chore(deps): update helm general non-major (#9558)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[common](https://togithub.com/truecharts/apps/tree/master/charts/common)
([source](https://togithub.com/truecharts/library-charts)) | minor |
`12.13.0` -> `12.14.1` |
|
[common](https://togithub.com/truecharts/apps/tree/master/charts/common)
([source](https://togithub.com/truecharts/library-charts)) | minor |
`12.13.1` -> `12.14.1` |
|
[common](https://togithub.com/truecharts/apps/tree/master/charts/common)
([source](https://togithub.com/truecharts/library-charts)) | minor |
`12.10.4` -> `12.14.1` |
|
[kube-state-metrics](https://truecharts.org/charts/dependency/kube-state-metrics)
([source](https://togithub.com/truecharts/charts)) | patch | `1.0.15` ->
`1.0.20` |
| [mariadb](https://truecharts.org/charts/dependency/mariadb)
([source](https://togithub.com/truecharts/charts)) | patch | `7.0.45` ->
`7.0.50` |
| [memcached](https://truecharts.org/charts/dependency/memcached)
([source](https://togithub.com/truecharts/charts)) | patch | `6.0.55` ->
`6.0.59` |
| [mongodb](https://truecharts.org/charts/dependency/mongodb)
([source](https://togithub.com/truecharts/charts)) | patch | `6.0.44` ->
`6.0.48` |
|
[node-exporter](https://truecharts.org/charts/dependency/node-exporter)
([source](https://togithub.com/truecharts/charts)) | patch | `1.0.18` ->
`1.0.22` |
| [redis](https://truecharts.org/charts/dependency/redis)
([source](https://togithub.com/truecharts/charts)) | patch | `6.0.54` ->
`6.0.58` |
| [redis](https://truecharts.org/charts/dependency/redis)
([source](https://togithub.com/truecharts/charts)) | patch | `6.0.46` ->
`6.0.58` |

---

### ⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>truecharts/library-charts</summary>

###
[`v12.14.1`](https://togithub.com/truecharts/library-charts/releases/tag/common-12.14.1)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-12.14.0...common-12.14.1)

Function library for TrueCharts

###
[`v12.14.0`](https://togithub.com/truecharts/library-charts/releases/tag/common-12.14.0)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-12.13.2...common-12.14.0)

Function library for TrueCharts

###
[`v12.13.2`](https://togithub.com/truecharts/library-charts/releases/tag/common-12.13.2)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-12.13.1...common-12.13.2)

Function library for TrueCharts

###
[`v12.13.1`](https://togithub.com/truecharts/library-charts/releases/tag/common-12.13.1)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-12.13.0...common-12.13.1)

Function library for TrueCharts

</details>

<details>
<summary>truecharts/charts</summary>

###
[`v1.0.20`](https://togithub.com/truecharts/charts/releases/tag/kube-state-metrics-1.0.20)

[Compare
Source](https://togithub.com/truecharts/charts/compare/kube-state-metrics-1.0.19...kube-state-metrics-1.0.20)

kube-state-metrics is a simple service that listens to the Kubernetes
API server and generates metrics about the state of the objects.

###
[`v1.0.19`](https://togithub.com/truecharts/charts/releases/tag/kube-state-metrics-1.0.19)

[Compare
Source](https://togithub.com/truecharts/charts/compare/kube-state-metrics-1.0.18...kube-state-metrics-1.0.19)

kube-state-metrics is a simple service that listens to the Kubernetes
API server and generates metrics about the state of the objects.

###
[`v1.0.18`](https://togithub.com/truecharts/charts/releases/tag/kube-state-metrics-1.0.18)

[Compare
Source](https://togithub.com/truecharts/charts/compare/kube-state-metrics-1.0.17...kube-state-metrics-1.0.18)

kube-state-metrics is a simple service that listens to the Kubernetes
API server and generates metrics about the state of the objects.

###
[`v1.0.17`](https://togithub.com/truecharts/charts/releases/tag/kube-state-metrics-1.0.17)

[Compare
Source](https://togithub.com/truecharts/charts/compare/kube-state-metrics-1.0.16...kube-state-metrics-1.0.17)

kube-state-metrics is a simple service that listens to the Kubernetes
API server and generates metrics about the state of the objects.

###
[`v1.0.16`](https://togithub.com/truecharts/charts/releases/tag/kube-state-metrics-1.0.16)

[Compare
Source](https://togithub.com/truecharts/charts/compare/kube-state-metrics-1.0.15...kube-state-metrics-1.0.16)

kube-state-metrics is a simple service that listens to the Kubernetes
API server and generates metrics about the state of the objects.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10pm on tuesday" in timezone
Europe/Amsterdam, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xMTUuMiIsInVwZGF0ZWRJblZlciI6IjM1LjExNS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

.all-contributorsrc

@@ -504,7 +504,8 @@
       "avatar_url": "https://avatars.githubusercontent.com/u/18377483?v=4",
       "profile": "https://github.com/j0hnby",
       "contributions": [
-        "bug"
+        "bug",
+        "doc"
       ]
     },
     {
@@ -1060,7 +1061,8 @@
       "profile": "https://github.com/ZasX",
       "contributions": [
         "doc",
-        "mentoring"
+        "mentoring",
+        "code"
       ]
     },
     {
@@ -1687,7 +1689,8 @@
       "avatar_url": "https://avatars.githubusercontent.com/u/1540233?v=4",
       "profile": "https://github.com/nautilus7",
       "contributions": [
-        "bug"
+        "bug",
+        "code"
       ]
     },
     {
@@ -1780,9 +1783,64 @@
         "code",
         "bug"
       ]
+    },
+    {
+      "login": "marcofaggian",
+      "name": "Marco Faggian",
+      "avatar_url": "https://avatars.githubusercontent.com/u/19221001?v=4",
+      "profile": "https://marcofaggian.com",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "Emalton",
+      "name": "John P",
+      "avatar_url": "https://avatars.githubusercontent.com/u/9328458?v=4",
+      "profile": "https://github.com/Emalton",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "kryojenik",
+      "name": "kryojenik",
+      "avatar_url": "https://avatars.githubusercontent.com/u/845427?v=4",
+      "profile": "https://github.com/kryojenik",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "malcolmcdixon",
+      "name": "Malcolm",
+      "avatar_url": "https://avatars.githubusercontent.com/u/56974882?v=4",
+      "profile": "https://github.com/malcolmcdixon",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "depasseg",
+      "name": "depasseg",
+      "avatar_url": "https://avatars.githubusercontent.com/u/3201827?v=4",
+      "profile": "https://github.com/depasseg",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "j1mbl3s",
+      "name": "j1mbl3s",
+      "avatar_url": "https://avatars.githubusercontent.com/u/44634577?v=4",
+      "profile": "https://github.com/j1mbl3s",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7,
   "skipCi": true,
-  "commitConvention": "angular"
+  "commitConvention": "angular",
+  "commitType": "docs"
 }

.github/CODEOWNERS

@@ -5,5 +5,5 @@
 /charts/dependency/     @truecharts/enterprise-maintainers @ornias1993
 /charts/enterprise/     @truecharts/enterprise-maintainers @ornias1993
 /charts/dev/            @ornias1993
-/.github/               @truecharts/ci-maintainers @ornias1993 
+/.github/               @truecharts/ci-maintainers @ornias1993
 docs/                   @truecharts/docs-maintainers @ornias1993

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-191-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-196-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -201,7 +201,7 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
     </tr>
     <tr>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/eingemaischt"><img src="https://avatars.githubusercontent.com/u/151498?v=4?s=100" width="100px;" alt="Philipp"/><br /><sub><b>Philipp</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aeingemaischt" title="Bug reports">🐛</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/j0hnby"><img src="https://avatars.githubusercontent.com/u/18377483?v=4?s=100" width="100px;" alt="John"/><br /><sub><b>John</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aj0hnby" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/j0hnby"><img src="https://avatars.githubusercontent.com/u/18377483?v=4?s=100" width="100px;" alt="John"/><br /><sub><b>John</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aj0hnby" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=j0hnby" title="Documentation">📖</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/john-parton"><img src="https://avatars.githubusercontent.com/u/2071543?v=4?s=100" width="100px;" alt="John Parton"/><br /><sub><b>John Parton</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ajohn-parton" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/Amasis"><img src="https://avatars.githubusercontent.com/u/7325217?v=4?s=100" width="100px;" alt="Marc"/><br /><sub><b>Marc</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AAmasis" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/fdzaebel"><img src="https://avatars.githubusercontent.com/u/46503230?v=4?s=100" width="100px;" alt="fdzaebel"/><br /><sub><b>fdzaebel</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Afdzaebel" title="Bug reports">🐛</a></td>
@@ -277,7 +277,7 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/uranderu"><img src="https://avatars.githubusercontent.com/u/71091366?v=4?s=100" width="100px;" alt="uranderu"/><br /><sub><b>uranderu</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Auranderu" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/heytcass"><img src="https://avatars.githubusercontent.com/u/11260288?v=4?s=100" width="100px;" alt="Tom Cassady"/><br /><sub><b>Tom Cassady</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aheytcass" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/Huftierchen"><img src="https://avatars.githubusercontent.com/u/16015778?v=4?s=100" width="100px;" alt="Huftierchen"/><br /><sub><b>Huftierchen</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AHuftierchen" title="Bug reports">🐛</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/ZasX"><img src="https://avatars.githubusercontent.com/u/806452?v=4?s=100" width="100px;" alt="ZasX"/><br /><sub><b>ZasX</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=ZasX" title="Documentation">📖</a> <a href="#mentoring-ZasX" title="Mentoring">🧑‍🏫</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/ZasX"><img src="https://avatars.githubusercontent.com/u/806452?v=4?s=100" width="100px;" alt="ZasX"/><br /><sub><b>ZasX</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=ZasX" title="Documentation">📖</a> <a href="#mentoring-ZasX" title="Mentoring">🧑‍🏫</a> <a href="https://github.com/truecharts/charts/commits?author=ZasX" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/aeolus811tw"><img src="https://avatars.githubusercontent.com/u/4956319?v=4?s=100" width="100px;" alt="Kevin T."/><br /><sub><b>Kevin T.</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aaeolus811tw" title="Bug reports">🐛</a></td>
     </tr>
     <tr>
@@ -366,7 +366,7 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/CommanderStarhump"><img src="https://avatars.githubusercontent.com/u/91758053?v=4?s=100" width="100px;" alt="CommanderStarhump"/><br /><sub><b>CommanderStarhump</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ACommanderStarhump" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/vianchiel"><img src="https://avatars.githubusercontent.com/u/123665622?v=4?s=100" width="100px;" alt="Vianchiel"/><br /><sub><b>Vianchiel</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Avianchiel" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/b-m-f"><img src="https://avatars.githubusercontent.com/u/2843450?v=4?s=100" width="100px;" alt="Maximilian Ehlers"/><br /><sub><b>Maximilian Ehlers</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ab-m-f" title="Bug reports">🐛</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/nautilus7"><img src="https://avatars.githubusercontent.com/u/1540233?v=4?s=100" width="100px;" alt="nautilus7"/><br /><sub><b>nautilus7</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Anautilus7" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/nautilus7"><img src="https://avatars.githubusercontent.com/u/1540233?v=4?s=100" width="100px;" alt="nautilus7"/><br /><sub><b>nautilus7</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Anautilus7" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=nautilus7" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/kqmaverick"><img src="https://avatars.githubusercontent.com/u/121722567?v=4?s=100" width="100px;" alt="kqmaverick"/><br /><sub><b>kqmaverick</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Akqmaverick" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/ccalby"><img src="https://avatars.githubusercontent.com/u/680553?v=4?s=100" width="100px;" alt="ccalby"/><br /><sub><b>ccalby</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Accalby" title="Bug reports">🐛</a></td>
     </tr>
@@ -377,11 +377,16 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/schopenhauer"><img src="https://avatars.githubusercontent.com/u/2085103?v=4?s=100" width="100px;" alt="schopenhauer"/><br /><sub><b>schopenhauer</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aschopenhauer" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/Zackptg5"><img src="https://avatars.githubusercontent.com/u/5107713?v=4?s=100" width="100px;" alt="Zackptg5"/><br /><sub><b>Zackptg5</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AZackptg5" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://bradackerman.com/"><img src="https://avatars.githubusercontent.com/u/115895?v=4?s=100" width="100px;" alt="Brad Ackerman"/><br /><sub><b>Brad Ackerman</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Abackerman" title="Bug reports">🐛</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/snazy2000"><img src="https://avatars.githubusercontent.com/u/1378836?v=4?s=100" width="100px;" alt="Stephen"/><br /><sub><b>Stephen</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Asnazy2000" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://hachyderm.io/@mcspiff"><img src="https://avatars.githubusercontent.com/u/7252551?v=4?s=100" width="100px;" alt="mcspiff313"/><br /><sub><b>mcspiff313</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Amcspiff313" title="Bug reports">🐛</a></td>
     </tr>
     <tr>
-      <td align="center" valign="top" width="14.28%"><a href="https://hachyderm.io/@mcspiff"><img src="https://avatars.githubusercontent.com/u/7252551?v=4?s=100" width="100px;" alt="mcspiff313"/><br /><sub><b>mcspiff313</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Amcspiff313" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://fnichol.com"><img src="https://avatars.githubusercontent.com/u/261548?v=4?s=100" width="100px;" alt="Fletcher Nichol"/><br /><sub><b>Fletcher Nichol</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=fnichol" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Afnichol" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://marcofaggian.com"><img src="https://avatars.githubusercontent.com/u/19221001?v=4?s=100" width="100px;" alt="Marco Faggian"/><br /><sub><b>Marco Faggian</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=marcofaggian" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/Emalton"><img src="https://avatars.githubusercontent.com/u/9328458?v=4?s=100" width="100px;" alt="John P"/><br /><sub><b>John P</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Emalton" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/kryojenik"><img src="https://avatars.githubusercontent.com/u/845427?v=4?s=100" width="100px;" alt="kryojenik"/><br /><sub><b>kryojenik</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=kryojenik" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/malcolmcdixon"><img src="https://avatars.githubusercontent.com/u/56974882?v=4?s=100" width="100px;" alt="Malcolm"/><br /><sub><b>Malcolm</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=malcolmcdixon" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/depasseg"><img src="https://avatars.githubusercontent.com/u/3201827?v=4?s=100" width="100px;" alt="depasseg"/><br /><sub><b>depasseg</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=depasseg" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/j1mbl3s"><img src="https://avatars.githubusercontent.com/u/44634577?v=4?s=100" width="100px;" alt="j1mbl3s"/><br /><sub><b>j1mbl3s</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=j1mbl3s" title="Documentation">📖</a></td>
     </tr>
   </tbody>
 </table>

.github/SUPPORT.md

@@ -1,3 +1,7 @@
+---
+sidebar_position: 3
+---
+
 # Support Policy
 
 ## TrueCharts on TrueNAS SCALE
@@ -11,9 +15,11 @@ We also document which versions of TrueNAS will receive TrueCharts updates and f
 ### Supported Versions
 
 | TrueNAS version  | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes                                                                                                          |
-| ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------- | --- |
-| 22.02.4 or prior | `master` | :x:     | :x:                       | :x:                   | Advised to update to 22.12.1 release of [TrueNAS SCALE](https://www.truenas.com/docs/scale/scalereleasenotes/) |     |
-| 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Most Stable Release as of 2023-02-21                                                                           |
+| ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------- |
+| 22.02.4 or prior | `master` | :x:                    | :x:                       | :x:                   | Advised to update to 22.12.2 release of [TrueNAS SCALE](https://www.truenas.com/docs/scale/scalereleasenotes/) |
+| 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                                |
+| 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                                |
+| 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                                |
 | Nightly          | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                                               |
 
 :::warning Support Guidelines
@@ -32,7 +38,7 @@ please report them to our [github](https://github.com/truecharts/charts/issues/n
 ## Incubator Train Charts
 
 Our support policy for `incubator` train charts is different for those on the `stable` train. Those charts are work in progress,
-may break at anytime and we're still going through many of the charts from unRAID. We won't accept support tickets on our discord for `incubator` train
-charts on our [discord](https://discord.gg/tVsPTHWTtr). However we have an **#incubator-chat** channel for these apps to help get them running and/or receive feedback.
-With enough posivite feedback a chart can be promoted to `stable` train. Feedback about bugs is also accepted there which can be used to fix them.
+may break at anytime and we're still going through many of the charts from unRAID. We won't accept support tickets for `incubator` train
+charts on our [discord](https://discord.gg/tVsPTHWTtr). However, we have an **#incubator-chat** channel for these apps to help get them running and/or receive feedback.
+With enough positive feedback a chart can be promoted to `stable` train. Feedback about bugs is also accepted there which can be used to fix them.
 Assume anything in the `incubator` train is in beta and you're testing it. As well, anything installed in `incubator` will have to be REINSTALLED once it moves to the `stable` train.

.github/actions/collect-changes/action.yaml

@@ -42,13 +42,15 @@ runs:
         for CHARTPATH in "${PATHS[@]}"
         do
           IFS='/' read -r -a path_parts <<< "${CHARTPATH}"
-          CHARTS+=("${path_parts[1]}/${path_parts[2]}")
+          CHARTS+=("${path_parts[0]}/${path_parts[1]}/${path_parts[2]}")
         done
 
         # Remove duplicates
         CHARTS=( `printf "%s\n" "${CHARTS[@]}" | sort -u` )
         # Set output to changed charts
+        echo "Changed charts: ${CHARTS[*]}"
         printf "::set-output name=addedOrModified::%s\n" "${CHARTS[*]}"
+        
 
     - name: Collect bumped charts after last tag
       id: filter-bumped-charts
@@ -106,11 +108,9 @@ runs:
 
         # Remove duplicates
         CHARTS=( `printf "%s\n" "${CHARTS[@]}" | sort -u` )
-        # Set output to changed charts
-        printf "::set-output name=addedOrModified::%s\n" "${CHARTS[*]}"
 
         echo "Number of detected changed charts: ${#CHARTS[@]}"
-        if [ ${#CHARTS[@]} -eq 0 ] || [ "${CHARTS[0]}" = " " ] || [ "${CHARTS[0]}" = "/" ]; then
+        if [ ${#CHARTS[@]} -eq 0 ] || [ "${CHARTS[0]}" == ' ' ] || [ "${CHARTS[0]}" == '/' ]; then
           echo "No Changed Charts detected since latest tag..."
           printf "::set-output name=changesDetectedAfterTag::%s\n" "false"
         else
@@ -120,7 +120,7 @@ runs:
           # Get only the chart paths
 
           # Set output to changed charts
-          echo "Changed charts: ${CHARTS[*]}"
+          echo "Changed charts since latest tag: ${CHARTS[*]}"
           printf "::set-output name=modifiedChartsAfterTag::%s\n" "${CHARTS[*]}"
         fi
         popd > /dev/null

.github/actions/label-from-status/action.yaml

@@ -1,48 +0,0 @@
-name: "Set issue labels based on status"
-description: "Sets / removes issue labels based on CI job status"
-inputs:
-  token:
-    required: true
-    description: "The Github API token to use"
-  issue-number:
-    required: true
-    description: "The issue to label"
-  prefix:
-    required: true
-    description: "The label prefix (e.g. lint, install)"
-  job-status:
-    required: true
-    description: "The status of the CI job"
-  remove-on-skipped:
-    required: false
-    default: false
-    description: "Remove the label if the job was skipped"
-
-runs:
-  using: "composite"
-  steps:
-    - name: Label success
-      uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1.0.4
-      if: ${{ inputs.job-status == 'success' }}
-      with:
-        repo-token: ${{ inputs.token }}
-        issue-number: ${{ inputs.issue-number }}
-        add-labels: "${{ inputs.prefix }}:ok"
-        remove-labels: "${{ inputs.prefix }}:failed"
-
-    - name: Label failure
-      uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1.0.4
-      if: ${{ inputs.job-status == 'failure' }}
-      with:
-        repo-token: ${{ inputs.token }}
-        issue-number: ${{ inputs.issue-number }}
-        add-labels: "${{ inputs.prefix }}:failed"
-        remove-labels: "${{ inputs.prefix }}:ok"
-
-    - name: Remove label
-      uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1.0.4
-      if: ${{ (inputs.job-status == 'skipped') && (inputs.remove-on-skipped == 'true') }}
-      with:
-        repo-token: ${{ inputs.token }}
-        issue-number: ${{ inputs.issue-number }}
-        remove-labels: "${{ inputs.prefix }}:ok, ${{ inputs.prefix }}:failed"

.github/cr.yaml

@@ -1,7 +0,0 @@
-owner: truecharts
-git-repo: charts
-repo: charts
-charts-dir: charts/*
-charts_repo_url: "https://charts.truecharts.org"
-SkipExisting: true
-skipExisting: true

.github/ct-install.yaml

@@ -1,19 +1,16 @@
 remote: origin
 target-branch: master
-helm-extra-args: --timeout 300s
+helm-extra-args: --timeout 180s
 chart-yaml-schema: .github/chart_schema.yaml
 chart-dirs:
   - charts/incubator
   - charts/stable
   - charts/dependency
-  - charts/core
   - charts/dev
-  - charts/games
   - charts/enterprise
-  - charts/SCALE
+  - charts/operators
 excluded-charts:
   - charts/dependency/subchart
-  - charts/incubator/frigate
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
   - charts/library/common
@@ -25,7 +22,6 @@ excluded-charts:
   - charts/stable/facebox
   - charts/stable/foundryvtt
   - charts/stable/foundryvtt
-  - charts/stable/frigate
   - charts/stable/heimdall
   - charts/stable/multus
   - charts/stable/orbital-sync
@@ -35,6 +31,7 @@ excluded-charts:
   - charts/stable/promcord
   - charts/stable/rdesktop
   - charts/stable/reg
+  - charts/stable/romm
   - charts/stable/ser2sock
   - charts/stable/storj-node
   - charts/stable/tailscale
@@ -44,6 +41,4 @@ excluded-charts:
 chart-repos:
   - truecharts=https://charts.truecharts.org
   - truecharts-library=https://library-charts.truecharts.org
-  - bitnami=https://charts.bitnami.com/bitnami
-  - grafana=https://grafana.github.io/helm-charts
-  - prometheus=https://prometheus-community.github.io/helm-charts
+  - truecharts-deps=https://deps.truecharts.org

.github/ct-lint.yaml

@@ -1,20 +1,16 @@
 remote: origin
 target-branch: master
 chart-yaml-schema: .github/chart_schema.yaml
-helm-extra-args: --timeout 600s
+helm-extra-args: --timeout 120s
 chart-dirs:
   - charts/incubator
   - charts/stable
   - charts/dependency
-  - charts/core
   - charts/dev
-  - charts/games
   - charts/enterprise
-  - charts/SCALE
+  - charts/operators
 excluded-charts: []
 chart-repos:
   - truecharts=https://charts.truecharts.org
   - truecharts-library=https://library-charts.truecharts.org
-  - bitnami=https://charts.bitnami.com/bitnami
-  - grafana=https://grafana.github.io/helm-charts
-  - prometheus=https://prometheus-community.github.io/helm-charts
+  - truecharts-deps=https://deps.truecharts.org

.github/renovate.json5

@@ -8,10 +8,10 @@
   "commitMessageExtra": "to {{newVersion}}",
   "commitMessageSuffix": "",
   "rebaseWhen": "conflicted",
-  "prConcurrentLimit": 50,
+  "prConcurrentLimit": 150,
   "timezone":"Europe/Amsterdam",
   "pinDigests": true,
-  "automerge": true,
+  "automerge": false,
   "gitAuthor": "TrueCharts-Admin <bot@truecharts.org>",
   "helm-values": {
     "fileMatch": ["charts/.+/.*values\\.yaml$", "charts/.+/SCALE/.*_values\\.yaml$"]
@@ -32,7 +32,7 @@
       "matchManagers": ["helm-values"],
       "enabled": true,
       "pinDigests": true,
-      "automerge": true,
+      "automerge": false,
       "commitMessageTopic": "container image {{depName}}",
       "commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}",
       "matchUpdateTypes": ["major", "minor", "patch", "digest"],
@@ -41,7 +41,7 @@
       "datasources": ["docker"],
       "enabled": true,
       "pinDigests": true,
-      "automerge": true,
+      "automerge": false,
       "separateMinorPatch": true,
       "commitMessageTopic": "container image {{depName}}",
       "commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}",
@@ -50,7 +50,7 @@
     {
       "matchManagers": ["github-actions"],
       "excludePackageNames": ["stefanzweifel/git-auto-commit-action"],
-      "automerge": false,
+      "automerge": true,
     },
     //
     // helm deps
@@ -62,22 +62,22 @@
       "bumpVersion": "major",
       "labels": ["update/helm/dependency/major"],
       "groupName": ["helm dependency major"],
-      "matchPaths": ["charts/dependency/**"],
+      "matchPaths": ["charts/dependency/**", "templates/**"],
     },
     {
       "matchDatasources": ["helm"],
-      "automerge": true,
+      "automerge": false,
       "matchUpdateTypes": [
         "minor",
         "patch"
       ],
       "bumpVersion": "patch",
-      "labels": ["update/helm/dependency/non-major"],
-      "matchPaths": ["charts/dependency/**"],
+      "labels": ["update/helm/dependency/non-major", "automerge"],
+      "matchPaths": ["charts/dependency/**", "templates/**"],
       "groupName": "helm dependency non-major",
     },
     //
-    // helm ent
+    // helm ent and operators
     //
     {
       "matchDatasources": ["helm"],
@@ -86,23 +86,23 @@
       "enabled": true,
       "labels": ["update/helm/general/major"],
       "groupName": ["helm general major"],
-      "matchPaths": ["charts/enterprise/**"],
+      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
       "schedule": [
         "before 10pm on tuesday"
       ],
     },
     {
       "matchDatasources": ["helm"],
-      "automerge": true,
+      "automerge": false,
       "matchUpdateTypes": [
         "minor",
         "patch"
       ],
       "enabled": true,
       "bumpVersion": "patch",
-      "labels": ["update/helm/general/non-major"],
+      "labels": ["update/helm/general/non-major", "automerge"],
       "groupName": "helm general non-major",
-      "matchPaths": ["charts/enterprise/**"],
+      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
       "schedule": [
         "before 10pm on tuesday"
       ],
@@ -124,14 +124,14 @@
     },
     {
       "matchDatasources": ["helm"],
-      "automerge": true,
+      "automerge": false,
       "enabled": true,
       "matchUpdateTypes": [
         "minor",
         "patch"
       ],
       "bumpVersion": "patch",
-      "labels": ["update/helm/general/non-major"],
+      "labels": ["update/helm/general/non-major", "automerge"],
       "groupName": "helm general non-major",
       "matchPaths": ["charts/incubator/**", "charts/SCALE/**", "charts/dev/**", "charts/stable/**", "templates/app/**"],
       "schedule": [
@@ -139,7 +139,7 @@
       ],
     },
     //
-    // Tag updates for semantic tags on enterprise Apps
+    // Tag updates for semantic tags on enterprise and operatorApps
     //
     {
       "matchDatasources": ["docker"],
@@ -147,22 +147,22 @@
       "enabled": true,
       "bumpVersion": "major",
       "labels": ["update/docker/enterprise/major"],
-      "matchPaths": ["charts/enterprise/**"],
+      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
     },
     {
       "matchDatasources": ["docker"],
-      "automerge": true,
+      "automerge": false,
       "matchUpdateTypes": [
         "minor",
       ],
       "enabled": true,
       "bumpVersion": "patch",
       "labels": ["update/docker/enterprise/minor"],
-      "matchPaths": ["charts/enterprise/**"],
+      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
     },
     {
       "matchDatasources": ["docker"],
-      "automerge": true,
+      "automerge": false,
       "matchUpdateTypes": [
         "patch",
         "digest",
@@ -170,23 +170,71 @@
       ],
       "bumpVersion": "patch",
       "enabled": true,
-      "labels": ["update/docker/enterprise/patch"],
+      "labels": ["update/docker/enterprise/patch", "automerge"],
       "matchPaths": ["charts/enterprise/**"],
     },
+    {
+      "matchDatasources": ["docker"],
+      "automerge": false,
+      "matchUpdateTypes": [
+        "patch",
+        "digest",
+        "pin",
+      ],
+      "bumpVersion": "patch",
+      "enabled": true,
+      "labels": ["update/docker/operator/patch"],
+      "matchPaths": ["charts/operator/**"],
+    },
     //
-    // Tag updates for semantic tags on all but enterprise Apps
+    // Tag updates for semantic tags on incubator and dev charts
     //
     {
       "matchDatasources": ["docker"],
       "updateTypes": ["major"],
       "bumpVersion": "minor",
       "enabled": false,
-      "labels": ["update/docker/general/major", "automerge"],
-      "matchPaths": ["charts/dependency/**", "charts/SCALE/**", "charts/incubator/**", "charts/dev/**", "charts/stable/**", "templates/app/**"],
+      "labels": ["update/docker/incubator/major", "automerge"],
+      "matchPaths": ["charts/incubator/**", "charts/dev/**"],
     },
     {
       "matchDatasources": ["docker"],
-      "automerge": true,
+      "automerge": false,
+      "matchUpdateTypes": [
+        "minor",
+        "patch",
+        "digest",
+      ],
+      "bumpVersion": "patch",
+      "enabled": false,
+      "labels": ["update/docker/incubator/non-major", "automerge"],
+      "matchPaths": ["charts/incubator/**", "charts/dev/**"],
+    },
+    {
+      "matchDatasources": ["docker"],
+      "automerge": false,
+      "matchUpdateTypes": [
+        "pin",
+      ],
+      "bumpVersion": "patch",
+      "enabled": true,
+      "labels": ["update/docker/incubator/non-major", "automerge"],
+      "matchPaths": ["charts/incubator/**", "charts/dev/**"],
+    },
+    //
+    // Tag updates for semantic tags on all but enterprise, operator and incubator Apps
+    //
+    {
+      "matchDatasources": ["docker"],
+      "updateTypes": ["major"],
+      "bumpVersion": "minor",
+      "enabled": true,
+      "labels": ["update/docker/general/major", "automerge"],
+      "matchPaths": ["charts/dependency/**", "charts/SCALE/**", "charts/stable/**", "templates/app/**"],
+    },
+    {
+      "matchDatasources": ["docker"],
+      "automerge": false,
       "matchUpdateTypes": [
         "minor",
         "patch",
@@ -194,9 +242,9 @@
         "pin",
       ],
       "bumpVersion": "patch",
-      "enabled": false,
+      "enabled": true,
       "labels": ["update/docker/general/non-major", "automerge"],
-      "matchPaths": ["charts/dependency/**", "charts/SCALE/**",  "charts/incubator/**", "charts/dev/**", "charts/library/**", "charts/stable/**", "templates/app/**"],
+      "matchPaths": ["charts/dependency/**", "charts/SCALE/**", "charts/library/**", "charts/stable/**", "templates/app/**"],
     },
     //
     // Tag semantic version type based on regex
@@ -243,6 +291,11 @@
       "matchPackagePrefixes": ["tccr.io/truecharts/webtop"],
       "groupName": "webtop",
     },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackagePrefixes": ["tccr.io/truecharts/metallb"],
+      "groupName": "metallb",
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackagePrefixes": ["tccr.io/truecharts/zabbix"],

.github/scripts/fetch_helm_deps.sh

@@ -19,8 +19,20 @@ trains=(
     "stable"
     "incubator"
     "dependency"
+    "operators"
 )
 
+load_gpg_key() {
+echo ""
+echo "⏬ Downloading and Loading TrueCharts pgp Public Key"
+gpg_dir=.cr-gpg
+mkdir -p "$gpg_dir"
+curl --silent https://keybase.io/truecharts/pgp_keys.asc | gpg --dearmor > $gpg_dir/pubring.gpg || echo "❌ Couldn't load  Public Key."
+echo "✅ Public Key loaded successfully..."
+echo ""
+}
+export -f load_gpg_key
+
 download_deps() {
 local train_chart="$1"
 
@@ -85,17 +97,38 @@ for idx in $(eval echo "{0..$length}"); do
             echo "⏬ Downloading dependency $name-$version from $dep_url..."
             mkdir -p "$cache_path/$repo_dir"
             wget --quiet "$dep_url" -P "$cache_path/$repo_dir"
+            wget --quiet "$dep_url.prov" -P "$cache_path/$repo_dir"
+
             if [ ! $? ]; then
                 echo "❌ wget encountered an error..."
-                helm dependency build "$charts_path/$train_chart/Chart.yaml" || helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
+              if [[ "$train_chart" =~ incubator\/.* ]]; then
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml"|| exit 1
+              else
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
+              fi
             fi
 
             if [ -f "$cache_path/$repo_dir/$name-$version.tgz" ]; then
                 echo "✅ Dependency Downloaded!"
+                if [[ ! "$train_chart" =~ incubator\/.* ]]; then
+                  echo "Validating dependency signature..."
+                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || \
+                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || exit 1
+                else
+                  echo "Skipping dependency signature verification for $train_chart..."
+                fi
             else
                 echo "❌ Failed to download dependency"
                 # Try helm dependency build/update or otherwise fail fast if a dep fails to download...
-                helm dependency build "$charts_path/$train_chart/Chart.yaml" || helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
+              if [[ "$train_chart" =~ incubator\/.* ]]; then
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml"|| exit 1
+              else
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
+              fi
             fi
         fi
         echo ""
@@ -110,13 +143,16 @@ for idx in $(eval echo "{0..$length}"); do
         else
             echo "❌ Failed to copy dependency"
             # Try helm dependency build/update or otherwise fail fast if a dep fails to copy...
-            helm dependency build "$charts_path/$train_chart/Chart.yaml" || helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
+            helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
+            helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
         fi
     fi
 done
 }
 export -f download_deps
 
+load_gpg_key
+
 if [ -z "$1" ]; then
   for train in "${trains[@]}"; do
       for chart in $(ls "$charts_path/$train"); do

.github/scripts/tc-lint.sh

@@ -0,0 +1,213 @@
+#!/bin/bash
+
+function check_version() {
+    chart_path=${1:?"No chart path provided to [Version Check]"}
+    target_branch=${2:?"No target branch provided to [Version Check]"}
+
+    new=$(git diff "$target_branch" -- "$chart_path" | sed -nr 's/^\+version: (.*)$/\1/p')
+    old=$(git diff "$target_branch" -- "$chart_path" | sed -nr 's/^\-version: (.*)$/\1/p')
+
+    if [[ -z "$new" ]]; then
+        echo -e "\t❌ Chart version: Not changed"
+        curr_result=1
+    fi
+
+    if [[ -n "$new" ]]; then
+        echo -e "\t🔙 Old Chart Version: $old"
+        echo -e "\t🆕 New Chart Version: $new"
+
+        if [[ $(echo "$new\n$old" | sort -V -r | head -n1) != "$old" ]]; then
+            echo -e "\t✅ Chart version: Bumped"
+        else
+            echo -e "\t❌ Chart version: Not bumped or downgraded"
+            curr_result=1
+        fi
+    fi
+}
+export -f check_version
+
+function check_chart_schema(){
+    chart_path=${1:?"No chart path provided to [Chart.yaml lint]"}
+
+    yamale_output=$(yamale --schema .github/chart_schema.yaml "$chart_path/Chart.yaml")
+    yamale_exit_code=$?
+    while IFS= read -r line; do
+        echo -e "\t$line"
+    done <<< "$yamale_output"
+
+    if [ $yamale_exit_code -ne 0 ]; then
+        echo -e "\t❌ Chart Schema: Failed"
+        curr_result=1
+    else
+        echo -e "\t✅ Chart Schema: Passed"
+    fi
+}
+export -f check_chart_schema
+
+function helm_lint(){
+    chart_path=${1:?"No chart path provided to [Helm lint]"}
+
+    # Print only errors and warnings
+    helm_lint_output=$(helm lint --quiet "$chart_path")
+    helm_lint_exit_code=$?
+    while IFS= read -r line; do
+        echo -e "\t$line"
+    done <<< "$helm_lint_output"
+
+    if [ $helm_lint_exit_code -ne 0 ]; then
+        echo -e "\t❌ Helm Lint: Failed"
+        curr_result=1
+    else
+        echo -e "\t✅ Helm Lint: Passed"
+    fi
+}
+export -f helm_lint
+
+function yaml_lint(){
+    file_path=${1:?"No file path provided to [YAML lint]"}
+
+    yaml_lint_output=$(yamllint --config-file .github/yaml-lint-conf.yaml "$file_path")
+    yaml_lint_exit_code=$?
+    while IFS= read -r line; do
+        echo -e "\t$line"
+    done <<< "$yaml_lint_output"
+
+    if [ $yaml_lint_exit_code -ne 0 ]; then
+        echo -e "\t❌ YAML Lint: Failed [$file_path]"
+        curr_result=1
+    else
+        echo -e "\t✅ YAML Lint: Passed [$file_path]"
+    fi
+}
+export -f yaml_lint
+
+function lint_chart(){
+    chart_path=${1:?"No chart path provided to [Lint Chart]"}
+    target_branch=${2:?"No target branch provided to [Lint Chart]"}
+    status_file=${3:?"No status file provided to [Lint Chart]"}
+
+    curr_result_file=/tmp/$(basename "$chart_path")
+    curr_result=0
+    {
+        start_time=$(date +%s)
+        echo '---------------------------------------------------------------------------------------'
+        echo "## 🔍Linting [$chart_path]"
+        echo '----------------------------------------------'
+        echo ''
+        echo "👣 Helm Lint - [$chart_path]"
+        helm_lint "$chart_path"
+
+        echo "👣 Chart Version - [$chart_path] against [$target_branch]"
+        check_version "$chart_path" "$target_branch"
+
+        echo "👣 Chart Schema - [$chart_path]"
+        check_chart_schema "$chart_path"
+
+        echo "👣 YAML Lint - [$chart_path/Chart.yaml]"
+        yaml_lint "$chart_path/Chart.yaml"
+
+        echo "👣 YAML Lint - [$chart_path/values.yaml]"
+        yaml_lint "$chart_path/values.yaml"
+
+        for values in $chart_path/ci/*values.yaml; do
+            if [ -f "${values}" ]; then
+                echo "👣 YAML Lint - [$values]"
+                yaml_lint "$values"
+            fi
+        done
+
+        end_time=$(date +%s)
+        diff_time=$((end_time - start_time))
+
+        echo -e "\nResult:"
+        if [ $curr_result -ne 0 ]; then
+            echo "❌ Linting [$chart_path]: Failed - Took $diff_time seconds" | tee -a "$result_file"
+        else
+            echo "✅ Linting [$chart_path]: Passed - Took $diff_time seconds" | tee -a "$result_file"
+        fi
+        echo '---------------------------------------------------------------------------------------'
+        echo ''
+    } > "$curr_result_file"
+    cat "$curr_result_file"
+    echo $curr_result >> "$status_file"
+}
+export -f lint_chart
+
+# Start of script
+
+charts=$1
+target_branch=${2:-"origin/master"}
+status_file="/tmp/status"
+exit_code=0
+
+result_file=${result_file:?"No result file provided"}
+
+rm -f "$status_file"
+rm -f "$status_file"
+
+command -v yamale >/dev/null 2>&1 || {
+    printf >&2 "%s\n" "yamale (https://github.com/23andMe/Yamale#pip) is not installed. Aborting."
+    printf >&2 "%s\n" "Install it with 'pip install yamale'"
+    exit 1
+}
+
+command -v yamllint >/dev/null 2>&1 || {
+    printf >&2 "%s\n" "yamllint (https://yamllint.readthedocs.io/en/stable/quickstart.html#installing-yamllint) is not installed. Aborting."
+    printf >&2 "%s\n" "Install it with 'pip install yamllint'"
+    exit 1
+}
+
+command -v helm >/dev/null 2>&1 || {
+    printf >&2 "%s\n" "helm (https://helm.sh/docs/intro/install) is not installed. Aborting."
+    printf >&2 "%s\n" "Install it with 'curl https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | bash'"
+    exit 1
+}
+
+command -v parallel >/dev/null 2>&1 || {
+    printf >&2 "%s\n" "parallel (https://www.gnu.org/software/parallel) is not installed. Aborting."
+    printf >&2 "%s\n" "Install it with 'sudo apt install parallel'"
+    exit 1
+}
+
+changed=$(echo $charts | jq --raw-output '.[]')
+
+echo "📂 Charts to lint:"
+for chart in $changed; do
+    echo -e "\t- 📄 $chart"
+done
+echo ''
+
+start_time=$(date +%s)
+# Run lint_chart in parallel
+parallel --jobs $(($(nproc) * 2)) "lint_chart {} $target_branch $status_file" ::: $changed || true
+if grep -q 1 "$status_file"; then
+    exit_code=1
+fi
+end_time=$(date +%s)
+diff_time=$((end_time - start_time))
+
+echo '------------------------------------'
+
+# Print summary
+sorted=$(cat "$result_file" | sort)
+sorted=$(echo "$sorted" | sed 's/✅/:heavy_check_mark:/g')
+sorted=$(echo "$sorted" | sed 's/❌/:heavy_multiplication_x:/g')
+echo "# 📝 Linting results:" | tee "$result_file"
+echo '====================================================================================='
+echo "$sorted" | tee -a "$result_file"
+echo ''
+echo -e "Total Charts Linted: **$(echo "$sorted" | wc -l)**" | tee -a "$result_file"
+echo -e "Total Charts Passed: **$(echo "$sorted" | grep -c 'heavy_check_mark')**" | tee -a "$result_file"
+echo -e "Total Charts Failed: **$(echo "$sorted" | grep -c 'heavy_multiplication_x')**" | tee -a "$result_file"
+echo '====================================================================================='
+echo '' | tee -a "$result_file"
+
+if [ $exit_code -ne 0 ]; then
+    echo "❌ Linting: **Failed** - Took $diff_time seconds" | tee -a "$result_file"
+    echo "🖱️ Open [Lint Charts and Verify Dependencies] job" | tee -a "$result_file"
+    echo "👀 Expand [Run Chart Linting] step to view the results" | tee -a "$result_file"
+else
+    echo "✅ Linting: **Passed** - Took $diff_time seconds" | tee -a "$result_file"
+fi
+
+exit $exit_code

.github/workflows/catalog-test.yaml

@@ -15,9 +15,9 @@ jobs:
     name: Test SCALE Catalog
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         name: Checkout
         with:
           fetch-depth: 100
@@ -26,19 +26,13 @@ jobs:
       - name: Setting repo parent dir as safe safe.directory
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          repository: truecharts/catalog
-          path: catalog
+      ## TODO: Only run on the existing catalog when CI or template changes are actually detected
+      # - name: Checkout
+      #   uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      #   with:
+      #     repository: truecharts/catalog
+      #     path: catalog
 
       - name: build-and-run
         run: |
           tools/build-release.sh
-
-      - uses: vishnudxb/cancel-workflow@c3c77eb4383ba7d023e6614a07d94fe990501ac6 # tag=v1.2
-        if: failure()
-        with:
-          repo: truecharts/charts
-          workflow_id: ${{ github.run_id }}
-          access_token: ${{ github.token }}

.github/workflows/charts-changelog.yaml

@@ -1,89 +0,0 @@
-name: "Charts: Update README"
-
-on:
-  workflow_dispatch:
-    inputs:
-      modifiedCharts:
-        required: true
-        type: string
-      isRenovatePR:
-        required: true
-        type: string
-    outputs:
-      commitHash:
-        description: "The most recent commit hash at the end of this workflow"
-        value: ${{ jobs.generate-changelog.outputs.commitHash }}
-
-jobs:
-  validate-changelog:
-    name: Validate changelog
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-
-      - name: Check changelog annotations
-        if: inputs.isRenovatePR != 'true'
-        run: |
-          CHARTS=(${{ inputs.modifiedCharts }})
-          for i in "${CHARTS[@]}"
-          do
-              IFS='/' read -r -a chart_parts <<< "$i"
-              ./.github/scripts/check-releasenotes.sh "charts/${chart_parts[0]}/${chart_parts[1]}"
-              echo ""
-          done
-
-  generate-changelog:
-    name: Generate changelog annotations
-    runs-on: ubuntu-latest
-    needs:
-      - validate-changelog
-    outputs:
-      commitHash: ${{ steps.save-commit-hash.outputs.commit_hash }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-
-      - name: Install Kubernetes tools
-        if: inputs.isRenovatePR == 'true'
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            yq
-          yq: "4.20.1"
-
-      - name: Annotate Charts.yaml for Renovate PR's
-        if: inputs.isRenovatePR == 'true'
-        env:
-          DEFAULT_BRANCH: "${{ github.event.repository.default_branch }}"
-        run: |
-          CHARTS=(${{ inputs.modifiedCharts }})
-          for i in "${CHARTS[@]}"
-          do
-              IFS='/' read -r -a chart_parts <<< "$i"
-                ./.github/scripts/renovate-releasenotes.sh "charts/${chart_parts[0]}/${chart_parts[1]}"
-              echo ""
-          done
-
-      - name: Create commit
-        id: create-commit
-        if: inputs.isRenovatePR == 'true'
-        uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a # v4
-        with:
-          file_pattern: charts/**/
-          commit_message: "chore: Auto-update chart metadata [skip ci]"
-          commit_user_name: ${{ github.actor }}
-          commit_user_email: ${{ github.actor }}@users.noreply.github.com
-
-      - name: Save commit hash
-        id: save-commit-hash
-        run: |
-          if [ "${{ steps.create-commit.outputs.changes_detected || 'unknown' }}" == "true" ]; then
-            echo '::set-output name=commit_hash::${{ steps.create-commit.outputs.commit_hash }}'
-          else
-            echo "::set-output name=commit_hash::${GITHUB_SHA}"
-          fi

.github/workflows/charts-lint.yaml

@@ -9,359 +9,120 @@ on:
       chartChangesDetected:
         required: true
         type: string
+      modifiedFiles:
+        required: true
+        type: string
+      modifiedCharts:
+        required: true
+        type: string
 
 jobs:
-  generate-lint-matrix:
-    name: Generate matrix for lint
+  lint-and-verify:
+    name: Lint Charts and Verify Dependencies
     runs-on: ubuntu-latest
-    outputs:
-      matrix1: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts1 }}
-        }
-      matrix2: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts2 }}
-        }
-      matrix3: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts3 }}
-        }
-      matrix4: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts4 }}
-        }
-      matrix5: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts5 }}
-        }
-      matrix6: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts6 }}
-        }
-      detected1: ${{ steps.list-changed.outputs.detected1 }}
-      detected2: ${{ steps.list-changed.outputs.detected2 }}
-      detected3: ${{ steps.list-changed.outputs.detected3 }}
-      detected4: ${{ steps.list-changed.outputs.detected4 }}
-      detected5: ${{ steps.list-changed.outputs.detected5 }}
-      detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - name: Checkout [master]
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
+          ref: master
+
+      - name: Checkout [commit]
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        with:
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+      - name: Setting repo parent dir as safe safe.directory
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
-      - name: Collect changes
+      - name: Install go-yq
+        run: |
+          mkdir -p $HOME/.local/bin
+          wget https://github.com/mikefarah/yq/releases/download/v4.26.1/yq_linux_amd64 -O $HOME/.local/bin/go-yq && \
+          chmod +x $HOME/.local/bin/go-yq
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Install pre-commit, yamale and yamllint
+        run: |
+          pip3 install --no-cache-dir pre-commit yamale yamllint
+
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo update
+
+      - name: Collect changes (branch-based)
         id: list-changed
         if: inputs.chartChangesDetected == 'true'
         shell: bash
         run: |
-          EXCLUDED=$(yq eval -o=json '.excluded-charts // []' .github/ct-lint.yaml)
-          CHARTS=$(ct list-changed --config .github/ct-lint.yaml)
-          CHARTS_JSON=$(echo "${CHARTS}" | jq -R -s -c 'split("\n")[:-1]')
-          OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED}, \"all\": ${CHARTS_JSON}}" | jq -c '.all-.excluded')
-          OUTPUT_JSON1=$((echo $OUTPUT_JSON | jq -r -c '.[:50]'; echo $OUTPUT_JSON | jq -r -c '.[301:350]'; echo $OUTPUT_JSON | jq -r -c '.[601:650]'; echo $OUTPUT_JSON | jq -r -c '.[901:950]'; echo $OUTPUT_JSON | jq -r -c '.[1201:1250]') | jq -s add)
-          OUTPUT_JSON2=$((echo $OUTPUT_JSON | jq -r -c '.[51:100]'; echo $OUTPUT_JSON | jq -r -c '.[351:400]'; echo $OUTPUT_JSON | jq -r -c '.[651:700]'; echo $OUTPUT_JSON | jq -r -c '.[951:1000]'; echo $OUTPUT_JSON | jq -r -c '.[1251:1300]') | jq -s add)
-          OUTPUT_JSON3=$((echo $OUTPUT_JSON | jq -r -c '.[101:150]'; echo $OUTPUT_JSON | jq -r -c '.[401:450]'; echo $OUTPUT_JSON | jq -r -c '.[701:750]'; echo $OUTPUT_JSON | jq -r -c '.[1001:1050]'; echo $OUTPUT_JSON | jq -r -c '.[1301:1350]') | jq -s add)
-          OUTPUT_JSON4=$((echo $OUTPUT_JSON | jq -r -c '.[151:200]'; echo $OUTPUT_JSON | jq -r -c '.[451:500]'; echo $OUTPUT_JSON | jq -r -c '.[751:800]'; echo $OUTPUT_JSON | jq -r -c '.[1051:1100]'; echo $OUTPUT_JSON | jq -r -c '.[1351:1400]') | jq -s add)
-          OUTPUT_JSON5=$((echo $OUTPUT_JSON | jq -r -c '.[201:250]'; echo $OUTPUT_JSON | jq -r -c '.[501:550]'; echo $OUTPUT_JSON | jq -r -c '.[801:850]'; echo $OUTPUT_JSON | jq -r -c '.[1101:1150]'; echo $OUTPUT_JSON | jq -r -c '.[1401:1450]') | jq -s add)
-          OUTPUT_JSON6=$((echo $OUTPUT_JSON | jq -r -c '.[251:300]'; echo $OUTPUT_JSON | jq -r -c '.[551:600]'; echo $OUTPUT_JSON | jq -r -c '.[851:900]'; echo $OUTPUT_JSON | jq -r -c '.[1151:1200]'; echo $OUTPUT_JSON | jq -r -c '.[1451:1500]') | jq -s add)
-          echo ::set-output name=charts1::${OUTPUT_JSON1}
-          echo ::set-output name=charts2::${OUTPUT_JSON2}
-          echo ::set-output name=charts3::${OUTPUT_JSON3}
-          echo ::set-output name=charts4::${OUTPUT_JSON4}
-          echo ::set-output name=charts5::${OUTPUT_JSON5}
-          echo ::set-output name=charts6::${OUTPUT_JSON6}
-          if [[ $(echo ${OUTPUT_JSON1} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected1::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON2} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected2::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON3} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected3::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON4} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected4::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON5} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected5::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON6} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected6::true"
+          CHARTS="${{ inputs.modifiedCharts }}"
+          echo "Modified Charts: ${CHARTS}"
+
+          EXCLUDED_JSON=$(go-yq eval -o=json '.excluded-charts // []' .github/ct-lint.yaml)
+          CHARTS_JSON=$(echo "${CHARTS}" | jq --raw-input '.' | jq --compact-output --slurp '.')
+          OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED_JSON}, \"all\": ${CHARTS_JSON}}" | jq --compact-output '.all-.excluded')
+
+          echo CHANGED_CHARTS=${OUTPUT_JSON} >> "$GITHUB_OUTPUT"
+          if [[ $(echo ${OUTPUT_JSON} | jq --compact-output '. | length') -gt 0 ]]; then
+            echo "detected=true" >> "$GITHUB_OUTPUT"
           fi
 
-  lint-charts1:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected1 == 'true'
-    name: Lint charts Part 1
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix1) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts2:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected2 == 'true'
-    name: Lint charts Part 2
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix2) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts3:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected3 == 'true'
-    name: Lint charts Part 3
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix3) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts4:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected4 == 'true'
-    name: Lint charts Part 4
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix4) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts5:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected5 == 'true'
-    name: Lint charts Part 5
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix5) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts6:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected6 == 'true'
-    name: Lint charts Part 6
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix6) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  # Summarize matrix https://github.community/t/status-check-for-a-matrix-jobs/127354/7
-  lint_success:
-    needs:
-      - generate-lint-matrix
-      - lint-charts1
-      - lint-charts2
-      - lint-charts3
-      - lint-charts4
-      - lint-charts5
-      - lint-charts6
-    if: |
-      always()
-    name: Lint successful
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check lint matrix status
+      - name: Test and Fix Pre-Commit Issues
+        shell: bash
+        # TODO: Only run pre-commit on changed files
+        if: inputs.chartChangesDetected == 'true'
         run: |
-          res1="${{needs.lint-charts1.result}}"
-          res2="${{needs.lint-charts2.result}}"
-          res3="${{needs.lint-charts3.result}}"
-          res4="${{needs.lint-charts4.result}}"
-          res5="${{needs.lint-charts5.result}}"
-          res6="${{needs.lint-charts6.result}}"
+          echo "Running pre-commit test-and-cleanup..."
+          # Fix sh files to always be executable
+          find . -name '*.sh' | xargs chmod +x
+          pre-commit run --all || pre-commit run --all
 
-          if [[ $res1 == "success" || $res1 == "skipped" ]]; then
-            echo "lint tests 1 successfull..."
-          else
-            echo "lint tests 1 error, stopping due to failure..."
-            exit 1
-          fi
+      - name: Fetch and Verify dependencies
+        shell: bash
+        if: steps.list-changed.outputs.detected == 'true'
+        env:
+          charts_path: "./"
+        run: |
+          CHANGED=$(echo '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' | jq --raw-output '.[]')
+          for changed in ${CHANGED}; do
+            .github/scripts/fetch_helm_deps.sh "${changed}"
+          done
 
-          if [[ $res2 == "success" || $res2 == "skipped" ]]; then
-            echo "lint tests 2 successfull..."
-          else
-            echo "lint tests 2 error, stopping due to failure..."
-            exit 1
-          fi
+      - name: Run Chart Linting
+        continue-on-error: true
+        id: lint
+        if: steps.list-changed.outputs.detected == 'true'
+        env:
+          result_file: /tmp/lint_result.txt
+        run: |
+          CHANGED=$(echo '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' | jq --raw-output '.[]')
+          # If the github.base_ref is empty (eg it runs outside of a PR) it fails back to origin/master
+          .github/scripts/tc-lint.sh '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' "origin/${{ github.base_ref }}"
 
-          if [[ $res3 == "success" || $res3 == "skipped" ]]; then
-            echo "lint tests 3 successfull..."
-          else
-            echo "lint tests 3 error, stopping due to failure..."
-            exit 1
-          fi
+      - name: Create/Update comment
+        if: steps.list-changed.outputs.detected == 'true'
+        continue-on-error: true
+        uses: thollander/actions-comment-pull-request@dadb7667129e23f12ca3925c90dc5cd7121ab57e # v2
+        with:
+          filePath: /tmp/lint_result.txt
+          comment_tag: lint_results
+          mode: recreate
+          GITHUB_TOKEN: ${{ github.token }}
 
-          if [[ $res4 == "success" || $res4 == "skipped" ]]; then
-            echo "lint tests 4 successfull..."
-          else
-            echo "lint tests 4 error, stopping due to failure..."
-            exit 1
-          fi
-
-          if [[ $res5 == "success" || $res5 == "skipped" ]]; then
-            echo "lint tests 5 successfull..."
-          else
-            echo "lint tests 5 error, stopping due to failure..."
-            exit 1
-          fi
-
-          if [[ $res6 == "success" || $res6 == "skipped" ]]; then
-            echo "lint tests 6 successfull..."
-          else
-            echo "lint tests 6 error, stopping due to failure..."
+      - name: Lint Result
+        if: steps.list-changed.outputs.detected == 'true'
+        shell: bash
+        run: |
+          if [ "${{ steps.lint.outcome }}" != "success" ]; then
+            echo "❌ Linting failed ❌"
+            echo '###############################################################'
+            echo '## 👀 Expand [Run Chart Linting] step to view the results 👀 ##'
+            echo '###############################################################'
             exit 1
           fi
 

.github/workflows/charts-release.yaml

@@ -11,26 +11,25 @@ on:
       - "charts/**"
 
 jobs:
-
   release-helm:
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
-          
+
       - name: Checkout Helm-Staging
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
           token: ${{ secrets.BOT_TOKEN }}
           path: helm
-          
+
       - name: Fix Pre-Commit issues
         shell: bash
         run: |
@@ -38,7 +37,7 @@ jobs:
           pre-commit run --all ||:
           # Fix sh files to always be executable
           find . -name '*.sh' | xargs chmod +x
-          
+
       - name: Commit Helm Changes
         run: |
           rm -rf helm/charts
@@ -60,7 +59,7 @@ jobs:
     outputs:
       ref: ${{ steps.save-commit-hash.outputs.commit_hash }}
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Install Kubernetes tools
         uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
@@ -73,13 +72,27 @@ jobs:
         run: |
           helm repo add truecharts https://charts.truecharts.org
           helm repo add truecharts-library https://library-charts.truecharts.org
-          helm repo add bitnami https://charts.bitnami.com/bitnami
-
-          helm repo add prometheus https://prometheus-community.github.io/helm-charts
+          helm repo add truecharts-deps https://deps.truecharts.org
           helm repo update
 
+      # Optional step if GPG signing is used
+      - name: Prepare GPG key
+        shell: bash
+        run: |
+          gpg_dir=.cr-gpg
+          mkdir -p "$gpg_dir"
+          keyring="$gpg_dir/secring.gpg"
+          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring"
+          passphrase_file="$gpg_dir/passphrase"
+          echo "$GPG_PASSPHRASE" > "$passphrase_file"
+          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
+          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
+        env:
+          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}"
+          GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
+
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -111,7 +124,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -223,10 +236,9 @@ jobs:
           git add --all
           git commit -sm "Commit released docs for TrueCharts" || exit 0
           git push
-        
 
       - name: Checkout Catalog
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -272,6 +284,22 @@ jobs:
           git config user.name "TrueCharts-Bot"
           git config user.email "bot@truecharts.org"
 
+        # Optional step if GPG signing is used
+      - name: Prepare GPG key
+        shell: bash
+        run: |
+          gpg_dir=.cr-gpg
+          mkdir -p "$gpg_dir"
+          keyring="$gpg_dir/secring.gpg"
+          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring"
+          passphrase_file="$gpg_dir/passphrase"
+          echo "$GPG_PASSPHRASE" > "$passphrase_file"
+          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
+          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
+        env:
+          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}"
+          GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
+
       - name: Run chart-releaser for dependency apps
         uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0
         if: |
@@ -279,6 +307,7 @@ jobs:
         with:
           charts_dir: charts/dependency
           charts_repo_url: https://deps.truecharts.org
+          config: cr.yaml
         env:
           CR_TOKEN: "${{ secrets.BOT_TOKEN }}"
           CR_SKIP_EXISTING: "true"

.github/workflows/charts-test.yaml

@@ -9,42 +9,11 @@ on:
       chartChangesDetected:
         required: true
         type: string
+      modifiedCharts:
+        required: true
+        type: string
 
 jobs:
-  unit-test:
-    name: Run unit tests
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - name: Install Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: 2.7
-
-      - name: Install dependencies
-        env:
-          RUBYJQ_USE_SYSTEM_LIBRARIES: 1
-        run: |
-          sudo apt-get update
-          sudo apt-get install libjq-dev
-          bundle install
-
-      - name: Run tests
-        run: |
-          bundle exec m -r ./test/
-
   generate-install-matrix:
     name: Generate matrix for install
     runs-on: ubuntu-latest
@@ -81,51 +50,57 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+      - name: Install go-yq
+        run: |
+          mkdir -p $HOME/.local/bin
+          wget https://github.com/mikefarah/yq/releases/download/v4.26.1/yq_linux_amd64 -O $HOME/.local/bin/go-yq && \
+          chmod +x $HOME/.local/bin/go-yq
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
 
       - name: Run chart-testing (list-changed)
         id: list-changed
         if: inputs.chartChangesDetected == 'true'
+        shell: bash
         run: |
-          EXCLUDED=$(yq eval -o=json '.excluded-charts // []' .github/ct-install.yaml)
-          CHARTS=$(ct list-changed --config .github/ct-install.yaml)
-          CHARTS_JSON=$(echo "${CHARTS}" | jq -R -s -c 'split("\n")[:-1]')
-          OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED}, \"all\": ${CHARTS_JSON}}" | jq -c '.all-.excluded')
+          CHARTS="${{ inputs.modifiedCharts }}"
+          echo "Modified Charts: ${CHARTS}"
+          EXCLUDED_JSON=$(go-yq eval -o=json '.excluded-charts // []' .github/ct-install.yaml)
+          CHARTS_JSON=$(echo ${CHARTS} | jq --raw-input '.' | jq --compact-output --slurp '.' | jq 'map(. |= split(" "))[]' )
+          OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED_JSON}, \"all\": ${CHARTS_JSON}}" | jq --compact-output '.all-.excluded')
           OUTPUT_JSON1=$((echo $OUTPUT_JSON | jq -r -c '.[:50]'; echo $OUTPUT_JSON | jq -r -c '.[301:350]'; echo $OUTPUT_JSON | jq -r -c '.[601:650]'; echo $OUTPUT_JSON | jq -r -c '.[901:950]'; echo $OUTPUT_JSON | jq -r -c '.[1201:1250]') | jq -s add)
           OUTPUT_JSON2=$((echo $OUTPUT_JSON | jq -r -c '.[51:100]'; echo $OUTPUT_JSON | jq -r -c '.[351:400]'; echo $OUTPUT_JSON | jq -r -c '.[651:700]'; echo $OUTPUT_JSON | jq -r -c '.[951:1000]'; echo $OUTPUT_JSON | jq -r -c '.[1251:1300]') | jq -s add)
           OUTPUT_JSON3=$((echo $OUTPUT_JSON | jq -r -c '.[101:150]'; echo $OUTPUT_JSON | jq -r -c '.[401:450]'; echo $OUTPUT_JSON | jq -r -c '.[701:750]'; echo $OUTPUT_JSON | jq -r -c '.[1001:1050]'; echo $OUTPUT_JSON | jq -r -c '.[1301:1350]') | jq -s add)
           OUTPUT_JSON4=$((echo $OUTPUT_JSON | jq -r -c '.[151:200]'; echo $OUTPUT_JSON | jq -r -c '.[451:500]'; echo $OUTPUT_JSON | jq -r -c '.[751:800]'; echo $OUTPUT_JSON | jq -r -c '.[1051:1100]'; echo $OUTPUT_JSON | jq -r -c '.[1351:1400]') | jq -s add)
           OUTPUT_JSON5=$((echo $OUTPUT_JSON | jq -r -c '.[201:250]'; echo $OUTPUT_JSON | jq -r -c '.[501:550]'; echo $OUTPUT_JSON | jq -r -c '.[801:850]'; echo $OUTPUT_JSON | jq -r -c '.[1101:1150]'; echo $OUTPUT_JSON | jq -r -c '.[1401:1450]') | jq -s add)
           OUTPUT_JSON6=$((echo $OUTPUT_JSON | jq -r -c '.[251:300]'; echo $OUTPUT_JSON | jq -r -c '.[551:600]'; echo $OUTPUT_JSON | jq -r -c '.[851:900]'; echo $OUTPUT_JSON | jq -r -c '.[1151:1200]'; echo $OUTPUT_JSON | jq -r -c '.[1451:1500]') | jq -s add)
-          echo ::set-output name=charts1::${OUTPUT_JSON1}
-          echo ::set-output name=charts2::${OUTPUT_JSON2}
-          echo ::set-output name=charts3::${OUTPUT_JSON3}
-          echo ::set-output name=charts4::${OUTPUT_JSON4}
-          echo ::set-output name=charts5::${OUTPUT_JSON5}
-          echo ::set-output name=charts6::${OUTPUT_JSON6}
+          echo charts1=${OUTPUT_JSON1} >> $GITHUB_OUTPUT
+          echo charts2=${OUTPUT_JSON2} >> $GITHUB_OUTPUT
+          echo charts3=${OUTPUT_JSON3} >> $GITHUB_OUTPUT
+          echo charts4=${OUTPUT_JSON4} >> $GITHUB_OUTPUT
+          echo charts5=${OUTPUT_JSON5} >> $GITHUB_OUTPUT
+          echo charts6=${OUTPUT_JSON6} >> $GITHUB_OUTPUT
           if [[ $(echo ${OUTPUT_JSON1} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected1::true"
+            echo "detected1=true" >> $GITHUB_OUTPUT
           fi
           if [[ $(echo ${OUTPUT_JSON2} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected2::true"
+            echo "detected2=true" >> $GITHUB_OUTPUT
           fi
           if [[ $(echo ${OUTPUT_JSON3} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected3::true"
+            echo "detected3=true" >> $GITHUB_OUTPUT
           fi
           if [[ $(echo ${OUTPUT_JSON4} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected4::true"
+            echo "detected4=true" >> $GITHUB_OUTPUT
           fi
           if [[ $(echo ${OUTPUT_JSON5} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected5::true"
+            echo "detected5=true" >> $GITHUB_OUTPUT
           fi
           if [[ $(echo ${OUTPUT_JSON6} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected6::true"
+            echo "detected6=true" >> $GITHUB_OUTPUT
           fi
 
   install-charts1:
@@ -140,9 +115,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
@@ -150,14 +125,14 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.9.4"
 
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
-          python-version: "3.10"
+          python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -166,12 +141,27 @@ jobs:
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Remove node taints
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Add Dependencies
+        run: |
+          ## TODO: Move to our Helm Charts
+          ## TODO: Only add when required
+          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.20/releases/cnpg-1.20.0.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.65.2/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+          fi
+
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
   install-charts2:
     needs:
@@ -185,9 +175,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
@@ -195,14 +185,14 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.9.4"
 
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
-          python-version: "3.10"
+          python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -216,8 +206,20 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Add Dependencies
+        run: |
+          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.65.2/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+          fi
+
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
   install-charts3:
     needs:
@@ -231,9 +233,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
@@ -241,14 +243,14 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.9.4"
 
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
-          python-version: "3.10"
+          python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -257,12 +259,25 @@ jobs:
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Remove node taints
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Add Dependencies
+        run: |
+          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.65.2/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+          fi
+
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
   install-charts4:
     needs:
@@ -276,9 +291,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
@@ -286,14 +301,14 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.9.4"
 
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
-          python-version: "3.10"
+          python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -302,12 +317,25 @@ jobs:
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Remove node taints
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Add Dependencies
+        run: |
+          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.65.2/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+          fi
+
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
   install-charts5:
     needs:
@@ -321,9 +349,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
@@ -331,14 +359,14 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.9.4"
 
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
-          python-version: "3.10"
+          python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -347,12 +375,25 @@ jobs:
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Remove node taints
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Add Dependencies
+        run: |
+          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
+            kubectl apply -f --server-side --force-conflicts https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
+            kubectl apply -f --server-side --force-conflicts https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
+            kubectl apply -f --server-side --force-conflicts --server-side --force-conflicts https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.65.2/bundle.yaml
+          fi
+
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
   install-charts6:
     needs:
@@ -366,9 +407,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
@@ -376,14 +417,14 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.9.4"
 
-      - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
-          python-version: "3.10"
+          python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec # tag=v2.3.1
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -392,12 +433,25 @@ jobs:
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Remove node taints
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Add Dependencies
+        run: |
+          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.65.2/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+          fi
+
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
   # Summarize matrix https://github.community/t/status-check-for-a-matrix-jobs/127354/7
   install_success:
@@ -423,43 +477,43 @@ jobs:
           res6="${{needs.install-charts6.result}}"
 
           if [[ $res1 == "success" || $res1 == "skipped" ]]; then
-            echo "install tests 1 successfull..."
+            echo "Install test suite [1] was successful..."
           else
-            echo "install tests 1 error, stopping due to failure..."
+            echo "Install test suite [1] failed, stopping..."
             exit 1
           fi
 
           if [[ $res2 == "success" || $res2 == "skipped" ]]; then
-            echo "install tests 2 successfull..."
+            echo "Install test suite [2] was successful..."
           else
-            echo "install tests 2 error, stopping due to failure..."
+            echo "Install test suite [2] failed, stopping..."
             exit 1
           fi
 
           if [[ $res3 == "success" || $res3 == "skipped" ]]; then
-            echo "install tests 3 successfull..."
+            echo "Install test suite [3] was successful..."
           else
-            echo "install tests 3 error, stopping due to failure..."
+            echo "Install test suite [3] failed, stopping..."
             exit 1
           fi
 
           if [[ $res4 == "success" || $res4 == "skipped" ]]; then
-            echo "install tests 4 successfull..."
+            echo "Install test suite [4] was successful..."
           else
-            echo "install tests 4 error, stopping due to failure..."
+            echo "Install test suite [4] failed, stopping..."
             exit 1
           fi
 
           if [[ $res5 == "success" || $res5 == "skipped" ]]; then
-            echo "install tests 5 successfull..."
+            echo "Install test suite [5] was successful..."
           else
-            echo "install tests 5 error, stopping due to failure..."
+            echo "Install test suite [5] failed, stopping..."
             exit 1
           fi
 
           if [[ $res6 == "success" || $res6 == "skipped" ]]; then
-            echo "install tests 6 successfull..."
+            echo "Install test suite [6] was successful..."
           else
-            echo "install tests 6 error, stopping due to failure..."
+            echo "Install test suite [6] failed, stopping..."
             exit 1
           fi

.github/workflows/daily.yaml

@@ -17,10 +17,10 @@ jobs:
     runs-on: ubuntu-latest
     name: "Generate readme files"
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -31,7 +31,7 @@ jobs:
       - name: generate readme.md
         shell: bash
         run: |
-          for train in stable SCALE incubator games enterprise develop non-free deprecated dependency core; do
+          for train in stable operators SCALE incubator games enterprise develop non-free deprecated dependency core; do
             for chart in charts/${train}/*; do
               if [ -d "${chart}" ]; then
                 echo "Generating readme.md for ${train}/${chart}"
@@ -44,7 +44,7 @@ jobs:
       - name: generate HelmIgnore
         shell: bash
         run: |
-          for train in stable SCALE incubator games enterprise develop non-free deprecated dependency core; do
+          for train in stable operators SCALE incubator games enterprise develop non-free deprecated dependency core; do
             for chart in charts/${train}/*; do
               if [ -d "${chart}" ]; then
                 echo "Attempting to sync HelmIgnore file for: ${chartname}"
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           repository: truecharts/website
           path: website
@@ -196,7 +196,7 @@ jobs:
           }
           export -f sync_tag
 
-          for train in enterprise stable incubator dependency; do
+          for train in enterprise stable operators incubator dependency; do
             echo "Correcting Chart.yaml for Train: ${train}..."
             for chart in $(ls "charts/${train}"); do
               echo "Correcting Chart.yaml for Chart: ${chart}..."
@@ -204,6 +204,15 @@ jobs:
             done
           done
 
+      - name: Fix Fixable Pre-Commit issues
+        shell: bash
+        if: inputs.chartChangesDetected == 'true'
+        run: |
+          echo "Running pre-commit test-and-cleanup..."
+          pre-commit run --all ||:
+          # Fix sh files to always be executable
+          find . -name '*.sh' | xargs chmod +x
+
       - name: Cleanup
         run: |
           rm -rf changes.json
@@ -222,7 +231,7 @@ jobs:
     runs-on: ubuntu-latest
     name: "Generate Security Reports"
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Install Kubernetes tools
         uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
@@ -235,12 +244,11 @@ jobs:
         run: |
           helm repo add truecharts https://charts.truecharts.org
           helm repo add truecharts-library https://library-charts.truecharts.org
-          helm repo add bitnami https://charts.bitnami.com/bitnami
-          helm repo add prometheus https://prometheus-community.github.io/helm-charts
+          helm repo add truecharts-deps https://deps.truecharts.org
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -249,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -326,7 +334,7 @@ jobs:
               sed -i 's|<hr>|<hr />|g' website/docs/charts/${train}/${chartname}/helm-security.md ||:
               sed -i 's|<hr>|<hr />|g' website/docs/charts/${train}/${chartname}/container-security.md ||:
               }
-          for train in enterprise stable incubator dependency; do
+          for train in enterprise stable operators incubator dependency; do
             echo "Processing Charts for Train: ${train}..."
             for chart in $(ls "charts/${train}"); do
               render "charts/${train}/${chart}" ${chart} ${train} || echo "rendering failed for ${chart}"
@@ -369,7 +377,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1

.github/workflows/meta-label-pr-ci-status.yaml

@@ -1,105 +0,0 @@
----
-name: "Metadata: Label pull requests CI status"
-
-on:
-  workflow_run:
-    workflows:
-      - "Pull Request: Validate"
-    types:
-      - completed
-
-jobs:
-  label-ci-status:
-    name: Label CI status
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-
-      - name: Download workflow artifact
-        uses: dawidd6/action-download-artifact@246dbf436b23d7c49e21a7ab8204ca9ecd1fe615 # v2.27.0
-        with:
-          github_token: ${{ secrets.BOT_TOKEN }}
-          workflow: pr-validate.yaml
-          run_id: ${{ github.event.workflow_run.id }}
-          name: pr_metadata
-          path: ./pr_metadata
-
-      - name: Read the pr_number file
-        id: pr_num_reader
-        uses: juliangruber/read-file-action@02bbba9876a8f870efd4ad64e3b9088d3fb94d4b # tag=v1.1.6
-        with:
-          path: ./pr_metadata/pr_number.txt
-
-      - name: "Get workflow job status"
-        uses: actions/github-script@98814c53be79b1d30f795b907e553d8679345975 # v6
-        id: get-workflow-jobs
-        with:
-          github-token: ${{ secrets.BOT_TOKEN }}
-          # https://mhagemann.medium.com/the-ultimate-way-to-slugify-a-url-string-in-javascript-b8e4a0d849e1
-          script: |
-            function slugify(string) {
-              const a = 'àáâäæãåāăąçćčđďèéêëēėęěğǵḧîïíīįìıİłḿñńǹňôöòóœøōõőṕŕřßśšşșťțûüùúūǘůűųẃẍÿýžźż·/_,:;'
-              const b = 'aaaaaaaaaacccddeeeeeeeegghiiiiiiiilmnnnnoooooooooprrsssssttuuuuuuuuuwxyyzzz------'
-              const p = new RegExp(a.split('').join('|'), 'g')
-              return string.toString().toLowerCase()
-                .replace(/\s+/g, '-') // Replace spaces with -
-                .replace(p, c => b.charAt(a.indexOf(c))) // Replace special characters
-                .replace(/&/g, '-and-') // Replace & with 'and'
-                .replace(/[^\w\-]+/g, '') // Remove all non-word characters
-                .replace(/\-\-+/g, '-') // Replace multiple - with single -
-                .replace(/^-+/, '') // Trim - from start of text
-                .replace(/-+$/, '') // Trim - from end of text
-            }
-            let result = new Object
-            const wfJobs = await github.rest.actions.listJobsForWorkflowRun({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              run_id: context.payload.workflow_run.id,
-            })
-            for (const job of wfJobs.data.jobs) {
-              result[slugify(job.name)] = job.conclusion
-            }
-            console.log(result)
-            return result
-      - name: Label pre-commit status
-        uses: ./.github/actions/label-from-status
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          issue-number: ${{ steps.pr_num_reader.outputs.content }}
-          prefix: precommit
-          job-status: |-
-            ${{ fromJSON(steps.get-workflow-jobs.outputs.result).pre-commit-check-run-pre-commit-checks || 'skipped' }}
-          remove-on-skipped: true
-
-      #- name: Label changelog status
-      #  uses: ./.github/actions/label-from-status
-      #  with:
-      #    token: ${{ secrets.BOT_TOKEN }}
-      #    issue-number: ${{ steps.pr_num_reader.outputs.content }}
-      #    prefix: changelog
-      #    job-status: |-
-      #      ${{ fromJSON(steps.get-workflow-jobs.outputs.result).charts-changelog-validate-changelog || 'skipped' }}
-      #    remove-on-skipped: true
-
-      - name: Label chart lint status
-        uses: ./.github/actions/label-from-status
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          issue-number: ${{ steps.pr_num_reader.outputs.content }}
-          prefix: lint
-          job-status: |-
-            ${{ fromJSON(steps.get-workflow-jobs.outputs.result).charts-lint-lint-successful || 'skipped' }}
-          remove-on-skipped: true
-
-      - name: Label chart install status
-        uses: ./.github/actions/label-from-status
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          issue-number: ${{ steps.pr_num_reader.outputs.content }}
-          prefix: install
-          job-status: |-
-            ${{ fromJSON(steps.get-workflow-jobs.outputs.result).charts-test-install-successful || 'skipped' }}
-          remove-on-skipped: true

.github/workflows/metadata-label-commenter.yaml

@@ -1,32 +0,0 @@
----
-name: "Metadata: Label Commenter"
-
-on:
-  workflow_dispatch:
-  issues:
-    types:
-      - labeled
-      - unlabeled
-  pull_request_target:
-    types:
-      - labeled
-      - unlabeled
-
-permissions:
-  contents: read
-  issues: write
-  pull-requests: write
-
-jobs:
-  comment:
-    name: Label commenter
-    runs-on: ubuntu-20.04
-    steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          ref: master
-
-      - uses: peaceiris/actions-label-commenter@f0dbbef043eb1b150b566db36b0bdc8b7f505579 # tag=v1
-        with:
-          github_token: ${{ secrets.BOT_TOKEN }}

.github/workflows/metadata-label-pr.yaml

@@ -1,33 +0,0 @@
----
-name: "Metadata: Label pull requests"
-
-on:
-  workflow_dispatch:
-  pull_request_target:
-    types:
-      - opened
-      - edited
-      - closed
-      - reopened
-      - ready_for_review
-      - synchronize
-
-jobs:
-  label-size:
-    name: Label Size
-    runs-on: ubuntu-latest
-    steps:
-      - name: Label Size
-        uses: pascalgn/size-label-action@1619680c5ac1ef360b944bb56a57587ba4aa2af8 # tag=v0.4.3
-        env:
-          GITHUB_TOKEN: "${{ secrets.BOT_TOKEN }}"
-        with:
-          sizes: >
-            {
-              "0": "XS",
-              "20": "S",
-              "50": "M",
-              "200": "L",
-              "800": "XL",
-              "2000": "XXL"
-            }

.github/workflows/pr-metadata.yaml

@@ -1,60 +0,0 @@
-name: "Pull Request: Get metadata"
-
-on:
-  workflow_call:
-    outputs:
-      isRenovatePR:
-        description: "Is the PR coming from Renovate?"
-        value: ${{ jobs.pr-metadata.outputs.isRenovatePR }}
-      isFork:
-        description: "Is the PR coming from a forked repo?"
-        value: ${{ jobs.pr-metadata.outputs.isFork }}
-      addedOrModified:
-        description: "Does the PR contain any changes?"
-        value: ${{ jobs.pr-changes.outputs.addedOrModified }}
-      addedOrModifiedFiles:
-        description: "A list of the files changed in this PR"
-        value: ${{ jobs.pr-changes.outputs.addedOrModifiedFiles }}
-      addedOrModifiedCharts:
-        description: "A list of the charts changed in this PR"
-        value: ${{ jobs.pr-changes.outputs.addedOrModifiedCharts }}
-
-jobs:
-  pr-metadata:
-    name: Collect PR metadata
-    runs-on: ubuntu-latest
-    outputs:
-      isRenovatePR: ${{ startsWith(steps.branch-name.outputs.current_branch, 'renovate/') }}
-      isFork: ${{ github.event.pull_request.head.repo.full_name != github.repository }}
-    steps:
-      - name: Get branch name
-        id: branch-name
-        uses: tj-actions/branch-names@2e5354c6733793113f416314375826df030ada23 # v6.5
-
-      - name: Save PR data to file
-        env:
-          PR_NUMBER: ${{ github.event.number }}
-        run: |
-          echo $PR_NUMBER > pr_number.txt
-
-      - name: Store pr data in artifact
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
-        with:
-          name: pr_metadata
-          path: ./pr_number.txt
-          retention-days: 5
-
-  pr-changes:
-    name: Collect PR changes
-    runs-on: ubuntu-latest
-    outputs:
-      addedOrModified: ${{ steps.collect-changes.outputs.changesDetected }}
-      addedOrModifiedFiles: ${{ steps.collect-changes.outputs.addedOrModifiedFiles }}
-      addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-
-      - name: Collect changes
-        id: collect-changes
-        uses: ./.github/actions/collect-changes

.github/workflows/pr-validate.yaml

@@ -8,52 +8,47 @@ concurrency:
   # cancel-in-progress: true
 
 jobs:
-  pr-metadata:
-    uses: ./.github/workflows/pr-metadata.yaml
+  pr-changes:
+    name: Collect PR changes
+    runs-on: ubuntu-latest
+    outputs:
+      addedOrModified: ${{ steps.collect-changes.outputs.changesDetected }}
+      addedOrModifiedFiles: ${{ steps.collect-changes.outputs.addedOrModifiedFiles }}
+      addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
 
-  pre-commit-check:
-    uses: truecharts/.github/.github/workflows/pre-commit-check.yaml@main
-    needs:
-      - pr-metadata
-    with:
-      modifiedFiles: ${{ needs.pr-metadata.outputs.addedOrModifiedFiles }}
-
-  #charts-changelog:
-  #  uses: ./.github/workflows/charts-changelog.yaml
-  #  needs:
-  #    - pr-metadata
-  #    - pre-commit-check
-  #  with:
-  #    isRenovatePR: ${{ needs.pr-metadata.outputs.isRenovatePR }}
-  #    modifiedCharts: ${{ needs.pr-metadata.outputs.addedOrModifiedCharts }}
+      - name: Collect changes
+        id: collect-changes
+        uses: ./.github/actions/collect-changes
 
   charts-lint:
     uses: ./.github/workflows/charts-lint.yaml
     needs:
-      - pr-metadata
-    #  - charts-changelog
+      - pr-changes
     with:
       checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
-      chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
-
+      chartChangesDetected: ${{ needs.pr-changes.outputs.addedOrModified }}
+      modifiedFiles: ${{ needs.pr-changes.outputs.addedOrModifiedFiles }}
+      modifiedCharts: ${{ needs.pr-changes.outputs.addedOrModifiedCharts }}
   charts-test:
     uses: ./.github/workflows/charts-test.yaml
     needs:
-      - pr-metadata
-      #  - charts-changelog
+      - pr-changes
       - charts-lint
     with:
       checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
-      chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
+      chartChangesDetected: ${{ needs.pr-changes.outputs.addedOrModified }}
+      modifiedCharts: ${{ needs.pr-changes.outputs.addedOrModifiedCharts }}
 
   catalog-test:
     uses: ./.github/workflows/catalog-test.yaml
     needs:
-      - pr-metadata
-    #  - charts-changelog
+      - pr-changes
     with:
       checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
-      chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
+      chartChangesDetected: ${{ needs.pr-changes.outputs.addedOrModified }}
 
   print_head_msg:
     name: print commit message
@@ -62,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message
@@ -73,7 +68,7 @@ jobs:
 
   automerge-and-approve:
     needs:
-      - pr-metadata
+      - pr-changes
       - catalog-test
       - charts-test
       - charts-lint
@@ -91,3 +86,4 @@ jobs:
           GITHUB_TOKEN: "${{ secrets.BOT_TOKEN }}"
           UPDATE_RETRIES: 12
           UPDATE_RETRY_SLEEP: 60000
+          MERGE_METHOD: squash

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -12,14 +12,14 @@ jobs:
     name: Get changed Apps
     runs-on: ubuntu-20.04
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         name: Checkout
         with:
           fetch-depth: 0
@@ -117,6 +117,8 @@ jobs:
               train="games"
             elif test -f "./charts/enterprise/${chart}/Chart.yaml"; then
               train="enterprise"
+            elif test -f "./charts/operators/${chart}/Chart.yaml"; then
+              train="operators"
             else
               train="incubator"
             fi

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@95cbcd7e8b9d0d69e15ba26208631839ce7eee48 # v36.0.2
+        uses: renovatebot/github-action@5aa4bc2e097e751b391105d89ff88c0c80519c1a # v38.1.3
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

.github/yaml-lint-conf.yaml

@@ -0,0 +1,56 @@
+---
+rules:
+  anchors:
+    forbid-undeclared-aliases: true
+  braces:
+    forbid: non-empty
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+    min-spaces-inside-empty: -1
+    max-spaces-inside-empty: -1
+  brackets:
+    forbid: false
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+    min-spaces-inside-empty: -1
+    max-spaces-inside-empty: -1
+  colons:
+    max-spaces-before: 0
+    max-spaces-after: 1
+  commas:
+    max-spaces-before: 0
+    min-spaces-after: 1
+    max-spaces-after: 1
+  comments:
+    require-starting-space: true
+    min-spaces-from-content: 2
+  # No --- to start a file
+  document-start: disable
+  document-end: disable
+  empty-lines:
+    max: 1
+    max-start: 0
+    max-end: 0
+  float-values:
+    require-numeral-before-decimal: true
+    forbid-scientific-notation: true
+    forbid-nan: true
+    forbid-inf: true
+  hyphens:
+    max-spaces-after: 1
+  indentation:
+    spaces: 2
+    indent-sequences: true
+    check-multi-line-strings: false
+  key-duplicates: enable
+  # Lines can be any length
+  line-length: disable
+  new-line-at-end-of-file: enable
+  new-lines:
+    type: unix
+  octal-values:
+    forbid-implicit-octal: true
+    forbid-explicit-octal: true
+  trailing-spaces: enable
+  truthy:
+    allowed-values: ["true", "false"]

.pre-commit-config.yaml

@@ -22,7 +22,7 @@ repos:
       - id: fix-byte-order-marker # removes utf-8 byte order marker.
       - id: requirements-txt-fixer # sorts entries in requirements.txt.
       - id: check-added-large-files # prevents giant files from being committed.
-        exclude: \.(png|jpg|jpeg|svg)$
+        exclude: \.(png|jpg|jpeg|svg|yaml|yml|tpl)$
       - id: check-yaml # checks yaml files for parseable syntax.
         exclude: (templates\/.*|crds\/.*|questions.yaml|chart_schema.yaml)
       - id: detect-private-key # detects the presence of private keys.

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.2.1.253"
+appVersion: "23.4.2.11"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 5.0.12
+version: 5.0.41
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/questions.yaml

@@ -11,6 +11,7 @@ questions:
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
   - variable: clickhouseDatabase
     group: "App Configuration"
     label: "Database Name"
@@ -69,7 +70,6 @@ questions:
                               default: 8123
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: 23.2.1.2537@sha256:669278d98936a2d12bf8f331067afb6a34e5570fdcb37b854bb5d0b2d8f30108
+  tag: v23.4.2.11@sha256:c12f70ed3f189415fac14cb4e1cb861575817fe6d1e385dc88024341eca10cca
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -0,0 +1,29 @@
+apiVersion: v2
+appVersion: "2.9.2"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 12.14.1
+deprecated: false
+description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
+home: https://truecharts.org/charts/dependency/kube-state-metrics
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/kube-state-metrics.png
+keywords:
+  - prometheus
+  - kube-state-metrics
+  - monitoring
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: kube-state-metrics
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
+type: application
+version: 1.0.20
+annotations:
+  truecharts.org/catagories: |
+    - metrics
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/dependency/kube-state-metrics/LICENSE

@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             The TrueCharts Project, it's owner and it's contributors
+Licensed Work:        The TrueCharts "Grafana" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+                      as it is directly sourced from a TrueCharts provided
+                      official repository, catalog or source. You may also make private
+                      modification to the directly sourced licenced work,
+                      when used in production.
+
+                      The following cases are, due to their nature, also
+                      defined as 'production use' and explicitly prohibited:
+                      - Bundling, including or displaying the licensed work
+                      with(in) another work intended for production use,
+                      with the apparent intend of facilitating and/or
+                      promoting production use by third parties in
+                      violation of this license.
+
+Change Date:          2050-01-01
+
+Change License:       3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

charts/dependency/kube-state-metrics/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE%20Apps/Important-MUST-READ).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dependency/kube-state-metrics/questions.yaml

@@ -0,0 +1,109 @@
+# Include{groups}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorClusterIP}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 8080
+                              required: true
+        - variable: selfmonitor
+          label: "selfmonitor Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorClusterIP}
+# Include{serviceSelectorExtras}
+                    - variable: selfmonitor
+                      label: "selfmonitor Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 8081
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 568
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{metrics}
+# Include{prometheusRule}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dependency/kube-state-metrics/templates/common.yaml

@@ -0,0 +1 @@
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/kube-state-metrics/values.yaml

@@ -0,0 +1,313 @@
+image:
+  repository: tccr.io/truecharts/kube-state-metrics
+  pullPolicy: IfNotPresent
+  tag: v2.9.2@sha256:3ec0f0765cae3d8635edad876f3bca1315ea2d69c2ae5cbee9f46c881c85acf5
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 8080
+  selfmonitor:
+    enabled: true
+    ports:
+      selfmonitor:
+        enabled: true
+        protocol: http
+        port: 8081
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          args:
+            - --resources=certificatesigningrequests
+            - --resources=configmaps
+            - --resources=cronjobs
+            - --resources=daemonsets
+            - --resources=deployments
+            - --resources=endpoints
+            - --resources=horizontalpodautoscalers
+            - --resources=ingresses
+            - --resources=jobs
+            - --resources=limitranges
+            - --resources=mutatingwebhookconfigurations
+            - --resources=namespaces
+            - --resources=networkpolicies
+            - --resources=nodes
+            - --resources=persistentvolumeclaims
+            - --resources=persistentvolumes
+            - --resources=poddisruptionbudgets
+            - --resources=pods
+            - --resources=replicasets
+            - --resources=replicationcontrollers
+            - --resources=resourcequotas
+            - --resources=secrets
+            - --resources=services
+            - --resources=statefulsets
+            - --resources=storageclasses
+            # - --resources=verticalpodautoscalers
+            - --resources=validatingwebhookconfigurations
+            - --resources=volumeattachments
+
+          probes:
+            liveness:
+              path: /healthz
+              port: main
+
+            readiness:
+              path: /healthz
+              port: main
+
+            startup:
+              type: tcp
+              port: main
+
+podOptions:
+  automountServiceAccountToken: true
+
+serviceAccount:
+  main:
+    enabled: true
+    primary: true
+
+rbac:
+  main:
+    enabled: true
+    primary: true
+    clusterWide: true
+    rules:
+      - apiGroups:
+          - certificates.k8s.io
+        resources:
+          - certificatesigningrequests
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - configmaps
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - batch
+        resources:
+          - cronjobs
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - apps
+        resources:
+          - daemonsets
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - apps
+        resources:
+          - deployments
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - endpoints
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - autoscaling
+        resources:
+          - horizontalpodautoscalers
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - networking.k8s.io
+        resources:
+          - ingresses
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - batch
+        resources:
+          - jobs
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - limitranges
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - admissionregistration.k8s.io
+        resources:
+          - mutatingwebhookconfigurations
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - namespaces
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - networking.k8s.io
+        resources:
+          - networkpolicies
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - nodes
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - persistentvolumeclaims
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - persistentvolumes
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - policy
+        resources:
+          - poddisruptionbudgets
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - pods
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - apps
+        resources:
+          - replicasets
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - replicationcontrollers
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - resourcequotas
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - secrets
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
+        resources:
+          - services
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - apps
+        resources:
+          - statefulsets
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - storage.k8s.io
+        resources:
+          - storageclasses
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - autoscaling.k8s.io
+        resources:
+          - verticalpodautoscalers
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - admissionregistration.k8s.io
+        resources:
+          - validatingwebhookconfigurations
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - storage.k8s.io
+        resources:
+          - volumeattachments
+        verbs:
+          - list
+          - watch
+
+metrics:
+  main:
+    # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
+    # @default -- See values.yaml
+    enabled: true
+    type: serviceMonitor
+    endpoints:
+      - port: main
+      - port: selfmonitor
+    # -- Enable and configure Prometheus Rules for the chart under this key.
+    # @default -- See values.yaml
+    prometheusRule:
+      enabled: false
+      labels: {}
+      # -- Configure additionial rules for the chart under this key.
+      # @default -- See prometheusrules.yaml
+      rules:
+        []
+        # - alert: UnifiPollerAbsent
+        #   annotations:
+        #     description: Unifi Poller has disappeared from Prometheus service discovery.
+        #     summary: Unifi Poller is down.
+        #   expr: |
+        #     absent(up{job=~".*unifi-poller.*"} == 1)
+        #   for: 5m
+        #   labels:
+        #     severity: critical
+
+portal:
+  open:
+    enabled: false

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.11.2"
+appVersion: "10.11.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 7.0.13
+version: 7.0.50
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/questions.yaml

@@ -11,6 +11,7 @@ questions:
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
   - variable: mariadbDatabase
     group: "App Configuration"
     label: "Database Name"
@@ -63,7 +64,6 @@ questions:
                               default: 3306
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: 10.11.2@sha256:fc01102eef1de92155b5097636ef738700c8bef1735f52a397b1505cbf455c0f
+  tag: v10.11.4@sha256:c36949f30cb56ed38498d794a0a4fb34d58dcf6c45aa9107f292ab9f1df1c54c
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.6.18"
+appVersion: "1.6.20"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 6.0.23
+version: 6.0.59
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/questions.yaml

@@ -9,6 +9,7 @@ questions:
 # Include{containerBasic}
 # Include{containerAdvanced}
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
         - variable: main
           label: "Main Service"
@@ -33,7 +34,6 @@ questions:
                               default: 11211
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceList}

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: 1.6.18@sha256:49998f1e9bb4c1537c559c9e6a757c93a346d2ea6b03d03ecdca3bda3c8d4ab6
+  tag: v1.6.20@sha256:ed57e787e5b280440220cd8246d87901dbfd436fa61cb63b640cfd4387e8a07c
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.4"
+appVersion: "6.0.6"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 6.0.12
+version: 6.0.48
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/questions.yaml

@@ -11,6 +11,7 @@ questions:
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
   - variable: mongodbDatabase
     group: "App Configuration"
     label: "Database Name"
@@ -63,7 +64,6 @@ questions:
                               default: 27017
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: 6.0.4@sha256:3600c9f13d96311ddad4d2de6520d54c89a8708ee36798e4dc6fb93f59c1eab4
+  tag: v6.0.6@sha256:757f91b38a37e3a33710d3c77015eae68762fd890cb675d84c9b86668790f462
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -0,0 +1,29 @@
+apiVersion: v2
+appVersion: "1.6.0"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 12.14.1
+deprecated: false
+description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
+home: https://truecharts.org/charts/dependency/node-exporter
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/node-exporter.png
+keywords:
+  - prometheus
+  - node-exporter
+  - monitoring
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: node-exporter
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
+type: application
+version: 1.0.22
+annotations:
+  truecharts.org/catagories: |
+    - metrics
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/dependency/node-exporter/LICENSE

@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             The TrueCharts Project, it's owner and it's contributors
+Licensed Work:        The TrueCharts "Grafana" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+                      as it is directly sourced from a TrueCharts provided
+                      official repository, catalog or source. You may also make private
+                      modification to the directly sourced licenced work,
+                      when used in production.
+
+                      The following cases are, due to their nature, also
+                      defined as 'production use' and explicitly prohibited:
+                      - Bundling, including or displaying the licensed work
+                      with(in) another work intended for production use,
+                      with the apparent intend of facilitating and/or
+                      promoting production use by third parties in
+                      violation of this license.
+
+Change Date:          2050-01-01
+
+Change License:       3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

charts/dependency/node-exporter/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE%20Apps/Important-MUST-READ).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dependency/node-exporter/questions.yaml

@@ -1,7 +1,4 @@
 # Include{groups}
-portals:
-  open:
-# Include{portalLink}
 questions:
 # Include{global}
 # Include{workload}
@@ -13,6 +10,7 @@ questions:
 # Include{containerBasic}
 # Include{containerAdvanced}
 
+
 # Include{containerConfig}
 # Include{podOptions}
 # Include{serviceRoot}
@@ -36,21 +34,11 @@ questions:
                             description: "This port exposes the container port on the service"
                             schema:
                               type: int
-                              default: 10129
+                              default: 9100
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
-# Include{persistenceRoot}
-        - variable: config
-          label: "App Config Storage"
-          description: "Stores the Application Configuration."
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{persistenceBasic}
 # Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
@@ -62,6 +50,7 @@ questions:
 # Include{ingressDefault}
 # Include{ingressTLS}
 # Include{ingressTraefik}
+# Include{ingressAdvanced}
 # Include{ingressList}
 # Include{securityContextRoot}
 
@@ -70,17 +59,17 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 0
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 0
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 568
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
-             - variable: fsGroup
+              - variable: fsGroup
                 label: "fsGroup"
                 description: "The group that should own ALL storage."
                 schema:
@@ -88,6 +77,8 @@ questions:
                   default: 568
 
 # Include{resources}
+# Include{metrics}
+# Include{prometheusRule}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}

charts/dependency/node-exporter/templates/common.yaml

@@ -0,0 +1 @@
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/node-exporter/values.yaml

@@ -0,0 +1,91 @@
+image:
+  repository: tccr.io/truecharts/node-exporter
+  pullPolicy: IfNotPresent
+  tag: v1.6.0@sha256:c286e5dab7f852d1464a01122c3bbd7c48149ecdec188499aea579aef379238b
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 9910
+
+workload:
+  main:
+    type: DaemonSet
+    podSpec:
+      containers:
+        main:
+          args:
+            - --path.procfs=/host/proc
+            - --path.sysfs=/host/sys
+            - --web.listen-address=0.0.0.0:{{ .Values.service.main.ports.main.port }}
+            - --collector.filesystem.ignored-mount-points="^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+|var/db/system/.+|mnt/[a-zA-Z0-9-_\\.]+/ix-applications/.+)($|/)"
+            - --collector.filesystem.ignored-fs-types="^(autofs|binfmt_misc|cgroup|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|mqueue|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|sysfs|tracefs)$"
+            - --collector.netdev.device-exclude="^veth.*$"
+            - --collector.netclass.ignored-devices="^veth.*$"
+          probes:
+            liveness:
+              path: /
+              port: main
+
+            readiness:
+              path: /
+              port: main
+
+            startup:
+              type: tcp
+              port: main
+
+podOptions:
+  hostNetwork: true
+  hostPID: true
+
+persistence:
+  host:
+    enabled: true
+    hostPath: /
+    mountPath: /host
+    readOnly: true
+  proc:
+    enabled: true
+    hostPath: /proc
+    mountPath: /host/proc
+    readOnly: true
+  sys:
+    enabled: true
+    hostPath: /sys
+    mountPath: /host/sys
+    readOnly: true
+
+metrics:
+  main:
+    # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
+    # @default -- See values.yaml
+    enabled: true
+    type: serviceMonitor
+    endpoints:
+      - port: main
+        path: /metrics
+    # -- Enable and configure Prometheus Rules for the chart under this key.
+    # @default -- See values.yaml
+    prometheusRule:
+      enabled: false
+      labels: {}
+      # -- Configure additionial rules for the chart under this key.
+      # @default -- See prometheusrules.yaml
+      rules:
+        []
+        # - alert: UnifiPollerAbsent
+        #   annotations:
+        #     description: Unifi Poller has disappeared from Prometheus service discovery.
+        #     summary: Unifi Poller is down.
+        #   expr: |
+        #     absent(up{job=~".*unifi-poller.*"} == 1)
+        #   for: 5m
+        #   labels:
+        #     severity: critical
+
+portal:
+  open:
+    enabled: false

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.0.8"
+appVersion: "7.0.11"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 6.0.29
+version: 6.0.58
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/questions.yaml

@@ -11,6 +11,7 @@ questions:
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
   - variable: redisPassword
     group: "App Configuration"
     label: "Redis Password"
@@ -42,7 +43,6 @@ questions:
                               default: 6379
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{vctRoot}

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: 7.0.8@sha256:13e0bbf5369ed2f219b96c0e7136b531eb1fdca1db7b7e2c72e13133adf26288
+  tag: 7.0.11@sha256:4653f0bff0f593ae2fd5782fbca41c15e0fbc631ab339ee74fb0e82ef37ed90a
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "9.1.1"
+appVersion: "9.2.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 4.0.12
+version: 4.0.48
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/questions.yaml

@@ -14,6 +14,7 @@ questions:
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
   - variable: solrCores
     group: "App Configuration"
     label: "Solr Cores"
@@ -65,7 +66,6 @@ questions:
                               default: 8983
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: 9.1.1@sha256:4ac9d6e8120321349f0a3e5dbaff796192a9623de8fb164adf9f42de952479f1
+  tag: v9.2.1@sha256:04c6f6e9d7c3fcecf1a5c17ca6899223e5880370bd660c1321e11bf72d892bdd
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 6.0.29
+    version: 6.0.58
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 home: https://truecharts.org/charts/enterprise/authelia
@@ -35,7 +35,7 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 15.1.9
+version: 15.1.27
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/questions.yaml

@@ -12,6 +12,7 @@ questions:
 # Include{containerBasic}
 # Include{containerAdvanced}
 # Include{containerConfig}
+# Include{podOptions}
   - variable: domain
     group: "App Configuration"
     label: "Domain"
@@ -742,7 +743,6 @@ questions:
                               default: 9091
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
@@ -765,6 +765,7 @@ questions:
 # Include{ingressDefault}
 # Include{ingressTLS}
 # Include{ingressTraefik}
+# Include{ingressAdvanced}
 # Include{ingressList}
 # Include{securityContextRoot}
               - variable: runAsUser

charts/enterprise/authelia/values.yaml

@@ -2,7 +2,8 @@ image:
   repository: tccr.io/truecharts/authelia
   pullPolicy: IfNotPresent
   tag: 4.37.5@sha256:76a4617539534cec140fd98a12f721b878524f2df3a3653f3df8ff2b7eaab586
-
+manifestManager:
+  enabled: true
 workload:
   main:
     replicas: 2
@@ -10,8 +11,10 @@ workload:
     podSpec:
       containers:
         main:
-          command: ["authelia"]
-          args: ["--config=/configuration.yaml"]
+          command:
+            - authelia
+          args:
+            - --config=/configuration.yaml
           envFrom:
             - configMapRef:
                 name: authelia-paths

charts/enterprise/blocky/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "0.21.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 6.0.29
+    version: 6.0.58
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 5.0.22
+version: 5.0.41
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/docs/installation-notes.md

@@ -55,10 +55,11 @@ However: this negatively affects rollback and high availability, so we _highly_
 
 ## k8s-gateway
 
-Our blocky Chart/App, includes build-in compatibility for [k8s_gateway](https://github.com/ori-edge/k8s_gateway), this tool can be used to ensure devices on your local network, connect directly to the LAN IP of any Charts/Apps using Ingress, instead of via the outside world or, in a lot of cases, having a bunch of connectivity issues.
+Our blocky Chart/App includes build-in compatibility for [k8s_gateway](https://github.com/ori-edge/k8s_gateway).
+This tool can be used to achieve [Split DNS](https://en.wikipedia.org/wiki/Split-horizon_DNS) to ensure devices on your local network connect directly to the LAN IP of any Charts/Apps using Ingress, instead of via the outside world or, in a lot of cases, having a bunch of connectivity issues.
 
-The setup of k8s_gateway is simple:
-Just add the domain(s), which will include and subdomains(!), to the k8s_gateway domains list.
+To setup k8s_gateway add **your** root domain(s) to the `k8s_gateway` section domains list, e.g. `mydomain.com`.
 From that point onwards we will take care to automatically apply the required `conditional` settings in `blocky` as well.
+This will automatically include all your app subdomains exposed via Ingress, e.g. `jellyfin.mydomain.com`.
 
-Please be mindfull that using `Blocky Style` configuration using the `blockyConfig` object in `values.yaml`, might override this automatic setup.
+Please be mindfull that using `Blocky Style` configuration, using the `blockyConfig` object in `values.yaml`, might override this automatic setup.

charts/enterprise/blocky/questions.yaml

@@ -689,7 +689,7 @@ questions:
           schema:
             type: boolean
             default: false
-            show_if: [["enabled", "=", "true"]]
+            show_if: [["enabled", "=", true]]
             show_subquestions_if: true
             subquestions:
               - variable: ttl
@@ -723,6 +723,7 @@ questions:
                   type: string
                   default: ""
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
         - variable: main
           label: Main Service
@@ -813,7 +814,6 @@ questions:
                               default: 853
                               required: true
 # Include{serviceExpertRoot}
-            default: false
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceList}
@@ -827,6 +827,7 @@ questions:
 # Include{ingressDefault}
 # Include{ingressTLS}
 # Include{ingressTraefik}
+# Include{ingressAdvanced}
 # Include{ingressList}
 # Include{securityContextRoot}
               - variable: runAsUser

charts/enterprise/blocky/templates/_k8sgateway.tpl

@@ -38,7 +38,7 @@ Create the matchable regex from domain
 {{- $fqdn := ( include "tc.v1.common.lib.chart.names.fqdn" . ) }}
 enabled: true
 data:
-  Corefile: |-
+  Corefile: |
     .:{{ .Values.service.k8sgateway.ports.k8sgateway.targetPort }} {
         errors
         log
@@ -48,9 +48,15 @@ data:
         ready
         {{- range .Values.k8sgateway.domains }}
         {{- if .dnsChallenge.enabled }}
+          {{- if not .dnsChallenge.domain -}}
+            {{- fail "DNS01 challenge domain is mandatory" -}}
+          {{- end }}
+
         template IN ANY {{ required "Delegated domain ('domain') is mandatory" .domain }} {
            match "_acme-challenge[.](.*)[.]{{ include "k8sgateway.configmap.regex" . }}"
-           answer "{{ "{{" }} .Name {{ "}}" }} 5 IN CNAME {{ "{{" }}  index .Match 1 {{ "}}" }}.{{ required "DNS01 challenge domain is mandatory" .dnsChallenge.domain }}"
+           {{- $name := "{{ \"{{ .Name }}\" }}" }}
+           {{- $index := "{{ \"{{ index .Match 1 }}\" }}" }}
+           answer "{{ $name }} 5 IN CNAME {{ $index }}.{{ .dnsChallenge.domain }}"
            fallthrough
         }
         {{- end }}

charts/enterprise/blocky/templates/common.yaml

@@ -4,7 +4,6 @@
 {{- end }}
 {{- include "tc.v1.common.loader.init" . }}
 
-
 {{/* Render configmap for blocky */}}
 {{- $configmapFile := include "blocky.configmap" . | fromYaml -}}
 {{- if $configmapFile -}}

charts/enterprise/blocky/values.yaml

@@ -6,8 +6,9 @@ image:
 k8sgatewayImage:
   repository: tccr.io/truecharts/k8s_gateway
   pullPolicy: IfNotPresent
-  tag: 0.3.3@sha256:246e7006afaf57a398b02e417a31d6f14fb43562901388772778f60be586b807
-
+  tag: 0.3.4@sha256:c49645e7b263e5cfc8fc269db2aef7d90149cecc7a50e2c2fe77ef935dd35742
+manifestManager:
+  enabled: true
 workload:
   main:
     replicas: 2

charts/enterprise/cert-manager/docs/how-to.md

@@ -1,54 +0,0 @@
-# Cert-Manager Setup Guide
-
-This guide will walk you through setting up `cert-manager`, certificate management for Kubernetes.
-
-## Prerequisites
-
-Ensure you have the `enterprise` train enabled for `TrueCharts` as discussed [here](https://truecharts.org/manual/SCALE/guides/getting-started/#adding-truecharts).
-
-Ensure you have traefik installed, required for Ingress.
-
-Search for cert-manager in the `Apps` menu | `Available Applications` tab and click **Install**.
-
-## Cloudflare DNS-Provider
-
-You can setup multiple domains with a single cert-manager app, all you have to do is either add the global API key (**not recommended**) or `Add` multiple `ACME Issuer` entries for each domain and create an API token for each at [Cloudflare API Tokens](https://dash.cloudflare.com/profile/api-tokens).
-
-- Give the certificate a name (eg domain or "maincert", etc).
-- Select the correct provider, for example `Cloudflare`.
-- Set **Server** to **Letsencrypt-Production**.
-- Set Email to the account email.
-- Optionally set Cloudflare API key (**not recommended**)
-- Set the Cloudflare API Token to the one created earlier.
-
-![cert-manager1](img/cert-manager1.png)
-
-## cert-manager App
-
-> **Note**
->
-> It is normal that the app does not run, there are no events, no logs and no shell. This is by design.
-
-![cert-manager3](img/cert-manager3.png)
-
-## How to Add Ingress to Apps with cert-manager
-
-Here's an example on how to add ingress to an app with cert-manager for a single domain only.
-
-Add the name of the `ACME Issuer` into `Cert-Manager clusterIssuer`
-
-> **Warning**
-> Do **NOT** use this combined with the `TLS-Settings`.
-
-![cert-manager2](img/cert-manager2.png)
-
-If you want to support multiple domains, use the `TLS-Settings` option to create each one, basically an extra step each time.
-
-## Verifying cert-manager is working
-
-Once install using the Ingress settings above, you can see the `Application Events` for the app in question to pull the certificate and issue the challenge directly. See the example below:
-
-![cert-manager4](img/cert-manager4.png)
-![cert-manager5](img/cert-manager5.png)
-
-All is automated by `cert-manager`

charts/enterprise/clusterissuer/Chart.yaml

@@ -2,26 +2,26 @@ apiVersion: v2
 appVersion: "latest"
 deprecated: false
 description: Certificate management for Kubernetes
-home: https://truecharts.org/charts/enterprise/cert-manager
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/cert-manager.png
+home: https://truecharts.org/charts/enterprise/clusterissuer
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/clusterissuer.png
 keywords:
-  - metallb
-  - loadbalancer
+  - cert-manager
+  - certificates
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.4.21
+    version: 12.14.1
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
     name: TrueCharts
     url: https://truecharts.org
-name: cert-manager
+name: clusterissuer
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/enterprise/cert-manager
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
   - https://cert-manager.io/
 type: application
-version: 1.0.23
+version: 1.0.5
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/clusterissuer/docs/how-to.md

@@ -0,0 +1,59 @@
+# clusterissuer Setup Guide
+
+This guide will walk you through setting up `clusterissuer`, certificate management for Kubernetes.
+
+## Prerequisites
+
+Ensure you have the `enterprise` train enabled for `TrueCharts` as discussed [here](https://truecharts.org/manual/SCALE/guides/getting-started/#adding-truecharts).
+
+Ensure you have traefik installed, required for Ingress.
+
+Search for clusterissuer in the `Apps` menu | `Available Applications` tab and click **Install**.
+
+## Cloudflare DNS-Provider
+
+You can setup multiple domains with a single `clusterissuer` app, all you have to do is either add the global API key (**not recommended**) or `Add` multiple `ACME Issuer` entries for each domain and create an API token for each at [Cloudflare API Tokens](https://dash.cloudflare.com/profile/api-tokens).
+
+- Give the certificate a name (eg domain or "maincert", etc).
+- Select the correct provider, for example `Cloudflare`.
+- Set **Server** to **Letsencrypt-Production**.
+- Set Email to the account email.
+- Optionally set Cloudflare API key (**not recommended**)
+- Set the Cloudflare API Token to the one created earlier.
+
+![clusterissuer edit dialog](img/clusterissuer1.png)
+
+## clusterissuer App
+
+:::note
+
+It is by design that the app does not run, there are no events, no logs and no shell.
+
+:::
+
+![clusterissuer app card](img/clusterissuer2.png)
+
+## How to Add Ingress to Apps with clusterissuer
+
+Here's an example on how to add ingress to an app with clusterissuer for a single domain only.
+
+Add the name of the `ACME Issuer` into `Cert-Manager clusterIssuer`
+
+:::warning
+
+Do **NOT** use this combined with the `TLS-Settings`.
+
+:::
+
+![how to add ingress using clusterissuer ](img/clusterissuer3.png)
+
+If you want to support multiple domains, use the `TLS-Settings` option to create each one, basically an extra step each time.
+
+## Verifying clusterissuer is working
+
+Once installed using the Ingress settings above, you can see the `Application Events` for the app in question to pull the certificate and issue the challenge directly. See the example below:
+
+![clusterissuer4](img/clusterissuer4.png)
+![clusterissuer5](img/clusterissuer5.png)
+
+All is automated by `clusterissuer`

charts/enterprise/clusterissuer/questions.yaml

@@ -230,7 +230,7 @@ questions:
                       schema:
                         type: string
                         required: true
-                        show_if: [["selfSigned", "=", "true"]]
+                        show_if: [["selfSigned", "=", true]]
                         default: "my-selfsigned-ca"
                     - variable: crt
                       label: "Custom CA cert (experimental)"
@@ -238,7 +238,8 @@ questions:
                       schema:
                         type: string
                         required: true
-                        show_if: [["selfSigned", "=", "false"]]
+                        max_length: 10240
+                        show_if: [["selfSigned", "=", false]]
                         default: ""
                     - variable: key
                       label: "Custom CA key (experimental)"
@@ -246,7 +247,8 @@ questions:
                       schema:
                         type: string
                         required: true
-                        show_if: [["selfSigned", "=", "false"]]
+                        max_length: 10240
+                        show_if: [["selfSigned", "=", false]]
                         default: ""
 
         - variable: selfSigned

charts/enterprise/clusterissuer/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}