Update all non-major dependencies by renovate[bot] · Pull Request #472 · FairwindsOps/nova

renovate · 2026-08-05T20:00:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
alpine (source)	final	minor	`3.23.4` → `3.24.1`
github.com/Masterminds/semver/v3	require	minor	`v3.4.0` → `v3.5.0`
github.com/google/go-containerregistry	require	minor	`v0.21.5` → `v0.22.1`
github.com/stretchr/testify	require	minor	`v1.11.1` → `v1.12.1`
helm.sh/helm/v3	require	minor	`v3.20.2` → `v3.21.4`	`v3.22.0`
k8s.io/api	require	minor	`v0.35.4` → `v0.37.0`
k8s.io/apimachinery	require	minor	`v0.35.4` → `v0.37.0`
k8s.io/client-go	require	minor	`v0.35.4` → `v0.37.0`
sigs.k8s.io/controller-runtime	require	minor	`v0.23.3` → `v0.25.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.22.1`

Compare Source

What's Changed

Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in #2426
daemon: fix stale docker/docker reference in WithClient docs by @BobDu in #2428
build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #2422
authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in #2420
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2423
Support pulling images by sha512 digest by @BobDu in #2427
Allow empty label and annotation values in crane mutate by @theadsingh in #2418
fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in #2434
validate: support index attestation manifests and empty configs by @Subserial in #2414
name: improve error when parsing a reference with a URL scheme by @locker95 in #2431
fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in #2436
fix(release): honor declared Go toolchain by @rksharma-owg in #2435
remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in #2432
flatten: preserve config and layer media types when flattening by @Subserial in #2438
fix(mutate): make Time layer updates lazy by @amarkdotdev in #2429
build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #2439
remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in #2441

New Contributors

@shaggyinsomniac made their first contribution in #2426
@BobDu made their first contribution in #2428
@nileshpatil6 made their first contribution in #2420
@theadsingh made their first contribution in #2418
@locker95 made their first contribution in #2431
@rksharma-owg made their first contribution in #2435
@codysoyland made their first contribution in #2441

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

What's Changed

mutate: let Time and Canonical take tarball.LayerOption by @mzihlmann in #2403
build: add multi-architecture Cloud Build configurations for crane, gcrane, and krane by @tprussak in #2412
remote: resolve push-check credentials against the repository by @mzihlmann in #2411
Allow single-character repository paths by @semx in #2407
fix: add missing substitutions and workspace cleanup to new build files by @tprussak in #2413
remote: retry failed Puller and Pusher initialization by @iahsanGill in #2406
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2405
build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2415
go.mod: bump Go version + add toolchain directive to replace .go-version file by @Subserial in #2416
fix: Fix new build options and provenance by @tprussak in #2417
fix(build): unify new build flow into cloudbuild_v2.yaml by @tprussak in #2419

New Contributors

@mzihlmann made their first contribution in #2403
@tprussak made their first contribution in #2412
@semx made their first contribution in #2407

Full Changelog: google/go-containerregistry@v0.21.9...v0.21.10

`v0.21.9`

Compare Source

What's Changed

actions: pin slsa generator by version by @Subserial in #2395
fix: prevent data race on scope refreshes within remote.writer by @Subserial in #2396
fix: remove '.' from unsafe path prefixes by @Subserial in #2400
build(deps): bump the actions group with 3 updates by @dependabot[bot] in #2398

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

`v0.21.8`

Compare Source

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2353
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in #2367
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in #2368
build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in #2363
build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in #2377
build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #2375
Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in #2330
feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in #2358
Document tag and digest reference semantics by @Haihan-Jiang in #2325
remote: release pull limiter slot when body is read to EOF by @knQzx in #2373
tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in #2370
authn: read Podman auth from XDG config by @vigneshakaviki in #2379
transport: per-host bearer token exchange on cross-host redirect by @amitzig in #2360
mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in #2371
fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in #2356
feat(remote): add WithReferrersTagFallback option by @kevinmdavis in #2366
mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in #2372
tarball: use correct file extension for zstd/uncompressed by @milas in #2382
build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in #2380
actions: update actions to be pinned by hash by @Subserial in #2384
Bump go version to 1.26.5 by @Subserial in #2388

New Contributors

@xuxiaowei-com-cn made their first contribution in #2358
@knQzx made their first contribution in #2373
@arpitjain099 made their first contribution in #2370
@vigneshakaviki made their first contribution in #2379
@amitzig made their first contribution in #2360
@x64vps made their first contribution in #2356
@kevinmdavis made their first contribution in #2366
@sadmanf made their first contribution in #2372

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

`v0.21.7`

Compare Source

What's Changed

tarball: return error instead of panicking on missing rootfs.diff_ids by @iahsanGill in #2304
gcrane: honor --platform flag in copy by @iahsanGill in #2307
mutate: verify layer digests in Extract and Time by @momenashrafff in #2303
tarball: close layer readers during Write by @nandbhat in #2308
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2311
build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @dependabot[bot] in #2312
BUGFIX: Fail with error when read exceeds maximum by @inteon in #2328
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2327
fix(name): anchor loopback registry detection by @rohan-patnaik in #2314
Reject symlinks in OCI layout blobs by @mosskappa in #2306
fix(crane): avoid creating export tar on pull failure by @Haihan-Jiang in #2318
feat(kubernetes): allow ignoring pull secrets by @rohan-patnaik in #2315
fix(name): preserve localhost registry references by @rohan-patnaik in #2316
pkg/registry: export ErrNotFound by @malt3 in #2176
pkg/registry: export RedirectError by @malt3 in #2177
build(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #2343
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2344
fix: prevent SSRF in google.List() pagination by @tufstraka in #2332
internal/gzip: fix goroutine leak in ReadCloserLevel by @amarkdotdev in #2347
fix(transport): apply refreshed bearer token after cross-host redirect by @64johnlee in #2337
build(deps): bump the go-deps group across 3 directories with 4 updates by @dependabot[bot] in #2348
fix(tarball): normalize paths when matching files by @bstoll in #2334
transport: do not re-attach bearer token after cross-host redirect by @evilgensec in #2349
Bump CI go version to 1.26.4 by @Subserial in #2350

New Contributors

@momenashrafff made their first contribution in #2303
@nandbhat made their first contribution in #2308
@inteon made their first contribution in #2328
@rohan-patnaik made their first contribution in #2314
@mosskappa made their first contribution in #2306
@Haihan-Jiang made their first contribution in #2318
@tufstraka made their first contribution in #2332
@amarkdotdev made their first contribution in #2347
@64johnlee made their first contribution in #2337
@bstoll made their first contribution in #2334

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

`v0.21.6`

Compare Source

What's Changed

fix: update dependencies to use new azure sdk components by @gaganhr94 in #2262
transport: restore resp.Body in retryError so CheckError can parse it by @alliasgher in #2264
pkg/registry: return 202 Accepted for PATCH chunk uploads by @alliasgher in #2265
Follow OCI distribution spec for artifactType and annotations by @malt3 in #2269
actions: attach Codecov token to coverage tests on main by @Subserial in #2270
remote: use DeleteScope (with "delete" action) for manifest deletion by @alliasgher in #2266
remote: limit concurrent layer pulls by @gnix0 in #2271
pkg/registry: reject corrupt disk blobs by @gnix0 in #2272
mutate: close layer readers during export by @gnix0 in #2277
crane/flatten: preserve image media type when flattening by @alliasgher in #2267
build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by @dependabot[bot] in #2273
build(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by @dependabot[bot] in #2278
build(deps): bump the go-deps group across 3 directories with 6 updates by @dependabot[bot] in #2280
Replace go-homedir with os.UserHomeDir by @jammie-jelly in #2282
pkg/name: only treat .localhost as non-HTTPS, not .local by @blackwell-systems in #2281
transport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by @marwan9696 in #2285
test(mutate): add Extract round-trip test for filesystem object preservation by @blackwell-systems in #2283
experiments: remove deprecated support for estargz by @thaJeztah in #2288
build(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by @dependabot[bot] in #2289
fix: limit HTTP response body reads to prevent OOM by @evilgensec in #2296
build(deps): bump the go-deps group across 3 directories with 6 updates by @dependabot[bot] in #2297
transport: block redirects from token server to private/link-local addresses (SSRF fix) by @evilgensec in #2292
pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by @anishesg in #2279
validate: skip non-layer layers by @imjasonh in #2298
remote: validate foreign layer URLs to prevent SSRF (fixes #2259) by @evilgensec in #2293
remote: block SSRF via private-IP Location headers in blob uploads by @adilburaksen in #2295
fix(mutate): preserve config blob and layers for non-Docker OCI artifacts by @blackwell-systems in #2286
fix: preserve per-occurrence layer identity in mutate.Image.Layers() by @iahsanGill in #2299
transport: retry HTTP 429 (Too Many Requests) by @iahsanGill in #2301
transport: allow bearer realm at same host:port as registry by @iahsanGill in #2302
Update go version to 1.26.3 by @Subserial in #2300

New Contributors

@gaganhr94 made their first contribution in #2262
@alliasgher made their first contribution in #2264
@malt3 made their first contribution in #2269
@gnix0 made their first contribution in #2271
@blackwell-systems made their first contribution in #2281
@marwan9696 made their first contribution in #2285
@anishesg made their first contribution in #2279
@adilburaksen made their first contribution in #2295
@iahsanGill made their first contribution in #2299

Full Changelog: google/go-containerregistry@v0.21.5...v0.21.6

stretchr/testify (github.com/stretchr/testify)

`v1.12.1`

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

`v1.12.0`

Compare Source

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in #1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
assert: truncate very long objects in test failure messages by @brackendawson in #1646
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in #1783
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
CI: test also with Go 1.23 by @dolmen in #1783
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
assert: truncate very long objects in test failure messages by @brackendawson in #1646
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
assert: make *AssertionFunc types just aliases by @dolmen in #1563
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

helm/helm (helm.sh/helm/v3)

`v3.21.4`: Helm v3.21.4

Compare Source

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growi

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-05T20:00:07Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

29 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
`github.com/cyphar/filepath-securejoin`	`v0.6.1` -> `v0.7.0`
`github.com/docker/cli`	`v29.4.0+incompatible` -> `v29.7.2+incompatible`
`github.com/fxamacker/cbor/v2`	`v2.9.0` -> `v2.9.1`
`github.com/go-openapi/jsonpointer`	`v0.22.5` -> `v1.0.0`
`github.com/go-openapi/jsonreference`	`v0.21.5` -> `v1.0.0`
`github.com/go-openapi/swag`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/cmdutils`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/conv`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/fileutils`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/jsonutils`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/loading`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/mangling`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/netutils`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/stringutils`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/typeutils`	`v0.25.5` -> `v0.27.1`
`github.com/go-openapi/swag/yamlutils`	`v0.25.5` -> `v0.27.1`
`github.com/klauspost/compress`	`v1.18.5` -> `v1.19.2`
`github.com/lib/pq`	`v1.11.2` -> `v1.12.3`
`go.yaml.in/yaml/v3`	`v3.0.4` -> `v3.0.5`
`golang.org/x/net`	`v0.51.0` -> `v0.57.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.47.0`
`golang.org/x/term`	`v0.40.0` -> `v0.45.0`
`golang.org/x/text`	`v0.34.0` -> `v0.40.0`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`k8s.io/apiextensions-apiserver`	`v0.35.3` -> `v0.37.0`
`k8s.io/kube-openapi`	`v0.0.0-20260304202019-5b3e3fdb0acf` -> `v0.0.0-20260721132016-d427ff9ee9ad`
`k8s.io/utils`	`v0.0.0-20260210185600-b8788abfbbc2` -> `v0.0.0-20260626114624-be93311217bd`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.2` -> `v6.4.2`

CLAassistant · 2026-08-05T20:00:28Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

fairwinds-insights · 2026-08-07T19:55:17Z

Fairwinds Insights Scan Results

View the full report at insights.fairwinds.com.

✅ No new Action Items detected!

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026

renovate Bot requested review from sudermanjr and transient1 as code owners August 5, 2026 20:00

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026

renovate Bot force-pushed the renovate/all-non-major branch from fd461b6 to e53d675 Compare August 7, 2026 19:51

renovate Bot force-pushed the renovate/all-non-major branch from e53d675 to 5a7c8cd Compare August 11, 2026 03:15

renovate Bot requested a review from Azahorscak as a code owner August 11, 2026 03:15

renovate Bot force-pushed the renovate/all-non-major branch 3 times, most recently from ef35f43 to e46c513 Compare August 21, 2026 15:20

renovate Bot force-pushed the renovate/all-non-major branch 2 times, most recently from 2f05b7b to 3999dd0 Compare August 28, 2026 19:24

renovate Bot force-pushed the renovate/all-non-major branch 2 times, most recently from 044a92d to ff8314b Compare September 6, 2026 03:38

renovate Bot force-pushed the renovate/all-non-major branch from ff8314b to 40f6277 Compare September 10, 2026 15:49

jdesouza approved these changes Sep 10, 2026

View reviewed changes

renovate Bot force-pushed the renovate/all-non-major branch from 40f6277 to 564d6c8 Compare September 11, 2026 01:49

jdesouza approved these changes Sep 11, 2026

View reviewed changes

Update all non-major dependencies

7d7aff8

renovate Bot force-pushed the renovate/all-non-major branch from 564d6c8 to 7d7aff8 Compare September 11, 2026 19:20

jdesouza approved these changes Sep 11, 2026

View reviewed changes

Navigation Menu

Uh oh!

Update all non-major dependencies - #472

Update all non-major dependencies#472
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-non-major

renovate Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

CLAassistant commented Aug 5, 2026

Uh oh!

fairwinds-insights Bot commented Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

What's Changed

New Contributors

v3.21.4: Helm v3.21.4

Configuration

Uh oh!

renovate Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

CLAassistant commented Aug 5, 2026

Uh oh!

fairwinds-insights Bot commented Aug 7, 2026

Fairwinds Insights Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Aug 5, 2026 •

edited

Loading

`v3.21.4`: Helm v3.21.4

renovate Bot commented Aug 5, 2026 •

edited

Loading