ci: update charts pipeline and bump version to 0.13.5

- Add dependency review action with PR comments
- Upgrade Helm to v3.16.3
- Enable latest tag marking in chart releases
- Make Trivy scanner errors non-blocking
- Remove duplicate ingress.enabled value
- Update chart version and changelog

.github/workflows/charts.yml

@@ -34,10 +34,15 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v4
+        with:
+          allow-ghsas: true
+          comment-summary-in-pr: always
       - name: Install Helm
         uses: azure/setup-helm@v4
         with:
-          version: v3.10.0
+          version: v3.16.3
       - name: Setup Chart Linting
         if: ${{ github.event_name == 'pull_request' }}
         id: lint
@@ -68,6 +73,7 @@ jobs:
         with:
           charts_dir: charts
           config: charts/cr.yml
+          mark_as_latest: true
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
       - name: Initialize CodeQL
@@ -78,6 +84,7 @@ jobs:
         continue-on-error: true
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
+        continue-on-error: true
         with:
           scan-type: 'config'
           scan-ref: '.'

charts/applicationset/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: argocd-applicationsets-services
 description: A Helm chart for ArgoCD ApplicationSets, a declarative, GitOps continuous delivery tool for Kubernetes
 type: application
-version: &version "0.13.3"
+version: &version "0.13.5"
 appVersion: *version
 kubeVersion: ">= 1.28"
 home: https://github.com/saidsef/argocd-applicationsets-services
@@ -23,8 +23,8 @@ sources:
 annotations:
   artifacthub.io/license: "Apache-2.0"
   artifacthub.io/changes: |
-    - kind: fixed
-      description: fixed a typo
+    - kind: changed
+      description: updated ci pipeline to provide dependency review
   artifacthub.io/links: |
     - name: README
       url: https://raw.githubusercontent.com/saidsef/argocd-applicationsets-services/main/README.md

charts/applicationset/values.yaml

@@ -124,7 +124,5 @@ repos:
         value: "{{branch}}"
       - name: "ingress.enabled"
         value: "true"
-      - name: "ingress.enabled"
-        value: "true"
       - name: "ingress.hosts[0].host"
         value: "{{branch}}"