Add CI workflow to check version bumps in PRs

Co-authored-by: chrisburr <[email protected]>

Author: Copilot

.github/workflows/version-check.yml

@@ -0,0 +1,73 @@
+name: Version Bump Check
+
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  check-version-bump:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout PR branch
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Check for version bumps
+        run: |
+          set -e
+          
+          # Get the base branch
+          BASE_BRANCH="${{ github.base_ref }}"
+          echo "Base branch: $BASE_BRANCH"
+          
+          # Fetch the base branch
+          git fetch origin "$BASE_BRANCH"
+          
+          # Find all Chart.yaml files (including subcharts)
+          CHART_FILES=$(find . -name "Chart.yaml" -type f | grep -v "/\.")
+          
+          echo "Checking Chart.yaml files for version bumps..."
+          
+          FAILED=0
+          
+          for CHART_FILE in $CHART_FILES; do
+            echo "---"
+            echo "Checking: $CHART_FILE"
+            
+            # Get current version
+            CURRENT_VERSION=$(grep "^version:" "$CHART_FILE" | awk '{print $2}' | tr -d '"' | tr -d "'")
+            echo "Current version: $CURRENT_VERSION"
+            
+            # Get base version (check if file exists in base branch)
+            if git cat-file -e "origin/$BASE_BRANCH:$CHART_FILE" 2>/dev/null; then
+              BASE_VERSION=$(git show "origin/$BASE_BRANCH:$CHART_FILE" | grep "^version:" | awk '{print $2}' | tr -d '"' | tr -d "'")
+              echo "Base version: $BASE_VERSION"
+              
+              # Compare versions
+              if [ "$CURRENT_VERSION" == "$BASE_VERSION" ]; then
+                echo "❌ ERROR: Version in $CHART_FILE has not been bumped!"
+                echo "   Current: $CURRENT_VERSION"
+                echo "   Base: $BASE_VERSION"
+                echo "   Please increment the version in $CHART_FILE"
+                FAILED=1
+              else
+                echo "✅ Version bumped from $BASE_VERSION to $CURRENT_VERSION"
+              fi
+            else
+              echo "ℹ️  New chart file (not in base branch), skipping version check"
+            fi
+          done
+          
+          echo "---"
+          
+          if [ $FAILED -eq 1 ]; then
+            echo ""
+            echo "❌ Version bump check FAILED"
+            echo "One or more Chart.yaml files need version updates."
+            echo "Please increment the version field according to semantic versioning."
+            exit 1
+          else
+            echo "✅ All Chart.yaml files have been properly versioned"
+          fi

CONTRIBUTING.md

@@ -0,0 +1,61 @@
+# Contributing to diracx-charts
+
+Thank you for your interest in contributing to diracx-charts!
+
+## Pull Request Requirements
+
+When submitting a pull request, please ensure the following:
+
+### Version Bumping
+
+**All pull requests MUST bump the chart version(s) being modified.**
+
+The repository uses automated CI checks to ensure that chart versions are incremented in every PR. This is required because:
+
+- The repository follows a "live at head" approach
+- Charts are automatically pushed to by diracx and diracx-web repositories
+- The main branch is always tagged with the current version
+
+#### Which versions need to be bumped?
+
+If your changes affect:
+
+- **The main chart** (`diracx/Chart.yaml`): Increment the `version` field following [Semantic Versioning](https://semver.org/)
+  - MAJOR version for incompatible API changes
+  - MINOR version for backwards-compatible functionality additions
+  - PATCH version for backwards-compatible bug fixes
+
+- **The cert-manager-issuer subchart** (`diracx/charts/cert-manager-issuer/Chart.yaml`): Increment the `version` field if you modify this subchart
+
+#### Example
+
+If the current version in `diracx/Chart.yaml` is `1.0.0` and you're making a backward-compatible bug fix:
+
+```yaml
+# Before
+version: "1.0.0"
+
+# After
+version: "1.0.1"
+```
+
+### Pre-commit Checks
+
+This repository uses pre-commit hooks. Make sure to install them:
+
+```bash
+pip install pre-commit
+pre-commit install
+```
+
+### Testing
+
+Before submitting your PR, ensure that:
+
+1. Pre-commit checks pass: `pre-commit run --all-files`
+2. The demo runs successfully: `./run_demo.sh --exit-when-done`
+3. Helm linting passes: `helm lint diracx/ --set diracx.hostname=diracx.invalid`
+
+## Questions?
+
+If you have questions about contributing, please open an issue for discussion.