sync: Release candidate v0.38.0 #6680

vikramdevtron · 2025-06-19T09:50:26Z

Description

Fixes #

Checklist:

The title of the PR states what changed and the related issues number (used for the release note).
Does this PR requires documentation updates?
I've updated documentation as required by this PR.
I have performed a self-review of my own code.
I have commented my code, particularly in hard-to-understand areas.
I have tested it for all user roles.
I have added all the required unit/api test cases.

Does this PR introduce a user-facing change?

# Conflicts: # go.mod # go.sum # vendor/github.com/devtron-labs/common-lib/utils/k8s/K8sUtil.go # vendor/modules.txt

# Conflicts: # go.mod # go.sum # vendor/modules.txt

sync: Develop main sync

fix: incorrect data for git trigger history at app detail page

sync: Develop main sync

* removed hardcoded dependencies * k8s upgrade * helm and argo upgrade * helm and argo upgrade * golang.org/x/net upgrade * golang.org/x/net upgrade * DeleteProject gitlab client changes * common-lib sync * common lib sync * common-lib sync

fix: panic handling on cd trigger

# Conflicts: # env_gen.json # go.mod # go.sum # pkg/delete/DeleteService.go # vendor/modules.txt

# Conflicts: # go.mod # go.sum # vendor/modules.txt

…n-oss chore: when a cluster event occurs, create config map instead of secret

* refact * app count events * app count events * app count events * app count events * query fix * policies included * wip * query fix posthog query * removed extra dockerFile count queries * fix * fix

* fix: gitops provider multiple save error * updated const ArgoRepoSyncDelayErr as per new ArgoCd update * fix: unable resolve 'HEAD' to a commit SHA * fix: git clone issue for empty repository * fix: ambiguous argument 'origin/HEAD': unknown revision or path not in the working tree. * fix: SSH known host confirmation issue on cloning * chore: updated default value of ARGO_REPO_REGISTER_RETRY_COUNT * chore: incorporated review comments * chore: removed dead code * chore: minor refactorings * chore: added integration test cases * fix: added handling for argocd older versions

* panic fixes (#6657) * fix-cd-pipeline-check (#6658) * vendor update on develop --------- Co-authored-by: Shivam Nagar <[email protected]>

* panic fixes (#6657) * fix-cd-pipeline-check (#6658) * release: PR for v1.7.0 (#6667) * Updated release-notes files * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * removed init-container from git-sensor (#6605) Co-authored-by: Badal Kumar Prusty <[email protected]> * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * feat: added support for loadBalancerIP (#6617) * added support for loadBalancerIP * removed default value for loadBalancerIP --------- Co-authored-by: Badal Kumar Prusty <[email protected]> * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * set fsGroup to allow non-root app to write to PVC (#6664) Co-authored-by: Badal Kumar Prusty <[email protected]> * misc: Shifted the dbConfigs under global (#6621) * Shifted the dbConfigs under global * updated the configurations for external database support * handled casbin migration case for database name * added support for custom annotations for ci-runner cd-runner and devtron * switched the conditioning to handle devtron-bom.yaml * removed check of values.global from postgresql.yaml * Updated kubewatch to a4fc9044-419-33852 tag in values file * Updated kubelink to a4fc9044-564-33855 tag in values file * Updated devtron to c8e75fb-434-33854 tag in values file * added support for nfs (#6665) Co-authored-by: Badal Kumar Prusty <[email protected]> * Updated lens to a4fc9044-333-33874 tag in values file * Updated git-sensor to a4fc9044-200-33872 tag in values file * Updated dashboard to a85f2624-690-33873 tag in values file * Updated ci-runner to a4fc9044-138-33875 tag in values file * Updated notifier to 19d654ff-372-33876 tag in values file * Updated image-scanner to a4fc9044-141-33877 tag in values file * Updated chart-sync to a4fc9044-836-33878 tag in values file * Updated hyperion to c8e75fb-280-33879 tag in values file * Updated the nfs condition * Updated the version in scripts * updated release-notes file * Updated releasenotes.md * Updated release-notes-v1.7.0.md * finalized releasenotes --------- Co-authored-by: Badal Kumar <[email protected]> Co-authored-by: Badal Kumar Prusty <[email protected]> Co-authored-by: akshatsinha007 <[email protected]> Co-authored-by: akshatsinha007 <[email protected]> * vendor update on rc --------- Co-authored-by: Shivam Nagar <[email protected]> Co-authored-by: systemsdt <[email protected]> Co-authored-by: Badal Kumar <[email protected]> Co-authored-by: Badal Kumar Prusty <[email protected]> Co-authored-by: akshatsinha007 <[email protected]> Co-authored-by: akshatsinha007 <[email protected]>

gitguardian · 2025-06-19T09:50:38Z

⚠️ GitGuardian has uncovered 2 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request

GitGuardian id	GitGuardian status	Secret	Commit	Filename
2763127	Triggered	Generic High Entropy Secret	`c1038ba`	scripts/devtron-reference-helm-charts/gpu-workload-4-21-0/secrets-test-values.yaml	View secret
141558	Triggered	Generic High Entropy Secret	`c1038ba`	scripts/devtron-reference-helm-charts/gpu-workload-4-21-0/env-values.yaml	View secret

🛠 Guidelines to remediate hardcoded secrets

Understand the implications of revoking this secret by investigating where it is used in your code.
Replace and store your secrets safely. Learn here the best practices.
Revoke and rotate these secrets.
If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider

following these best practices for managing and storing secrets including API keys and other credentials
install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.

^{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}

sonarqubecloud · 2025-06-19T09:54:20Z

Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

prakash100198 and others added 30 commits May 22, 2025 17:38

create cm in case of cluster event instead of secret

b275a2c

bump cpmmon lib

1ea23e3

Merge branch 'develop' into create-cm-on-cluster-action-oss

5977a88

# Conflicts: # go.mod # go.sum # vendor/github.com/devtron-labs/common-lib/utils/k8s/K8sUtil.go # vendor/modules.txt

bump common lib

2ba594e

bump common lib

3d992e9

fix

1283179

k8s supported label label

7fa7e39

small fix

8237884

bump common lib

976f93b

Merge branch 'develop' into create-cm-on-cluster-action-oss

2d09f1f

# Conflicts: # go.mod # go.sum # vendor/modules.txt

bump common lib

bb12ab9

Merge branch 'develop' into create-cm-on-cluster-action-oss

60012ce

bump

f159e78

code review level 2

9a085b5

added missing dependency (#6634)

20ab433

Merge branch 'main' into develop-main-sync-3jun-1

5fc7dfb

Merge pull request #6638 from devtron-labs/develop-main-sync-3jun-1

17d7fde

sync: Develop main sync

fix

1ad680a

Merge branch 'develop' into app-detail-git-history-fix

4102525

Merge pull request #6639 from devtron-labs/app-detail-git-history-fix

31ff60e

fix: incorrect data for git trigger history at app detail page

Merge branch 'main' into develop-main-sync-4jun-1

c11e97d

updates hash

acc4631

Merge pull request #6648 from devtron-labs/develop-main-sync-4jun-1

dde8a4a

sync: Develop main sync

fixed waiting to start status in deployemnt (#6649)

5ae1b1e

fix: Dependency upgrades (#6622)

4efb10c

* removed hardcoded dependencies * k8s upgrade * helm and argo upgrade * helm and argo upgrade * golang.org/x/net upgrade * golang.org/x/net upgrade * DeleteProject gitlab client changes * common-lib sync * common lib sync * common-lib sync

Merge pull request #6651 from devtron-labs/fix-panic-cd-trigger

9f5bdbd

fix: panic handling on cd trigger

Merge branch 'main' into create-cm-on-cluster-action-oss

6e196cb

# Conflicts: # env_gen.json # go.mod # go.sum # pkg/delete/DeleteService.go # vendor/modules.txt

main merge

85c29e5

Merge branch 'develop' into create-cm-on-cluster-action-oss

a667752

# Conflicts: # go.mod # go.sum # vendor/modules.txt

make

c0a4705

prakash100198 and others added 8 commits June 10, 2025 14:03

Merge pull request #6607 from devtron-labs/create-cm-on-cluster-actio…

c1038ba

…n-oss chore: when a cluster event occurs, create config map instead of secret

fix: Posthog events added (#6640)

f4d311e

* refact * app count events * app count events * app count events * app count events * query fix * policies included * wip * query fix posthog query * removed extra dockerFile count queries * fix * fix

sync: Main sync develop (#6669)

c5151b4

* panic fixes (#6657) * fix-cd-pipeline-check (#6658) * vendor update on develop --------- Co-authored-by: Shivam Nagar <[email protected]>

vendor update on rc 38 (#6671)

caac185

added empty migration seq (#6672)

2a6b060

fix down script for gp workload (#6678)

969281d

vikramdevtron requested review from nishant-d, pawan-mehta-dt, prakarsh-dt and vivek-devtron as code owners June 19, 2025 09:50

github-actions bot added the PR:Ready-to-Review label Jun 19, 2025

vivek-devtron approved these changes Jun 19, 2025

View reviewed changes

prakarsh-dt approved these changes Jun 19, 2025

View reviewed changes

vikramdevtron merged commit 268c1e4 into main Jun 19, 2025
10 of 11 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

sync: Release candidate v0.38.0 #6680

sync: Release candidate v0.38.0 #6680

Uh oh!

vikramdevtron commented Jun 19, 2025

Uh oh!

gitguardian bot commented Jun 19, 2025

Uh oh!

sonarqubecloud bot commented Jun 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

sync: Release candidate v0.38.0 #6680

sync: Release candidate v0.38.0 #6680

Uh oh!

Conversation

vikramdevtron commented Jun 19, 2025

Description

Checklist:

Does this PR introduce a user-facing change?

Uh oh!

gitguardian bot commented Jun 19, 2025

⚠️ GitGuardian has uncovered 2 secrets following the scan of your pull request.

Uh oh!

sonarqubecloud bot commented Jun 19, 2025

Quality Gate failed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants