chore(ci): bump release-helm-chart.yaml action to fix signing issue

Author: aardbol

.github/workflows/release-app.yaml

@@ -62,11 +62,12 @@ jobs:
       needs.detect.outputs.skip == 'false' &&
       needs.build-image.result == 'success' &&
       (needs.e2e.result == 'success' || needs.e2e.result == 'skipped')
-    uses: upcloud-tools/gha-actions/.github/workflows/release-container.yaml@070918b27e20a6bd320cc93b569d912b1a227a6c
+    uses: upcloud-tools/gha-actions/.github/workflows/release-container.yaml@10904798a65e26c2fa67df45717698aec8b9e5ef
     with:
       app_version: ${{ needs.detect.outputs.app_version }}
     secrets: inherit
     permissions:
       contents: write
       packages: write
       id-token: write
+      attestations: write

.github/workflows/release-helm.yaml

@@ -47,7 +47,7 @@ jobs:
   release-helm:
     needs: [detect, e2e]
     if: ${{ always() && needs.detect.outputs.skip == 'false' && (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') }}
-    uses: upcloud-tools/gha-actions/.github/workflows/release-helm-chart.yaml@070918b27e20a6bd320cc93b569d912b1a227a6c
+    uses: upcloud-tools/gha-actions/.github/workflows/release-helm-chart.yaml@10904798a65e26c2fa67df45717698aec8b9e5ef
     with:
       chart_version: ${{ needs.detect.outputs.chart_version }}
     secrets: inherit

Makefile

@@ -197,7 +197,7 @@ helm-release-notes:
 		'/^## \['$(HELM_CHART_VERSION)'\]/ { flag = 1; next } \
 		/^## \[/ { if ( flag ) { exit; } } \
 		flag { if ( n ) { print prev; } n++; prev = $$0 }' \
-		deploy/helm/CHANGELOG.md
+		$(HELM_CHART_DIR)/CHANGELOG.md
 
 HELM_CHART_DIR = deploy/helm