From 909a6db806c679dde601e07838c7348e5e3906b0 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 23 Sep 2026 02:09:55 +0000 Subject: [PATCH] chore(release): bump version --- .changeset/bump-js-yaml-v5.md | 5 ----- .changeset/dashboard-provisioning.md | 5 ----- .changeset/sca-js-yaml-tmp-advisories.md | 20 ----------------- .changeset/update-app-version-2.38.0.md | 5 ----- CHANGELOG.md | 28 ++++++++++++++++++++++++ charts/clickstack/Chart.yaml | 2 +- package.json | 2 +- 7 files changed, 30 insertions(+), 37 deletions(-) delete mode 100644 .changeset/bump-js-yaml-v5.md delete mode 100644 .changeset/dashboard-provisioning.md delete mode 100644 .changeset/sca-js-yaml-tmp-advisories.md delete mode 100644 .changeset/update-app-version-2.38.0.md diff --git a/.changeset/bump-js-yaml-v5.md b/.changeset/bump-js-yaml-v5.md deleted file mode 100644 index 42a76c9f..00000000 --- a/.changeset/bump-js-yaml-v5.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"helm-charts": patch ---- - -Bump `js-yaml` from ^4.2.0 to ^5.4.1 for the release tooling (`update-chart-versions.js`, `extract-release-notes.js`). No chart changes. Both scripts continue to work via the v5 CJS build; a new `version-script-smoke` CI job now exercises them at PR time so future dependency bumps cannot break releases silently. Also restores consistency between `package.json` and `yarn.lock`, which had drifted on main. diff --git a/.changeset/dashboard-provisioning.md b/.changeset/dashboard-provisioning.md deleted file mode 100644 index 0a5c1bd4..00000000 --- a/.changeset/dashboard-provisioning.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"helm-charts": minor ---- - -feat: add dashboard provisioning via a k8s-sidecar that discovers ConfigMaps labeled `hyperdx.io/dashboard: "true"`. Discovery is scoped to the release namespace by default (a namespaced Role, no cluster-wide access); set `hyperdx.dashboards.namespaces` to also watch specific namespaces, or `hyperdx.dashboards.namespaces: [ALL]` for cluster-wide discovery. Requires hyperdxio/hyperdx#1962 (file-based dashboard provisioner). diff --git a/.changeset/sca-js-yaml-tmp-advisories.md b/.changeset/sca-js-yaml-tmp-advisories.md deleted file mode 100644 index 36db2524..00000000 --- a/.changeset/sca-js-yaml-tmp-advisories.md +++ /dev/null @@ -1,20 +0,0 @@ ---- -"helm-charts": patch ---- - -Clear all 7 dependency advisories in the release tooling. No chart changes. - -`js-yaml` 3.14.1 → 3.15.2: a second copy pulled in transitively via -`@changesets/cli` → `read` → `parse`, carrying 3 highs and 2 moderates -(quadratic CPU in merge-key/`!!omap` handling, prototype pollution in `<<`). -The direct `js-yaml@^5.4.1` dependency was already fine; this is the older copy -the range already allowed to move. - -`tmp` 0.0.33 → 0.2.7 via a `resolutions` override, clearing a high path -traversal (`<0.2.6`) and a low symlink issue. `external-editor` declares -`tmp@^0.0.33`, and a caret on a `0.0.x` version is semver-equivalent to -`=0.0.33`, so this cannot be re-resolved without the override. It calls only -`tmp.tmpNameSync()`, which 0.2.x still exports. - -Both are reachable only through the release/changeset tooling, never at chart -render time. diff --git a/.changeset/update-app-version-2.38.0.md b/.changeset/update-app-version-2.38.0.md deleted file mode 100644 index 8bca6ad1..00000000 --- a/.changeset/update-app-version-2.38.0.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"helm-charts": patch ---- - -chore: update appVersion to 2.38.0 diff --git a/CHANGELOG.md b/CHANGELOG.md index 7286d1a4..b4b10035 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,33 @@ # helm-charts +## 3.4.0 + +### Minor Changes + +- 1592f4f: feat: add dashboard provisioning via a k8s-sidecar that discovers ConfigMaps labeled `hyperdx.io/dashboard: "true"`. Discovery is scoped to the release namespace by default (a namespaced Role, no cluster-wide access); set `hyperdx.dashboards.namespaces` to also watch specific namespaces, or `hyperdx.dashboards.namespaces: [ALL]` for cluster-wide discovery. Requires hyperdxio/hyperdx#1962 (file-based dashboard provisioner). + +### Patch Changes + +- 8899b96: Bump `js-yaml` from ^4.2.0 to ^5.4.1 for the release tooling (`update-chart-versions.js`, `extract-release-notes.js`). No chart changes. Both scripts continue to work via the v5 CJS build; a new `version-script-smoke` CI job now exercises them at PR time so future dependency bumps cannot break releases silently. Also restores consistency between `package.json` and `yarn.lock`, which had drifted on main. +- f84b6bd: Clear all 7 dependency advisories in the release tooling. No chart changes. + + `js-yaml` 3.14.1 → 3.15.2: a second copy pulled in transitively via + `@changesets/cli` → `read` → `parse`, carrying 3 highs and 2 moderates + (quadratic CPU in merge-key/`!!omap` handling, prototype pollution in `<<`). + The direct `js-yaml@^5.4.1` dependency was already fine; this is the older copy + the range already allowed to move. + + `tmp` 0.0.33 → 0.2.7 via a `resolutions` override, clearing a high path + traversal (`<0.2.6`) and a low symlink issue. `external-editor` declares + `tmp@^0.0.33`, and a caret on a `0.0.x` version is semver-equivalent to + `=0.0.33`, so this cannot be re-resolved without the override. It calls only + `tmp.tmpNameSync()`, which 0.2.x still exports. + + Both are reachable only through the release/changeset tooling, never at chart + render time. + +- 573b600: chore: update appVersion to 2.38.0 + ## 3.3.0 ### Minor Changes diff --git a/charts/clickstack/Chart.yaml b/charts/clickstack/Chart.yaml index 9dfd8455..e078f502 100644 --- a/charts/clickstack/Chart.yaml +++ b/charts/clickstack/Chart.yaml @@ -15,7 +15,7 @@ annotations: - name: Upstream Project url: https://github.com/hyperdxio/hyperdx type: application -version: 3.3.0 +version: 3.4.0 appVersion: 2.38.0 dependencies: - name: opentelemetry-collector diff --git a/package.json b/package.json index 98fad531..d2405c74 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "helm-charts", - "version": "3.3.0", + "version": "3.4.0", "private": true, "main": "index.js", "repository": "git@github.com:hyperdxio/helm-charts.git",