Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Adam Reese <adam@reese.io>
(cherry picked from commit 3dbb1614)

ref: https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx



* Skip invalid chart versions when reading the repository index file or
  when programmatically adding a chart version.
* Adds semver validation and strips non-printable characters and
  normalizes spaces for string fields in Metadata.Validate()
* Fixes a unit test that was pulling a remote repo.  Now uses a local
  repo.
* Fixes ignored error in repo update command
Signed-off-by: Adam Reese <adam@reese.io>
(cherry picked from commit 657ce552)

The recent addition of oci:// to specify dependencies in the
Chart.yaml dependencies and with helm pull missed handling for the
dependency build command. This command was failing to handle OCI.

This change adds support for the dep build command following the
same pattern used to add oci:// functionality.
Signed-off-by: Matt Farina <matt@mattfarina.com>
(cherry picked from commit 1135392b)

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

This is a follow-up to #8608. k8s.io/apiserver was added but
not added to the go.mod file. Go handled the situation cleanly
but left a dirty git tree.
Signed-off-by: Matt Farina <matt@mattfarina.com>

* Reduce linting severity for users of out-of-date kubernetes

Fixes #8596
Signed-off-by: Joe Julian <me@joejulian.name>

* add more verbose deprecation info
Signed-off-by: Joe Julian <me@joejulian.name>

* use new upstream deprecations
Signed-off-by: Joe Julian <me@joejulian.name>

* do not error for custom resources
Signed-off-by: Joe Julian <me@joejulian.name>

* Define deprecation version in lint rules by LDFLAG
Signed-off-by: Joe Julian <me@joejulian.name>

* make comment clearer
Signed-off-by: Joe Julian <me@joejulian.name>

* Extend the k8s version discovery and constants to chartutil
Signed-off-by: Joe Julian <me@joejulian.name>

* remove awk dependency
Signed-off-by: Joe Julian <me@joejulian.name>

* align k8s version constant names between capabilities.go and deprecations.go
Signed-off-by: Joe Julian <me@joejulian.name>

* show the error if the unexpected happens
Signed-off-by: Joe Julian <me@joejulian.name>

* bump k8sVersionMinor and golden chart templates for k8s 1.20
Signed-off-by: Joe Julian <me@joejulian.name>

* bump for tests to match 1.20.1
Signed-off-by: Joe Julian <me@joejulian.name>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

While the comments may seem to state the obvious to someone with helm CLI
experience, an SDK-first user may find these comments helpful.
Signed-off-by: Daniel Lipovetsky <dlipovetsky@d2iq.com>

Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>

feat: Allow helm test to run a subset of tests

helm upgrade with --wait support jobs in manifest to be completed

Fixed bug - The flags --cert-file/--key-file where ignored when --insecure-skip-tls-verify flag is set (#9070)

* fix: Fixed bug - The flags --cert-file/--key-file where ignored when --insecure-skip-tls-verify flag is set
Signed-off-by: Dinu Mathai <Dinu.Mathai1@T-Mobile.com>

* fix: Added unit test
Signed-off-by: Dinu Mathai <Dinu.Mathai1@T-Mobile.com>

* Replace Helm Hub with Artifact Hub
Signed-off-by: Scott Rigby <scott@r6by.com>

* Update link to new doc entry for Monocular compatible search API
Signed-off-by: Scott Rigby <scott@r6by.com>

* Add struct for Artifact Hub data, and return correct URL for both artifact hub instances and backwards compatibility for Monocular search API
Signed-off-by: Scott Rigby <scott@r6by.com>

* Keep default endpoint hub.helm.sh, so the helm org controls the domain. At least until artifacthub moves to CNCF incubation
Signed-off-by: Scott Rigby <scott@r6by.com>

Nil tables should not be reported as non-tables.
Signed-off-by: Marc Khouzam <marc.khouzam@montreal.ca>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Note, randInt is now a function in sprig so the failing test needed
to be updated to a function that does not exist.
Signed-off-by: Matt Farina <matt@mattfarina.com>

Updating to Kuberentes 1.20 packages

Signed-off-by: Matt Farina <matt@mattfarina.com>

Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/semver/compare/v3.1.0...v3.1.1

)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Builds with go 1.15

Bumps [github.com/Masterminds/squirrel](https://github.com/Masterminds/squirrel) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/Masterminds/squirrel/releases)
- [Commits](https://github.com/Masterminds/squirrel/compare/v1.4.0...v1.5.0

)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/lib/pq/releases)
- [Commits](https://github.com/lib/pq/compare/v1.8.0...v1.9.0

)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>

Additionally, revert `NewPull()` to its existing signature.
Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>

* Implement `helm dep update` for oci dependencies
* New unit tests
* Remove `helm chart pull` command
* New `helm pull` does not depend on registry cache
Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>

Adds the option kube-cafile and env variable HELM_KUBECAFILE for a overwrite of the certificate authority file
Signed-off-by: Lüchinger Dominic <dev@snowgarden.ch>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Note, klog is now set to v2. This is because k8s 1.19 uses klog v2.
v1.0.0, which was previously used, also had a bug in the flag
initialization which we were using. Helm was pulling klog v2.2.0
prior to this for use with k8s. Helm was using the wrong version
of the library to initialize the flags. Updating that fixes the
issues that could arise there.
Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Matt Farina <matt@mattfarina.com>

Signed-off-by: Chris Aniszczyk <caniszczyk@gmail.com>

Cleanup tempfiles introduced by unit tests under pkg/

fix: ingress path issue

Signed-off-by: Matt Farina <matt@mattfarina.com>