chore(release): 0.3.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  "helm": "0.2.0"
+  "helm": "0.3.0"
 }

.yamllint.yaml

@@ -7,6 +7,12 @@ rules:
     ## toYaml in Helm templates can produce indentation that yamllint considers incorrect
     ## but is actually valid YAML. 'whatever' allows both block and flow list styles.
     indent-sequences: whatever
+  brackets:
+    ## release-please rewrites helm/Chart.yaml with a style-preserving YAML
+    ## emitter that renders flow sequences as `[ "x" ]`. Tolerate that spacing
+    ## so the automated release PR is not blocked by a formatting-only diff.
+    min-spaces-inside: 0
+    max-spaces-inside: 1
   braces:
     forbid: non-empty
     min-spaces-inside: 0

helm/AGENTS.md

@@ -39,6 +39,7 @@ The Helm chart itself, packaged and published as `firebolt-instance` to `oci://g
 - **No secrets in `values.yaml`.** `postgresql.password` is required when `local_enabled: true` and is left empty in `values.yaml`. External-DB users should set `postgresql.credentials.existingSecret` instead.
 - **`shareProcessNamespace` + memlock sidecar.** When `engineSpec.memlockSetup: true`, the engine pod runs the `files/memlock-setup.sh` script as a sidecar that calls `prlimit` against the Core PID inside the shared PID namespace. The script is loaded via `.Files.Get` through the `fbinstance.memlockSetupScript` helper — keep it inside `helm/files/` so the loader path stays valid.
 - **Test pod helper.** Helm test scripts use `fbinstance.testShellHelpers` for the shared `log` / `pass` / `fail` shell functions. Reuse it instead of redefining the helpers.
+- **Keep `Chart.yaml` collections in block style.** release-please rewrites `Chart.yaml` on every release PR with a style-preserving YAML emitter, which keeps block sequences as-is but re-renders flow sequences with inner padding (`["x"]` → `[ "x" ]`). That padding used to fail the `brackets` rule in `.yamllint.yaml` and blocked the release PR's `validate-chart` job. `sources` is therefore a block list, and `.yamllint.yaml` also tolerates one space inside brackets as a second line of defense — do not "tidy" either back.
 - **`yamllint` runs on rendered output.** `scripts/validate-chart.sh` renders the chart and lints it with `.yamllint.yaml`. Templates that produce output yamllint rejects (mis-indented `toYaml`, missing trailing newlines, etc.) will fail CI even if `helm lint` is clean.
 - **`.helmignore` excludes `*.md`, `scripts/`, and `scenarios/`** from the packaged chart, so docs and validation scripts ship in the repo but not in the published OCI artifact.
 

helm/CHANGELOG.md

@@ -12,6 +12,32 @@ chore(deps): bump amazon/aws-cli from 2.35.2 to 2.35.3 (#1)
 
 # Changelog
 
+## [0.3.0](https://github.com/firebolt-db/firebolt-instance-helm/compare/0.2.0...0.3.0) (2026-07-27)
+
+
+### ⚠ BREAKING CHANGES
+
+* **storage:** migrate engine storage config to schema (FB-1684) ([#25](https://github.com/firebolt-db/firebolt-instance-helm/issues/25))
+
+### Features
+
+* **helm:** add engine authentication and TLS support (FB-1943) ([#23](https://github.com/firebolt-db/firebolt-instance-helm/issues/23)) ([a9a8aa2](https://github.com/firebolt-db/firebolt-instance-helm/commit/a9a8aa2508c6c3d77e92b33b35104cc010f9f8d8))
+* **storage:** migrate engine storage config to schema (FB-1684) ([#25](https://github.com/firebolt-db/firebolt-instance-helm/issues/25)) ([91f1f5d](https://github.com/firebolt-db/firebolt-instance-helm/commit/91f1f5ddde4eea2c0b26efe83dcd02c96dc503ec))
+
+
+### Bug Fixes
+
+* **agent:** remove floci AWS env credentials (FB-2197) ([#36](https://github.com/firebolt-db/firebolt-instance-helm/issues/36)) ([58b56d3](https://github.com/firebolt-db/firebolt-instance-helm/commit/58b56d3e29facec7f79e7b4fadeb5fe11522730a))
+* keep the Core UI sidecar image fresh and probe its readiness (FB-2179, FB-2180) ([#32](https://github.com/firebolt-db/firebolt-instance-helm/issues/32)) ([fb88c96](https://github.com/firebolt-db/firebolt-instance-helm/commit/fb88c9606feaad5dec3d8620913643e9829d3c15))
+* **security:** disable service account token automount on postgres and gateway ([#47](https://github.com/firebolt-db/firebolt-instance-helm/issues/47)) ([181ac91](https://github.com/firebolt-db/firebolt-instance-helm/commit/181ac91b439aaa139491db09cfcd6e76cffe02b3))
+
+
+### Dependencies
+
+* **deps:** bump packdb appVersion to release-5.0.1-0.20260709071413.53735f172429 ([#5](https://github.com/firebolt-db/firebolt-instance-helm/issues/5)) ([76ecd18](https://github.com/firebolt-db/firebolt-instance-helm/commit/76ecd18d1601dbad9f820201f49f63830f4f3466))
+* **deps:** bump packdb appVersion to release-5.0.1-0.20260713060957.513515666721 ([#29](https://github.com/firebolt-db/firebolt-instance-helm/issues/29)) ([1dd11b3](https://github.com/firebolt-db/firebolt-instance-helm/commit/1dd11b384083806da59e3590bc4e6ad0d45749a5))
+* **deps:** bump packdb appVersion to release-5.0.1-0.20260727005216.d09b51086f14 ([#38](https://github.com/firebolt-db/firebolt-instance-helm/issues/38)) ([69909db](https://github.com/firebolt-db/firebolt-instance-helm/commit/69909dbc1324f64b897f949a5f4682ae46605cb1))
+
 ## 0.1.0
 
 Initial public release. Consolidated changes from pre-release development:

helm/Chart.yaml

@@ -5,7 +5,11 @@ description: Firebolt Instance on Kubernetes — Envoy gateway, metadata, auth,
 type: application
 icon: https://raw.githubusercontent.com/firebolt-db/firebolt-instance-helm/refs/heads/main/static/firebolt.png
 home: "https://github.com/firebolt-db/firebolt-instance-helm"
-sources: ["https://github.com/firebolt-db/firebolt-instance-helm"]
-version: 0.2.0
+sources:
+  # Block style, not flow: release-please rewrites this file with a
+  # style-preserving YAML emitter that reformats flow sequences to `[ "x" ]`,
+  # which trips yamllint's `brackets` rule and fails the release PR.
+  - "https://github.com/firebolt-db/firebolt-instance-helm"
+version: 0.3.0
 # Bumped by upstream image-release automation.
 appVersion: "release-5.0.1-0.20260727005216.d09b51086f14"