[renovate]

This PR contains the following updates:

Package	Update	Change
devantler-tech/ksail	patch	7.159.1 → 7.159.2

---

Release Notes

devantler-tech/ksail (devantler-tech/ksail)

v7.159.2

Compare Source

Changelog

Bug Fixes

• 7aa389a fix(ci): clear jscpd + govulncheck findings reddening main's required checks (#​5967)

Other Changes

• 326bd29 chore(copilot-plugin): release v7.159.1 (#​5955)

Quick Start

Homebrew Cask (macOS):

# Standard installation:
brew install --cask devantler-tech/tap/ksail

# If you encounter macOS quarantine issues:
brew install --cask --no-quarantine devantler-tech/tap/ksail

Go Install:

go install github.com/devantler-tech/ksail/v7@​v7.159.2

Download Binary: Choose your platform from the assets above

Docker:

docker pull ghcr.io/devantler-tech/ksail:v7.159.2

---

Full Changelog: devantler-tech/ksail@v7.159.1...v7.159.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 450fe234-994f-4378-96f1-0cf38dda1211

📥 Commits

Reviewing files that changed from the base of the PR and between 3b32593 and 6e105d4.

📒 Files selected for processing (4)

• .github/actions/deploy-prod/action.yml
• .github/workflows/ci.yaml
• .github/workflows/dr-rebuild.yaml
• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• devantler-tech/actions (auto-detected)
• devantler-tech/aws (auto-detected)
• devantler-tech/ksail (auto-detected)
• devantler-tech/reusable-workflows (auto-detected)
• devantler-tech/wedding-app (auto-detected)
• devantler-tech/ascoachingogvaner (auto-detected)
• devantler-tech/unifi (auto-detected)
• devantler-tech/provider-upjet-unifi (auto-detected)
• devantler-tech/agent-skills (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (2)

k8s/bases/**/*.yaml

📄 CodeRabbit inference engine (AGENTS.md)

Treat files under k8s/bases/ as immutable from overlays; make changes via Kustomize patches: in overlays instead of editing base manifests directly.

Files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

k8s/bases/infrastructure/**/*.yaml

📄 CodeRabbit inference engine (AGENTS.md)

Resources under k8s/bases/infrastructure/ should follow the component-folder-first structure: keep a component's HelmRelease/HelmRepository and its own CRs together unless a documented split is required.

Files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

🧠 Learnings (2)

📚 Learning: 2026-07-01T21:13:36.950Z

Learnt from: devantler
Repo: devantler-tech/platform PR: 2359
File: k8s/bases/apps/actual-budget/helm-release.yaml:62-111
Timestamp: 2026-07-01T21:13:36.950Z
Learning: When reviewing Kustomize/Helm YAML in this repo, keep the base vs provider overlay split: `k8s/bases/apps/**` and `k8s/bases/infrastructure/**` should contain each app’s full, environment-agnostic configuration (including base-level postRenderer Kustomize patches such as deployment strategy, topology spread, probes, and env injection). `k8s/providers/{docker,hetzner}/**` should only add small provider-specific deltas (e.g., `interval`, `persistence.size`) via patch files (like `k8s/providers/<provider>/apps/<app>/patches/helm-release-patch.yaml`). If configuration is identical across providers (e.g., OIDC/OAuth env vars where `${domain}` is resolved per cluster via envsubst), it belongs in the base and must not be duplicated into provider overlays.

Applied to files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

📚 Learning: 2026-07-07T18:01:26.730Z

Learnt from: devantler
Repo: devantler-tech/platform PR: 2527
File: k8s/bases/infrastructure/controllers/openfeature-operator/helm-release.yaml:50-60
Timestamp: 2026-07-07T18:01:26.730Z
Learning: For infrastructure controller HelmRelease manifests under k8s/bases/infrastructure/controllers/**, do not request reviewers to add explicit Kubernetes container `resources` (requests/limits) overrides when they are intentionally omitted. The repo relies on VPA auto-right-sizing at runtime, and adding pinned `resources` in HelmRelease values would conflict with that behavior and the chart’s default container resources. Flagging “missing resources” should be suppressed for these controller HelmReleases (e.g., kro, flagger, open-feature-operator) as long as they follow the established convention.

Applied to files:

• k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml

🔀 Multi-repo context devantler-tech/actions, devantler-tech/ksail

Linked repositories findings

devantler-tech/actions [::devantler-tech/actions::]

• setup-ksail-cli/action.yaml:1-32 — reusable composite action that installs KSail via Homebrew; this is the main downstream consumer surface for the version bump.
• setup-ksail-cli/action.yaml:25-32 — the install step still uses brew tap devantler-tech/formulas and brew install ksail, so no version is pinned here; the only impact is the upstream KSail package version pulled by Homebrew.

devantler-tech/ksail [::devantler-tech/ksail::]

• copilot-plugin/plugin.json:1-27 — the published copilot plugin already reports version 7.159.2, matching the bumped KSail release.
• pkg/cli/cmd/workload/gen/helmrelease.go, pkg/client/flux/create_helmrelease.go, pkg/svc/detector/releases.go were located as relevant release/Helmrelease-related files, but the search results did not show any direct mismatch with 7.159.2.

Other checked repos

• devantler-tech/aws
• devantler-tech/wedding-app
• devantler-tech/unifi
• devantler-tech/provider-upjet-unifi

No direct KSail version pins or ksail-operator references were found in those repos.

🔇 Additional comments (4)

.github/actions/deploy-prod/action.yml (1)

46-46: LGTM!

.github/workflows/ci.yaml (1)

94-94: LGTM!

.github/workflows/dr-rebuild.yaml (1)

81-81: LGTM!

k8s/bases/infrastructure/controllers/ksail-operator/helm-release.yaml (1)

21-21: LGTM!

---

📝 Walkthrough

Walkthrough

This change updates the pinned KSail CLI version from 7.159.1 to 7.159.2 in the deploy-prod composite action, the CI workflow, and the dr-rebuild workflow. It also bumps the ksail-operator Helm chart version to 7.159.2 in the HelmRelease manifest. No other workflow or manifest logic changed.

Possibly related PRs

• devantler-tech/platform#2512: Same KSail version pin bump pattern across the same action, workflows, and HelmRelease files.
• devantler-tech/platform#2513: Same KSail and ksail-operator version pin updates in the same deployment and workflow locations.
• devantler-tech/platform#2529: Same pinned KSAIL_VERSION and HelmRelease chart version update across the same files.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the dependency bump of devantler-tech/ksail to v7.159.2.
Description check	✅ Passed	The description directly matches the changeset and explains the ksail patch update from 7.159.1 to 7.159.2.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}

[botantler-1]

🎉 This PR is included in version 1.109.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀