helm upgrade --install: Idempotent Deploys (2026)
July 1, 2026
helm upgrade --install installs a release if it's missing and upgrades it if it exists — one idempotent command. See the Helm 4 flags, gotchas, and CI pattern.
#ci-cd
GitHub Actions: Reusable Workflow vs Composite Action 2026
June 26, 2026
Reusable workflow vs composite action in GitHub Actions: jobs vs steps, secrets, nesting limits, and outputs—plus exactly when to use each, with YAML.
Vitest Coverage Thresholds: Fail CI on Low Coverage (2026)
June 23, 2026
Set Vitest coverage thresholds that fail CI when coverage drops. Vitest 4 nested config, per-file and glob gates, plus a runnable GitHub Actions workflow.
GitHub Actions OIDC to Google Cloud: Keyless Deploys (2026)
June 5, 2026
Authenticate GitHub Actions to Google Cloud with Workload Identity Federation: pool, provider, attribute conditions, and a keyless Cloud Run deploy (2026).
GitHub Actions Multi-Account AWS OIDC Role Chaining (2026)
May 30, 2026
Hands-on tutorial: deploy to multiple AWS accounts from GitHub Actions with one OIDC hub role, sts:TagSession, role-chaining: true, and the 1-hour cap (2026).
GitHub Actions OIDC to AWS: Keyless Terraform (2026)
May 27, 2026
Deploy Terraform to AWS from GitHub Actions with no long-lived secrets — configure-aws-credentials v6, IAM role trust policy, sub-claim hardening (2026).
Promptfoo Tutorial: Test LLM Prompts in CI (2026)
May 22, 2026
A hands-on promptfoo tutorial: test LLM prompts with deterministic and model-graded assertions, catch prompt regressions, and gate your CI with GitHub Actions.