[ptrvsrg]

Description

Bump k8s dependencies versions.

Type of change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would change existing behavior)
• Documentation or chore

Related issues

Fixes -

Checklist

General (see CONTRIBUTING.md for details):

• Code style: make verify/fmt, make verify/vet, and make verify/lint pass (or make verify/all for the full static set).
• Dependencies/tools: run make deps/all when you first set up or when tool versions change.
• Tests: make test/unit (and make test/unit-race if you touch concurrency-sensitive code); add or update tests for behavior changes.
• License headers: make verify/license-header passes for touched source files.
• DCO: commits include a sign-off (git commit -s).
• Docs: user-facing behavior is reflected in docs/ or chart READMEs where needed.

Scope-specific (run what applies to your change):

• Helm (charts/**): bump version in each affected chart’s Chart.yaml; make -C charts lint/all and make -C charts test/all pass.
• Docs site (docs/**): make -C docs dev/build succeeds after yarn install (see docs/README.md).
• GitHub Actions (.github/workflows/** or .github/Makefile): make -C .github verify/actionlint passes.
• GoReleaser (.goreleaser.yaml): goreleaser check passes (install via go install github.com/goreleaser/goreleaser/v2@<version> or use the version pinned in ci-dev-golang.yml).

[github-actions]

E2E workflow has been started.

Workflow run: https://github.com/ptrvsrg/csi-driver-ipfs/actions/runs/27123057040

[github-actions]

E2E workflow has been started.

Workflow run: https://github.com/ptrvsrg/csi-driver-ipfs/actions/runs/27123611923

[github-actions]

Security workflow has been started.

Workflow run: https://github.com/ptrvsrg/csi-driver-ipfs/actions/runs/27123877711

[github-actions]

Security workflow has been started.

Workflow run: https://github.com/ptrvsrg/csi-driver-ipfs/actions/runs/27124788801

[github-actions]

E2E workflow has been started.

Workflow run: https://github.com/ptrvsrg/csi-driver-ipfs/actions/runs/27124793760

[Copilot]

Pull request overview

This PR updates the repo’s Kubernetes-adjacent dependencies and supporting build/CI/tooling around the driver, Helm charts, and E2E/security pipelines (including newer Go/tool versions, refreshed rendered manifests, and a new “build Kubo with patches” flow).

Changes:

• Bump Go/tool/dependency versions (Go modules, e2e Ginkgo, security tools) and adjust build metadata/version variables.
• Update Helm charts/manifests (chart versions, IPFS/Kubo + cluster versions, securityContext/probes, node DaemonSet mounts).
• Rework CI workflows for security + e2e label-triggered runs and add Kubo build/publish steps; update docs toolchain to Yarn 4/Corepack.

Reviewed changes

Copilot reviewed 26 out of 29 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
test/e2e/Makefile	Bumps Ginkgo version used by e2e tooling.
test/e2e/go.mod	Updates Go version + indirect dependency versions for e2e module.
test/e2e/go.sum	Refreshes e2e module checksums after dependency bumps.
Makefile	Pins tool versions, adds Kubo build targets, renames build targets, changes version/date variables, updates scanner install commands.
go.mod	Updates root module Go version.
go.sum	Refreshes root module checksums after dependency changes.
docs/package.json	Bumps React, adds overrides/resolutions, pins Yarn via packageManager.
docs/Makefile	Switches docs audit command to Yarn’s npm audit.
docs/.yarnrc.yml	Adds Yarn configuration (node-modules linker, scripts enabled, repo allowlist).
docs/.gitignore	Ignores Yarn directory.
Dockerfile	Updates Go/Kubo args, removes mod cache mount, switches to pinned GHCR Kubo build output stage.
deploy/k8s/v0.2.0/ipfs-cluster.yaml	Adds refreshed rendered ipfs-cluster manifest for v0.2.0.
deploy/k8s/v0.2.0/csi-driver-ipfs.yaml	Adds refreshed rendered csi-driver manifest for v0.2.0.
deploy/k8s/v0.1.0/csi-driver-ipfs.yaml	Normalizes priorityClassName rendering to empty string.
charts/ipfs-cluster/values.yaml	Bumps Kubo + ipfs-cluster image tags.
charts/ipfs-cluster/templates/statefulset.yaml	Adjusts Kubo capabilities and probe execution user/command.
charts/ipfs-cluster/tests/statefulset_test.yaml	Adds tests to assert required capabilities and probe commands.
charts/ipfs-cluster/Chart.yaml	Bumps chart version to 0.2.0.
charts/csi-driver-ipfs/templates/csi-ipfs-node.yaml	Mounts kubelet plugins directory into node container.
charts/csi-driver-ipfs/tests/node_test.yaml	Adds chart test for kubelet plugins directory mount.
charts/csi-driver-ipfs/Chart.yaml	Bumps chart/app versions to 0.2.0.
3p/ipfs/kubo/README.md	Documents local patch set rationale.
3p/ipfs/kubo/patches/v0.41.0/00-go-mod.patch	Patches upstream Kubo go.mod Go version.
3p/ipfs/kubo/Dockerfile	Adds build recipe to clone upstream Kubo and apply local patches.
.github/workflows/security.yml	Reworks security workflow to be label-triggered, adds wait-for-image + label result handling.
.github/workflows/e2e.yml	Reworks e2e workflow to be label-triggered and to wait for dev image.
.github/workflows/ci-dev-golang.yml	Adds Kubo image build/push step and passes Kubo tag into driver image build.
.github/workflows/ci-dev-docs.yml	Switches to Corepack + pinned Yarn for docs build.

Comments suppressed due to low confidence (1)

Makefile:251

• build/driver/docker-buildx claims to “Build and push” but the command doesn’t specify an output (--push/--load). With buildx this typically results in no image being produced (only cached), which is surprising for users.

.PHONY: build/driver/docker-buildx
build/driver/docker-buildx: build/ipfs/docker-buildx ## Build and push multi-platform image; result in registry only (not in docker images).
	docker buildx build \
	--build-arg GOLANG_VERSION=$(GOLANG_VERSION) \
	--build-arg ALPINE_VERSION=$(ALPINE_VERSION) \
	--build-arg KUBO_VERSION=$(KUBO_IMAGE_VERSION) \
	--build-arg VERSION=$(VERSION) \
	--build-arg GIT_COMMIT=$(GIT_COMMIT) \
	--build-arg BUILD_DATE=$(BUILD_DATE) \
	--platform="linux/amd64,linux/arm64" \
	--network=host \
	-t $(IMAGE_NAME):$(VERSION) \
	-t $(IMAGE_NAME):latest \
	.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.