fix(release): develop to main

[bedatty]

GitHub Actions Shared Workflows

---

Description

Type of Change

• feat: New workflow or new input/output/step in an existing workflow
• fix: Bug fix in a workflow (incorrect behavior, broken step, wrong condition)
• perf: Performance improvement (e.g. caching, parallelism, reduced steps)
• refactor: Internal restructuring with no behavior change
• docs: Documentation only (README, docs/, inline comments)
• ci: Changes to self-CI (workflows under .github/workflows/ that run on this repo)
• chore: Dependency bumps, config updates, maintenance
• test: Adding or updating tests
• BREAKING CHANGE: Callers must update their configuration after this PR

Breaking Changes

None.

Testing

• YAML syntax validated locally
• Triggered a real workflow run on a caller repository using @this-branch or the beta tag
• Verified all existing inputs still work with default values
• Confirmed no secrets or tokens are printed in logs
• Checked that unrelated workflows are not affected

Caller repo / workflow run:

Related Issues

Closes #

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 03304ac9-e892-4d17-9ed9-cbebb586597c

📥 Commits

Reviewing files that changed from the base of the PR and between e16894c and a589100.

📒 Files selected for processing (1)

• .github/workflows/gitops-update.yml

---

Summary by CodeRabbit

• Chores
  • Improved the kustomize installation workflow for greater compatibility in automated environments.
  • The installation now uses the runner’s user directory without requiring elevated permissions.

Walkthrough

The GitOps workflow now installs kustomize under the runner user's ~/.local/bin, makes that directory available through GITHUB_PATH and PATH, and retains the existing download, extraction, and version verification steps.

Changes

GitOps kustomize installation

Layer / File(s)	Summary
User-local kustomize installation .github/workflows/gitops-update.yml	The workflow creates ~/.local/bin, installs the extracted binary with mode 755, updates GITHUB_PATH and PATH, and verifies the installation with kustomize version.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• LerianStudio/github-actions-shared-workflows#612: Updates the same workflow step with the same user-local kustomize installation approach.

Suggested labels: workflow

Suggested reviewers: ferr3ira-gabriel

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title describes a branch merge, but the PR actually changes the gitops-update workflow's Kustomize installation.	Rename it to reflect the workflow change, e.g. "fix(gitops-update): install kustomize without sudo".
Description check	⚠️ Warning	The template is present, but the actual description, change type, testing, and related issue details are missing or left as placeholders.	Fill in the Description, select the Type of Change, add testing evidence and a caller repo/run link, and complete the Related Issues field.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch develop

---

_{Comment @coderabbitai help to get the list of available commands.}

[lerian-studio]

🔍 PR Validation Summary

✅ PR Mergeable — no blocking failures

Check	Status	Blocking
Source Branch	✅ success	yes
PR Title	✅ success	yes
PR Description	✅ success	yes
PR Size	✅ success	no
Auto Labels	✅ success	no
PR Metadata	✅ success	no

---

_{🔍 View workflow run}

[lerian-studio]

🔍 Lint Analysis

Check	Files Scanned	Status
YAML Lint	1 file(s)	✅ success
Action Lint	1 file(s)	✅ success
Pinned Actions	1 file(s)	✅ success
Markdown Link Check	no changes	⏭️ skipped
Spelling Check	1 file(s)	✅ success
Shell Check	1 file(s)	✅ success
README Check	1 file(s)	✅ success
Composite Schema	no changes	⏭️ skipped
Deployment Matrix	no changes	⏭️ skipped

---

_{🔍 View full scan logs}

[lerian-studio]

🛡️ CodeQL Analysis Results

Languages analyzed: actions

Found 2 issue(s): 2 Medium

Severity	Rule	File	Message
🟡 Medium	actions/untrusted-checkout/medium	.github/workflows/gitops-update.yml:164	Potential unsafe checkout of untrusted pull request on non-privileged workflow.
🟡 Medium	actions/untrusted-checkout/medium	.github/workflows/gitops-update.yml:182	Potential unsafe checkout of untrusted pull request on non-privileged workflow.

---

_{🔍 View full scan logs | 🛡️ Security tab}