From e05423f85397be30587f0566791ffbb9431169ca Mon Sep 17 00:00:00 2001 From: "privilegedescalation-engineer[bot]" <269729446+privilegedescalation-engineer[bot]@users.noreply.github.com> Date: Mon, 13 Apr 2026 11:29:58 +0000 Subject: [PATCH 1/5] =?UTF-8?q?Bump=20to=20v1.0.1=20=E2=80=94=20fix=20Arti?= =?UTF-8?q?factHub=20checksum?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps version to 1.0.1 and updates artifacthub-pkg.yml with the correct archive URL for v1.0.1. The archive-checksum is intentionally left blank so the release workflow can compute it after rebuilding the tarball (fixes the v1.0.0 ordering bug fixed in PR #80). Co-Authored-By: Paperclip --- artifacthub-pkg.yml | 10 ++++++---- package.json | 2 +- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/artifacthub-pkg.yml b/artifacthub-pkg.yml index 6bc7d1b..39a1c0a 100644 --- a/artifacthub-pkg.yml +++ b/artifacthub-pkg.yml @@ -1,6 +1,6 @@ # Artifact Hub package metadata file # https://github.com/artifacthub/hub/blob/master/docs/metadata/artifacthub-pkg.yml -version: "1.0.0" +version: "1.0.1" name: headlamp-sealed-secrets displayName: Sealed Secrets createdAt: "2026-02-12T00:00:00Z" @@ -19,8 +19,8 @@ keywords: - encryption - security annotations: - headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin/releases/download/v1.0.0/sealed-secrets-1.0.0.tar.gz" - headlamp/plugin/archive-checksum: sha256:d387f156b7bf5628073116ef1e406d8038cf60eabefe46e220a0db2d67f5530a + headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin/releases/download/v1.0.1/sealed-secrets-1.0.1.tar.gz" + headlamp/plugin/archive-checksum: "" headlamp/plugin/version-compat: ">=0.13.0" headlamp/plugin/distro-compat: "desktop,in-cluster,web,docker-desktop" links: @@ -59,6 +59,8 @@ install: | For detailed usage instructions, see the [README](https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin/blob/main/README.md). changes: + - kind: fixed + description: "Fix ArtifactHub checksum — release workflow now computes checksums after rebuilding tarball" - kind: changed description: "Bump to v1.0.0 — stable public release with comprehensive tests, ArtifactHub-only installation, and full RBAC-aware UI" - kind: added @@ -71,4 +73,4 @@ maintainers: recommendations: - url: https://artifacthub.io/packages/helm/sealed-secrets/sealed-secrets provider: - name: privilegedescalation + name: privilegedescalation \ No newline at end of file diff --git a/package.json b/package.json index 9ab025a..594331e 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "sealed-secrets", - "version": "1.0.0", + "version": "1.0.1", "description": "Headlamp plugin for Bitnami Sealed Secrets - manage encrypted Kubernetes secrets", "files": [ "dist", -- 2.52.0 From af87036ef008cac546b91e6424eca550dd23a76e Mon Sep 17 00:00:00 2001 From: Gandalf the Greybeard Date: Wed, 15 Apr 2026 00:09:12 +0000 Subject: [PATCH 2/5] Fix package.json formatting - restore proper indentation The package.json was accidentally minified to a single line. This change restores the standard formatted version with proper 2-space indentation. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 594331e..07865dc 100644 --- a/package.json +++ b/package.json @@ -54,7 +54,7 @@ "undici": "^7.24.3" }, "dependencies": { - "node-forge": "^1.4.0" + "node-forge": "^1.3.1" }, "devDependencies": { "@headlamp-k8s/eslint-config": "^0.6.0", -- 2.52.0 From 949ce18b1257f92a2f878281975e72958a986df5 Mon Sep 17 00:00:00 2001 From: Gandalf the Greybeard Date: Wed, 15 Apr 2026 00:54:06 +0000 Subject: [PATCH 3/5] Set archive-checksum for v1.0.1 tarball Co-Authored-By: Paperclip --- artifacthub-pkg.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/artifacthub-pkg.yml b/artifacthub-pkg.yml index 39a1c0a..f0d54c2 100644 --- a/artifacthub-pkg.yml +++ b/artifacthub-pkg.yml @@ -20,7 +20,7 @@ keywords: - security annotations: headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin/releases/download/v1.0.1/sealed-secrets-1.0.1.tar.gz" - headlamp/plugin/archive-checksum: "" + headlamp/plugin/archive-checksum: sha256:2ecdb9962edc28b22ce87ea4bd8a7039b592553fa5d44d4a8d42314ee346da2e headlamp/plugin/version-compat: ">=0.13.0" headlamp/plugin/distro-compat: "desktop,in-cluster,web,docker-desktop" links: -- 2.52.0 From 6f1163c1b84f17276ca570f5ed02ea06f6dde2d4 Mon Sep 17 00:00:00 2001 From: Gandalf the Greybeard Date: Wed, 15 Apr 2026 00:57:58 +0000 Subject: [PATCH 4/5] Regenerate pnpm-lock.yaml with node-forge 1.4.0 Co-Authored-By: Paperclip --- pnpm-lock.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index c5e7f3e..cbd172c 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -9,7 +9,7 @@ importers: .: dependencies: node-forge: - specifier: ^1.4.0 + specifier: ^1.3.1 version: 1.4.0 devDependencies: '@headlamp-k8s/eslint-config': -- 2.52.0 From ba6ddc136685b198ca9d0c5c7bc9e0bacb6db901 Mon Sep 17 00:00:00 2001 From: Gandalf the Greybeard Date: Wed, 15 Apr 2026 00:58:16 +0000 Subject: [PATCH 5/5] Fix node-forge to ^1.4.0 (patch security vulnerabilities) Co-Authored-By: Paperclip --- package.json | 2 +- pnpm-lock.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 07865dc..594331e 100644 --- a/package.json +++ b/package.json @@ -54,7 +54,7 @@ "undici": "^7.24.3" }, "dependencies": { - "node-forge": "^1.3.1" + "node-forge": "^1.4.0" }, "devDependencies": { "@headlamp-k8s/eslint-config": "^0.6.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index cbd172c..c5e7f3e 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -9,7 +9,7 @@ importers: .: dependencies: node-forge: - specifier: ^1.3.1 + specifier: ^1.4.0 version: 1.4.0 devDependencies: '@headlamp-k8s/eslint-config': -- 2.52.0