From 2b7491857b79399bf60917149298501da51b3538 Mon Sep 17 00:00:00 2001
From: alhendrickson <alistair@cogstack.org>
Date: Thu, 18 Jun 2026 10:22:46 +0000
Subject: [PATCH 1/6] ci: Add release-please and version helm charts
 individually

---
 .../workflows/kubernetes-charts-build.yaml    | 64 ++++++++++++-------
 .github/workflows/release-please.yml          | 19 ++++++
 .release-please-manifest.json                 |  8 +++
 release-please-config.json                    | 61 ++++++++++++++++++
 4 files changed, 128 insertions(+), 24 deletions(-)
 create mode 100644 .github/workflows/release-please.yml
 create mode 100644 .release-please-manifest.json
 create mode 100644 release-please-config.json

diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index 60d7da7..8664d85 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -4,7 +4,7 @@ on:
   push:
     branches: [main]
     tags:
-      - "helm-charts-v*.*.*" # e.g., helm-charts-v0.1.1
+      - "helm-charts/*-v*.*.*" # e.g., helm-charts/medcat-trainer-helm-v0.1.2
     paths:
       - "helm-charts/**"
       - ".github/workflows/kubernetes-charts-build**"
@@ -93,6 +93,7 @@ jobs:
 
   helm-publish:
     runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request' && github.repository == 'CogStack/cogstack-platform'
     needs: helm-lint-test
     permissions:
       contents: write
@@ -117,49 +118,64 @@ jobs:
         id: version
         run: |
           if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
-            # Strip the tag prefix helm-charts-v
-            CHART_VERSION="${GITHUB_REF_NAME#helm-charts-v}"
+            TAG="${GITHUB_REF_NAME}"
+            CHART="${TAG#helm-charts/}"
+            CHART="${CHART%-v*}"
+            CHART_VERSION="${TAG##*-v}"
+            echo "chart=$CHART" >> "$GITHUB_OUTPUT"
+            echo "single_chart=true" >> "$GITHUB_OUTPUT"
           else
             CHART_VERSION="$DEFAULT_CHART_VERSION"
+            echo "single_chart=false" >> "$GITHUB_OUTPUT"
           fi
           echo "chart_version=$CHART_VERSION" >> "$GITHUB_OUTPUT"
 
+      - name: Discover charts
+        id: charts
+        run: |
+          if [[ "${{ steps.version.outputs.single_chart }}" == "true" ]]; then
+            echo "charts=${{ steps.version.outputs.chart }}" >> "$GITHUB_OUTPUT"
+          else
+            CHARTS=()
+            while IFS= read -r chartfile; do
+              CHARTS+=("$(basename "$(dirname "$chartfile")")")
+            done < <(find . -maxdepth 2 -mindepth 2 -type f -name Chart.yaml | sort)
+            echo "charts=${CHARTS[*]}" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Recursive dependency update (all charts, including nested)
         # Waiting on helm recursive feature https://github.com/helm/helm/pull/30855
         # Could alternatively switch to helm "cascade" plugin
         run: |
           # Run twice so nested subcharts (like cogstack-jupyterhub -> jupyterhub) are fully updated
           for _ in 1 2; do
-            # Find every Chart.yaml under helm-charts and run helm dependency update in its directory
-            while IFS= read -r chartfile; do
-              chart_dir="$(dirname "$chartfile")"
-              if grep -q "^dependencies:" "$chartfile" 2>/dev/null; then
-                echo "Updating dependencies for $chart_dir"
-                helm dependency update "$chart_dir"
-              fi
-            done < <(find . -type f -name Chart.yaml)
+            for CHART in ${{ steps.charts.outputs.charts }}; do
+              while IFS= read -r chartfile; do
+                chart_dir="$(dirname "$chartfile")"
+                if grep -q "^dependencies:" "$chartfile" 2>/dev/null; then
+                  echo "Updating dependencies for $chart_dir"
+                  helm dependency update "$chart_dir"
+                fi
+              done < <(find "./$CHART" -type f -name Chart.yaml)
+            done
           done
 
       - name: Package Helm Charts
         run: |
-          helm package ./medcat-service-helm --version  ${{ steps.version.outputs.chart_version }}
-          helm package ./medcat-trainer-helm --version  ${{ steps.version.outputs.chart_version }} --dependency-update 
-          helm package ./cogstack-ce-helm --version  ${{ steps.version.outputs.chart_version }} --dependency-update
-          helm package ./cogstack-cohorter-helm --version  ${{ steps.version.outputs.chart_version }} --dependency-update
-          helm package ./cogstack-observability-helm --version  ${{ steps.version.outputs.chart_version }} --dependency-update
-          helm package ./cogstack-jupyterhub-helm --version  ${{ steps.version.outputs.chart_version }} --dependency-update
+          VERSION="${{ steps.version.outputs.chart_version }}"
+          for CHART in ${{ steps.charts.outputs.charts }}; do
+            helm package "./$CHART" --version "$VERSION"
+          done
 
       - name: Helm OCI login to Docker Hub
         run: helm registry login registry-1.docker.io -u ${{ secrets.DOCKERHUB_USERNAME }} -p ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Push Helm Chart to Docker Hub OCI
+      - name: Push Helm Charts to Docker Hub OCI
         run: |
-          helm push ./medcat-service-helm-${{ steps.version.outputs.chart_version }}.tgz oci://registry-1.docker.io/cogstacksystems
-          helm push ./medcat-trainer-helm-${{ steps.version.outputs.chart_version }}.tgz oci://registry-1.docker.io/cogstacksystems
-          helm push ./cogstack-ce-helm-${{ steps.version.outputs.chart_version }}.tgz oci://registry-1.docker.io/cogstacksystems
-          helm push ./cogstack-cohorter-helm-${{ steps.version.outputs.chart_version }}.tgz oci://registry-1.docker.io/cogstacksystems
-          helm push ./cogstack-observability-helm-${{ steps.version.outputs.chart_version }}.tgz oci://registry-1.docker.io/cogstacksystems
-          helm push ./cogstack-jupyterhub-helm-${{ steps.version.outputs.chart_version }}.tgz oci://registry-1.docker.io/cogstacksystems
+          VERSION="${{ steps.version.outputs.chart_version }}"
+          for CHART in ${{ steps.charts.outputs.charts }}; do
+            helm push "./$CHART-$VERSION.tgz" oci://registry-1.docker.io/cogstacksystems
+          done
 
       - name: Release
         uses: softprops/action-gh-release@v2
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
new file mode 100644
index 0000000..d5fdeb2
--- /dev/null
+++ b/.github/workflows/release-please.yml
@@ -0,0 +1,19 @@
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@v4
+        with:
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
new file mode 100644
index 0000000..02af5e5
--- /dev/null
+++ b/.release-please-manifest.json
@@ -0,0 +1,8 @@
+{
+    "helm-charts/medcat-service-helm": "0.4.1",
+    "helm-charts/medcat-trainer-helm": "0.4.1",
+    "helm-charts/cogstack-ce-helm": "0.4.1",
+    "helm-charts/cogstack-cohorter-helm": "0.4.1",
+    "helm-charts/cogstack-observability-helm": "0.4.1",
+    "helm-charts/cogstack-jupyterhub-helm": "0.4.1"
+}
\ No newline at end of file
diff --git a/release-please-config.json b/release-please-config.json
new file mode 100644
index 0000000..1627a58
--- /dev/null
+++ b/release-please-config.json
@@ -0,0 +1,61 @@
+{
+    "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+    "bootstrap-sha": "07501a49fcf25b639443cd53b39d88c7a1f092e9",
+    "separate-pull-requests": true,
+    "packages": {
+        "helm-charts/medcat-trainer-helm": {
+            "release-type": "helm",
+            "component": "helm-charts/medcat-trainer",
+            "changelog-path": "CHANGELOG.md",
+            "bump-minor-pre-major": false,
+            "bump-patch-for-minor-pre-major": false,
+            "draft": false,
+            "prerelease": false
+        },
+        "helm-charts/medcat-service-helm": {
+            "release-type": "helm",
+            "component": "helm-charts/medcat-service",
+            "changelog-path": "CHANGELOG.md",
+            "bump-minor-pre-major": false,
+            "bump-patch-for-minor-pre-major": false,
+            "draft": false,
+            "prerelease": false
+        },
+        "helm-charts/cogstack-ce-helm": {
+            "release-type": "helm",
+            "component": "helm-charts/cogstack-ce",
+            "changelog-path": "CHANGELOG.md",
+            "bump-minor-pre-major": false,
+            "bump-patch-for-minor-pre-major": false,
+            "draft": false,
+            "prerelease": false
+        },
+        "helm-charts/cogstack-cohorter-helm": {
+            "release-type": "helm",
+            "component": "helm-charts/cogstack-cohorter",
+            "changelog-path": "CHANGELOG.md",
+            "bump-minor-pre-major": false,
+            "bump-patch-for-minor-pre-major": false,
+            "draft": false,
+            "prerelease": false
+        },
+        "helm-charts/cogstack-observability-helm": {
+            "release-type": "helm",
+            "component": "helm-charts/cogstack-observability",
+            "changelog-path": "CHANGELOG.md",
+            "bump-minor-pre-major": false,
+            "bump-patch-for-minor-pre-major": false,
+            "draft": false,
+            "prerelease": false
+        },
+        "helm-charts/cogstack-jupyterhub-helm": {
+            "release-type": "helm",
+            "component": "helm-charts/cogstack-jupyterhub",
+            "changelog-path": "CHANGELOG.md",
+            "bump-minor-pre-major": false,
+            "bump-patch-for-minor-pre-major": false,
+            "draft": false,
+            "prerelease": false
+        }
+    }
+}

From 3aa836a4365d14266ce057c56167ad8cc885aa19 Mon Sep 17 00:00:00 2001
From: alhendrickson <alistair@cogstack.org>
Date: Thu, 18 Jun 2026 10:30:45 +0000
Subject: [PATCH 2/6] ci: Add release-please and version helm charts
 individually

---
 .../workflows/kubernetes-charts-build.yaml    | 22 ++++++++++++++-----
 release-please-config.json                    | 12 +++++-----
 2 files changed, 23 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index 8664d85..0f745ef 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -1,3 +1,16 @@
+# Lint, test, and publish Helm charts under helm-charts/.
+#
+# Triggers:
+#   - Pull requests touching helm-charts/ or this workflow: lint and install-test
+#     changed charts only; does not publish.
+#   - Push to main (helm-charts/ paths): lint/test all charts, then package and
+#     push every top-level chart to Docker Hub OCI at version 0.0.1.
+#   - Per-chart release tags (e.g. helm-charts/medcat-trainer-helm-v0.1.2):
+#     lint/test all charts, then package and push only the tagged chart at the
+#     version from the tag; creates a draft GitHub release with the chart archive.
+#
+# Charts are discovered automatically from top-level Chart.yaml files. Release
+# versions for tagged releases are managed by release-please.
 name: Kubernetes - Lint, Test, and Publish Helm Charts
 
 on:
@@ -11,7 +24,7 @@ on:
   pull_request:
     paths:
       - "helm-charts/**"
-      - ".github/workflows/kubernetes**"
+      - ".github/workflows/kubernetes-charts-build**"
 
 defaults:
   run:
@@ -177,10 +190,9 @@ jobs:
             helm push "./$CHART-$VERSION.tgz" oci://registry-1.docker.io/cogstacksystems
           done
 
-      - name: Release
+      - name: Attach chart to GitHub Release
         uses: softprops/action-gh-release@v2
         if: github.ref_type == 'tag'
         with:
-          draft: true
-          files: |
-            helm-charts/*.tgz
+          tag_name: ${{ github.ref_name }}
+          files: helm-charts/${{ steps.charts.outputs.chart }}-${{ steps.version.outputs.chart_version }}.tgz
diff --git a/release-please-config.json b/release-please-config.json
index 1627a58..3467983 100644
--- a/release-please-config.json
+++ b/release-please-config.json
@@ -5,7 +5,7 @@
     "packages": {
         "helm-charts/medcat-trainer-helm": {
             "release-type": "helm",
-            "component": "helm-charts/medcat-trainer",
+            "component": "helm-charts/medcat-trainer-helm",
             "changelog-path": "CHANGELOG.md",
             "bump-minor-pre-major": false,
             "bump-patch-for-minor-pre-major": false,
@@ -14,7 +14,7 @@
         },
         "helm-charts/medcat-service-helm": {
             "release-type": "helm",
-            "component": "helm-charts/medcat-service",
+            "component": "helm-charts/medcat-service-helm",
             "changelog-path": "CHANGELOG.md",
             "bump-minor-pre-major": false,
             "bump-patch-for-minor-pre-major": false,
@@ -23,7 +23,7 @@
         },
         "helm-charts/cogstack-ce-helm": {
             "release-type": "helm",
-            "component": "helm-charts/cogstack-ce",
+            "component": "helm-charts/cogstack-ce-helm",
             "changelog-path": "CHANGELOG.md",
             "bump-minor-pre-major": false,
             "bump-patch-for-minor-pre-major": false,
@@ -32,7 +32,7 @@
         },
         "helm-charts/cogstack-cohorter-helm": {
             "release-type": "helm",
-            "component": "helm-charts/cogstack-cohorter",
+            "component": "helm-charts/cogstack-cohorter-helm",
             "changelog-path": "CHANGELOG.md",
             "bump-minor-pre-major": false,
             "bump-patch-for-minor-pre-major": false,
@@ -41,7 +41,7 @@
         },
         "helm-charts/cogstack-observability-helm": {
             "release-type": "helm",
-            "component": "helm-charts/cogstack-observability",
+            "component": "helm-charts/cogstack-observability-helm",
             "changelog-path": "CHANGELOG.md",
             "bump-minor-pre-major": false,
             "bump-patch-for-minor-pre-major": false,
@@ -50,7 +50,7 @@
         },
         "helm-charts/cogstack-jupyterhub-helm": {
             "release-type": "helm",
-            "component": "helm-charts/cogstack-jupyterhub",
+            "component": "helm-charts/cogstack-jupyterhub-helm",
             "changelog-path": "CHANGELOG.md",
             "bump-minor-pre-major": false,
             "bump-patch-for-minor-pre-major": false,

From 1984261612830844b833a135c4160c8a44aa5062 Mon Sep 17 00:00:00 2001
From: alhendrickson <alistair@cogstack.org>
Date: Thu, 18 Jun 2026 10:31:35 +0000
Subject: [PATCH 3/6] ci: Add release-please and version helm charts
 individually

---
 .github/workflows/kubernetes-charts-build.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index 0f745ef..40d4c90 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -7,7 +7,8 @@
 #     push every top-level chart to Docker Hub OCI at version 0.0.1.
 #   - Per-chart release tags (e.g. helm-charts/medcat-trainer-helm-v0.1.2):
 #     lint/test all charts, then package and push only the tagged chart at the
-#     version from the tag; creates a draft GitHub release with the chart archive.
+#     version from the tag; attaches the chart archive to the GitHub release
+#     created by release-please.
 #
 # Charts are discovered automatically from top-level Chart.yaml files. Release
 # versions for tagged releases are managed by release-please.

From 0f95d45616eacc933205e39c882089b5ae77bd34 Mon Sep 17 00:00:00 2001
From: alhendrickson <alistair@cogstack.org>
Date: Thu, 18 Jun 2026 11:07:31 +0000
Subject: [PATCH 4/6] ci: Add release-please and version helm charts
 individually - fix chart update

---
 .../workflows/kubernetes-charts-build.yaml    | 44 +++++++------------
 helm-charts/cogstack-ce-helm/Chart.yaml       |  4 +-
 helm-charts/cogstack-cohorter-helm/Chart.yaml |  2 +-
 .../cogstack-jupyterhub-helm/Chart.yaml       |  2 +-
 4 files changed, 19 insertions(+), 33 deletions(-)

diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index 40d4c90..75b1ab8 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -75,20 +75,6 @@ jobs:
             echo "changed=true" >> "$GITHUB_OUTPUT"
           fi
 
-      - name: Recursive dependency update (all charts, including nested)
-        run: |
-          # Run twice so nested subcharts (like cogstack-jupyterhub -> jupyterhub) are fully updated
-          for _ in 1 2; do
-            # Find every Chart.yaml under helm-charts and run helm dependency update in its directory
-            while IFS= read -r chartfile; do
-              chart_dir="$(dirname "$chartfile")"
-              if grep -q "^dependencies:" "$chartfile" 2>/dev/null; then
-                echo "Updating dependencies for $chart_dir"
-                helm dependency update "$chart_dir"
-              fi
-            done < <(find . -type f -name Chart.yaml)
-          done
-
       - name: Run chart-testing (lint)
         if: steps.list-changed.outputs.changed == 'true'
         working-directory: .
@@ -128,6 +114,15 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
 
+      - name: Set up Python
+        uses: actions/setup-python@v6.0.0
+        with:
+          python-version: "3.x"
+          check-latest: true
+
+      - name: Set up chart-testing
+        uses: helm/chart-testing-action@v2.8.0
+
       - name: Determine version
         id: version
         run: |
@@ -157,22 +152,13 @@ jobs:
             echo "charts=${CHARTS[*]}" >> "$GITHUB_OUTPUT"
           fi
 
-      - name: Recursive dependency update (all charts, including nested)
-        # Waiting on helm recursive feature https://github.com/helm/helm/pull/30855
-        # Could alternatively switch to helm "cascade" plugin
+      - name: Update chart dependencies
+        working-directory: .
+        env:
+          CT_CHECK_VERSION_INCREMENT: "false"
         run: |
-          # Run twice so nested subcharts (like cogstack-jupyterhub -> jupyterhub) are fully updated
-          for _ in 1 2; do
-            for CHART in ${{ steps.charts.outputs.charts }}; do
-              while IFS= read -r chartfile; do
-                chart_dir="$(dirname "$chartfile")"
-                if grep -q "^dependencies:" "$chartfile" 2>/dev/null; then
-                  echo "Updating dependencies for $chart_dir"
-                  helm dependency update "$chart_dir"
-                fi
-              done < <(find "./$CHART" -type f -name Chart.yaml)
-            done
-          done
+          CHARTS_CSV="${{ steps.charts.outputs.charts }}"
+          ct lint --config .github/linters/ct.yaml --charts "${CHARTS_CSV// /,}" --validate-maintainers=false
 
       - name: Package Helm Charts
         run: |
diff --git a/helm-charts/cogstack-ce-helm/Chart.yaml b/helm-charts/cogstack-ce-helm/Chart.yaml
index e694457..4068ba6 100644
--- a/helm-charts/cogstack-ce-helm/Chart.yaml
+++ b/helm-charts/cogstack-ce-helm/Chart.yaml
@@ -45,11 +45,11 @@ dependencies:
   - name: opensearch
     condition: opensearch.enabled
     version: "3.5.0"
-    repository: "https://opensearch-project.github.io/helm-charts/"
+    repository: "@opensearch"
   - name: opensearch-dashboards
     condition: opensearch-dashboards.enabled
     version: "3.5.0"
-    repository: "https://opensearch-project.github.io/helm-charts/"
+    repository: "@opensearch"
   - name: cogstack-jupyterhub-helm
     alias: cogstack-jupyterhub
     condition: cogstack-jupyterhub.enabled
diff --git a/helm-charts/cogstack-cohorter-helm/Chart.yaml b/helm-charts/cogstack-cohorter-helm/Chart.yaml
index d11cf5d..ece03fa 100644
--- a/helm-charts/cogstack-cohorter-helm/Chart.yaml
+++ b/helm-charts/cogstack-cohorter-helm/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
   # Ollama LLM serving — https://github.com/otwld/ollama-helm
   - name: ollama
     version: ">=0.1.0"
-    repository: "https://otwld.github.io/ollama-helm/"
+    repository: "@ollama"
     alias: ollama
     condition: ollama.enabled
diff --git a/helm-charts/cogstack-jupyterhub-helm/Chart.yaml b/helm-charts/cogstack-jupyterhub-helm/Chart.yaml
index 3782d31..fe7e52b 100644
--- a/helm-charts/cogstack-jupyterhub-helm/Chart.yaml
+++ b/helm-charts/cogstack-jupyterhub-helm/Chart.yaml
@@ -16,4 +16,4 @@ icon: "https://avatars.githubusercontent.com/u/28688163"
 dependencies:
   - name: jupyterhub
     version: 4.3.2
-    repository: https://hub.jupyter.org/helm-chart/
+    repository: "@jupyterhub"

From 62e9c543c6bf98fdf020ec6f495cad044d3504b5 Mon Sep 17 00:00:00 2001
From: alhendrickson <alistair@cogstack.org>
Date: Thu, 18 Jun 2026 11:20:08 +0000
Subject: [PATCH 5/6] ci: Add release-please and version helm charts
 individually - fix chart update

---
 .../workflows/kubernetes-charts-build.yaml    | 44 ++++++++++++-------
 helm-charts/cogstack-ce-helm/Chart.yaml       |  4 +-
 helm-charts/cogstack-cohorter-helm/Chart.yaml |  2 +-
 .../cogstack-jupyterhub-helm/Chart.yaml       |  2 +-
 4 files changed, 33 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index 75b1ab8..40d4c90 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -75,6 +75,20 @@ jobs:
             echo "changed=true" >> "$GITHUB_OUTPUT"
           fi
 
+      - name: Recursive dependency update (all charts, including nested)
+        run: |
+          # Run twice so nested subcharts (like cogstack-jupyterhub -> jupyterhub) are fully updated
+          for _ in 1 2; do
+            # Find every Chart.yaml under helm-charts and run helm dependency update in its directory
+            while IFS= read -r chartfile; do
+              chart_dir="$(dirname "$chartfile")"
+              if grep -q "^dependencies:" "$chartfile" 2>/dev/null; then
+                echo "Updating dependencies for $chart_dir"
+                helm dependency update "$chart_dir"
+              fi
+            done < <(find . -type f -name Chart.yaml)
+          done
+
       - name: Run chart-testing (lint)
         if: steps.list-changed.outputs.changed == 'true'
         working-directory: .
@@ -114,15 +128,6 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
 
-      - name: Set up Python
-        uses: actions/setup-python@v6.0.0
-        with:
-          python-version: "3.x"
-          check-latest: true
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@v2.8.0
-
       - name: Determine version
         id: version
         run: |
@@ -152,13 +157,22 @@ jobs:
             echo "charts=${CHARTS[*]}" >> "$GITHUB_OUTPUT"
           fi
 
-      - name: Update chart dependencies
-        working-directory: .
-        env:
-          CT_CHECK_VERSION_INCREMENT: "false"
+      - name: Recursive dependency update (all charts, including nested)
+        # Waiting on helm recursive feature https://github.com/helm/helm/pull/30855
+        # Could alternatively switch to helm "cascade" plugin
         run: |
-          CHARTS_CSV="${{ steps.charts.outputs.charts }}"
-          ct lint --config .github/linters/ct.yaml --charts "${CHARTS_CSV// /,}" --validate-maintainers=false
+          # Run twice so nested subcharts (like cogstack-jupyterhub -> jupyterhub) are fully updated
+          for _ in 1 2; do
+            for CHART in ${{ steps.charts.outputs.charts }}; do
+              while IFS= read -r chartfile; do
+                chart_dir="$(dirname "$chartfile")"
+                if grep -q "^dependencies:" "$chartfile" 2>/dev/null; then
+                  echo "Updating dependencies for $chart_dir"
+                  helm dependency update "$chart_dir"
+                fi
+              done < <(find "./$CHART" -type f -name Chart.yaml)
+            done
+          done
 
       - name: Package Helm Charts
         run: |
diff --git a/helm-charts/cogstack-ce-helm/Chart.yaml b/helm-charts/cogstack-ce-helm/Chart.yaml
index 4068ba6..e694457 100644
--- a/helm-charts/cogstack-ce-helm/Chart.yaml
+++ b/helm-charts/cogstack-ce-helm/Chart.yaml
@@ -45,11 +45,11 @@ dependencies:
   - name: opensearch
     condition: opensearch.enabled
     version: "3.5.0"
-    repository: "@opensearch"
+    repository: "https://opensearch-project.github.io/helm-charts/"
   - name: opensearch-dashboards
     condition: opensearch-dashboards.enabled
     version: "3.5.0"
-    repository: "@opensearch"
+    repository: "https://opensearch-project.github.io/helm-charts/"
   - name: cogstack-jupyterhub-helm
     alias: cogstack-jupyterhub
     condition: cogstack-jupyterhub.enabled
diff --git a/helm-charts/cogstack-cohorter-helm/Chart.yaml b/helm-charts/cogstack-cohorter-helm/Chart.yaml
index ece03fa..d11cf5d 100644
--- a/helm-charts/cogstack-cohorter-helm/Chart.yaml
+++ b/helm-charts/cogstack-cohorter-helm/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
   # Ollama LLM serving — https://github.com/otwld/ollama-helm
   - name: ollama
     version: ">=0.1.0"
-    repository: "@ollama"
+    repository: "https://otwld.github.io/ollama-helm/"
     alias: ollama
     condition: ollama.enabled
diff --git a/helm-charts/cogstack-jupyterhub-helm/Chart.yaml b/helm-charts/cogstack-jupyterhub-helm/Chart.yaml
index fe7e52b..3782d31 100644
--- a/helm-charts/cogstack-jupyterhub-helm/Chart.yaml
+++ b/helm-charts/cogstack-jupyterhub-helm/Chart.yaml
@@ -16,4 +16,4 @@ icon: "https://avatars.githubusercontent.com/u/28688163"
 dependencies:
   - name: jupyterhub
     version: 4.3.2
-    repository: "@jupyterhub"
+    repository: https://hub.jupyter.org/helm-chart/

From 0aa48673dcbd94cb8405bc4a1e2f72b0b4663d44 Mon Sep 17 00:00:00 2001
From: alhendrickson <alistair@cogstack.org>
Date: Thu, 18 Jun 2026 11:25:02 +0000
Subject: [PATCH 6/6] ci: Add release-please and version helm charts
 individually - fix chart update

---
 .github/workflows/kubernetes-charts-build.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/kubernetes-charts-build.yaml b/.github/workflows/kubernetes-charts-build.yaml
index 40d4c90..c94c4f8 100644
--- a/.github/workflows/kubernetes-charts-build.yaml
+++ b/.github/workflows/kubernetes-charts-build.yaml
@@ -55,7 +55,10 @@ jobs:
           df -h # Optional: Check space before build
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4.3.1
+        uses: azure/setup-helm@v4.2.0
+        with:
+          version: v3.17.0
+
 
       - name: Set up Python
         uses: actions/setup-python@v6.0.0