chore(deps): update helm/chart-testing-action action to v2.8.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
helm/chart-testing-action	action	minor	v2.7.0 -> v2.8.0

---

Release Notes

helm/chart-testing-action (helm/chart-testing-action)

v2.8.0

Compare Source

What's Changed

• Bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​171
• Fix the broken link for GitHub Help Documentation by @​subramani95 in #​174
• bump ct and yamale version by @​cpanato in #​178
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​181
• Bump actions/setup-python from 5.4.0 to 6.0.0 by @​dependabot[bot] in #​179
• Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​183
• Use uv instead of python venv by @​nikolaik in #​172
• Bump sigstore/cosign-installer from 3.8.1 to 4.0.0 by @​dependabot[bot] in #​184

New Contributors

• @​subramani95 made their first contribution in #​174
• @​nikolaik made their first contribution in #​172

Full Changelog: helm/chart-testing-action@v2...v2.8.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[rm3l]

/lgtm

[qodo-code-review]

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
🟢	No codebase code duplication found No new components were introduced in the PR code
Custom Compliance
🟢	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: Passed
⚪	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: No logging context: The changes only update the GitHub Action version and do not add or modify any audit logging for critical actions, so compliance cannot be determined from this diff alone. Referred Code - name: Set up chart-testing uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0'
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: No error handling: The diff only updates an action reference without showing any error handling or edge case management, so compliance cannot be assessed from the added lines. Referred Code - name: Set up chart-testing uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1'
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: User-facing errors unknown: Workflow change does not reveal how user-facing errors are handled, so it is unclear whether sensitive details could be exposed. Referred Code - name: Set up chart-testing uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0'
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: Logging content unclear: The action version bump does not show any logging behavior, so we cannot verify absence of sensitive data in logs from these changes. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1'
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: Input validation unknown: The diff only updates the helm/chart-testing-action version and does not expose input validation or data handling, so compliance cannot be determined from these lines. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1' yamale_version: '6.0.0'

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

[rhdh-qodo-merge]

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
🟢	No codebase code duplication found No new components were introduced in the PR code
Custom Compliance
⚪	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: No audit scope: The PR only updates a GitHub Action reference and does not introduce or modify application logic where audit logging would apply, so compliance cannot be assessed from the diff alone. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0'
	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: No code identifiers: The change only updates an action version pin in workflow YAML and does not add new variables or function names to evaluate for meaningful naming. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1'
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: No error logic: The diff only updates the helm/chart-testing-action version and does not add executable error handling paths to assess robustness. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1' yamale_version: '6.0.0'
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: No user errors: The workflow change does not introduce user-facing error messages, so secure error handling cannot be evaluated from the new lines. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1' yamale_version: '6.0.0'
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: No logging added: The update only changes an action version and does not add or modify logging statements to assess for sensitive data exposure. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1' yamale_version: '6.0.0'
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: No input handling: The PR only bumps the helm/chart-testing-action to v2.8.0 in CI and does not introduce new input processing to validate for security concerns. Referred Code uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0 with: version: '3.14.0' yamllint_version: '1.37.1' yamale_version: '6.0.0'

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label