{"id":16504952,"url":"https://github.com/sgibson91/bump-helm-deps-action","last_synced_at":"2025-09-19T11:51:03.833Z","repository":{"id":37929081,"uuid":"414950007","full_name":"sgibson91/bump-helm-deps-action","owner":"sgibson91","description":"GitHub Action to update dependencies of a Helm Chart","archived":false,"fork":false,"pushed_at":"2025-08-02T08:26:15.000Z","size":713,"stargazers_count":1,"open_issues_count":5,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-09-08T02:26:25.977Z","etag":null,"topics":["action","dependency","dependency-manager","docker","dockerfile","github-action","helm","helm-chart","python","python3"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sgibson91.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-10-08T10:53:26.000Z","updated_at":"2025-08-02T08:26:17.000Z","dependencies_parsed_at":"2023-10-03T19:30:19.548Z","dependency_job_id":"eb9df6d8-b3db-432d-9c42-4c6c629c2a1a","html_url":"https://github.com/sgibson91/bump-helm-deps-action","commit_stats":{"total_commits":599,"total_committers":10,"mean_commits":59.9,"dds":0.6026711185308848,"last_synced_commit":"a21d8467cd2a49693704eb89f2340b542512bb88"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/sgibson91/bump-helm-deps-action","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sgibson91%2Fbump-helm-deps-action","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sgibson91%2Fbump-helm-deps-action/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sgibson91%2Fbump-helm-deps-action/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sgibson91%2Fbump-helm-deps-action/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sgibson91","download_url":"https://codeload.github.com/sgibson91/bump-helm-deps-action/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sgibson91%2Fbump-helm-deps-action/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275933407,"owners_count":25555516,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-19T02:00:09.700Z","response_time":108,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["action","dependency","dependency-manager","docker","dockerfile","github-action","helm","helm-chart","python","python3"],"created_at":"2024-10-11T15:08:27.849Z","updated_at":"2025-09-19T11:51:03.816Z","avatar_url":"https://github.com/sgibson91.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ccenter\u003e\n\n\u003cimg src=\"helm-bot-logo.png\" alt=\"Helm Bot logo\" width=\"100\"\u003e\n\n\u003ch1\u003eBump Helm Chart Dependencies\u003c/h1\u003e\n\nThis is an GitHub Action that will check the chart dependencies of a Helm chart are up to date with their source.\nIf a new version is available, the Action will open a Pull Request inserting the new chart dependency versions into the helm chart file.\n\n[![CI tests](https://github.com/sgibson91/bump-helm-deps-action/actions/workflows/ci.yaml/badge.svg)](https://github.com/sgibson91/bump-helm-deps-action/actions/workflows/ci.yaml) [![pre-commit.ci status](https://results.pre-commit.ci/badge/github/sgibson91/bump-helm-deps-action/main.svg)](https://results.pre-commit.ci/latest/github/sgibson91/bump-helm-deps-action/main) [![codecov](https://codecov.io/gh/sgibson91/bump-helm-deps-action/branch/main/graph/badge.svg?token=IKZ55RTEWY)](https://codecov.io/gh/sgibson91/bump-helm-deps-action) ![GitHub](https://img.shields.io/github/license/sgibson91/bump-helm-deps-action) [![badge](https://img.shields.io/static/v1?label=Code%20of\u0026message=Conduct\u0026color=blueviolet)](CODE_OF_CONDUCT.md) [![badge](https://img.shields.io/static/v1?label=Contributing\u0026message=Guidelines\u0026color=blueviolet)](CONTRIBUTING.md)\u003c/center\u003e\n\n**Table of Contents:**\n\n- [:mag: Overview](#mag-overview)\n- [🤔 Assumptions `bump-helm-deps` Makes](#-assumptions-bump-helm-deps-makes)\n- [:inbox_tray: Inputs](#inbox_tray-inputs)\n- [:lock: Permissions](#lock-permissions)\n- [:recycle: Example Usage](#recycle-example-usage)\n- [:gift: Acknowledgements](#gift-acknowledgements)\n- [:sparkles: Contributing](#sparkles-contributing)\n\n---\n\n## :mag: Overview\n\nThis is an overview of the steps the Action executes.\n\n- Read the helm chart file and find the versions of the dependencies\n- Scrape the helm chart source indexes and find the most recent version release for each dependency\n- If there is a newer chart version available, then:\n  - Create a new branch in the repository\n  - Add the new version(s) to the helm chart file\n  - Commit the file to the branch\n  - Open a Pull Request to the default branch\n  - Assign labels and reviewers to the Pull Request if required\n\nA moderator should check and merge the Pull Request as appropriate.\n\n## 🤔 Assumptions `bump-helm-deps` Makes\n\nHere is a list detailing the assumptions that the Action makes.\n\n1. You have a GitHub Token with enough permissions to access the GitHub API and create branches, commits and Pull Requests\n2. The configuration for your helm chart is available in a **public** GitHub repository, or you have a token with sufficient permissions to read/write to a **private** repository\n3. The dependent chart indexes are available at public URLs\n\n## :inbox_tray: Inputs\n\n| Variable | Description | Required? | Default Value |\n| :--- | :--- | :--- | :--- |\n| `chart_path` | The path to the file that stores the helm chart dependencies | :white_check_mark: | - |\n| `chart_urls` | A string-serialised dictionary storing the location of the dependent and their versions. E.g. `'{\"binderhub\": \"https://raw.githubusercontent.com/jupyterhub/helm-chart/gh-pages/index.yaml\"}'` | :white_check_mark: | - |\n| `github_token` | A GitHub token to make requests to the API with. Requires write permissions to: create new branches, make commits, and open Pull Requests. | :x: | `${{github.token}}` |\n| `repository` | The GitHub repository where the helm chart is stored | :x: | `${{github.repository}}` |\n| `base_branch` | The base branch to open the Pull Request against | :x: | `main` |\n| `head_branch` | The branch to commit to and open a Pull Request from | :x: | `bump-helm-deps/{{ chart name }}/WXYZ` where `chart name` is derived from the `chart_path`, and `WXYZ` will be a randomly generated ascii string (to avoid clashes) |\n| `labels` | A comma-separated list of labels to apply to the opened Pull Request. Labels must already exist in the repository. | :x: | `[]` |\n| `reviewers` | A comma-separated list of GitHub users (without the leading `@`) to request reviews from | :x: | `[]` |\n| `team_reviewers` | A comma-separated list of GitHub teams to request reviews from | :x: | `[]` |\n| `dry_run` | Perform a dry-run of the action. A Pull Request will not be opened, but a log message will indicate if any helm chart versions can be bumped. | :x: | `False` |\n\n## :lock: Permissions\n\nThis Action will need permission to read the contents of a file stored in your repository, create a new branch, commit to that branch, and open a Pull Request.\nThe [default permissive settings of `GITHUB_TOKEN`](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token) should provide the relevant permissions.\n\nIf instead your repository is using the default restricted settings of `GITHUB_TOKEN`, you could grant just enough permissions to the Action using a [`permissions`](https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions#jobsjob_idpermissions) config, such as the one below:\n\n```yaml\npermissions:\n  contents: write\n  pull-requests: write\n```\n\n## :recycle: Example Usage\n\nThe simplest way to use the Action is documented below.\nThis config features a `workflow_dispatch` trigger to allow manual running whenever the maintainers desire, and a cron job trigger scheduled to run at 10am every weekday.\n\n```yaml\nname: Check and Bump Helm Chart Dependencies\n\non:\n  workflow_dispath:\n  schedule:\n    - cron: \"0 10 * * 1-5\"\n\njobs:\n  bump-helm-deps:\n    runs-on: ubuntu-latest\n    steps:\n    - uses: sgibson91/bump-helm-deps-action@main\n      with:\n        chart_path: path/to/config\n        chart_urls: '{\"chart_1\": \"https://example.com/chart_1/index.yaml\"}'\n```\n\n## :gift: Acknowledgements\n\nThank you to Christopher Hench ([@henchc](https://github.com/henchc)) who wrote and documented [`henchbot`](https://github.com/henchbot) which automatically opens Pull Requests to upgrade mybinder.org.\n[Give his blog post a read!](https://hackmd.io/qC4ooA5TTn6xA2w-2OLHbA)\n\n## :sparkles: Contributing\n\nThank you for wanting to contribute to the project! :tada:\nPlease read our [Code of Conduct](CODE_OF_CONDUCT.md) :purple_heart: and [Contributing Guidelines](CONTRIBUTING.md) :space_invader: to get you started.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsgibson91%2Fbump-helm-deps-action","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsgibson91%2Fbump-helm-deps-action","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsgibson91%2Fbump-helm-deps-action/lists"}