fix(ci): persist identity-resolution appVersion bumps back to main

[mozhaev-dev]

Summary

• bump-descriptors and the final "commit version bumps back to main" step in build-images.yml staged a hardcoded list of backend subchart Chart.yaml files that never included src/backend/services/identity-resolution/helm/Chart.yaml. bump-service-appversions.sh bumps it correctly in the run's workspace, but since it was never git add-ed, the bump was silently discarded on every run. ci: persist authenticator/gateway appVersions + bump on manual rebuild #1890 fixed the identical gap for authenticator/gateway three days earlier; identity-resolution landed as a subchart the next day (feat(identity-resolution): cutover readiness — parity fixes, side-by-side deploy, schema ownership (#1602) #1918) and missed the same two lists.
• Because the umbrella chart's appVersion computation already reads this file, the chart still "worked" on any release that also rebuilt identity-resolution in the same CI run (the bump landed in the workspace and got packaged, just never persisted to main). The first release afterward that didn't touch identity-resolution's source packaged whatever was last committed — the original "0.0.0-dev" placeholder, not a real GHCR tag.
• On dev (identityResolution.deploy: true post-cutover), that rendered an unpullable image; the migrate initContainer got stuck in ImagePullBackOff, the umbrella upgrade hit its progress deadline, and Helm auto-rolled back — repeatedly, since nothing fixed the root cause between attempts.
• One-time restore: appVersion set back to 2026.07.25.07.16-a122f77 — verified currently running on dev — so the next release packages an existing image instead of the placeholder.

Test plan

• yamllint/actionlint on build-images.yml (no syntax break — validated locally with yaml.safe_load)
• Next umbrella release on main should commit a real appVersion bump for identity-resolution back to main whenever its image is rebuilt
• Dev auto-deploy stops flapping between the placeholder revision and the last good rollback

Summary by CodeRabbit

• Bug Fixes

  • Improved release automation so identity-resolution Helm chart version updates are consistently saved during build and publishing workflows.

• Chores

  • Updated the identity-resolution chart to a specific build version, replacing the development placeholder.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 172329a7-4400-4f99-87fb-cb01e52b37f6

📥 Commits

Reviewing files that changed from the base of the PR and between 2ad0fe6 and cbc40d0.

📒 Files selected for processing (2)

• .github/workflows/build-images.yml
• src/backend/services/identity-resolution/helm/Chart.yaml

---

📝 Walkthrough

Walkthrough

The chart publishing workflow now stages the identity-resolution Helm chart in both version-persistence commits. Its appVersion is updated from the development placeholder to a specific build tag.

Changes

Identity-resolution chart version persistence

Layer / File(s)	Summary
Persist chart version updates .github/workflows/build-images.yml, src/backend/services/identity-resolution/helm/Chart.yaml	The identity-resolution chart receives a specific appVersion, and both descriptor and chart publishing commit steps stage its Chart.yaml.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• constructorfabric/insight#1890: Updates the same workflow commit paths to persist other backend subchart version bumps.
• constructorfabric/insight#1894: Extends descriptor bump handling for backend subchart Chart.yaml appVersion updates.
• constructorfabric/insight#1838: Modifies the same descriptor and chart publication commit logic for backend subcharts.

Suggested reviewers: ktursunov

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: persisting identity-resolution appVersion bumps back to main in CI.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/identity-resolution-appversion-bump

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}