From 35764a60580b3a761d0d5eec3e50b24db45c8dda Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Fri, 27 Dec 2024 23:11:39 +0100 Subject: [PATCH] =?UTF-8?q?chore(helm):=20update=20image=20docker.io/charm?= =?UTF-8?q?cli/soft-serve=20v0.7.6=20=E2=86=92=20v0.8.1=20(#30180)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/charmcli/soft-serve](https://redirect.github.com/charmbracelet/soft-serve) | minor | `8058b39` -> `dab593a` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
charmbracelet/soft-serve (docker.io/charmcli/soft-serve) ### [`v0.8.1`](https://redirect.github.com/charmbracelet/soft-serve/releases/tag/v0.8.1) [Compare Source](https://redirect.github.com/charmbracelet/soft-serve/compare/v0.8.0...v0.8.1) ### Patch x/crypto/ssh This is a small patch release to fix x/crypto/ssh vulnerability https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ #### Changelog ***
Verifying the artifacts First, download the [`checksums.txt` file](https://redirect.github.com/charmbracelet/soft-serve/releases/download/0.8.1/checksums.txt), for example, with `wget`: ```bash wget 'https://github.com/charmbracelet/soft-serve/releases/download/v0.8.1/checksums.txt' ``` Then, verify it using [`cosign`](https://redirect.github.com/sigstore/cosign): ```bash cosign verify-blob \ --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \ --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \ --cert 'https://github.com/charmbracelet/soft-serve/releases/download/v0.8.1/checksums.txt.pem' \ --signature 'https://github.com/charmbracelet/soft-serve/releases/download/v0.8.1/checksums.txt.sig' \ ./checksums.txt ``` If the output is `Verified OK`, you can safely use it to verify the checksums of other artifacts you downloaded from the release using `sha256sum`: ```bash sha256sum --ignore-missing -c checksums.txt ``` Done! You artifacts are now verified!
The Charm logo Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.technology/@​charm), or on [Discord](https://charm.sh/chat). ### [`v0.8.0`](https://redirect.github.com/charmbracelet/soft-serve/releases/tag/v0.8.0) [Compare Source](https://redirect.github.com/charmbracelet/soft-serve/compare/v0.7.6...v0.8.0) ### Soft Serve 0.8.0 puts *you* in control This release contains new features and important bug fixes to different Soft Serve components. You now can services that you don't need as well as use a custom config path different from the data directory. #### Toggle Server Componenets Soft Serve runs 4 different services that listen to various ports to serve Git repositories and metadata over the network. It has an SSH server, HTTP server, Git TCP server, and a Prometheus stats server. They all start when you run `soft serve`! Now, you can disable unwanted components in your config file or via environment variables. ```yml git: ### Disable Git daemon TCP server enabled: false stats: ### Disable Promethues stats server enabled: false ``` #### Custom Config Path Soft Serve defaults to reading your `config.yaml` from `$SOFT_SERVE_DATA/config.yaml`. Now, you can have a custom path for the config file using `$SOFT_SERVE_CONFIG_LOCATION`. ```sh export SOFT_SERVE_CONFIG_LOCATION=$HOME/.soft-serve.yaml soft serve ```
#### Changelog ##### New Features * c354d5f21134b5cfa65c5fc6b6b9ff0dcf691bd2: feat: optionally pull config from a custom file (envvar), default to data path. (#​557) (@​fire833) * 069db2777dfbba94e2c93c37275632037cd64bec: feat: support toggling servers on/off in configuration (#​594) (#​612) (@​jaw) * 0540b4d23a8f1ce9b1569cde5046d790e9de2260: feat: test framework supports turning off -race flag (#​605) (@​jaw) * 446ec63835ab9af034715a624f3f8928228823f6: feat: update go.mod to use go 1.22 and toolchain go1.23.2 (@​aymanbagabas) ##### Bug fixes * c78da07b43142f7228e1b345d3cd4618a6d626a1: fix(config): add SOFT_SERVE_CONFIG_LOCATION to Environ (@​aymanbagabas) * 00be7967387d5c95a0c3387c0519c99dbd11bcff: fix(config): add default values for the enabled fields (@​aymanbagabas) * 7c45a99df6decd946acc78cd8cd364c99d4425ee: fix(daemon): close listener only once (#​615) (@​aymanbagabas) * 85b462536a167d3538cafb7f658fe144a544be47: fix: add missing arg length check to fix runtime panic (#​568) (@​christophershirk) * 3aa71e0add8a9678e209d0357d83068c6bc6702a: fix: git daemon listens only when starting it (#​607) (@​jaw) * 1de446f208019d90dc08fa24437ee63bbbc80667: fix: prevent enumeration of private repo (#​614) (@​kyokugirl) * a2cf7867b95a722993441586ef56fa3dc0691291: fix: respect anon-access on ssh (@​aymanbagabas) * 5d5c55ebd32cf7c0ffe1985ad2546a867420310c: fix: test framework supports ensuring specific port is open (#​606) (@​jaw) * 6658cf1369c902e3824f5aa8554be135c8bdf7e6: fix: update position constant in `JoinHorizontal` (#​552) (@​aditipatelpro) ##### Other work * 950ef0c4025e99804b727285bd982e119cfb8bd9: Fix tui_session_seconds_total metric description (#​602) (@​jest)
***
Verifying the artifacts First, download the [`checksums.txt` file](https://redirect.github.com/charmbracelet/soft-serve/releases/download/0.8.0/checksums.txt), for example, with `wget`: ```bash wget 'https://github.com/charmbracelet/soft-serve/releases/download/v0.8.0/checksums.txt' ``` Then, verify it using [`cosign`](https://redirect.github.com/sigstore/cosign): ```bash cosign verify-blob \ --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \ --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \ --cert 'https://github.com/charmbracelet/soft-serve/releases/download/v0.8.0/checksums.txt.pem' \ --signature 'https://github.com/charmbracelet/soft-serve/releases/download/v0.8.0/checksums.txt.sig' \ ./checksums.txt ``` If the output is `Verified OK`, you can safely use it to verify the checksums of other artifacts you downloaded from the release using `sha256sum`: ```bash sha256sum --ignore-missing -c checksums.txt ``` Done! You artifacts are now verified!
The Charm logo Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.technology/@​charm), or on [Discord](https://charm.sh/chat).
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/soft-serve/Chart.yaml | 4 ++-- charts/stable/soft-serve/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/soft-serve/Chart.yaml b/charts/stable/soft-serve/Chart.yaml index dd8305ca834..712c2045731 100644 --- a/charts/stable/soft-serve/Chart.yaml +++ b/charts/stable/soft-serve/Chart.yaml @@ -6,7 +6,7 @@ annotations: truecharts.org/min_helm_version: "3.11" truecharts.org/train: stable apiVersion: v2 -appVersion: 0.7.6 +appVersion: 0.8.1 dependencies: - name: common version: 25.2.2 @@ -33,4 +33,4 @@ sources: - https://github.com/truecharts/charts/tree/master/charts/stable/soft-serve - https://hub.docker.com/r/charmcli/soft-serve type: application -version: 8.3.0 +version: 8.4.0 diff --git a/charts/stable/soft-serve/values.yaml b/charts/stable/soft-serve/values.yaml index 4931e74d0b7..ea00c0ca28a 100644 --- a/charts/stable/soft-serve/values.yaml +++ b/charts/stable/soft-serve/values.yaml @@ -1,7 +1,7 @@ image: repository: docker.io/charmcli/soft-serve pullPolicy: IfNotPresent - tag: v0.7.6@sha256:8058b392ce583d060f22e8888cfb034d6517c3d9cdf916cadde6b34ada89699c + tag: v0.8.1@sha256:dab593a1b025e0d653b2c594a795d1fe189403935b41dd461c892ace4a2cf5ce softserve: host: localhost key_path: /.ssh/soft_serve_server_ed25519