chore(deps): update azure/setup-helm action to v5#68
Conversation
88b00b6 to
61feb5e
Compare
61feb5e to
6856e4a
Compare
There was a problem hiding this comment.
Summary
This PR updates the azure/setup-helm GitHub Action from v4 to v5 in two workflow files (.github/workflows/ci.yml and .github/workflows/release-please.yml). Verdict: Ready to approve — this is a straightforward dependency update with no breaking changes affecting the current usage pattern.
Research notes
I reviewed the official azure/setup-helm repository and its CHANGELOG:
- v5.0.0 release date: March 23, 2026
- Primary change: Node.js runtime updated from node20 to node24 (PR #259)
- Additional changes: Multiple dependency bumps including
undici,minimatch,js-yaml,glob,@actions/http-client(security and maintenance updates) - No breaking API changes: The action's inputs remain unchanged; the
versionparameter continues to work as before
The current usage pattern (uses: azure/setup-helm@v5 with version: "3.13.0") is valid and follows the documented usage in the action's README.
Suggested next steps
- Merge this PR — the update is safe and includes beneficial security patches.
- (Optional follow-up) Consider pinning the action to a specific version tag (e.g.,
@v5.0.0) instead of the floating@v5major-version tag if you want stricter reproducibility. This is a common practice for security-conscious workflows, though using major-version tags is also widely accepted when the action maintainer follows semantic versioning.
General findings
Observation only (not a blocker): Both workflows specify Helm version 3.13.0, which is older than the action's fallback default (currently 3.18.3 per the README). The action will attempt to fetch the requested version, but if that fails, it will silently use the fallback. This is pre-existing behavior and not introduced by this PR, but worth being aware of in case of unexpected Helm version mismatches during CI runs.
All changed lines have been verified against the diff. No issues found.
This PR contains the following updates:
v4→v5Release Notes
azure/setup-helm (azure/setup-helm)
v5.0.0Compare Source
Changed
v5Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.