feat(manager/flux): Support OCI Helm repositories

lib/modules/manager/flux/__fixtures__/helmOCIRelease.yaml

@@ -0,0 +1,35 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: arc-assets
+  namespace: dev
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: actions-runner-controller-charts/gha-runner-scale-set
+      version: 0.4.0
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller
+        namespace: flux-system
+      interval: 30m
+
+  values:
+    runnerScaleSetName: arc-runner-set-assets
+
+    githubConfigUrl: https://github.com/bjw-s/assets
+
+    minRunners: 0
+    maxRunners: 2
+
+    containerMode:
+      type: "dind"
+
+    template:
+      spec:
+        containers:
+          - name: runner
+            image: ghcr.io/bjw-s/github-actions-runner:2.304.0@sha256:85690088155072a95c429a1f150f80a7d7ebf35107221cb25c01c56b62866c1b
+            command:
+              - /home/runner/run.sh

lib/modules/manager/flux/__fixtures__/helmOCISource.yaml

@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: actions-runner-controller
+  namespace: flux-system
+spec:
+  type: oci
+  interval: 30m
+  url: oci://ghcr.io/actions
+  timeout: 3m

lib/modules/manager/flux/extract.spec.ts

@@ -728,6 +728,30 @@ describe('modules/manager/flux/extract', () => {
       ]);
     });
 
+    it('extract oci helm', async () => {
+      const result = await extractAllPackageFiles(config, [
+        'lib/modules/manager/flux/__fixtures__/helmOCISource.yaml',
+        'lib/modules/manager/flux/__fixtures__/helmOCIRelease.yaml',
+      ]);
+      expect(result).toEqual([
+        {
+          deps: [
+            {
+              currentValue: '0.4.0',
+              datasource: DockerDatasource.id,
+              depName:
+                'ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set',
+              registryUrls: [
+                'ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set',
+              ],
+            },
+          ],
+          packageFile:
+            'lib/modules/manager/flux/__fixtures__/helmOCIRelease.yaml',
+        },
+      ]);
+    });
+
     it('ignores files that do not exist', async () => {
       const result = await extractAllPackageFiles(config, [
         'lib/modules/manager/flux/__fixtures__/bogus.yaml',

lib/modules/manager/flux/extract.ts

@@ -3,6 +3,7 @@
 import { readLocalFile } from '../../../util/fs';
 import { regEx } from '../../../util/regex';
 import { BitbucketTagsDatasource } from '../../datasource/bitbucket-tags';
+import { DockerDatasource } from '../../datasource/docker';
 import { GitRefsDatasource } from '../../datasource/git-refs';
 import { GitTagsDatasource } from '../../datasource/git-tags';
 import { GithubReleasesDatasource } from '../../datasource/github-releases';
@@ -181,7 +182,22 @@
                 resource.metadata?.namespace)
         );
         if (matchingRepositories.length) {
-          dep.registryUrls = matchingRepositories.map((repo) => repo.spec.url);
+          dep.registryUrls = matchingRepositories.map((repo) => {
+            if (repo.spec.type === 'oci') {
+              // Change datasource to Docker
+              dep.datasource = DockerDatasource.id;
+              // Ensure the URL is a valid OCI path
+              dep.depName = `${repo.spec.url.replace(
+                'oci://',
+                ''
+              )}/${dep.depName!}`;
+              return dep.depName;
+            } else if (repo.spec.url.startsWith('oci://')) {
+              return repo.spec.url.replace('oci://', '');
+            } else {
+              return repo.spec.url;
+            }
+          });
         } else {
           dep.skipReason = 'unknown-registry';
         }

lib/modules/manager/flux/readme.md

@@ -9,8 +9,8 @@ This manager parses [Flux](https://fluxcd.io/) YAML manifests and supports:
 
 Extracts `helm` dependencies from `HelmRelease` resources.
 
-The `flux` manager only extracts `helm` dependencies for `HelmRelease` resources linked to `HelmRepository` or `GitRepository` sources.
-Renovate does not support OCI `HelmRepository` sources, those with `type: oci`.
+The `flux` manager extracts `helm` dependencies for `HelmRelease` resources linked to `HelmRepository` or `GitRepository` sources.
+Renovate does support OCI `HelmRepository` sources, those with `type: oci`.
 
 In addition, for the `flux` manager to properly link `HelmRelease` and `HelmRepository` resources, _both_ of the following conditions must be met:
 

lib/modules/manager/flux/types.ts

@@ -34,6 +34,7 @@ export interface HelmRepository extends KubernetesResource {
   kind: 'HelmRepository';
   spec: {
     url: string;
+    type: string;
   };
 }