Helmfile apply instead of sync
helmfile sync
always upgrades the release regardless of whether there are changes or not
helmfile apply
runs a helm diff
and upgrades the release only if it sees changes. This way we also get to see what the diff is in the pipeline logs