bump: update dependencies for lfx-v2-committee-service and others

[mauriciozanettisalomao]

Overview

Bumping the committee-service version with the latest business change (LFXV2-593), and also upgrading other services to the same stack.

• openfga version updated from 0.2.45 to 0.2.48
• authelia version updated from 0.10.47 to 0.10.49
• lfx-v2-committee-service version updated from 0.1.1 to 0.2.8
• lfx-v2-query-service version updated from 0.4.6 to 0.4.7
• lfx-v2-project-service version updated from 0.4.3 to 0.4.6
• lfx-v2-access-check version updated from 0.2.3 to 0.2.4
• lfx-v2-indexer-service version updated from 0.1.0 to 0.2.8

Jira Ticket: https://linuxfoundation.atlassian.net/browse/LFXV2-593

[coderabbitai]

Walkthrough

Updates the LFX Platform Helm chart version from 0.3.5 to 0.3.6 and bumps five sub-chart dependencies to newer versions: lfx-v2-query-service, lfx-v2-project-service, lfx-v2-access-check, lfx-v2-committee-service, and lfx-v2-meeting-service.

Changes

Cohort / File(s)	Summary
Helm Chart Version and Dependencies charts/lfx-platform/Chart.yaml	Chart version bumped to 0.3.6; five LFX v2 service dependencies updated: lfx-v2-query-service (~0.4.7), lfx-v2-project-service (~0.4.6), lfx-v2-access-check (~0.2.4), lfx-v2-committee-service (~0.2.8), lfx-v2-meeting-service (~0.4.22)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

• Single file modified with homogeneous version updates only; verify that dependency version increments align with semantic versioning constraints and intended release versions

Possibly related PRs

• [LFXV2-492] Auth Service - Lookup username bump version #60: Updates Chart.yaml and bumps lfx-v2-query-service dependency with top-level chart version bump
• Update chart dependencies #51: Updates Chart.yaml and bumps multiple LFX v2 service dependencies including lfx-v2-project-service
• bump lfx-v2-access-check to 0.2.3, other deps #54: Updates Chart.yaml and modifies lfx-v2-access-check dependency version

Pre-merge checks and finishing touches

❌ Failed checks (1 warning, 1 inconclusive)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The PR description and changes mention version bumps but do not address the core objective of LFXV2-593: fixing the YAML parsing error in ruleset.yaml.	Include actual fixes for the YAML parsing error in ruleset.yaml as specified in issue LFXV2-593. Update commit to show the corrected template logic.
Out of Scope Changes check	❓ Inconclusive	The changeset only shows Chart.yaml version bumps, but the linked issue requires fixing a YAML template error in lfx-v2-committee-service/templates/ruleset.yaml, which is not visible in the provided changes.	Clarify whether the ruleset.yaml fix is included in this PR but not shown in the summary, or if this PR only handles dependency version updates without the actual template fix.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: bumping dependencies for multiple services including lfx-v2-committee-service and others, which matches the changeset.
Description check	✅ Passed	The description is related to the changeset, providing context about version bumps and referencing the relevant Jira ticket (LFXV2-593).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

• Jira integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between a056f68 and c4cf7ec.

⛔ Files ignored due to path filters (1)

• charts/lfx-platform/Chart.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• charts/lfx-platform/Chart.yaml (2 hunks)

🧰 Additional context used

🧠 Learnings (1)

📚 Learning: 2025-08-29T16:53:12.710Z

Learnt from: mauriciozanettisalomao
Repo: linuxfoundation/lfx-v2-helm PR: 49
File: charts/lfx-platform/Chart.yaml:8-8
Timestamp: 2025-08-29T16:53:12.710Z
Learning: The maintainer mauriciozanettisalomao prefers to keep chart version increments conservative, choosing 0.2.7 over suggested 0.3.0 even for changes that could be considered behavior-altering (like new middleware and JSON Content-Type enforcement in Heimdall).

Applied to files:

• charts/lfx-platform/Chart.yaml

🔇 Additional comments (2)

charts/lfx-platform/Chart.yaml (2)

8-8: Chart version bump is appropriately conservative.

The patch version increment (0.3.5 → 0.3.6) aligns with your preference for conservative version management and is suitable for dependency updates without new chart features.

---

57-57: Dependency updates verified—YAML fix confirmed and no breaking changes detected.

The lfx-v2-committee-service v0.2.8 release includes a fix for "ruleset.yaml with openfga disabled", which directly resolves the YAML parsing error mentioned in the PR objectives. The lfx-v2-query-service v0.4.7 and lfx-v2-project-service v0.4.6 updates include non-breaking field additions, with no breaking changes detected. The local ruleset.yaml templates in the codebase are syntactically valid. All dependency versions in Chart.lock align with the specified constraints.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull Request Overview

This PR updates multiple Helm chart dependency versions in the LFX Platform chart to their latest releases.

• Updated 5 LFX v2 service chart versions (query-service, project-service, access-check, committee-service, meeting-service)
• Updated 2 third-party dependency versions (openfga, authelia)
• Regenerated Chart.lock file with updated digest and timestamp

Reviewed Changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
charts/lfx-platform/Chart.yaml	Updated version constraints for 5 LFX v2 services and 2 external dependencies
charts/lfx-platform/Chart.lock	Updated locked versions, digest hash, and generation timestamp to match Chart.yaml changes

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.