fix: simplify helm.yaml — use GITHUB_OUTPUT file directly

Previous meta step used bash variable capture inside a pipe block
which silently failed to set GITHUB_OUTPUT vars, causing empty
artifact names downstream.

New approach: python3 script writes directly to $GITHUB_OUTPUT
using the file-append pattern. Clean, reliable, no shell escaping issues.

Author: osmo-devops

.github/workflows/helm.yaml

@@ -20,7 +20,6 @@ env:
   OCI_REGISTRY: ghcr.io
 
 jobs:
-  #  Lint 
   lint:
     name: Lint Helm chart
     runs-on: ubuntu-latest
@@ -32,16 +31,13 @@ jobs:
         with:
           version: v3.17.0
 
-      - name: Add Bitnami repo
-        run: |
-          helm repo add bitnami https://charts.bitnami.com/bitnami --force-update
-          helm repo update
-
       - name: Helm lint
         run: |
-          helm lint --strict --set profile=full --set tempo.image=ghcr.io/tempoxyz/tempo:1.4.1 ./helm
+          helm lint --strict \
+            --set profile=full \
+            --set tempo.image=ghcr.io/tempoxyz/tempo:1.4.1 \
+            ./helm
 
-  #  Validate (dry-run install) 
   validate:
     name: Validate Kubernetes install (dry-run)
     runs-on: ubuntu-latest
@@ -56,8 +52,7 @@ jobs:
       - name: Create genesis placeholder
         run: |
           mkdir -p consensus
-          echo '{"config":{},"genesis_time":"","nonce":"0x0000000000000000","extradata":"","alloc":{},"number":"0","gas_limit":"0","difficulty":"0"}' \
-            > consensus/genesis.json
+          echo '{"config":{},"genesis_time":"","nonce":"0x0","extradata":"","alloc":{},"number":"0","gas_limit":"0","difficulty":"0"}' > consensus/genesis.json
 
       - name: Helm dry-run (consensus profile)
         run: |
@@ -70,7 +65,7 @@ jobs:
             --set rpc.count=1 \
             --set faucet.enabled=true \
             --set monitoring.enabled=false \
-            --debug --dry-run=server 2>&1 | head -200
+            --dry-run=server 2>&1 | head -100
 
       - name: Helm dry-run (full profile)
         run: |
@@ -82,16 +77,15 @@ jobs:
             --set validators.count=4 \
             --set rpc.count=2 \
             --set monitoring.enabled=true \
-            --debug --dry-run=server 2>&1 | head -200
+            --dry-run=server 2>&1 | head -100
 
-  #  Package 
   package:
     name: Package Helm chart
     runs-on: ubuntu-latest
     needs: [lint, validate]
     outputs:
-      chart_version: ${{ steps.meta.outputs.version }}
-      chart_basename: ${{ steps.meta.outputs.basename }}
+      version: ${{ steps.meta.outputs.version }}
+      filename: ${{ steps.meta.outputs.filename }}
     steps:
       - uses: actions/checkout@v4
 
@@ -100,17 +94,24 @@ jobs:
         with:
           version: v3.17.0
 
-      - name: Copy genesis placeholder into chart
-        run: |
-          mkdir -p consensus
-          echo '{"config":{},"genesis_time":"","nonce":"0x0000000000000000","extradata":"","alloc":{},"number":"0","gas_limit":"0","difficulty":"0"}' \
-            > consensus/genesis.json
+      - name: Create genesis placeholder
+        run: mkdir -p consensus && echo '{"config":{},"genesis_time":"","nonce":"0x0","extradata":"","alloc":{},"number":"0","gas_limit":"0","difficulty":"0"}' > consensus/genesis.json
 
-      - id: meta
+      - name: Extract chart version
+        id: meta
         run: |
-          VERSION=$(grep '^version:' helm/Chart.yaml | awk '{print $2}')
-          echo "version=${VERSION}" >> $GITHUB_OUTPUT
-          echo "basename=tempo-monitor-${VERSION}.tgz" >> $GITHUB_OUTPUT
+          python3 -c "
+          import yaml, os
+          with open('./helm/Chart.yaml') as f:
+              doc = yaml.safe_load(f)
+          v = doc['version']
+          fname = 'tempo-monitor-' + v + '.tgz'
+          with open(os.environ['GITHUB_OUTPUT'], 'a') as f:
+              f.write(f'version={v}\n')
+              f.write(f'filename={fname}\n')
+          print(f'Chart version: {v}')
+          print(f'Package filename: {fname}')
+          "
 
       - name: Helm package
         run: |
@@ -120,11 +121,10 @@ jobs:
       - name: Upload chart artifact
         uses: actions/upload-artifact@v4
         with:
-          name: ${{ steps.meta.outputs.chart_basename }}
-          path: /tmp/helm-charts/${{ steps.meta.outputs.chart_basename }}
+          name: ${{ steps.meta.outputs.filename }}
+          path: /tmp/helm-charts/${{ steps.meta.outputs.filename }}
           retention-days: 5
 
-  #  Publish to GHCR (on main / release only) 
   publish:
     name: Publish Helm chart to GHCR
     runs-on: ubuntu-latest
@@ -154,30 +154,23 @@ jobs:
       - name: Download chart artifact
         uses: actions/download-artifact@v4
         with:
-          name: ${{ needs.package.outputs.chart_basename }}
+          name: ${{ needs.package.outputs.filename }}
           path: /tmp/helm-charts/
 
       - name: Push chart to GHCR
-        env:
-          HELM_EXPERIMENTAL_OCI: 1
         run: |
           CHART_REF="${{ env.OCI_REGISTRY }}/${{ github.repository_owner }}/${{ env.CHART_NAME }}"
-          VERSION="${{ needs.package.outputs.chart_version }}"
-          FILE="${{ needs.package.outputs.chart_basename }}"
-
-          helm chart save /tmp/helm-charts/${FILE} ${CHART_REF}:${VERSION}
-          helm chart push ${CHART_REF}:${VERSION}
-          helm chart save /tmp/helm-charts/${FILE} ${CHART_REF}:latest
-          helm chart push ${CHART_REF}:latest
+          FILE="/tmp/helm-charts/${{ needs.package.outputs.filename }}"
+          helm chart save "${FILE}" "${CHART_REF}:${{ needs.package.outputs.version }}"
+          helm chart push "${CHART_REF}:${{ needs.package.outputs.version }}"
+          helm chart save "${FILE}" "${CHART_REF}:latest"
+          helm chart push "${CHART_REF}:latest"
 
       - name: Show published tags
         run: |
-          CHART_REF="${{ env.OCI_REGISTRY }}/${{ github.repository_owner }}/${{ env.CHART_NAME }}"
-          VERSION="${{ needs.package.outputs.chart_version }}"
-          echo "Published: ${CHART_REF}:${VERSION}"
-          echo "Published: ${CHART_REF}:latest"
+          echo "Published: ${{ env.OCI_REGISTRY }}/${{ github.repository_owner }}/${{ env.CHART_NAME }}:${{ needs.package.outputs.version }}"
+          echo "Published: ${{ env.OCI_REGISTRY }}/${{ github.repository_owner }}/${{ env.CHART_NAME }}:latest"
 
-  #  SLSA provenance 
   provenance:
     name: Generate SLSA provenance
     runs-on: ubuntu-latest
@@ -193,7 +186,7 @@ jobs:
       - name: Download chart artifact
         uses: actions/download-artifact@v4
         with:
-          name: ${{ needs.package.outputs.chart_basename }}
+          name: ${{ needs.package.outputs.filename }}
           path: /tmp/
 
       - name: Generate SLSA provenance