chore(deps): update commitlint/commitlint docker tag to v21.2.0 (#169)

This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [commitlint/commitlint](https://github.com/conventional-changelog/commitlint) | container | minor | `21.1.0` → `21.2.0` | `21.2.1` |

---

### Release Notes

<details>
<summary>conventional-changelog/commitlint (commitlint/commitlint)</summary>

### [`v21.2.0`](https://github.com/conventional-changelog/commitlint/blob/HEAD/CHANGELOG.md#2120-2026-06-30)

[Compare Source](https://github.com/conventional-changelog/commitlint/compare/v21.1.0...v21.2.0)

##### Features

- **resolve-extends:** resolve pure-ESM presets (conventional-changelog v7/v9/v10) ([#&#8203;4859](https://github.com/conventional-changelog/commitlint/issues/4859)) ([fdb566f](fdb566fe59))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Only on Sunday and Saturday (`* * * * 0,6`)
- Automerge
  - Between 12:00 AM and 03:59 AM (`* 0-3 * * *`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTEuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE5MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJraW5kL2RlcGVuZGVuY3kiXX0=-->Reviewed-on: https://gitea.com/gitea/helm-actions/pulls/169
Reviewed-by: DaanSelen <135789+daanselen@noreply.gitea.com>
Co-authored-by: Renovate Bot <renovate-bot@gitea.com>

.gitea/workflows/commitlint.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   check-and-test:
     runs-on: ubuntu-latest
-    container: commitlint/commitlint:21.1.0
+    container: commitlint/commitlint:21.2.0
     steps:
       - uses: actions/checkout@v7
       - name: check PR title

README.md

@@ -29,6 +29,16 @@ Deploy with your values, make sure the path is correct:
 helm upgrade --install gitea-actions gitea-charts/actions -f values.yaml
 ```
 
+Alternatively:
+
+```sh
+helm upgrade --install gitea-actions gitea-charts/actions \
+  --set enabled=true \
+  --set giteaRootURL=https://gitea.com \
+  --set existingSecret=foo \
+  --set existingSecretKey=bar
+```
+
 You should be good to go!
 
 ### Runner Token Secret Template
@@ -75,7 +85,7 @@ If `.Values.statefulset.dind.rootless: true` is set, then the following will be
 | `statefulset.persistence.size`         | Size for persistence to store Gitea Runner data                                                                                                 | `1Gi`                          |
 | `statefulset.runner.registry`          | image registry, e.g. gcr.io,docker.io                                                                                                           | `docker.gitea.com`             |
 | `statefulset.runner.repository`        | The Gitea Runner image                                                                                                                          | `runner`                       |
-| `statefulset.runner.tag`               | The Gitea Runner tag                                                                                                                            | `1.0.6`                        |
+| `statefulset.runner.tag`               | The Gitea Runner tag                                                                                                                            | `2.0.1`                        |
 | `statefulset.runner.digest`            | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`                                      | `""`                           |
 | `statefulset.runner.pullPolicy`        | The Gitea Runner pullPolicy                                                                                                                     | `IfNotPresent`                 |
 | `statefulset.runner.fullOverride`      | Completely overrides the image registry, path/image, tag and digest.                                                                            | `""`                           |
@@ -98,13 +108,15 @@ If `.Values.statefulset.dind.rootless: true` is set, then the following will be
 ### Gitea Actions Init
 
 | Name                                | Description                                                                                                | Value          |
-| ------------------------- | ---------------------------------------------------------------------------------------------------------- | -------------- |
-| `init.image.registry`     | image registry, e.g. gcr.io,docker.io                                                                      | `""`           |
-| `init.image.repository`   | The init image                                                                                             | `busybox`      |
-| `init.image.tag`          | the init image tag                                                                                         | `1.38.0`       |
+| ----------------------------------- | ---------------------------------------------------------------------------------------------------------- | -------------- |
+| `init.image.registry`               | Image registry, e.g. gcr.io,docker.io                                                                      | `""`           |
+| `init.image.repository`             | The init image (default: busyboxy but can be changed to alpine e.g.)                                       | `busybox`      |
+| `init.image.tag`                    | The init image tag                                                                                         | `1.38.0`       |
 | `init.image.digest`                 | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""`           |
 | `init.image.pullPolicy`             | The init image pullPolicy                                                                                  | `IfNotPresent` |
-| `init.image.fullOverride` | Completely overrides the image registry, path/image, tag and digest.                                       | `""`           |
+| `init.image.fullOverride`           | Completely overrides the image registry, path/image, tag and digest                                        | `""`           |
+| `init.connectionCommandOverride`    | Possiblity to change the command with which the container tests its connection to the Gitea server         | `""`           |
+| `init.preConnectionCommandOverride` | Possibility to add commands that happen before the connection test loop                                    | `""`           |
 
 ### Runner Token Secret Configuration
 

docs/README.md

@@ -1,3 +1,3 @@
 # Gitea Actions Helm Chart Docs
 
-- [Share dind with job container](share-dind-with-job-container.md)
+- [connectionCommandOverride explanation](./connectionCommandOverride.md)

docs/actions-dev.md

@@ -1,31 +0,0 @@
-# Gitea Actions
-
-In order to use the Gitea Actions act-runner you must either:
-
-- enable persistence (used for automatic deployment to be able to store the token in a place accessible for the Job)
-- create a secret containing the act runner token and reference it as a `existingSecret`
-
-In order to use Gitea Actions, you must log on the server that's running Gitea and run the command:
-    `gitea actions generate-runner-token`
-
-This command will out a token that is needed by the act-runner to register with the Gitea backend.
-
-Because this is a manual operation, we automated this using a Kubernetes Job using the following containers:
-
-1) `actions-token-create`: it uses the current `gitea-rootless` image, mounts the persistent directory to `/data/` then it saves the output from `gitea actions generate-runner-token` to `/data/actions/token`
-2) `actions-token-upload`: it uses a `bitnami/kubectl` image, mounts the scripts directory (`/scripts`) and
-the persistent directory (`/data/`), and using the script from `/scripts/token.sh` stores the token in a Kubernetes secret
-
-After the token is stored in a Kubernetes secret we can create the statefulset that contains the following containers:
-
-1) `act-runner`: authenticates with Gitea using the token that was stored in the secret
-2) `dind`: DockerInDocker image that is used to run the actions
-
-If you are not using persistent volumes, you cannot use the Job to automatically generate the token.
-In this case, you can use either the Web UI to generate the token or run a shell into a Gitea pod and invoke
-the command `gitea actions generate-runner-token`. After generating the token, you must create a secret and use it via:
-
-```yaml
-existingSecret: "secret-name"
-existingSecretKey: "secret-key"
-```

docs/connectionCommandOverride.md

@@ -0,0 +1,48 @@
+# Using a custom connectionCommand
+
+By default, before the container starts it tries to reach the given giteaRootURL.  
+Normally this is done by the busybox image using the wget binary.  
+
+However, due to [Issue #162](https://gitea.com/gitea/helm-actions/issues/162) there has been a change made where we can customize that command.  
+
+Using the `values.yaml` file by default it calls `wget --spider --no-check-certificate <your giteaRootURL>` with a timeout of 10 seconds.  
+But with a custom init section like detailed below we can make our check compliant with whatever certificate you have.  
+
+Assuming:
+```yaml
+enabled: true
+giteaRootURL: https://gitea.com
+existingSecret: foo
+existingSecretKey: bar
+
+init:
+  image:
+    registry: ""
+    repository: alpine
+    # Overrides the image tag whose default is the chart appVersion.
+    tag: "3.24"
+    digest: ""
+    pullPolicy: IfNotPresent
+    fullOverride: ""
+
+  connectionCommandOverride: "curl -I"
+  preConnectionCommandOverride: "apk add curl"
+```
+
+This now creates the following template section:
+
+```yaml
+        - name: init-gitea
+          image: "alpine:latest"
+          command:
+            - sh
+            - -c
+            - |
+              apk add curl
+              echo 'Trying to reach Gitea on https://gitea.com'
+              until timeout 10 curl -I https://gitea.com; do
+                sleep 3
+                echo "Trying again in 3 seconds..."
+              done
+              echo "Gitea has been reached!"
+```

docs/share-dind-with-job-container.md

@@ -1,30 +0,0 @@
-# Share dind with job container
-
-You can weaken isolation and allow jobs to call docker commands.
-
-## Limitations
-
--
-
-## Example Values
-
-```yaml
-    config: |
-      log:
-        level: debug
-      cache:
-        enabled: false
-      container:
-        require_docker: true
-        docker_timeout: 300s
-
-## Specify an existing token secret
-##
-existingSecret: "runner-token2"
-existingSecretKey: "token"
-
-## Specify the root URL of the Gitea instance
-giteaRootURL: "http://192.168.1.2:3000"
-```
-
-Now you can run docker commands inside your jobs.

pnpm-lock.yaml

@@ -47,8 +47,8 @@ packages:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
 
-  brace-expansion@1.1.15:
-    resolution: {integrity: sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==}
+  brace-expansion@1.1.16:
+    resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}
 
   brace-expansion@5.0.7:
     resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
@@ -175,8 +175,8 @@ packages:
     resolution: {integrity: sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==}
     hasBin: true
 
-  linkify-it@5.0.1:
-    resolution: {integrity: sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==}
+  linkify-it@5.0.2:
+    resolution: {integrity: sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==}
 
   lodash@4.18.1:
     resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
@@ -298,8 +298,8 @@ packages:
     resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
     engines: {node: '>=0.10.0'}
 
-  picomatch@4.0.4:
-    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
+  picomatch@4.0.5:
+    resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
     engines: {node: '>=12'}
 
   punycode.js@2.3.1:
@@ -373,7 +373,7 @@ snapshots:
 
   balanced-match@4.0.4: {}
 
-  brace-expansion@1.1.15:
+  brace-expansion@1.1.16:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
@@ -421,9 +421,9 @@ snapshots:
 
   entities@4.5.0: {}
 
-  fdir@6.5.0(picomatch@4.0.4):
+  fdir@6.5.0(picomatch@4.0.5):
     optionalDependencies:
-      picomatch: 4.0.4
+      picomatch: 4.0.5
 
   fs.realpath@1.0.0: {}
 
@@ -472,7 +472,7 @@ snapshots:
     dependencies:
       commander: 8.3.0
 
-  linkify-it@5.0.1:
+  linkify-it@5.0.2:
     dependencies:
       uc.micro: 2.1.0
 
@@ -482,7 +482,7 @@ snapshots:
     dependencies:
       argparse: 2.0.1
       entities: 4.5.0
-      linkify-it: 5.0.1
+      linkify-it: 5.0.2
       mdurl: 2.0.0
       punycode.js: 2.3.1
       uc.micro: 2.1.0
@@ -702,7 +702,7 @@ snapshots:
 
   minimatch@3.1.5:
     dependencies:
-      brace-expansion: 1.1.15
+      brace-expansion: 1.1.16
 
   minimist@1.2.8: {}
 
@@ -724,7 +724,7 @@ snapshots:
 
   path-is-absolute@1.0.1: {}
 
-  picomatch@4.0.4: {}
+  picomatch@4.0.5: {}
 
   punycode.js@2.3.1: {}
 
@@ -752,8 +752,8 @@ snapshots:
 
   tinyglobby@0.2.17:
     dependencies:
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
+      fdir: 6.5.0(picomatch@4.0.5)
+      picomatch: 4.0.5
 
   uc.micro@2.1.0: {}
 

templates/statefulset.yaml

@@ -66,14 +66,21 @@ spec:
             - mountPath: /data
               name: data-runner
         {{- end }}
-        - name: init-gitea
+        - name: reach-gitea
           image: "{{ include "gitea.actions.init.image" . }}"
           command:
             - sh
             - -c
             - |
+              {{- if .Values.init.preConnectionCommandOverride }}
+              {{ .Values.init.preConnectionCommandOverride }}
+              {{- end }}
               echo 'Trying to reach Gitea on {{ include "gitea.actions.local_root_url" . }}'
+              {{- if .Values.init.connectionCommandOverride }}
+              until timeout 10 {{ .Values.init.connectionCommandOverride }} {{ include "gitea.actions.local_root_url" . }}; do
+              {{- else }}
               until timeout 10 wget --no-check-certificate --spider {{ include "gitea.actions.local_root_url" . }}; do
+              {{- end }}
                 sleep 3
                 echo "Trying again in 3 seconds..."
               done

values.yaml

@@ -71,7 +71,7 @@ statefulset:
   runner:
     registry: "docker.gitea.com"
     repository: runner
-    tag: 1.0.6
+    tag: 2.0.1
     digest: ""
     pullPolicy: IfNotPresent
     fullOverride: ""
@@ -121,12 +121,15 @@ statefulset:
 
 ## @section Gitea Actions Init
 #
-## @param init.image.registry image registry, e.g. gcr.io,docker.io
-## @param init.image.repository The init image
-## @param init.image.tag the init image tag
+## @param init.image.registry Image registry, e.g. gcr.io,docker.io
+## @param init.image.repository The init image (default: busyboxy but can be changed to alpine e.g.)
+## @param init.image.tag The init image tag
 ## @param init.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
 ## @param init.image.pullPolicy The init image pullPolicy
-## @param init.image.fullOverride Completely overrides the image registry, path/image, tag and digest.
+## @param init.image.fullOverride Completely overrides the image registry, path/image, tag and digest
+#
+## @param init.connectionCommandOverride Possiblity to change the command with which the container tests its connection to the Gitea server
+## @param init.preConnectionCommandOverride Possibility to add commands that happen before the connection test loop
 init:
   image:
     registry: ""
@@ -137,6 +140,9 @@ init:
     pullPolicy: IfNotPresent
     fullOverride: ""
 
+  connectionCommandOverride: ""
+  preConnectionCommandOverride: ""
+
 ## @section Runner Token Secret Configuration
 #
 ## @param existingSecret Secret that contains the token