Skip to content

chore(deps): update all non-major dependencies (main) - #356

Merged
amuraru merged 1 commit into
mainfrom
renovate/main-all-minor-patch
Nov 1, 2026
Merged

chore(deps): update all non-major dependencies (main)#356
amuraru merged 1 commit into
mainfrom
renovate/main-all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
adobe/cruise-control minor 3.0.3-adbe-20260722 → 3.1.0-adbe-20261029 age adoption passing confidence
alpine (source) final digest 294b683 → be26560
alpine stage digest 294b683 → be26560
cert-manager (source) patch v1.21.2 → v1.21.3 age adoption passing confidence
contour (source) minor 0.8.0 → 0.9.0 age adoption passing confidence
coveooss/gotemplate patch 3.12.0 → 3.12.1 age adoption passing confidence
debian final digest a29215f → f6b08b0
eclipse-temurin (source) final digest 9d76de1 → 0faf24c
envoyproxy/envoy minor v1.39.4 → v1.40.2 age adoption passing confidence
go (source) golang patch 1.27.2 → 1.27.3 age adoption passing confidence
golang (source) final digest 007a316 → 2920bb1
golang (source) stage minor 1.25-alpine → 1.27-alpine age adoption passing confidence
golang (source) stage digest 007a316 → 2920bb1
golangci/golangci-lint minor 2.14.0 → 2.15.0 age adoption passing confidence
helm uses-with patch 4.3.0 → 4.3.1 age adoption passing confidence
helm/helm patch 4.3.0 → 4.3.1 age adoption passing confidence
kube-prometheus-stack (source) minor 92.3.1 → 92.17.0 age adoption passing confidence
maven (source) stage digest e2359c0 → db7b124
maven (source) stage digest 9b868ff → f64fd4f
quay.io/brancz/kube-rbac-proxy patch v0.23.0 → v0.23.1 age adoption passing confidence
io.confluent:kafka-avro-serializer (source) compile minor 8.3.2 → 8.4.0 age adoption passing confidence
io.confluent:kafka-schema-registry-client (source) compile minor 8.3.2 → 8.4.0 age adoption passing confidence
org.springframework.boot:spring-boot-starter-parent (source) parent patch 4.1.1 → 4.1.2 age adoption passing confidence

Release Notes

adobe/cruise-control

v3.1.0-adbe-20261029

Compare Source

Rebased on top of https://github.com/cruise-control-for-kafka/cruise-control main branch - the new home of the project (Linux Foundation backed):

Full Changelog: https://github.com/adobe/cruise-control/commits/3.1.0-adbe-20261029

cert-manager/cert-manager (cert-manager)

v1.21.3

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.3 removes trust in the compromised eMudhra CA (see eMudhra Compromise). The updated base images no longer include the "emSign ECC Root CA - G3" root certificate. Go 1.26.10 also makes crypto/x509 reject certificate chains that pass through the compromised intermediates (CVE-2026-111943).

It also fixes an ACME ARI renewal loop, stops the controller copying a private key from a Secret that the Certificate does not own, and quotes the proxy values in the Helm chart. It updates Go and several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind
Bug or Regression
  • Added status.acme.ari.certID to track issuance of new certs and re-fetch ARI from CA. This fixes a renewal loop where a stale ARI window from the previous certificate triggered repeated re-issuance until the CA rate limit was hit. (#​9292, @​hjoshi123)
  • Helm chart: quote the http_proxy, https_proxy and no_proxy values when rendering the controller Deployment env vars, so values like *.example.com no longer break the manifest. (#​9407, @​pujitha24)
  • The requestmanager and issuing controllers now only consume the Secret named by status.nextPrivateKeySecretName when it carries the cert-manager.io/next-private-key label and is owned by the Certificate, matching the invariant the keymanager controller already enforces. Previously a principal able to write the certificates/status subresource, but not to read Secrets, could name any Secret in the namespace and have its private key copied into spec.secretName. The keymanager controller no longer creates the next private key Secret under the name in status.nextPrivateKeySecretName. It always uses a generated name, records a NotOwned Warning event when the field names a Secret it does not own, and repoints the field at the Secret it owns rather than deleting that Secret when the two disagree. The Secret named by spec.secretName is never treated as a next private key Secret, even if spec.secretTemplate labels it as one. (#​9368, @​wallrj)
Other (Cleanup or Flake)
  • Upgrade Go to 1.26.9, fixing CVEs in the crypto/tls, net/http, net/textproto and html/template packages. (#​9444, @​wallrj-cyberark)
  • Upgrade Go to 1.26.10, fixing a CVE in the crypto/x509 package. (#​9501, @​wallrj-cyberark)
  • Bump golang.org/x/net to v0.60.0 to fix reported security vulnerabilities (#​9451)
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace and otlptracegrpc to v1.45.0 to fix a reported security vulnerability (#​9374, #​9375)
  • Update distroless base images, removing the compromised "emSign ECC Root CA - G3" root certificate (#​9351, #​9414, #​9493, #​9495)
projectcontour/helm-charts (contour)

v0.9.0

Compare Source

Helm chart for Contour 1.33.8 - an open source Kubernetes ingress controller that works by deploying the Envoy proxy as a reverse proxy and load balancer.

What's Changed

Full Changelog: projectcontour/helm-charts@contour-0.8.0...contour-0.9.0

coveooss/gotemplate

v3.12.1

Compare Source

Changelog

  • f293669 Merge pull request #​327 from coveooss/renovate/go-golang.org-x-net-vulnerability
  • 7afaa2e Merge pull request #​328 from coveooss/feature/PES-4009/fix-include-context-recursion
  • aea1aaf refactor(template): copy the include arguments without a recursive merge
  • 218cba9 docs(template): clarify the mergeIntoCopy and failing-include test comments
  • ef2e0b9 refactor(template): simplify mergeIntoCopy and keep only the failing-include test
  • d7e8ea8 fix(template): stop include from making the caller context reference itself
  • 527894c refactor(template): restore the caller's missingkey mode explicitly and keep the refactor's tests
  • 920a880 refactor(template): set the missingkey option through the template itself
  • 7faabe4 refactor(template): simplify missingkey tracking and test the failing snippet only
  • e214293 fix(template): start a new template context with the default missingkey mode
  • 12d4464 fix(template): keep the caller's missingkey mode after a nested include
  • 81cde89 refactor(template): set the include missingkey option through one helper
  • 002732c test(template): cover the include fallback to the global context and argument precedence
  • 561dc75 chore(deps): update module golang.org/x/net to v0.55.0 [security]
  • e35f3e5 Merge pull request #​318 from coveooss/renovate/all-minor-patch
  • 56017e7 chore(deps): update step-security/harden-runner action to v2.19.0
  • 255e4b2 Merge pull request #​304 from coveooss/renovate/actions-checkout-6.x
  • 06f7549 chore(deps): update actions/checkout action to v6
  • f98921c Merge pull request #​316 from coveooss/renovate/all-minor-patch
  • 2bdd0de Merge pull request #​317 from coveooss/renovate/actions-upload-pages-artifact-5.x
  • 5363190 Merge pull request #​315 from coveooss/renovate/go-github.com-go-git-go-git-v5-vulnerability
  • b0b932d chore(deps): update actions/upload-pages-artifact action to v5
  • f454f50 fix(deps): update all non-major dependencies
  • 7da292f fix(deps): update module github.com/go-git/go-git/v5 to v5.18.0 [security]
  • fccc83d Merge pull request #​299 from coveooss/renovate/all-minor-patch
  • 76740a0 fix(deps): update all non-major dependencies
  • c6a1bec Merge pull request #​308 from coveooss/renovate/go-github.com-go-git-go-git-v5-vulnerability
  • c9a3bc2 fix(test): restructure TestLorem to not rely on deprecated rand.Seed determinism
  • c5c974f fix: add format string arguments to silence go vet warnings
  • f176a6c Merge pull request #​314 from coveooss/dependabot/go_modules/github.com/cloudflare/circl-1.6.3
  • 46326c8 Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
  • b988d0c Merge pull request #​301 from coveooss/renovate/actions-upload-pages-artifact-4.x
  • 66769c7 Merge pull request #​312 from coveooss/renovate/actions-deploy-pages-5.x
  • 3159038 Merge pull request #​311 from coveooss/renovate/actions-configure-pages-6.x
  • 3fecc56 chore(deps): update actions/deploy-pages action to v5
  • bb39910 chore(deps): update actions/configure-pages action to v6
  • 66d2410 fix(deps): update module github.com/go-git/go-git/v5 to v5.17.1 [security]
  • f7d84dd chore(deps): update actions/upload-pages-artifact action to v4
  • a3d6567 Merge pull request #​302 from coveooss/renovate/actions-setup-go-6.x
  • 7965cd1 chore(deps): update actions/setup-go action to v6
  • e95d532 Merge pull request #​293 from coveooss/renovate/all-minor-patch
  • 05009c0 fix(deps): update all non-major dependencies
  • 22f6308 Merge pull request #​295 from coveooss/chore/GHA-041948-stepsecurity-remediation
  • 787f179 [StepSecurity] Apply security best practicesSigned-off-by: StepSecurity Bot bot@stepsecurity.io. J:DEF-2843
  • d4abce9 Merge pull request #​292 from coveooss/renovate/all-minor-patch
  • 3aa982d fix(deps): update all non-major dependencies
  • 7c66318 Merge pull request #​290 from coveooss/renovate/all-minor-patch
  • 2cd5b55 fix(deps): update all non-major dependencies
  • 535952d Merge pull request #​291 from step-security-bot/stepsecurity_remediation_1737991467
  • 8752733 [StepSecurity] ci: Harden GitHub Actions
  • cff9ed9 Merge pull request #​289 from coveooss/renovate/all-minor-patch
  • 8a0a0dd fix(deps): update all non-major dependencies
  • 5a1ccde Merge pull request #​287 from coveooss/renovate/all-minor-patch
  • 8f5b5a2 fix(deps): update module github.com/puerkitobio/goquery to v1.10.1
  • 5661034 Merge pull request #​288 from coveooss/renovate/go-github.com-go-git-go-git-v5-vulnerability
  • 38eea20 fix(deps): update module github.com/go-git/go-git/v5 to v5.13.0 [security]
  • bba9f88 Merge pull request #​286 from coveooss/dependabot/go_modules/golang.org/x/crypto-0.31.0
  • 965458c Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  • d42a719 Merge pull request #​285 from coveooss/renovate/all-minor-patch
  • b93a1ba chore(deps): update all non-major dependencies
golang/go (go)

v1.27.3

golangci/golangci-lint

v2.15.0

Compare Source

Released on 2026-10-16

  1. Linters new features or changes
    • errcheck: from 1.20.0 to 1.30.0
    • exhaustive: from 0.13.0 to 0.15.0 (⚠️ changes)
    • gocognit: from 1.2.1 to 1.3.0
    • golines: from 0.15.0 to 0.16.0
    • govet-modernize: from 0.50.0 to 0.52.0
    • loggercheck: from 0.12.0 to 0.13.0
    • predeclared: from 0.2.2 to 0.3.0
    • wrapcheck: from 2.12.0 to 2.13.0
  2. Linters bug fixes
    • bidichk: from 0.3.3 to 0.3.4
    • canonicalheader: from a25c71c to e18e5c5
    • gofumpt: improve deprecation logs
    • gosec: improve concurrency default value
    • iface: from 1.5.1 to 1.5.3
    • paralleltest: from 1.0.15 to 1.0.16
    • revive: from 1.17.0 to 1.17.1
    • revive: the rules context-keys-type, errorf, modifies-value-receiver, range-val-address, string-of-int, time-equal, time-naming, unexported-return, unhandled-error, var-declaration are working (less randomly).
    • rowserrcheck: from c5f79b8 to e0740d5
    • staticcheck: from 0.8.1 to 0.8.2
  3. Bug fixes
    • fix: compute custom version hash with module versions
    • fix: env vars loading (related to revive)

⚠️ Changes of the exhaustive linter:

  • The replaced options still exists, and partially works, but they are deprecated.
  • The options explicit-exhaustive-switch and explicit-exhaustive-map have been replaced by explicit-exhaustive.
  • The check the value map has been replaced by mapliteral.
  • The option ignore-enum-members (string) has been replaced by ignore-constants (slice).
  • The option ignore-enum-types (string) has been replaced by ignore-types (slice).
  • New report messages.
  • The linter is a now a "slow" linter.
helm/helm (helm)

v4.3.1: Helm v4.3.1

Compare Source

Helm v4.3.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
Installation and Upgrading

Download Helm v4.3.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump otlploghttp and stdoutlog to v0.21.0 c0d08d0 (Terry Howe)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates 0c0146e (dependabot[bot])
  • fix: bump golang.org/x/net to v0.61.0 (#​32758) dd91731 (Terry Howe)
  • fix(linters): update golangci-lint to v2.14.0 (#​32744) 3a376b2 (Ruslan Shaydullin)
  • fix(action): wait for CRD establishment under HookOnlyStrategy (#​32672) 5fed6a5 (Pujitha Paladugu)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2 (#​32726) b227bf4 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.2 (#​32715) af79b8e (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc ab6b245 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (#​32665) 0f20617 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#​32664) e26e158 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace (#​32663) 23ab1c5 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 (#​32662) 8303180 (dependabot[bot])
prometheus-community/helm-charts (kube-prometheus-stack)

v92.17.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.16.2...kube-prometheus-stack-92.17.0

v92.16.2

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

New Contributors

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.16.1...kube-prometheus-stack-92.16.2

v92.16.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

New Contributors

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.16.0...kube-prometheus-stack-92.16.1

v92.16.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

New Contributors

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.15.0...kube-prometheus-stack-92.16.0

v92.15.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

New Contributors

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.14.1...kube-prometheus-stack-92.15.0

v92.14.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

New Contributors

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.14.0...kube-prometheus-stack-92.14.1

v92.14.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

  • [kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @​renovate[bot] in #​7435

Full Changelog: prometheus-community/helm-charts@alertmanager-snmp-notifier-2.3.0...kube-prometheus-stack-92.14.0

v92.13.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.13.0...kube-prometheus-stack-92.13.1

v92.13.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

  • [kube-prometheus-stack] use kubernetes.io/tls secret for admission webhook certificates by @​jkroepke in #​7373

Full Changelog: prometheus-community/helm-charts@prometheus-couchdb-exporter-1.2.0...kube-prometheus-stack-92.13.0

v92.12.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and sc

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/main-all-minor-patch branch 12 times, most recently from 80d94f8 to 5c9c30f Compare October 20, 2026 16:14
@renovate
renovate Bot force-pushed the renovate/main-all-minor-patch branch 18 times, most recently from 86fb228 to eeaa50f Compare October 27, 2026 20:47
@renovate
renovate Bot force-pushed the renovate/main-all-minor-patch branch 11 times, most recently from d82ba34 to 098696a Compare October 31, 2026 02:40
@renovate
renovate Bot force-pushed the renovate/main-all-minor-patch branch from 098696a to 6481cf6 Compare October 31, 2026 22:47
@amuraru
amuraru merged commit 5c26bea into main Nov 1, 2026
7 checks passed
@amuraru
amuraru deleted the renovate/main-all-minor-patch branch November 1, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@amuraru