Tim-herbie · Tim-herbie · Sep 13, 2026
diff --git a/.github/release-pr-body.md b/.github/release-pr-body.md
@@ -1,54 +1,32 @@
-## Release 3.0.0
+## Release 3.0.1
 
-### Breaking Changes
-- The chart no longer ships or manages bundled Keycloak, PostgreSQL, and MinIO resources.
-- All internal templates for these components were removed.
-- The chart now focuses on OpenCloud itself and expects identity/storage dependencies to be handled externally when needed.
-- If you previously relied on bundled Keycloak/PostgreSQL/MinIO, you must migrate your setup before upgrading.
-
-### Migration Notes
-- Remove old values related to internal Keycloak/PostgreSQL/MinIO.
-- Move to external services or to the current default architecture (integrated IDM and non-bundled dependencies).
-- Re-check OIDC and storage values, because configuration structure and defaults changed.
-- If you are using the httproutes with one gateway listener for all routes, please take a look on the values file. We added a new parameter to allow one exact listener for all httproutes and one prefix to generate listeners for each route.
-
-
-Base: changes since 2.4.7.
+Base: changes since 3.0.0.
 
 OpenCloud version from values.yaml: 7.5.0
 
 ### Pull Requests
-- [#162](https://github.com/Tim-herbie/opencloud-helm/pull/162) feat(httproute): allow exact sectionName overrides for external gateways
-- [#161](https://github.com/Tim-herbie/opencloud-helm/pull/161) chore(deps): update docker.io/collabora/code docker tag to v26.04.3.1.1
-- [#155](https://github.com/Tim-herbie/opencloud-helm/pull/155) chore(deps): update docker.io/opencloudeu/opencloud-rolling docker tag to v7.5.0
-- [#160](https://github.com/Tim-herbie/opencloud-helm/pull/160) chore(deps): update docker.io/alpine/openssl docker tag to v3.5.8
-- [#159](https://github.com/Tim-herbie/opencloud-helm/pull/159) Feature: Move collaboration into the opencloud process
-- [#157](https://github.com/Tim-herbie/opencloud-helm/pull/157) feat: extend csp yaml for epub reader iframe sytle loading
-- [#153](https://github.com/Tim-herbie/opencloud-helm/pull/153) chore(deps): update oras-project/setup-oras action to v2
-- [#154](https://github.com/Tim-herbie/opencloud-helm/pull/154) fix: add Flux reconciler RBAC for Keycloak
-- [#152](https://github.com/Tim-herbie/opencloud-helm/pull/152) chore(ci): package and push every helm chart for the tag latest
-- [#149](https://github.com/Tim-herbie/opencloud-helm/pull/149) fix: preserve proxy policies with role quotas
-- [#150](https://github.com/Tim-herbie/opencloud-helm/pull/150) chore(deps): update opencloudeu/web-extensions docker tag to draw-io-2.2.0
+- [#170](https://github.com/Tim-herbie/opencloud-helm/pull/170) fix(opencloud): init-container creates and validates IDM LDAP cert/ke…
+- [#169](https://github.com/Tim-herbie/opencloud-helm/pull/169) fix(identity): add opencloud.ldap.keepIdm for external OIDC without OpenLDAP
+- [#168](https://github.com/Tim-herbie/opencloud-helm/pull/168) chore(ci): package and push every pr change to the registry
+- [#166](https://github.com/Tim-herbie/opencloud-helm/pull/166) option to use HTTPS protocol when TLS is provided externally
+- [#163](https://github.com/Tim-herbie/opencloud-helm/pull/163) chore(deps): update docker.io/collabora/code docker tag to v26.04.3.2.1
+- [#164](https://github.com/Tim-herbie/opencloud-helm/pull/164) Preserve storage users mount ID during legacy migration
 
 ### Changelog
-## [3.0.0] - 2026-08-30
+## [3.0.1] - 2026-09-13
 
 ### Breaking Changes
-- [#107](https://github.com/Tim-herbie/opencloud-helm/pull/107) feat: enable HTTPS, OIDC auth, Collabora, ClamAV, and OPA policies- #107
+- None
 
 ### Features
-- [#162](https://github.com/Tim-herbie/opencloud-helm/pull/162) feat(httproute): allow exact sectionName overrides for external gateways
-- [#157](https://github.com/Tim-herbie/opencloud-helm/pull/157) feat: extend csp yaml for epub reader iframe sytle loading
+- None
 
 ### Fixes
-- [#154](https://github.com/Tim-herbie/opencloud-helm/pull/154) fix: add Flux reconciler RBAC for Keycloak
-- [#149](https://github.com/Tim-herbie/opencloud-helm/pull/149) fix: preserve proxy policies with role quotas
+- [#170](https://github.com/Tim-herbie/opencloud-helm/pull/170) fix(opencloud): init-container creates and validates IDM LDAP cert/ke…
+- [#169](https://github.com/Tim-herbie/opencloud-helm/pull/169) fix(identity): add opencloud.ldap.keepIdm for external OIDC without OpenLDAP
 
 ### Chore / Docs / CI / Other
-- [#161](https://github.com/Tim-herbie/opencloud-helm/pull/161) chore(deps): update docker.io/collabora/code docker tag to v26.04.3.1.1
-- [#155](https://github.com/Tim-herbie/opencloud-helm/pull/155) chore(deps): update docker.io/opencloudeu/opencloud-rolling docker tag to v7.5.0
-- [#160](https://github.com/Tim-herbie/opencloud-helm/pull/160) chore(deps): update docker.io/alpine/openssl docker tag to v3.5.8
-- [#153](https://github.com/Tim-herbie/opencloud-helm/pull/153) chore(deps): update oras-project/setup-oras action to v2
-- [#152](https://github.com/Tim-herbie/opencloud-helm/pull/152) chore(ci): package and push every helm chart for the tag latest
-- [#150](https://github.com/Tim-herbie/opencloud-helm/pull/150) chore(deps): update opencloudeu/web-extensions docker tag to draw-io-2.2.0
-- [#159](https://github.com/Tim-herbie/opencloud-helm/pull/159) Feature: Move collaboration into the opencloud process
+- [#168](https://github.com/Tim-herbie/opencloud-helm/pull/168) chore(ci): package and push every pr change to the registry
+- [#163](https://github.com/Tim-herbie/opencloud-helm/pull/163) chore(deps): update docker.io/collabora/code docker tag to v26.04.3.2.1
+- [#166](https://github.com/Tim-herbie/opencloud-helm/pull/166) option to use HTTPS protocol when TLS is provided externally
+- [#164](https://github.com/Tim-herbie/opencloud-helm/pull/164) Preserve storage users mount ID during legacy migration
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,25 @@ All notable changes to this project will be documented in this file.
 
 <!-- release-bot:start -->
 
+## [3.0.1] - 2026-09-13
+
+### Breaking Changes
+- None
+
+### Features
+- None
+
+### Fixes
+- [#170](https://github.com/Tim-herbie/opencloud-helm/pull/170) fix(opencloud): init-container creates and validates IDM LDAP cert/ke…
+- [#169](https://github.com/Tim-herbie/opencloud-helm/pull/169) fix(identity): add opencloud.ldap.keepIdm for external OIDC without OpenLDAP
+
+### Chore / Docs / CI / Other
+- [#168](https://github.com/Tim-herbie/opencloud-helm/pull/168) chore(ci): package and push every pr change to the registry
+- [#163](https://github.com/Tim-herbie/opencloud-helm/pull/163) chore(deps): update docker.io/collabora/code docker tag to v26.04.3.2.1
+- [#166](https://github.com/Tim-herbie/opencloud-helm/pull/166) option to use HTTPS protocol when TLS is provided externally
+- [#164](https://github.com/Tim-herbie/opencloud-helm/pull/164) Preserve storage users mount ID during legacy migration
+
+
 ## [Unreleased]
 
 ### Fixes

diff --git a/README.md b/README.md
@@ -38,7 +38,7 @@ OpenCloud is a cloud collaboration platform that provides file sync and share, d
 | 7.2.0            | 2.4.4 |
 | 7.3.0            | 2.4.5, 2.4.6 |
 | 7.4.0            | 2.4.7 |
-| 7.5.0            | 3.0.0 |
+| 7.5.0            | 3.0.0, 3.0.1 |
 
 
 ## 💡 Contributing
@@ -117,7 +117,7 @@ For deploying the full stack with FluxCD (external Keycloak, OpenLDAP, ClamAV),
   ```sh
   helm install opencloud \
     oci://ghcr.io/tim-herbie/opencloud-helm/opencloud \
-    --version 3.0.0 \
+    --version 3.0.1 \
     --namespace opencloud \
     --create-namespace
   ```
diff --git a/charts/opencloud/Chart.yaml b/charts/opencloud/Chart.yaml
@@ -9,7 +9,7 @@ maintainers:
   - name: Tim Herbert
     url: https://timherbert.de
 type: application
-version: 3.0.0
+version: 3.0.1
 # renovate: datasource=docker depName=opencloudeu/opencloud-rolling
 appVersion: latest
 kubeVersion: ""