unkinben 58c32c1cb6 Bump Woodpecker CI to v3.16.0 ...

Move the Woodpecker helm chart from 3.6.3 (appVersion 3.14.1) to 3.6.5
(appVersion 3.16.0), upgrading server and agent together. Enable the new
agent flag that gates step-level serviceAccountName so existing pipelines
keep working.

- Bump helmChart version 3.6.3 -> 3.6.5 in the au-syd1 overlay (server +
  agent both render as v3.16.0 via the chart appVersion).
- Set WOODPECKER_BACKEND_K8S_SERVICE_ACCOUNT_NAME_ALLOW_FROM_STEP=true on
  the agent; 3.16.0 (GHSA-qf34-295c-26v8) gates step-level
  serviceAccountName behind this flag (default false), and the estate's
  pipelines set backend_options.kubernetes.serviceAccountName.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

2026-07-27 21:55:30 +10:00

..

base

Roll bind-operator to v0.2.6 (loop-free TSIG-keyed NOTIFY) (#293)

2026-07-25 23:53:55 +10:00

overlays/au-syd1

Bump Woodpecker CI to v3.16.0

2026-07-27 21:55:30 +10:00