Both app and Helm chart releases are triggered automatically by pushing to main.
Bumping appVersion in deploy/helm/Chart.yaml triggers the Build and Release workflow:
- Bump
appVersionindeploy/helm/Chart.yaml - Add the release entry to root
CHANGELOG.md - Push/merge to
main
The workflow automatically:
- Builds the container image (commit SHA tag)
- Copies it to the version tag and
latestviaoras copy(server-side, zero transfer) - Signs the image with cosign keyless signing
- Extracts release notes from
CHANGELOG.md - Creates a draft GitHub release
- Tags the commit and pushes the tag
- Verify the release notes
- Publish the draft
Bumping version in deploy/helm/Chart.yaml triggers the Release Helm chart workflow:
- Update
versionindeploy/helm/Chart.yaml - Update
deploy/helm/CHANGELOG.mdand theartifacthub.io/changesannotation - Push/merge to
main
The workflow automatically packages the chart, pushes it to the OCI registry, pushes Artifact Hub metadata, and creates a helm-v<version> GitHub release.