[yocaba]

Reverts #408

Summary by CodeRabbit

• Chores

  • Updated several build, test, and deployment tool versions across workflows and examples to keep environment setup consistent.
  • Aligned local development defaults with a newer supported release.
  • Refreshed test-library versions used by the project.

• Bug Fixes

  • Standardized pinned tool versions in automation and example workflows to reduce unexpected setup issues during validation, publishing, and scanning.

[coderabbitai]

📝 Walkthrough

Walkthrough

Multiple dependency and tool versions are downgraded across the repository: Helm from v4.2.2 to v4.0.1 in CI workflows, helm/kind-action from v1.14.0 to v1.10.0 in E2E, TRUSTMANAGER_VERSION from v0.23.0 to v0.22.1 in Makefile, AWS CLI from 2.35.9 to 2.34.63 in blob examples, Trivy from 0.71.2 to 0.70.0 in helm/oci/ocm examples, and ginkgo/gomega in go.mod.

Changes

Version Pin Downgrades

Layer / File(s)	Summary
CI workflow tool version pins .github/workflows/helm-lint.yaml, .github/workflows/helm-publish.yaml, .github/workflows/test-e2e.yaml	Helm downgraded from v4.2.2 to v4.0.1 in both Helm CI workflows; helm/kind-action pin changed from v1.14.0 to v1.10.0 in the E2E workflow.
Example workflow container image versions examples/blob/cluster-workflow-template.yaml, examples/helm/cluster-workflow-template.yaml, examples/oci/cluster-workflow-template.yaml, examples/ocm/cluster-workflow-template.yaml	AWS CLI image downgraded from 2.35.9 to 2.34.63 across four templates in the blob example; Trivy image downgraded from 0.71.2 to 0.70.0 in scan steps of helm, oci, and ocm examples.
Makefile and Go dependency version pins Makefile, go.mod	TRUSTMANAGER_VERSION downgraded from v0.23.0 to v0.22.1; ginkgo/v2 downgraded from v2.31.0 to v2.29.0 and gomega from v1.42.0 to v1.41.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~4 minutes

Possibly related PRs

• opendefensecloud/artifact-conduit#371: Modifies the same azure/setup-helm step in helm-lint.yaml and helm-publish.yaml by pinning the action to a commit SHA, overlapping directly with this PR's Helm version changes.

Poem

🐇 A hop back in time, just a version or two,
The tooling rolled back, as rabbits sometimes do.
Trivy and Helm, AWS CLI too,
All pinned to their elders, tried, tested, and true.
Sometimes the old burrow is cosier, it's true! 🌿

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description only states the reverted PR number and omits the required What, Why, Testing, Notes, and Checklist sections.	Expand the template with a summary, motivation, testing details, reviewer notes if any, and checklist items.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title matches the PR’s purpose of reverting the minor dependency update, which aligns with the changed workflow and version pins.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch revert-408-renovate/all-minor-updates

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/helm-lint.yaml:
- Line 28: The Helm version is inconsistent between the CI workflows and the
example workflow, so update the Helm image/tag used in the example workflow to
match the pinned version already used by the helm-lint and helm-publish
workflows. Keep the version references aligned in the helm-related workflow
definitions so linting, packaging, and example execution use the same Helm
release.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 3e3bdb21-7086-44c7-b50c-056071087b14

📥 Commits

Reviewing files that changed from the base of the PR and between 492b059 and 7f5dbbf.

⛔ Files ignored due to path filters (2)

• go.sum is excluded by !**/*.sum
• tools.lock is excluded by !**/*.lock

📒 Files selected for processing (9)

• .github/workflows/helm-lint.yaml
• .github/workflows/helm-publish.yaml
• .github/workflows/test-e2e.yaml
• Makefile
• examples/blob/cluster-workflow-template.yaml
• examples/helm/cluster-workflow-template.yaml
• examples/oci/cluster-workflow-template.yaml
• examples/ocm/cluster-workflow-template.yaml
• go.mod

[coveralls]

Coverage Report for CI Build 28093918132

Coverage increased (+0.4%) to 84.267%

Details

• Coverage increased (+0.4%) from the base build.
• Patch coverage: No coverable lines changed in this PR.
• 2 coverage regressions across 1 file.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

2 previously-covered lines in 1 file lost coverage.

File	Lines Losing Coverage	Coverage
pkg/controller/order_controller.go	2	83.16%

---

Coverage Stats

Relevant Lines:	928
Covered Lines:	782
Line Coverage:	84.27%
Coverage Strength:	1206.03 hits per line

---

💛 - Coveralls