chore(deps): update all non-major dependencies

.github/ct/install.yaml

@@ -6,3 +6,4 @@ chart-repos:
 debug: true
 remote: origin
 helm-extra-args: --timeout 600s
+target-branch: master

.github/workflows/ci.yaml

@@ -1,6 +1,6 @@
 name: Lint and Test Charts
 
 on:
   pull_request:
     branches: [master]
 
@@ -15,14 +15,14 @@
 jobs:
   lint:
     runs-on: ubuntu-22.04
-    container: ghcr.io/chgl/kube-powertools:v2.3.14@sha256:214dfc2466589f053b6f9b43585ec526672cdb7ffb49ad4c440a6edb76ebabda
+    container: ghcr.io/chgl/kube-powertools:v2.3.16@sha256:b6a3c4e90c464625993680560780f2888f6df75b6564066cc51aea7a67c67074
     steps:
       - name: Add workspace as safe directory
         run: |
           git config --global --add safe.directory /__w/charts/charts
 
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
@@ -64,12 +64,12 @@
         k8s-version: [1.28.9, 1.29.4, 1.30.2]
     steps:
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
       - name: Set up chart-testing
         uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Run chart-testing (list-changed)
         id: list-changed
@@ -80,7 +80,7 @@
           fi
 
       - name: Create k8s Kind Cluster
         uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
         if: ${{ steps.list-changed.outputs.changed == 'true' }}
         with:
           cluster_name: kind-cluster-k8s-${{ matrix.k8s-version }}

.github/workflows/release.yaml

@@ -1,6 +1,6 @@
 name: Release Charts
 
 on:
   push:
     branches:
       - master
@@ -13,7 +13,7 @@
 jobs:
   release:
     runs-on: ubuntu-22.04
-    container: ghcr.io/chgl/kube-powertools:v2.3.14@sha256:214dfc2466589f053b6f9b43585ec526672cdb7ffb49ad4c440a6edb76ebabda
+    container: ghcr.io/chgl/kube-powertools:v2.3.16@sha256:b6a3c4e90c464625993680560780f2888f6df75b6564066cc51aea7a67c67074
     permissions:
       contents: write
       packages: write
@@ -24,7 +24,7 @@
           git config --global --add safe.directory /__w/charts/charts
 
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
@@ -45,7 +45,7 @@
         run: generate-chart-changelog.sh
 
       - name: Run chart-releaser
         uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         with:
           config: .github/ct/ct.yaml
         env:

README.md

@@ -33,7 +33,7 @@ helm repo update
 1. Mount the folder in the [kube-powertools](https://github.com/chgl/kube-powertools) container to easily run linters and checks
 
    ```sh
-   docker run --rm -it -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.8
+   docker run --rm -it -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.16
    ```
 
 1. Run chart-testing and the `chart-powerlint.sh` script to lint the chart
@@ -45,7 +45,7 @@ helm repo update
 1. (Optional) View the results of the [polaris audit check](https://github.com/FairwindsOps/polaris) in your browser
 
    ```sh
-   $ docker run --rm -it -p 9090:8080 -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.8
+   $ docker run --rm -it -p 9090:8080 -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.16
    bash-5.0: helm template charts/fhir-gateway/ | polaris dashboard --config .polaris.yaml --audit-path -
    ```
 

charts/blaze/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.20.3
-digest: sha256:ad193e27dedbfcbc2ca49c25af386d80820bdc5b988df79c7d4abe4d47b40949
-generated: "2024-07-06T18:35:51.949178151+02:00"
+  version: 2.20.5
+digest: sha256:6a506765da77ec972be172c85f52a7b574e489a6660b9091afad27409f00882f
+generated: "2024-08-05T13:11:23.967406349Z"

charts/blaze/Chart.yaml

@@ -13,10 +13,10 @@ maintainers:
 dependencies:
   - name: common
     repository: oci://registry-1.docker.io/bitnamicharts
-    version: 2.20.3
+    version: 2.20.5
 deprecated: false
 kubeVersion: ">= 1.19.0"
-version: 0.5.0
+version: 0.5.1
 appVersion: "0.x"
 annotations:
   artifacthub.io/license: Apache-2.0
@@ -29,8 +29,4 @@ annotations:
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: "Set default resource requests and limits for all containers using presets"
-    - kind: changed
-      description: "added service account settings"
-    - kind: changed
-      description: "BREAKING CHANGE: move `serviceMonitor` below a `metrics` section"
+      description: "dependency updates"

charts/blaze/values.yaml

@@ -5,7 +5,7 @@ replicaCount: 1
 image:
   registry: ghcr.io
   repository: samply/blaze
-  tag: 0.28.0@sha256:fb9216a1e6a1db8f1a357fb8ed617283aa0b7fc47e78f4066caf4cd36e297e77
+  tag: 0.29.3@sha256:c6f9232cbcacead7c94d9a9220f319ea86a3f8fb1bc5adce90624033b06a0914
   pullPolicy: IfNotPresent
 
 # -- set the server base URL. Evaluated as a template. Equivalent to setting the `BASE_URL` environment variable.
@@ -197,7 +197,7 @@ curl:
   image:
     registry: docker.io
     repository: curlimages/curl
-    tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd
+    tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4
 
 # -- configuration for the server persistence
 persistence:

charts/datashield/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 15.5.14
-digest: sha256:9f20fde1d2870bc524dcfedfdbaa68addaa0974631c2b22ce31067e3f00df9ab
-generated: "2024-07-05T14:09:08.023030262Z"
+  version: 15.5.20
+digest: sha256:fa28791d6a669ccb1c04be8dd4dce32693ae1699ba318338f5ee8abadf40e0f2
+generated: "2024-08-05T13:11:35.762420912Z"

charts/datashield/Chart.yaml

@@ -15,12 +15,12 @@ maintainers:
   - name: miracum
 dependencies:
   - name: postgresql
-    version: 15.5.14
+    version: 15.5.20
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql.enabled
 deprecated: false
 kubeVersion: ">= 1.19.0"
-version: 0.6.0
+version: 0.6.1
 annotations:
   artifacthub.io/license: Apache-2.0
   artifacthub.io/containsSecurityUpdates: "false"
@@ -32,6 +32,4 @@ annotations:
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: "Set default resource requests and limits for all containers using presets"
-    - kind: changed
-      description: "added service account settings"
+      description: "dependency updates"

charts/datashield/values.yaml

@@ -211,7 +211,7 @@ waitForDatabaseInitContainer:
   image:
     registry: docker.io
     repository: bitnami/postgresql
-    tag: 16.3.0-debian-12-r19@sha256:b0248a5e2bf4fda5208183d4a6203287828666823a7a57431cfa4d31688bae97
+    tag: 16.3.0-debian-12-r23@sha256:865e341baf49006e32b3e72254a15a81c939178cb9c48fcd9faf1c0ac4b49664
     pullPolicy: IfNotPresent
 
 # -- container security context applied to init containers and the Helm test pods
@@ -391,7 +391,7 @@ curl:
   image:
     registry: docker.io
     repository: curlimages/curl
-    tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd
+    tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4
 
 tests:
   automountServiceAccountToken: false

charts/fhir-gateway/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 15.5.14
+  version: 15.5.20
 - name: fhir-pseudonymizer
   repository: oci://ghcr.io/miracum/charts
-  version: 0.7.0
+  version: 0.7.1
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.20.3
-digest: sha256:baae36cc408b121d9a593214b52390460903a816aa3c257d193b8702e35f4577
-generated: "2024-07-07T13:28:55.919833754Z"
+  version: 2.20.5
+digest: sha256:495edc51f1bf5073fe370c8fd1e65422f852209eb28c0243e895d6f509093bab
+generated: "2024-08-05T13:11:10.342143226Z"

charts/fhir-gateway/Chart.yaml

@@ -7,20 +7,20 @@ sources:
 home: https://github.com/miracum/fhir-gateway
 dependencies:
   - name: postgresql
-    version: 15.5.14
+    version: 15.5.20
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql.enabled
   - name: fhir-pseudonymizer
     condition: fhir-pseudonymizer.enabled
-    version: 0.7.0
+    version: 0.7.1
     repository: oci://ghcr.io/miracum/charts
   - name: common
     repository: oci://registry-1.docker.io/bitnamicharts
-    version: 2.20.3
-version: 6.3.1
+    version: 2.20.5
+version: 6.3.2
 annotations:
   # When using the list of objects option the valid supported kinds are
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: updated fhir-pseudonymizer sub-chart to 0.7.0
+      description: "dependency updates"

charts/fhir-gateway/README.md

@@ -59,7 +59,7 @@ The following table lists the configurable parameters of the `fhir-gateway` char
 | service                                         | the service used to expose the FHIR GW REST endpoint                                                                                                                                                                                                                                                                                          | <code>{"metricsPort":8081,"port":8080,"type":"ClusterIP"}</code> |
 | ingress.enabled                                 | if enabled, create an Ingress to expose the FHIR Gateway outside the cluster                                                                                                                                                                                                                                                                  | <code>false</code>                                               |
 | ingress.ingressClassName                        | kubernetes.io/ingress.class: nginx kubernetes.io/tls-acme: "true" ingressClassName field                                                                                                                                                                                                                                                      | <code>""</code>                                                  |
-| resourcesPreset                                 | set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production). More information: <https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15> | <code>"medium"</code>                                            |
+| resourcesPreset                                 | set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production). More information: <https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15> | <code>"small"</code>                                             |
 | metrics.serviceMonitor.enabled                  | if enabled, creates a ServiceMonitor instance for Prometheus Operator-based monitoring                                                                                                                                                                                                                                                        | <code>false</code>                                               |
 | serviceAccount.create                           | -- Specifies whether a service account should be created.                                                                                                                                                                                                                                                                                     | <code>false</code>                                               |
 | serviceAccount.name                             | -- The name of the service account to use. If not set and create is true, a name is generated using the fullname template                                                                                                                                                                                                                     | <code>""</code>                                                  |

charts/fhir-gateway/values.yaml

@@ -15,7 +15,7 @@ replicaCount: 1
 image: # +doc-gen:ignore
   registry: ghcr.io
   repository: miracum/fhir-gateway
-  tag: v3.13.1@sha256:7046c3b9d59ff848a63c2e793fcb388b687ade06204594af14931d4f599079ae
+  tag: v3.13.2@sha256:e90e73bf62c64022ab0f180fbbb924056cdd0ae8d7829368bd7346c82f44d3b0
   pullPolicy: IfNotPresent
 
 # image pull secrets for the pod
@@ -58,7 +58,7 @@ waitForPostgresInitContainer:
   image: # +doc-gen:ignore
     registry: docker.io
     repository: bitnami/postgresql
-    tag: 16.3.0-debian-12-r19@sha256:b0248a5e2bf4fda5208183d4a6203287828666823a7a57431cfa4d31688bae97
+    tag: 16.3.0-debian-12-r23@sha256:865e341baf49006e32b3e72254a15a81c939178cb9c48fcd9faf1c0ac4b49664
     pullPolicy: IfNotPresent
 
 # the service used to expose the FHIR GW REST endpoint
@@ -89,7 +89,7 @@ ingress:
 
 # set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production).
 # More information: <https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15>
-resourcesPreset: "medium"
+resourcesPreset: "small"
 # -- configure the resources used by the log collector sidecar container used to tail the
 # filesystem-stored log files
 resources: {}
@@ -335,7 +335,7 @@ curl: # +doc-gen:ignore
   image:
     registry: docker.io
     repository: curlimages/curl
-    tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd
+    tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4
 
 # container security context applied to init containers used by the query, list, and notify modules.
 # also used by the Helm test job pods

charts/fhir-pseudonymizer/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 2.1.0
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.20.3
-digest: sha256:b94bb37516dcdd7c503b9cafd15fbd9d21c7f5a0685e08568d16b9faaf12b58c
-generated: "2024-07-07T13:29:10.241403004Z"
+  version: 2.20.5
+digest: sha256:439d517fb023acc69976ec9b4259d25111eaf3630e8e6c25bbbf371fe4308844
+generated: "2024-08-05T13:10:58.368817484Z"

charts/fhir-pseudonymizer/Chart.yaml

@@ -12,8 +12,8 @@ dependencies:
     condition: vfps.enabled
   - name: common
     repository: oci://registry-1.docker.io/bitnamicharts
-    version: 2.20.3
-version: 0.7.1
+    version: 2.20.5
+version: 0.7.2
 annotations:
   artifacthub.io/license: Apache-2.0
   artifacthub.io/containsSecurityUpdates: "false"
@@ -25,4 +25,4 @@ annotations:
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: "updated vfps sub-chart to 2.1.0"
+      description: "dependency updates"

charts/fhir-pseudonymizer/values.yaml

@@ -34,7 +34,7 @@ gpas:
 image: # +doc-gen:ignore
   registry: ghcr.io
   repository: miracum/fhir-pseudonymizer
-  tag: v2.21.11@sha256:f39519ea6c62964711a62ac12f1a44720e29ab75c258c225db614935ff8d7bcf
+  tag: v2.21.14@sha256:413a2aab3b62e9ca6ff1e0a546f9c1f06dc27a83c9289d746210d0634cb90114
   pullPolicy: IfNotPresent
 
 metrics:
@@ -223,7 +223,7 @@ curl: # +doc-gen:ignore
   image:
     registry: docker.io
     repository: curlimages/curl
-    tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd
+    tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4
 
 # container security context applied to init containers and the Helm test pods
 restrictedContainerSecurityContext: # +doc-gen:ignore

charts/stream-processors/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.20.3
-digest: sha256:ad193e27dedbfcbc2ca49c25af386d80820bdc5b988df79c7d4abe4d47b40949
-generated: "2024-07-01T17:31:18.056235016Z"
+  version: 2.20.5
+digest: sha256:6a506765da77ec972be172c85f52a7b574e489a6660b9091afad27409f00882f
+generated: "2024-08-05T13:10:44.762926036Z"

charts/stream-processors/Chart.yaml

@@ -8,10 +8,10 @@ keywords:
   - kafka
   - strimzi kafka operator
   - stream processing
-version: 1.7.4
+version: 1.7.5
 dependencies:
   - name: common
-    version: 2.20.3
+    version: 2.20.5
     repository: oci://registry-1.docker.io/bitnamicharts
 annotations:
   artifacthub.io/recommendations: |
@@ -21,4 +21,4 @@ annotations:
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: dependency updates
+      description: "dependency updates"

charts/vfps/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 15.5.14
+  version: 15.5.20
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.20.3
-digest: sha256:3a7ad37d2f0e668ef2794992fc5c89d6c90163e16fdc5dac102e707506b3aec6
-generated: "2024-07-06T21:31:28.057836775+02:00"
+  version: 2.20.5
+digest: sha256:fdb5d33d9e41a07a8b81839dbf45f34dcc2358fec921a255625608f21c482d80
+generated: "2024-08-05T13:10:31.734411918Z"

charts/vfps/Chart.yaml

@@ -15,15 +15,15 @@ maintainers:
   - name: miracum
 dependencies:
   - name: postgresql
-    version: 15.5.14
+    version: 15.5.20
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql.enabled
   - name: common
     repository: oci://registry-1.docker.io/bitnamicharts
-    version: 2.20.3
+    version: 2.20.5
 deprecated: false
 kubeVersion: ">= 1.19.0"
-version: 2.1.0
+version: 2.1.1
 appVersion: "1.x"
 annotations:
   artifacthub.io/license: Apache-2.0
@@ -40,6 +40,4 @@ annotations:
   # added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
     - kind: changed
-      description: "Set default resource requests and limits for all containers using presets"
-    - kind: changed
-      description: "added service account settings"
+      description: "dependency updates"

charts/vfps/values.yaml

@@ -182,7 +182,7 @@ waitForDatabaseInitContainer:
   image:
     registry: docker.io
     repository: bitnami/postgresql
-    tag: 16.3.0-debian-12-r19@sha256:b0248a5e2bf4fda5208183d4a6203287828666823a7a57431cfa4d31688bae97
+    tag: 16.3.0-debian-12-r23@sha256:865e341baf49006e32b3e72254a15a81c939178cb9c48fcd9faf1c0ac4b49664
     pullPolicy: IfNotPresent
 
 # -- container security context applied to init containers and the Helm test pods
@@ -241,7 +241,7 @@ curl:
   image:
     registry: docker.io
     repository: curlimages/curl
-    tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd
+    tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4
 
 # -- a JSON configuration object which is mounted as `appsettings.Production.json` inside the container.
 # useful to define namespaces to create as part of the application startup.