bump: version 0.0.1 → 0.1.0

.cz.toml

@@ -0,0 +1,6 @@
+[ tool.commitizen ]
+name = "cz_conventional_commits"
+version = "0.1.0"
+tag_format = "v$version"
+update_changelog_on_bump = true
+version_files = [ ".cz.toml:version" ]

.github/workflows/languages-go-goreleaser-check.yml

@@ -0,0 +1,61 @@
+name: Go Releaser Check
+
+on:
+  workflow_call:
+    inputs:
+      go-version-file:
+        description: "Path to go.mod for version resolution"
+        type: string
+        default: "go.mod"
+      snapshot-artifact:
+        description: "Upload snapshot binaries as artifact"
+        type: boolean
+        default: false
+
+jobs:
+  check:
+    name: goreleaser check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: ${{ inputs.go-version-file }}
+          cache: true
+
+      - name: Validate .goreleaser.yaml
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          version: latest
+          args: check
+
+  build:
+    name: goreleaser build (snapshot)
+    runs-on: ubuntu-latest
+    needs: check
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: ${{ inputs.go-version-file }}
+          cache: true
+
+      - name: Build snapshot
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          version: latest
+          args: build --snapshot --clean
+
+      - name: Upload snapshot binaries
+        if: ${{ inputs.snapshot-artifact }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: snapshot-binaries
+          path: dist/
+          retention-days: 3

.github/workflows/languages-go-goreleaser.yml

@@ -0,0 +1,35 @@
+name: Go Release
+
+on:
+  workflow_call:
+    inputs:
+      go-version-file:
+        description: "Path to go.mod for version resolution"
+        type: string
+        default: "go.mod"
+    secrets:
+      GITHUB_TOKEN:
+        required: true
+
+jobs:
+  release:
+    name: goreleaser release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: ${{ inputs.go-version-file }}
+          cache: true
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/languages-helm-fmt.yml

@@ -0,0 +1,133 @@
+# Needs ct.yaml file 
+# e.g.
+# chart-dirs:
+#  - charts
+#  
+# target-branch: main
+# 
+# Enforce semver bump on any changed chart.
+# check-version-increment: true
+# 
+# Set to true if all maintainer GitHub usernames should be validated.
+# validate-maintainers: false
+# 
+# Extra args passed through to every `helm lint` call.
+# helm-extra-args: --timeout 120s
+#
+# Uncomment to validate values.yaml against a JSON schema (values.schema.json).
+# validate-chart-schema: true
+
+name: Helm Lint
+
+on:
+  workflow_call:
+    inputs:
+      chart-dirs:
+        description: >
+          Comma-separated chart directories. Must match chart_dirs in ct config.
+        type: string
+        default: "charts"
+      ct-config:
+        description: "Path to ct config in calling repo. Skipped if file absent."
+        type: string
+        default: "ct.yaml"
+      lint-all:
+        description: >
+          Pass --all to ct lint. Lints every chart, not just ones changed
+          relative to target-branch. Useful on main/release pushes.
+        type: boolean
+        default: true
+      target-branch:
+        description: "Branch ct diffs against for changed-chart detection."
+        type: string
+        default: "main"
+      kubeconform:
+        description: "Validate rendered manifests with kubeconform."
+        type: boolean
+        default: true
+      k8s-version:
+        description: "Kubernetes version for kubeconform schema validation."
+        type: string
+        default: "1.30.0"
+      kubeconform-version:
+        description: "kubeconform release version."
+        type: string
+        default: "0.6.7"
+      helm-version:
+        description: "Helm version."
+        type: string
+        default: "v3.14.4"
+      runner:
+        type: string
+        default: "ubuntu-latest"
+
+jobs:
+  ct-lint:
+    name: ct lint
+    runs-on: ${{ inputs.runner }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: azure/setup-helm@v4
+        with:
+          version: ${{ inputs.helm-version }}
+
+      - uses: helm/chart-testing-action@v2
+
+      - name: Run ct lint
+        run: |
+          ARGS="--target-branch ${{ inputs.target-branch }}"
+
+          if [[ -f "${{ inputs.ct-config }}" ]]; then
+            ARGS="$ARGS --config ${{ inputs.ct-config }}"
+          fi
+
+          if [[ "${{ inputs.lint-all }}" == "true" ]]; then
+            ARGS="$ARGS --all"
+          fi
+
+          ct lint $ARGS
+
+  kubeconform:
+    name: kubeconform
+    runs-on: ${{ inputs.runner }}
+    if: ${{ inputs.kubeconform }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: azure/setup-helm@v4
+        with:
+          version: ${{ inputs.helm-version }}
+
+      - name: Install kubeconform
+        env:
+          VERSION: ${{ inputs.kubeconform-version }}
+        run: |
+          curl -sLo kubeconform.tar.gz \
+            "https://github.com/yannh/kubeconform/releases/download/v${VERSION}/kubeconform-linux-amd64.tar.gz"
+          tar xf kubeconform.tar.gz kubeconform
+          sudo mv kubeconform /usr/local/bin/
+          kubeconform -v
+
+      - name: Render and validate all charts
+        env:
+          K8S_VERSION: ${{ inputs.k8s-version }}
+        run: |
+          find . -name "Chart.yaml" \
+              -not -path "*/.git/*" \
+              -not -path "*/charts/*/Chart.yaml" \
+          | while read chartfile; do
+            chart_dir=$(dirname "$chartfile")
+            echo "──► Validating: $chart_dir"
+            helm dependency update "$chart_dir" 2>/dev/null || true
+            helm template ci-release "$chart_dir" \
+              | kubeconform \
+                  -strict \
+                  -kubernetes-version "$K8S_VERSION" \
+                  -schema-location default \
+                  -schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
+                  -summary \
+                  -output pretty
+          done

.github/workflows/languages-yaml-lint.yml

@@ -0,0 +1,69 @@
+# Reusable YAML lint workflow
+# Lives in your central workflows repo, e.g.:
+#   github.com/your-org/.github/.github/workflows/yaml-lint.yml
+#
+# Call it from any repo:
+#   uses: your-org/.github/.github/workflows/yaml-lint.yml@main
+
+name: YAML Lint
+
+on:
+  workflow_call:
+    inputs:
+      paths:
+        description: >
+          Space-separated list of files/directories to lint.
+          Supports glob patterns (passed directly to yamllint).
+        type: string
+        default: "."
+      config-file:
+        description: >
+          Path to a .yamllint.yml config in the calling repo.
+          Ignored if config-data is set.
+        type: string
+        default: ".yamllint.yml"
+      config-data:
+        description: >
+          Inline yamllint config string. Takes precedence over config-file.
+          Example: "{extends: default, rules: {line-length: {max: 120}}}"
+        type: string
+        default: ""
+      strict:
+        description: "Treat warnings as errors (exit 1 on any warning)."
+        type: boolean
+        default: false
+      actionlint:
+        description: "Also run actionlint on .github/workflows/."
+        type: boolean
+        default: true
+      runner:
+        description: "Runner label."
+        type: string
+        default: "ubuntu-latest"
+
+jobs:
+  yamllint:
+    name: yamllint
+    runs-on: ${{ inputs.runner }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: yamllint
+        uses: ibiqlik/action-yamllint@v3
+        with:
+          file_or_dir: ${{ inputs.paths }}
+          config_file: ${{ inputs.config-file }}
+          config_data: ${{ inputs.config-data }}
+          strict: ${{ inputs.strict }}
+
+  actionlint:
+    name: actionlint
+    runs-on: ${{ inputs.runner }}
+    if: ${{ inputs.actionlint }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: actionlint
+        uses: rhysd/actionlint@v1
+        with:
+          ignore: ""

CHANGELOG.md

@@ -0,0 +1,7 @@
+## v0.1.0 (2026-06-05)
+
+### Feat
+
+- **languages**: helm linter pipeline
+
+## v0.0.1 (2026-06-05)