chore(chart): appVersion 0.2.5, chart 0.3.5 (elasticsql 0.20.4 train)

[fupelaqu]

Last of the six-repo train: core 0.20.4 → extensions 0.2.4 → arrow 0.2.5 → jdbc 0.2.5 → repl 0.20.4 → this.

	from	to
Chart.yaml version	0.3.4	0.3.5
Chart.yaml appVersion	0.2.4	0.2.5
federation-helm.yml IMAGE_TAG	0.2.3	0.2.5

What the images inherit

elasticsql 0.20.4	the completeness family — GROUP BY (#205), window PARTITION BY (#207), un-LIMITed SELECT (#209) and an explicit LIMIT above index.max_result_window (#224) no longer truncate silently; PIT paging sorts by _doc and gates at 7.12 (#197); the whole statement must parse (#213)
extensions 0.2.4	materialized-view error integrity — a cluster outage is no longer reported as 404 "does not exist" (#45), and a metadata table that cannot be created is no longer a 402 quota breach (#46)
arrow 0.2.5	the JOIN ceilings that killed the sidecar rather than degrading: legs past exactly 4,032 rows (#143), lazily streamed bounded legs (#147), a writable and bounded DuckDB spill directory (#141), a real health probe that sees allocator degradation (#146), and a default logback.xml so the images stop booting at ROOT DEBUG (#138 — a data-exposure fix as much as a performance one)

⚠️ Also reconciles the third surface

.github/workflows/federation-helm.yml IMAGE_TAG was still '0.2.3' — the 0.3.4 hop bumped the chart and left the workflow behind, exactly the drift the 0.2.3 hop had just fixed. The live-install jobs docker pull and kind load that tag independently of the chart, so CI was loading 0.2.3 images while the goldens rendered 0.2.4. Its own comment says MUST match Chart.yaml appVersion.

Goldens

All seven regenerated. Checked for pre-existing drift first (none — all seven rendered byte-identical before the bump), so the diff is only what appVersion drives: image tags, helm.sh/chart, app.kubernetes.io/version, and the ConfigMap checksums that follow from them.

✅ Image gate — cleared

appVersion is the default image tag, so this chart is only mergeable once the images exist. Re-probed at push time, all five answer HTTP 200 on DockerHub:

softnetwork/softclient4es-federation:0.2.5
softnetwork/softclient4es{6,7,8,9}-arrow-flight-sql:0.2.5

(They were 404 when the commit was authored — the commit message records that state and is now superseded.)

Verified locally — the full static gate

• helm lint clean on the chart and all three examples
• kubeconform -strict clean on base + three examples (3 / 7 / 11 / 11 resources, 0 invalid)
• all seven goldens re-render byte-identical
• zero kind: Secret
• A2b discriminator holds: 3 commented duckdb-attach previews in heterogeneous-ready, 0 in three-region, and the two example goldens stay byte-identical to each other

🤖 Generated with Claude Code