feat(app-template): update helm-release to v3 #759

	---
	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
	name: "Flux Diff"

	on:
	pull_request:
	branches: ["main"]
	paths: ["kubernetes/**.yaml"]

	permissions:
	contents: read

	jobs:
	flux-diff:
	name: Flux Diff
	runs-on: ubuntu-latest
	permissions:
	pull-requests: write
	strategy:
	matrix:
	path: ["kubernetes/talos-flux", "kubernetes/kube-nas"]
	resource: ["helmrelease", "kustomization"]
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
	with:
	egress-policy: audit

	- name: Generate Token
	uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
	id: generate-token
	with:
	app_id: "${{ secrets.BOT_APP_ID }}"
	private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

	- name: Setup Flux CLI
	uses: fluxcd/flux2/action@534684601ec8888beb0cc4f51117b59e97606c4d # v2.2.3

	- name: Diff Resources
	uses: allenporter/flux-local/action/diff@e630daec1a1bcd24dc80f5100c6e1c7b6a091153 # 4.3.1
	id: diff
	with:
	sources: home-ops
	path: "${{ matrix.path }}"
	resource: "${{ matrix.resource }}"

	- if: ${{ steps.diff.outputs.diff != '' }}
	name: Add comment
	uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
	with:
	repo-token: "${{ steps.generate-token.outputs.token }}"
	message-id: "${{ github.event.pull_request.number }}/${{ matrix.path }}/${{ matrix.resource }}"
	message-failure: Diff was not successful
	message: \|
	```diff
	${{ steps.diff.outputs.diff }}
	```

Provide feedback