helm/commit/a289f8c27b440f30174dac68339fe50d83d27679)) * **values:** update midaz version ([#36](https://github.com/LerianStudio/helm/issues/36)) ([af4b898](https://github.com/LerianStudio/helm/commit/af4b898e7ed4e431ab853320a3275b9d219630f7)) * **migrations:** update migration logic and enable migrations job ([643f703](https://github.com/LerianStudio/helm/commit/643f703aed35990cb8997a2df90f1fe2bacf9494)) * **midaz:** update onboarding configmap ([7a28f50](https://github.com/LerianStudio/helm/commit/7a28f50d694f2b527d51d201205d486ce8b2d3d5)) * **midaz:** update otel env var ([769a770](https://github.com/LerianStudio/helm/commit/769a77004aebb612aed5d81b9dec30624a003734)) * **plugin-br-pix-direct-jd:** update pix@1.2.1-beta.10, job@1.2.1-beta.10 - new env vars ([63ae72c](https://github.com/LerianStudio/helm/commit/63ae72c6add50c9e0fbeff1567bb018afe3ef553)) * **plugin-br-pix-direct-jd:** update pix@1.2.1-beta.11, job@1.2.1-beta.11 - new env vars ([3b07e6b](https://github.com/LerianStudio/helm/commit/3b07e6bd9b5c07c865599da7749bff593f593da8)) * **chart:** update plugin access manager values ([e4221eb](https://github.com/LerianStudio/helm/commit/e4221ebc5da46a51c5d71ef0755bba35e3313584)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.5.0, plugin-br-pix-indirect-btg-worker-reconciliation@1.5.0, plugin-br-pix-indirect-btg-worker-inbound@1.5.0, plugin-br-pix-indirect-btg-worker-outbound@1.5.0 - new env vars ([80fe4fc](https://github.com/LerianStudio/helm/commit/80fe4fc55014cf24844c1e1626b213475d5419a3)) * **plugin-fees:** update plugin-fees@3.1.0 - new env vars ([0111ef7](https://github.com/LerianStudio/helm/commit/0111ef72746c78f97321c78b110ffb0e2ac68e61)) * **docs:** update rabbitmq documentation ([cae5467](https://github.com/LerianStudio/helm/commit/cae54677bcf8a2a26949ed341df9caea50cea762)) * **docs:** update readme file ([314da0e](https://github.com/LerianStudio/helm/commit/314da0e538e7534a79cbea9423d2d6b5c08c3a8e)) * **reporter:** update reporter-manager@1.2.0, reporter-worker@1.2.0 - new env vars ([624ec97](https://github.com/LerianStudio/helm/commit/624ec978ef73810b568c9a8a578d4f8635f998d2)) * **values:** update resources limits ([04ccb18](https://github.com/LerianStudio/helm/commit/04ccb184cd7393e5c1f60fa5945fd89d0b5289d2)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](https://github.com/LerianStudio/helm/commit/7d719d1dc72de12f0b8bd33b3c487651ea26c558)) * **midaz:** update transaction configmap ([be52752](https://github.com/LerianStudio/helm/commit/be5275243af5315dc64026f436460f345eb41e78)) * **midaz:** update transaction otel env var ([79717c5](https://github.com/LerianStudio/helm/commit/79717c5815e8c1f5a9e859cea47ef3553fe821df)) * **midaz:** update transaction otel env var ([927f39e](https://github.com/LerianStudio/helm/commit/927f39e5ab03e15460d28769bacb9fe1ac43d0ed)) * **plugin-crm:** update ui env vars ([9fab16d](https://github.com/LerianStudio/helm/commit/9fab16dbcbc80ccc55c0bc2c32e2d099facb6110)) * **midaz:** update values file ([98e396c](https://github.com/LerianStudio/helm/commit/98e396cb1a366691c8b0a3f32f697086583c99bf)) * **midaz:** update values file ([c0cbef1](https://github.com/LerianStudio/helm/commit/c0cbef16e5225e218a60d25d71496c2085250820)) * **values:** update values file ([db9b3db](https://github.com/LerianStudio/helm/commit/db9b3db3961bea039663a7dba0f548601e3c146b)) * **values:** update values file ([cc698a0](https://github.com/LerianStudio/helm/commit/cc698a0a76b24e97b4ff890605535e9ad128e886)) * **midaz:** update values template ([90f3133](https://github.com/LerianStudio/helm/commit/90f31338d4158ddaeca92ab47417b9ca8e7cf20b)) * **chart:** update version ([40d723d](https://github.com/LerianStudio/helm/commit/40d723d6159d78f2a198cdfa9c7c969d07219289)) * **chart:** update version ([22e2930](https://github.com/LerianStudio/helm/commit/22e2930ce80b8e33926bb6db7a5f70ca6faa4fa5)) * **chart:** update version ([8031ceb](https://github.com/LerianStudio/helm/commit/8031cebf57f599fda19f74224cd17a746bfe1e21)) * **chart:** update version ([a8af389](https://github.com/LerianStudio/helm/commit/a8af389aa9135313e2e534e4fd0af358a3b8fcf2)) * **chart:** update version ([412e782](https://github.com/LerianStudio/helm/commit/412e782cff316594cb5b6ea0410a7c5d66ebf6a1)) * **chart:** update version ([4a42b13](https://github.com/LerianStudio/helm/commit/4a42b1367e2ac41654210610641c44fcb7f8b463)) * upgrade app version to 3.3.0 and add SSL mode configs for database connections ([c9d334f](https://github.com/LerianStudio/helm/commit/c9d334f2354705719d3469d614317d6524fd9987)) * **lerian-notification:** use /migrate binary in migrations Job ([1696dd7](https://github.com/LerianStudio/helm/commit/1696dd7f1af6292d634a1e2a428eb2a69aeb6d86)), closes [LerianStudio/lerian-notification#40](https://github.com/LerianStudio/lerian-notification/issues/40) * **pix-switch:** use amqps:// for dict-hub-vsync RabbitMQ connection ([8b24026](https://github.com/LerianStudio/helm/commit/8b24026b20f920fa4c8544ca0c66cb671dcf99a8)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](https://github.com/LerianStudio/helm/commit/de702edc6490f6cc1b9734c61849cc674610b254)) * values template file ([2f7c796](https://github.com/LerianStudio/helm/commit/2f7c79606290492be77d34dfbd6ec76e89334cbb)) * values template file ([54ba721](https://github.com/LerianStudio/helm/commit/54ba721da0981d80e2df95a008d22d0fb0b03fd8)) ### Bug Fixes * **release:** add branch check to release notification job to only run on main branch ([f2f8e02](https://github.com/LerianStudio/helm/commit/f2f8e02c5eacdc9ea06d1b5af6df99a73df589db)) * **br-ccs:** add Chart Contract section to README ([a5ba0b3](https://github.com/LerianStudio/helm/commit/a5ba0b3230059607c719d03e17fb2d641338ed09)) * **values:** add comments in values ([#43](https://github.com/LerianStudio/helm/issues/43)) ([03a5842](https://github.com/LerianStudio/helm/commit/03a5842787db8dc1b4d954038b36a343ad7180c1)) * **plugin-access-manager:** add configurable DB_SSLMODE for auth PostgreSQL connections ([dd1d626](https://github.com/LerianStudio/helm/commit/dd1d626766129b1459e768732e2f826d3ad96eac)) * **new:** add DEFAULT_MIDAZ_ORGANIZATION_ID to configmap for enhanced multi-tenancy support ([d7b66a0](https://github.com/LerianStudio/helm/commit/d7b66a052d47394096ecdc18809e7c2d4fffeed3)) * **charts:** add http:// prefix to OTEL_EXPORTER_OTLP_ENDPOINT ([33adde3](https://github.com/LerianStudio/helm/commit/33adde3650e26f65c09643ba8b2fd669bd504adc)) * **charts:** add http:// prefix to OTEL_EXPORTER_OTLP_ENDPOINT ([5f8ca7b](https://github.com/LerianStudio/helm/commit/5f8ca7b5abc6ca7c895af8c3ae1055907689c1d3)) * **product-console:** add image annotation for product-console 1.6.0 ([03c927c](https://github.com/LerianStudio/helm/commit/03c927c3029714c435534a4c72ca450bcdccbd08)) * add kindIs guard for backward compat with string image values ([313d9f6](https://github.com/LerianStudio/helm/commit/313d9f6b646cf3b3bb26cc2644063b16806c1847)) * **migrations:** add migration secret template and update secret resolution logic ([79ef8f5](https://github.com/LerianStudio/helm/commit/79ef8f5ea3d7bc2626972fcd4621b1e327c08aed)) * **matcher:** add missing env vars for systemplane and multi-tenant ([965da94](https://github.com/LerianStudio/helm/commit/965da94cdddb8c11654625e071e28c7a83193938)) * add missing MONGO_HOST/MONGO_PORT and align MONGODB_DB_NAME ([0725fa2](https://github.com/LerianStudio/helm/commit/0725fa2b26ed516c15ff1b5292b35581ff437de2)) * **midaz:** add missing MONGO_PARAMETERS to CRM configmap ([2bfecc2](https://github.com/LerianStudio/helm/commit/2bfecc220b7646c57b5e47f141cfb6e79469baec)) * add missing space in MIDAZ_CONSOLE_BASE_PATH template expression ([7b9bb67](https://github.com/LerianStudio/helm/commit/7b9bb677785cd1d381d1b8d497ee0a8bdc921c83)) * **product-console:** add MONGO_PARAMETERS to configmap for MongoDB configuration ([d7765b4](https://github.com/LerianStudio/helm/commit/d7765b455710ba5009a931493d351f88f735a1ce)) * **product-console:** add MongoDB connection info to NOTES.txt ([b4d6557](https://github.com/LerianStudio/helm/commit/b4d6557b5ccf5a93a70104bc5d5533171bc0147f)) * **product-console:** add mongodb.enabled flag to values-template ([7024d9d](https://github.com/LerianStudio/helm/commit/7024d9d0d47422b362b400b9494cfd440378122a)) * **configmap:** add new configuration options for deployment mode, private upstreams, and reconciliation settings ([f1a475e](https://github.com/LerianStudio/helm/commit/f1a475ea82bed1d9174193e58e271a5a730a5cc1)) * **plugin-access-manager:** add new configuration options for logging, rate limiting, and MFA in configmap.yaml ([d1e83b2](https://github.com/LerianStudio/helm/commit/d1e83b286a91b144bc44788a4fb457c4273b052f)) * **chart:** add new env var to enable auth plugin ([53b8ffb](https://github.com/LerianStudio/helm/commit/53b8ffb5ef5beaf77756b45e815b946b106c9320)) * add newline at end of values.yaml file ([044905f](https://github.com/LerianStudio/helm/commit/044905f48ff2d9fe8bd7f84770f34bebd700baf9)) * add plugin-br-bank-transfer-jd section to README version matrix ([ccd19ac](https://github.com/LerianStudio/helm/commit/ccd19acf8352c2e4a1390af297c61f0d63d7ae1e)) * **plugins:** add plugin-br-payments-fakebtg to README version matrix ([7ba4f9d](https://github.com/LerianStudio/helm/commit/7ba4f9d8fede36092d0a7a60f08620f5ca3fd777)), closes [#1404](https://github.com/LerianStudio/helm/issues/1404) * **fetcher:** add RabbitMQ and storage configuration options, remove unused secret template ([865613d](https://github.com/LerianStudio/helm/commit/865613d1cf6264ee5b97e5e85d342e5f36043415)) * **plugin-br-pix-switch:** add RABBITMQ_URI to dict-hub-vsync configmap ([75074ae](https://github.com/LerianStudio/helm/commit/75074ae94521b346e0a0c167a166988d65084497)) * add required validation for Roles Anywhere ARNs and README migration note ([50e4718](https://github.com/LerianStudio/helm/commit/50e47186dee052e541566d65d2362c8fe175e5a5)), closes [#1](https://github.com/LerianStudio/helm/issues/1) [#3](https://github.com/LerianStudio/helm/issues/3) [#1113](https://github.com/LerianStudio/helm/issues/1113) * add trailing slash to default MIDAZ_ONBOARDING_URL in fees configmap ([fe394c5](https://github.com/LerianStudio/helm/commit/fe394c5e4fde1fb3cca5a5c7cc9a3019ac92cd5f)) * **br-sta:** add version matrix table to root README ([6808ebf](https://github.com/LerianStudio/helm/commit/6808ebff43b9138f589b7ea3bb1523eb7cc8855d)) * **plugin-br-pix-indirect-btg:** add WEBHOOK_DEFAULT_URL to outbound configmap ([0dd6d81](https://github.com/LerianStudio/helm/commit/0dd6d81592f19d983e0ddfa75dbaf5e00b8fbd85)) * **templates:** address CodeRabbit blocking findings on infra secret gating ([a649c71](https://github.com/LerianStudio/helm/commit/a649c716026858c0a3ca34e613233ec874013650)) * address CodeRabbit CLI review findings ([974bbb8](https://github.com/LerianStudio/helm/commit/974bbb85bee5549825b25a379042eeeaf3f79ba7)) * **plugin-br-pix-switch:** address CodeRabbit feedback on NOTES, README, configmap, and labeler ([78e4615](https://github.com/LerianStudio/helm/commit/78e4615949c5e9b7dabcc2f497d687deae7ccfe4)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](https://github.com/LerianStudio/helm/commit/c2fe0acbd8d172cfbafe47e72a65fc91b0e04906)) * **schedule:** address CodeRabbit review comments ([96b69df](https://github.com/LerianStudio/helm/commit/96b69dfe5785ff30f91b8c1567195de25f9c1c5f)) * **plugin-br-pix-indirect-btg:** address coderabbit review feedback ([bb664a9](https://github.com/LerianStudio/helm/commit/bb664a9eb52c4e2636397955b7bde365643e34db)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](https://github.com/LerianStudio/helm/commit/fc5659f99cbd76ce9a046903a8fe9049d7fcf6f4)) * **lerian-notification:** address CodeRabbit review on initial chart ([36c326f](https://github.com/LerianStudio/helm/commit/36c326fe1bbabd80112ef82cab3bb862fa0a18b1)), closes [#1332](https://github.com/LerianStudio/helm/issues/1332) * **product-console:** address CodeRabbit review on NOTES.txt ([e8cf8d7](https://github.com/LerianStudio/helm/…

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) ### Bug Fixes * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) ### Bug Fixes * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **otel-collector-lerian:** apply midaz namespace filter across all signals + deprecation rename ([6521ba7](6521ba7)) * **midaz:** decouple otel-collector-lerian from midaz helm chart ([9b65378](9b65378)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **otel-collector-lerian:** standardize processors, pod identity, semconv transform ([3e18fa6](3e18fa6)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **fetcher:** update fetcher-manager@2.0.2, fetcher-worker@2.0.2 ([6214b2a](6214b2a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.4, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.4, plugin-br-pix-indirect-btg-worker-inbound@1.7.4, plugin-br-pix-indirect-btg-worker-outbound@1.7.4 ([99e3105](99e3105)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.1.1, reporter-worker@2.1.1 ([5292a60](5292a60)) * **reporter:** update reporter-manager@2.1.2, reporter-worker@2.1.2 ([07ea25b](07ea25b)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-17) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **br-spi:** add br-spi-helm chart for the SPI rail ([82c420c](82c420c)) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-sisbajud:** add Helm chart for SISBAJUD plugin ([6b20f50](6b20f50)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **plugin-access-manager:** add optional configurable startupProbe for identity and auth ([c95e7f2](c95e7f2)) * **flowker:** add optional WORKOS_TM_CLIENT_SECRET secret ([5e66bd2](5e66bd2)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **br-sisbajud:** add PreSync Redpanda topics provisioner Job ([484e04e](484e04e)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * render streaming SASL/TLS secrets in midaz + plugin-fees Secrets ([ead8417](ead8417)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **midaz:** update midaz-crm@3.7.8, midaz-ledger@3.7.8 - new env vars ([0ad123f](0ad123f)) * **plugin-fees:** update plugin-fees@3.3.0 - new env vars ([e64d615](e64d615)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **br-sisbajud:** address CI violations + CodeRabbit review ([41ef02f](41ef02f)) * **charts:** address CodeRabbit on br-spi-helm ([c2fe0ac](c2fe0ac)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * **br-sisbajud:** align migration Job env with br-sta pattern ([18b02e5](18b02e5)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **br-sisbajud:** correct appVersion to 1.0.0-beta.109 ([59d300e](59d300e)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **pipe:** escape Helm template syntax breaking GitHub Pages build ([c875970](c875970)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **br-sisbajud:** pin busybox to 1.36 in values.yaml defaults ([eebc7ce](eebc7ce)) * **br-sisbajud:** preserve valueFrom env in topics PreSync Job ([4e260aa](4e260aa)), closes [#1666](#1666) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **flowker:** restore 3.1 chart content dropped by the 3.1.0 release ([caff99f](caff99f)) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **br-sisbajud:** set HOME=/tmp on topics provisioner Job ([9886085](9886085)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.0 ([3c89507](3c89507)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.9 ([a5710e9](a5710e9)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.5, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.5, plugin-br-pix-indirect-btg-worker-inbound@1.7.5, plugin-br-pix-indirect-btg-worker-outbound@1.7.5 ([ecbda31](ecbda31)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.7.6, plugin-br-pix-indirect-btg-worker-reconciliation@1.7.6, plugin-br-pix-indirect-btg-worker-inbound@1.7.6, plugin-br-pix-indirect-btg-worker-outbound@1.7.6 ([bcd81c1](bcd81c1)) * **reporter:** update reporter-manager@2.2.0, reporter-worker@2.2.0 ([cc51d8b](cc51d8b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sisbajud:** use stringData in app Secret template ([063f33b](063f33b)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-22) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **lerian-common:** add multiTenant and streaming secret helpers ([5817577](5817577)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **lerian-common:** add shared Helm library chart ([0f266cd](0f266cd)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **plugin-br-pix-indirect-btg:** add SWAGGER_ENABLED env var defaulting to true ([62d1d98](62d1d98)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **helm-standard:** support type: library charts + lerian-common contract ([69b7fdb](69b7fdb)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.8.0, plugin-br-pix-indirect-btg-worker-reconciliation@1.8.0, plugin-br-pix-indirect-btg-worker-schedule@1.8.0, plugin-br-pix-indirect-btg-worker-inbound@1.8.0, plugin-br-pix-indirect-btg-worker-outbound@1.8.0 - new env vars ([ded3bc4](ded3bc4)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * align WEBHOOK_SCHEDULE_CASHOUT_URL default with other CASHOUT keys ([5a4c7b4](5a4c7b4)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **lerian-common:** fail on conflicting pdb fields in explicit mode ([d7a50d8](d7a50d8)) * **helm-standard:** gate library exemptions on chart.Type + fix messages ([477e4cd](477e4cd)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * remove duplicate secret.yaml, secrets.yaml already exists ([540c4ad](540c4ad)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **lerian-common:** render-gate skip for library + honor 0 in pdb/probes ([8ebcaeb](8ebcaeb)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-23) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **lerian-common:** add multiTenant and streaming secret helpers ([5817577](5817577)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **br-slc:** add opt-in ingress disabled by default ([f5cdf05](f5cdf05)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **lerian-common:** add shared Helm library chart ([0f266cd](0f266cd)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **plugin-br-pix-indirect-btg:** add SWAGGER_ENABLED env var defaulting to true ([62d1d98](62d1d98)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **charts:** model br-ccs snapshot quarantine knobs as configmap keys ([df6bb6c](df6bb6c)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **helm-standard:** support type: library charts + lerian-common contract ([69b7fdb](69b7fdb)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.8.0, plugin-br-pix-indirect-btg-worker-reconciliation@1.8.0, plugin-br-pix-indirect-btg-worker-schedule@1.8.0, plugin-br-pix-indirect-btg-worker-inbound@1.8.0, plugin-br-pix-indirect-btg-worker-outbound@1.8.0 - new env vars ([ded3bc4](ded3bc4)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * align WEBHOOK_SCHEDULE_CASHOUT_URL default with other CASHOUT keys ([5a4c7b4](5a4c7b4)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **lerian-common:** fail on conflicting pdb fields in explicit mode ([d7a50d8](d7a50d8)) * **helm-standard:** gate library exemptions on chart.Type + fix messages ([477e4cd](477e4cd)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * remove duplicate secret.yaml, secrets.yaml already exists ([540c4ad](540c4ad)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **lerian-common:** render-gate skip for library + honor 0 in pdb/probes ([8ebcaeb](8ebcaeb)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

## (2026-07-23) ### Features * **chart:** add adapter-lerian schema, README and values-template entries ([9180459](9180459)) * **chart:** add adapter-lerian template directories ([1882905](1882905)) * **chart:** add adapter-lerian values blocks, ingress routes and database ([328b236](328b236)) * **flowker:** add AWS IRSA and Roles Anywhere signing sidecar ([003b783](003b783)) * **br-sta:** add background worker Deployment ([f8b02f5](f8b02f5)) * **new:** add br-slc BYOC Helm chart ([cc65a6d](cc65a6d)), closes [#99](#99) * **charts:** add br-spi-helm chart for the SPI rail ([5d6bf6a](5d6bf6a)), closes [#1607](#1607) * **br-sta:** add br-sta-helm chart ([b082dda](b082dda)) * **br-slc:** add gated mock-nuclea component ([ed1a9c9](ed1a9c9)) * **br-ccs:** add Helm chart ([0fa5f89](0fa5f89)) * **flowker:** add in-pod XSD validator sidecar ([1817bee](1817bee)) * **new:** add lender chart ([#1672](#1672)) ([1540885](1540885)) * **pix-btg:** add missing env defaults to chart values ([ee6841d](ee6841d)) * **lerian-common:** add multiTenant and streaming secret helpers ([5817577](5817577)) * **plugin-br-pix-indirect-btg:** add new develop envs (recurrence collection, terminal events, schedule reconcile, recurring module) ([576992f](576992f)) * **br-slc:** add opt-in ingress disabled by default ([f5cdf05](f5cdf05)) * **charts:** add per-upstream M2M OAuth2 client credentials to br-ccs secrets ([b548556](b548556)) * **plugin-br-pix-indirect-btg:** add PIX_RECURRENCE_PAYER inbound entity ([9bc7afc](9bc7afc)) * **br-sta:** add postgres migrations Job to chart ([b9f5bea](b9f5bea)) * **plugin-br-pix-indirect-btg:** add RECURRING FlowType entities to outbound configmap ([9d3645d](9d3645d)) * **plugin-br-pix-indirect-btg:** add schedule (pix recurrence) worker ([4dfe5ba](4dfe5ba)) * **flowker:** add scheduler worker Deployment and full env surface ([df8f89f](df8f89f)) * **lerian-common:** add shared Helm library chart ([0f266cd](0f266cd)) * **charts:** add streaming-hub Helm chart ([#1569](#1569)) ([637014c](637014c)) * **charts:** add streaming-hub out-of-band DB migration support ([8f279f4](8f279f4)) * **plugin-br-pix-indirect-btg:** add SWAGGER_ENABLED env var defaulting to true ([62d1d98](62d1d98)) * **flowker:** add valkey subchart backing the scheduler queue ([3f5fe0b](3f5fe0b)) * **plugin-access-manager:** default ALLOW_INSECURE_TLS on auth-backend ([055b428](055b428)) * **plugin-br-pix-switch:** expose all multi-tenant knobs across MT-aware components ([5df8bab](5df8bab)) * **br-ccs:** expose rate-limit disable and fail-open knobs in values ([25390d4](25390d4)) * **plugin-access-manager:** mirror POSTGRES_* env in migrations Job ([4d7c3ae](4d7c3ae)) * **charts:** model br-ccs snapshot quarantine knobs as configmap keys ([df6bb6c](df6bb6c)) * **matcher:** promote UI, MCP and detached migrations to multi-component chart ([88686ca](88686ca)) * **flowker:** ship 3.1.0 multi-component release (schema, docs, image tag) ([75f8cdb](75f8cdb)) * **plugin-access-manager:** support extraEnvVars on auth-backend ([9d8b5e3](9d8b5e3)) * **charts:** support LICENSE_KEY and ORGANIZATION_IDS in br-ccs secrets ([4b62eb6](4b62eb6)) * **helm-standard:** support type: library charts + lerian-common contract ([69b7fdb](69b7fdb)) * **plugin-br-pix-indirect-btg:** update plugin-br-pix-indirect-btg@1.8.0, plugin-br-pix-indirect-btg-worker-reconciliation@1.8.0, plugin-br-pix-indirect-btg-worker-schedule@1.8.0, plugin-br-pix-indirect-btg-worker-inbound@1.8.0, plugin-br-pix-indirect-btg-worker-outbound@1.8.0 - new env vars ([ded3bc4](ded3bc4)) * **streaming-hub:** update streaming-hub@1.0.0 - new env vars ([7d719d1](7d719d1)) * **plugin-br-payments:** use single MIDAZ_LEDGER_URL ([de702ed](de702ed)) ### Bug Fixes * **br-ccs:** add Chart Contract section to README ([a5ba0b3](a5ba0b3)) * **br-sta:** add version matrix table to root README ([6808ebf](6808ebf)) * **schedule:** address CodeRabbit review comments ([96b69df](96b69df)) * **br-slc:** address CodeRabbit review on BYOC helm chart ([fc5659f](fc5659f)) * **br-ccs:** address CodeRabbit review on PR [#1617](#1617) ([b4112dd](b4112dd)) * **br-sta:** address CodeRabbit review on PR [#1618](#1618) ([75a1b32](75a1b32)) * **br-sta:** address CodeRabbit review on PR [#1621](#1621) ([5167b92](5167b92)) * align WEBHOOK_SCHEDULE_CASHOUT_URL default with other CASHOUT keys ([5a4c7b4](5a4c7b4)) * **chart:** classify adapter-lerian BRSFN_TOKEN_URL as a secret ([c4732a8](c4732a8)) * **flowker:** clear helm-chart-standard strict violations and address review ([6117aeb](6117aeb)) * **pix-indirect-btg:** correct low-throughput defaults for recurrence/terminal entities ([27925f7](27925f7)) * **charts:** escape dynamic values in bootstrap-postgres SQL ([#1570](#1570)) ([9fa6863](9fa6863)), closes [#1569](#1569) * **lerian-common:** fail on conflicting pdb fields in explicit mode ([d7a50d8](d7a50d8)) * **helm-standard:** gate library exemptions on chart.Type + fix messages ([477e4cd](477e4cd)) * **br-sta:** pass ALLOW_INSECURE_TLS to migrations Job for non-TLS Postgres ([1fd3a50](1fd3a50)) * **charts:** register streaming-hub in release README + add install docs ([#1571](#1571)) ([1f6a375](1f6a375)), closes [#1569](#1569) * **charts:** remove dead unrenderable streaming-hub secret boilerplate ([3a942b2](3a942b2)) * remove duplicate secret.yaml, secrets.yaml already exists ([540c4ad](540c4ad)) * **charts:** render br-ccs ALLOW_RATELIMIT_FAIL_OPEN, drop dead ALLOW_RATELIMIT_DISABLED ([24efbd2](24efbd2)) * **charts:** render br-ccs RABBITMQ_URL as a secret, not a configmap value ([e54f325](e54f325)) * **lerian-common:** render-gate skip for library + honor 0 in pdb/probes ([8ebcaeb](8ebcaeb)) * **br-sta:** require existingSecretName in schema when useExistingSecret is set ([4c1c218](4c1c218)), closes [#1618](#1618) * **chart:** serve adapter-lerian consumer probes under /lerian ([b4a338a](b4a338a)) * **fetcher:** update fetcher-manager@3.0.2, fetcher-worker@3.0.2 ([3c815a7](3c815a7)) * **plugin-br-bank-transfer:** update plugin-br-bank-transfer@1.1.7 ([bbedef9](bbedef9)) * **reporter:** update reporter-manager@2.3.0, reporter-worker@2.3.0 ([7b4ff5b](7b4ff5b)) * **streaming-hub:** update streaming-hub@1.0.1 ([66fdf24](66fdf24)) * **br-sta:** worker command must match the image's /service entrypoint ([4aefd1c](4aefd1c))

prymax10 requested a review from a team as a code owner July 17, 2026 14:27

github-actions Bot added pipe doc labels Jul 17, 2026

coderabbitai Bot requested changes Jul 17, 2026

View reviewed changes

prymax10 merged commit 1540885 into develop Jul 17, 2026
4 checks passed

prymax10 deleted the feat/add-lender-chart branch July 17, 2026 14:35

coderabbitai Bot mentioned this pull request Jul 21, 2026

chore(charts): remove flowker, matcher, underwriter and br-spi charts #1694

Merged

9 tasks

coderabbitai Bot mentioned this pull request Jul 23, 2026

feat(charts): add lender chart #1711

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

feat(new): add lender chart#1672

feat(new): add lender chart#1672
prymax10 merged 1 commit into
developfrom
feat/add-lender-chart

prymax10 commented Jul 17, 2026

Uh oh!

coderabbitai Bot commented Jul 17, 2026 •

edited

Loading

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

coderabbitai Bot left a comment

Uh oh!

coderabbitai Bot Jul 17, 2026

Uh oh!

coderabbitai Bot Jul 17, 2026

Uh oh!

coderabbitai Bot Jul 17, 2026

Uh oh!

coderabbitai Bot Jul 17, 2026

Uh oh!

prymax10 commented Jul 17, 2026

Uh oh!

coderabbitai Bot commented Jul 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

prymax10 commented Jul 17, 2026

What

How — pure identity-preserving lift-and-shift

Safety — rendered output is byte-identical to the live chart

Gates

Deferred to a follow-up hardening PR (kept out to preserve identity)

After merge

Uh oh!

coderabbitai Bot commented Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

prymax10 commented Jul 17, 2026

Uh oh!

coderabbitai Bot commented Jul 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

coderabbitai Bot commented Jul 17, 2026 •

edited

Loading