Release ClickStack Helm Charts

CHANGELOG.md

@@ -1,5 +1,33 @@
 # helm-charts
 
+## 3.4.0
+
+### Minor Changes
+
+- 1592f4f: feat: add dashboard provisioning via a k8s-sidecar that discovers ConfigMaps labeled `hyperdx.io/dashboard: "true"`. Discovery is scoped to the release namespace by default (a namespaced Role, no cluster-wide access); set `hyperdx.dashboards.namespaces` to also watch specific namespaces, or `hyperdx.dashboards.namespaces: [ALL]` for cluster-wide discovery. Requires hyperdxio/hyperdx#1962 (file-based dashboard provisioner).
+
+### Patch Changes
+
+- 8899b96: Bump `js-yaml` from ^4.2.0 to ^5.4.1 for the release tooling (`update-chart-versions.js`, `extract-release-notes.js`). No chart changes. Both scripts continue to work via the v5 CJS build; a new `version-script-smoke` CI job now exercises them at PR time so future dependency bumps cannot break releases silently. Also restores consistency between `package.json` and `yarn.lock`, which had drifted on main.
+- f84b6bd: Clear all 7 dependency advisories in the release tooling. No chart changes.
+
+  `js-yaml` 3.14.1 → 3.15.2: a second copy pulled in transitively via
+  `@changesets/cli` → `read` → `parse`, carrying 3 highs and 2 moderates
+  (quadratic CPU in merge-key/`!!omap` handling, prototype pollution in `<<`).
+  The direct `js-yaml@^5.4.1` dependency was already fine; this is the older copy
+  the range already allowed to move.
+
+  `tmp` 0.0.33 → 0.2.7 via a `resolutions` override, clearing a high path
+  traversal (`<0.2.6`) and a low symlink issue. `external-editor` declares
+  `tmp@^0.0.33`, and a caret on a `0.0.x` version is semver-equivalent to
+  `=0.0.33`, so this cannot be re-resolved without the override. It calls only
+  `tmp.tmpNameSync()`, which 0.2.x still exports.
+
+  Both are reachable only through the release/changeset tooling, never at chart
+  render time.
+
+- 573b600: chore: update appVersion to 2.38.0
+
 ## 3.3.0
 
 ### Minor Changes

charts/clickstack/Chart.yaml

@@ -15,7 +15,7 @@ annotations:
     - name: Upstream Project
       url: https://github.com/hyperdxio/hyperdx
 type: application
-version: 3.3.0
+version: 3.4.0
 appVersion: 2.38.0
 dependencies:
   - name: opentelemetry-collector

package.json

@@ -1,6 +1,6 @@
 {
   "name": "helm-charts",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "private": true,
   "main": "index.js",
   "repository": "git@github.com:hyperdxio/helm-charts.git",