Bump github/super-linter from 5 to 6 (#264)

* Bump github/super-linter from 5 to 6

Bumps [github/super-linter](https://github.com/github/super-linter) from 5 to 6.
- [Release notes](https://github.com/github/super-linter/releases)
- [Changelog](https://github.com/github/super-linter/blob/main/CHANGELOG.md)
- [Commits](github/super-linter@v5...v6)

---
updated-dependencies:
- dependency-name: github/super-linter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* add namespace to ci secrets

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* upadte chart version

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* add permissions

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* add top level permissions

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* add linbreak

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* fix pvc

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* remove blankline

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: André Bauer <andre.bauer@staffbase.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: André Bauer <andre.bauer@staffbase.com>

.github/workflows/ci.yaml

@@ -1,13 +1,15 @@
 name: ci
 
+permissions: read-all
+
 on:
   pull_request:
     branches:
       - main
 
 env:
-  helm-version: "v3.12.1"
-  kubeconform-version: "v0.6.3"
+  helm-version: "v3.14.4"
+  kubeconform-version: "v0.6.4"
 
 jobs:
   super-linter:
@@ -19,7 +21,7 @@ jobs:
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter/slim@v5
+        uses: github/super-linter/slim@v6
         env:
           DEFAULT_BRANCH: main
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -128,4 +130,4 @@ jobs:
         run: kubectl create --namespace zammad --filename zammad/ci/full-objects.yaml
 
       - name: Run chart-testing (install)
-        run: ct install --config .github/ct.yaml --helm-extra-args '--timeout 900s'
+        run: ct install --config .github/ct.yaml --helm-extra-args '--timeout 900s'

.github/workflows/release.yaml

@@ -1,15 +1,21 @@
 name: Release Charts
 
+permissions: read-all
+
 on:
   push:
     branches:
       - main
 
 env:
-  helm-version: "v3.10.1"
+  helm-version: "v3.14.4"
 
 jobs:
   release:
+    permissions:
+      contents: write # to push chart release and create a release (helm/chart-releaser-action)
+      packages: write # needed for ghcr access
+      id-token: write # needed for keyless signing
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout

.github/workflows/sync-readme.yaml

@@ -1,5 +1,7 @@
 name: sync-readme
 
+permissions: read-all
+
 on:
   push:
     branches:
@@ -9,6 +11,8 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: write # for git push
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout

zammad/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: zammad
-version: 12.0.0
-appVersion: 6.3.0
+version: 12.0.1
+appVersion: 6.3.0-15
 description: Zammad is a web based open source helpdesk/customer support system with many features to manage customer communication via several channels like telephone, facebook, twitter, chat and e-mails.
 home: https://zammad.org
 icon: https://raw.githubusercontent.com/zammad/zammad-documentation/main/images/zammad_logo_600x520.png

zammad/ci/full-objects.yaml

@@ -5,6 +5,7 @@ data:
 kind: Secret
 metadata:
   name: minio-existing-secret
+  namespace: zammad
 type: Opaque
 ---
 apiVersion: v1
@@ -13,6 +14,7 @@ data:
 kind: Secret
 metadata:
   name: redis-existing-secret
+  namespace: zammad
 type: Opaque
 ---
 apiVersion: v1
@@ -21,6 +23,7 @@ data:
 kind: Secret
 metadata:
   name: postgresql-existing-secret
+  namespace: zammad
 type: Opaque
 ---
 apiVersion: v1
@@ -29,6 +32,7 @@ data:
 kind: Secret
 metadata:
   name: elasticsearch-existing-secret
+  namespace: zammad
 type: Opaque
 ---
 apiVersion: v1
@@ -37,15 +41,17 @@ data:
 kind: Secret
 metadata:
   name: autowizard
+  namespace: zammad
 type: Opaque
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: storage-volume-claim
+  namespace: zammad
 spec:
   accessModes:
     - ReadWriteOnce   # Testing env does not provide ReadWrite Many, but for CI this is enough.
   resources:
     requests:
-      storage: 32Mi
+      storage: 32Mi