From 87f4e3ea1ea0d3129b913558dec18d691b6e3651 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Wed, 9 Jul 2025 09:20:19 +0000 Subject: [PATCH 1/2] helm-push/0.10.4-r29: fix GHSA-557j-xg8c-q2mm --- helm-push.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/helm-push.yaml b/helm-push.yaml index 738d5da2f20..59441be830b 100644 --- a/helm-push.yaml +++ b/helm-push.yaml @@ -1,7 +1,7 @@ package: name: helm-push version: 0.10.4 - epoch: 29 + epoch: 30 description: Helm plugin to push chart package to ChartMuseum copyright: - license: Apache-2.0 @@ -43,9 +43,9 @@ pipeline: github.com/docker/docker@v26.1.5 golang.org/x/crypto@v0.35.0 golang.org/x/oauth2@v0.27.0 - helm.sh/helm/v3@v3.17.3 github.com/containerd/containerd@v1.7.27 golang.org/x/net@v0.38.0 + helm.sh/helm/v3@v3.18.4 # Dropping helm plugins in /usr/libexec since they are binaries and # configuration intended to be run by the helm command. From 0d6132bd670e4d31706e3587fe8484e3767008b8 Mon Sep 17 00:00:00 2001 From: Kyle Steere Date: Fri, 11 Jul 2025 15:22:18 -0500 Subject: [PATCH 2/2] fix build failures Signed-off-by: Kyle Steere --- helm-push.yaml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/helm-push.yaml b/helm-push.yaml index 59441be830b..e5c73beefca 100644 --- a/helm-push.yaml +++ b/helm-push.yaml @@ -35,12 +35,7 @@ pipeline: - uses: go/bump with: deps: |- - github.com/docker/distribution@v2.8.3 google.golang.org/protobuf@v1.33.0 - github.com/distribution/reference@v0.6.0 - github.com/docker/docker-credential-helpers@v0.8.1 - oras.land/oras-go@v1.2.5 - github.com/docker/docker@v26.1.5 golang.org/x/crypto@v0.35.0 golang.org/x/oauth2@v0.27.0 github.com/containerd/containerd@v1.7.27