Support for HelmRelease

[hendrikhalkow]

Helm charts contain references to OCI images and to other Helm charts that Dependabot should keep up to date.

Dependabot should also support the HelmRelease custom resource, defined by the Flux Helm Operator. With this feature, Dependabot can be used as a deployment tool, similar to Weave Cloud.

[jurre]

Hi @hendrikhalkow, I like the idea of supporting Helm. Currently the team is pretty busy with integrating Dependabot into GitHub natively, so it will be a while before we are able to add support for more ecosystems.

[hazcod]

Duplicate of #2237 FYI

[hendrikhalkow]

This is not a duplicate. While #2237 is about dependencies from one Helm chart to another, this one is about a dependency from a HelmRelease custom resource to a Helm chart.

[estahn]

I would like to see the same for ArgoCD. The Application resource can reference Helm charts.

[jeffwidman]

Since the original issue mentions OCI images, I should mention for anyone hitting this via Google that Dependabot now supports bumping OCI images / dockerfile references in Helm charts:

• Add support for bumping docker container versions referenced from within Helm files #5738

[zs-dima]

Any updates are welcome

[onedr0p]

@zs-dima look into using renovate which has this support and more.