From caf866aed7fe37720d0925a7effdcf8ab16d7455 Mon Sep 17 00:00:00 2001 From: Thomas Sapelza Date: Sun, 6 Sep 2026 21:45:48 +0200 Subject: [PATCH 1/4] update GitHub Actions to the latest versions Bump azure/setup-kubectl v4 -> v5 and azure/setup-helm v4 -> v5. Both v4 releases run on the node20 runtime, which GitHub deprecates. Both v5 releases run on node24 and remove the deprecation warning. Bump actions/checkout v5 -> v7 in the release workflow. Co-Authored-By: Claude Opus 5 --- .github/workflows/release.yml | 2 +- setup-kubectl-and-helm/action.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f0082cd..234ad3a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-24.04 timeout-minutes: 15 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }} - uses: aboutbits/github-actions-base/git-setup@v2 diff --git a/setup-kubectl-and-helm/action.yml b/setup-kubectl-and-helm/action.yml index f708ec4..035d37d 100644 --- a/setup-kubectl-and-helm/action.yml +++ b/setup-kubectl-and-helm/action.yml @@ -18,7 +18,7 @@ runs: using: "composite" steps: - name: Setup kubectl - uses: azure/setup-kubectl@v4 + uses: azure/setup-kubectl@v5 with: version: ${{ inputs.kubectl-version }} - name: Setup kubeconfig file @@ -28,6 +28,6 @@ runs: chmod 600 ~/.kube/config shell: bash - name: Setup Helm - uses: azure/setup-helm@v4 + uses: azure/setup-helm@v5 with: version: ${{ inputs.helm-version }} From de74b0628ae3d57a383db97216a21252343c6862 Mon Sep 17 00:00:00 2001 From: Thomas Sapelza Date: Sun, 6 Sep 2026 21:59:40 +0200 Subject: [PATCH 2/4] bump default kubectl and Helm versions Bump the kubectl default from v1.33.1 to v1.35.8, and the Helm default from v3.17.3 to v3.21.4. Helm v3.21.4 carries no breaking change against v3.17.3. It also skips the v3.18.x window, in which the ORAS v2 migration broke OCI registry login and chart pull. Helm v3.19.0 fixed both. Co-Authored-By: Claude Opus 5 --- setup-kubectl-and-helm/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/setup-kubectl-and-helm/action.yml b/setup-kubectl-and-helm/action.yml index 035d37d..9ad2af7 100644 --- a/setup-kubectl-and-helm/action.yml +++ b/setup-kubectl-and-helm/action.yml @@ -8,11 +8,11 @@ inputs: kubectl-version: description: 'kubectl version' required: false - default: 'v1.33.1' + default: 'v1.35.8' helm-version: description: 'Helm version' required: false - default: 'v3.17.3' + default: 'v3.21.4' runs: using: "composite" From f5168faab3619990d27906b7ae9650b9e160ac1f Mon Sep 17 00:00:00 2001 From: Thomas Sapelza Date: Sun, 6 Sep 2026 22:07:44 +0200 Subject: [PATCH 3/4] use kubectl v1.36.4 to match the planned cluster upgrade The clusters run v1.35.7 today, and they move to v1.36 soon. kubectl v1.36.4 sits one minor above the cluster now, and it matches the cluster exactly after the upgrade. Both states stay inside the supported version skew window, so the action needs no second bump. Co-Authored-By: Claude Opus 5 --- setup-kubectl-and-helm/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup-kubectl-and-helm/action.yml b/setup-kubectl-and-helm/action.yml index 9ad2af7..28a1209 100644 --- a/setup-kubectl-and-helm/action.yml +++ b/setup-kubectl-and-helm/action.yml @@ -8,7 +8,7 @@ inputs: kubectl-version: description: 'kubectl version' required: false - default: 'v1.35.8' + default: 'v1.36.4' helm-version: description: 'Helm version' required: false From af3b3fd946e162a9d8bb0ca78c7ed9b6f731ea23 Mon Sep 17 00:00:00 2001 From: Thomas Sapelza Date: Sun, 6 Sep 2026 22:13:52 +0200 Subject: [PATCH 4/4] pin kubectl to the minor version v1.36 Azure/setup-kubectl v5 resolves a major.minor input to the latest patch through https://dl.k8s.io/release/stable-1.36.txt. The clusters already float their patch version, because the do-cluster module sets auto_upgrade with a fixed minor. kubectl now follows the same model. Azure/setup-helm has no equivalent, so helm-version keeps a full version. Also correct the readme, which documented the input as kube-version and still showed the old default versions. Co-Authored-By: Claude Opus 5 --- readme.md | 13 ++++++++----- setup-kubectl-and-helm/action.yml | 2 +- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/readme.md b/readme.md index 7bf9804..1c7dcaa 100644 --- a/readme.md +++ b/readme.md @@ -20,11 +20,14 @@ Setup kubectl and Helm using kubeconfig file. The following inputs can be used as `step.with` keys: -| Name | Required/Default | Description | -|----------------|------------------|-----------------------------| -| `kubeconfig` | required | The kubeconfig file content | -| `kube-version` | `v1.33.1` | The version of kubectl | -| `helm-version` | `v3.17.3` | The version of Helm | +| Name | Required/Default | Description | +|-------------------|------------------|-----------------------------| +| `kubeconfig` | required | The kubeconfig file content | +| `kubectl-version` | `v1.36` | The version of kubectl | +| `helm-version` | `v3.21.4` | The version of Helm | + +The `kubectl-version` input accepts a `major.minor` value, such as `v1.36`. +The action then installs the latest patch of that minor version. The `helm-version` input needs a full version. ### Deploy to Kubernetes using kubectl diff --git a/setup-kubectl-and-helm/action.yml b/setup-kubectl-and-helm/action.yml index 28a1209..b8b4449 100644 --- a/setup-kubectl-and-helm/action.yml +++ b/setup-kubectl-and-helm/action.yml @@ -8,7 +8,7 @@ inputs: kubectl-version: description: 'kubectl version' required: false - default: 'v1.36.4' + default: 'v1.36' helm-version: description: 'Helm version' required: false