build: bump appVersion in Helm chart on release

Author: joshiste

.github/workflows/ci.yml

@@ -163,16 +163,6 @@ jobs:
             VERSION=${{ steps.meta.outputs.version }}
             REVISION=${{ github.sha }}
 
-      - name: Trigger test environment updates
-        run: |
-          curl -L \
-          -X POST \
-          -H "Accept: application/vnd.github+json" \
-          -H "Authorization: Bearer ${{secrets.PAT_TOKEN_EXTENSION_DEPLOYER}}" \
-          -H "X-GitHub-Api-Version: 2022-11-28" \
-          https://api.github.com/repos/steadybit/extension-deployer/actions/workflows/extension-restart.yml/dispatches \
-          -d '{"ref":"main","inputs":{"extension":"${{ github.repository }}","version":"${{ steps.meta.outputs.version }}","revision":"${{ github.sha }}"}}'
-
   snyk-test:
     name: "Snyk Test ${{ startsWith(github.ref, 'refs/tags/') && '- If this breaks for CVEs, you need to revoke the published image (and move latest tag)!' || '' }}"
     uses: steadybit/extension-kit/.github/workflows/reusable-snyk-scan.yml@main
@@ -182,7 +172,6 @@ jobs:
       container_image: ghcr.io/${{ github.repository }}:latest
     secrets:
       SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      VERSION_BUMPER_SECRET: ${{ secrets.GH_APP_STEADYBIT_PRIVATE_KEY }}
 
   snyk-monitor:
     name: "[Release] Snyk Monitor latest"
@@ -195,7 +184,6 @@ jobs:
       target_ref: latest
     secrets:
       SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      VERSION_BUMPER_SECRET: ${{ secrets.GH_APP_STEADYBIT_PRIVATE_KEY }}
 
   build-packages:
     name: Build Linux Packages
@@ -260,8 +248,7 @@ jobs:
   test-helm-charts:
     name: "Test Helm Charts"
     runs-on: ubuntu-latest
-    needs:
-      - audit
+    needs: [audit]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -294,11 +281,40 @@ jobs:
       - name: Run chart-testing (lint)
         run: ct lint --config chartTesting.yaml
 
+  bump-chart-version:
+    name: Bump Chart Patch Version on main branch
+    needs: [build-images]
+    if: needs.build-images.outputs.version_bump_available && startsWith(github.ref, 'refs/tags/')
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.GH_APP_STEADYBIT_APP_ID }}
+          private-key: ${{ secrets.GH_APP_STEADYBIT_PRIVATE_KEY }}
+
+      - uses: actions/checkout@v4
+        with:
+          ref: main
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+
+      # this commit will effectively cause another run of the workflow which then actually performs the helm chart release
+      - run: |
+          npm install -g semver
+          make chart-bump-version APP_VERSION="${{ needs.build-images.outputs.version }}"
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "[email protected]"
+          git commit -am "chore: update helm chart version"
+          git push
+
   release-helm-chart:
     name: "Release Helm Chart"
     runs-on: ubuntu-latest
-    needs:
-      - test-helm-charts
+    needs: [test-helm-charts]
     if: github.ref == 'refs/heads/main'
 
     permissions:
@@ -328,5 +344,22 @@ jobs:
         uses: helm/[email protected]
         with:
           charts_dir: charts
+          mark_as_latest: false
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+
+  trigger-test-environment-updates:
+    name: Trigger test environment updates
+    if: needs.build-images.outputs.deployer_available
+    needs: [build-images]
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - run: |
+          curl -L \
+          -X POST \
+          -H "Accept: application/vnd.github+json" \
+          -H "Authorization: Bearer ${{secrets.PAT_TOKEN_EXTENSION_DEPLOYER}}" \
+          -H "X-GitHub-Api-Version: 2022-11-28" \
+          https://api.github.com/repos/steadybit/extension-deployer/actions/workflows/extension-restart.yml/dispatches \
+          -d '{"ref":"main","inputs":{"extension":"${{ github.repository }}","version":"${{ needs.build-images.outputs.version }}","revision":"${{ github.sha }}"}}'