Merge branch 'main' into claude/issue-1452-20250827-1021

Author: ChrisJBurns

.claude/settings.json

@@ -12,7 +12,18 @@
       "Bash(pre-commit install:*)",
       "Bash(pre-commit autoupdate:*)",
       "Bash(helm-docs:*)",
-      "Bash(codespell:*)"
+      "Bash(codespell:*)",
+      "Bash(task operator-install-crds)",
+      "Bash(task operator-uninstall-crds)",
+      "Bash(task operator-deploy-latest)",
+      "Bash(task operator-deploy-local)",
+      "Bash(task operator-undeploy)",
+      "Bash(task operator-generate)",
+      "Bash(task operator-manifests)",
+      "Bash(task operator-test)",
+      "Bash(task operator-e2e-test)",
+      "Bash(task crdref-install)",
+      "Bash(task crdref-gen)"
     ],
     "deny": []
   }

.github/workflows/e2e-tests.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true

.github/workflows/image-build-and-publish.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: go.mod
 
@@ -171,7 +171,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: go.mod
 
@@ -259,7 +259,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: go.mod
 

.github/workflows/issue-triage.yml

@@ -79,6 +79,7 @@ jobs:
              - Be specific but comprehensive
              - Consider platform labels (kubernetes) if applicable
              - If you find similar issues using mcp__github__search_issues, consider using a "duplicate" label if appropriate. Only do so if the issue is a duplicate of another OPEN issue.
+             - DO NOT add labels that pertain to priority, such as p0, p1, p2, etc.
 
           5. Apply the selected labels:
              - Use mcp__github__update_issue to apply your selected labels

.github/workflows/lint-helm-charts.yml

@@ -15,11 +15,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: 3.13
 
-      - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+      - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: ^1
 

.github/workflows/lint.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true

.github/workflows/operator-ci.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -39,7 +39,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -60,7 +60,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -93,7 +93,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -149,7 +149,7 @@ jobs:
       uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 
     - name: Set up Go
-      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+      uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
       with:
         go-version-file: 'go.mod'
         cache: true

.github/workflows/releaser-helm-charts.yml

@@ -11,6 +11,9 @@ jobs:
       packages: write
       id-token: write
 
+    outputs:
+      released_charts: ${{ steps.prepare-matrix.outputs.published_charts_matrix }}
+
     steps:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
@@ -52,3 +55,36 @@ jobs:
           done
         env:
           COSIGN_EXPERIMENTAL: 1
+
+      - name: Prepare Matrix Output
+        id: prepare-matrix
+        run: |
+          # Build JSON array from chart files
+          json_array="["
+          first=true
+          for chart in `find .cr-release-packages -name '*.tgz' -print`; do
+            file_name=${chart##*/}
+            release_name=${file_name%.tgz}
+            
+            if [ "$first" = true ]; then
+              first=false
+            else
+              json_array="${json_array},"
+            fi
+            json_array="${json_array}\"${release_name}\""
+          done
+          json_array="${json_array}]"
+          echo "published_charts_matrix=${json_array}" >> $GITHUB_OUTPUT
+
+  update-docs-website:
+    name: Trigger Docs Update
+    needs: [ release ]
+    permissions: {}
+    uses: ./.github/workflows/update-docs-website.yml
+    strategy:
+      matrix:
+        version: ${{ fromJSON(needs.release.outputs.released_charts) }}
+    with:
+      version: ${{ matrix.version }}
+    secrets:
+      DOCS_REPO_DISPATCH_TOKEN: ${{ secrets.DOCS_REPO_DISPATCH_TOKEN }}

.github/workflows/releaser.yml

@@ -65,7 +65,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -114,6 +114,16 @@ jobs:
       id-token: write
     uses: ./.github/workflows/image-build-and-publish.yml
 
+  update-docs-website:
+    name: Trigger Docs Update
+    needs: [ release ]
+    permissions: {}
+    uses: ./.github/workflows/update-docs-website.yml
+    with:
+      version: ${{ github.ref_name }}
+    secrets:
+      DOCS_REPO_DISPATCH_TOKEN: ${{ secrets.DOCS_REPO_DISPATCH_TOKEN }}
+
 #  provenance:
 #    name: Generate provenance (SLSA3)
 #    needs:

.github/workflows/run-on-main-charts.yml

@@ -7,6 +7,10 @@ on:
     branches: [ main ]
     paths:
       - deploy/charts/**
+    paths-ignore:
+      - deploy/charts/**/CONTRIBUTING.md
+      - deploy/charts/**/ci/**
+      - deploy/charts/**/CLAUDE.md
 
 jobs:
   publish-charts:
@@ -16,3 +20,4 @@ jobs:
       packages: write
       id-token: write
     uses: ./.github/workflows/releaser-helm-charts.yml
+    secrets: inherit # So the releaser workflow can pass a token down to the docs update workflow