This is an automated email from the ASF dual-hosted git repository.
snazy pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/polaris.git
The following commit(s) were added to refs/heads/main by this push:
new 26c56ee3c Releasy: prepare for Helm 4 (helm package repro) (#3088)
26c56ee3c is described below
commit 26c56ee3cf76695d9d82babcb7d6bbdb6be0a0c3
Author: Robert Stupp <[email protected]>
AuthorDate: Wed Nov 26 17:10:13 2025 +0100
Releasy: prepare for Helm 4 (helm package repro) (#3088)
Part of #3086
---
.github/workflows/release-3-build-and-publish-artifacts.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/.github/workflows/release-3-build-and-publish-artifacts.yml
b/.github/workflows/release-3-build-and-publish-artifacts.yml
index f86c4df33..c8e774745 100644
--- a/.github/workflows/release-3-build-and-publish-artifacts.yml
+++ b/.github/workflows/release-3-build-and-publish-artifacts.yml
@@ -358,6 +358,9 @@ jobs:
gpg --batch --pinentry-mode loopback --export > /tmp/pubring.gpg
exec_process cd helm
+ # Prerequisite for reproducible helm packages: file modification
time must be deterministic
+ # Works with helm since version 4.0.0
+ exec_process find polaris -exec touch -d "1980-01-01 00:00:00" {} +
exec_process helm package polaris --sign --key "." --keyring
/tmp/secring.gpg --passphrase-file /tmp/passphrase
exec_process helm verify polaris-${version_without_rc}.tgz --keyring
/tmp/pubring.gpg
