DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 32 Packages Projects Releases 1 Wiki Activity
38,343 Commits 1 Branch 1 Tag
f609a0e8739544584e325a51a67b5562be503bde
Commit Graph
277 Commits
Author SHA1 Message Date
TrueCharts BotandGitHub 1a523b1188 fix(deps): update module github.com/go-git/go-git/v5 v5.12.0 → v5.13.0 (clustertool) (#30410) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)
| require | minor | `v5.12.0` -> `v5.13.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

###
[`v5.13.0`](https://redirect.github.com/go-git/go-git/releases/tag/v5.13.0)

[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.12.0...v5.13.0)

#### What's Changed

- build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in
/cli/go-git by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1065](https://redirect.github.com/go-git/go-git/pull/1065)
- build: bump golang.org/x/net from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1068](https://redirect.github.com/go-git/go-git/pull/1068)
- build: bump golang.org/x/net from 0.23.0 to 0.24.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1071](https://redirect.github.com/go-git/go-git/pull/1071)
- Properly support skipping of non-mandatory extensions by
[@&#8203;codablock](https://redirect.github.com/codablock) in
[https://github.com/go-git/go-git/pull/1066](https://redirect.github.com/go-git/go-git/pull/1066)
- git: Refine some codes in test and non-test. by
[@&#8203;onee-only](https://redirect.github.com/onee-only) in
[https://github.com/go-git/go-git/pull/1077](https://redirect.github.com/go-git/go-git/pull/1077)
- plumbing: protocol/packp, client-side filter capability support by
[@&#8203;edigaryev](https://redirect.github.com/edigaryev) in
[https://github.com/go-git/go-git/pull/1000](https://redirect.github.com/go-git/go-git/pull/1000)
- build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1078](https://redirect.github.com/go-git/go-git/pull/1078)
- plumbing: fix sideband demux on flush by
[@&#8203;aymanbagabas](https://redirect.github.com/aymanbagabas) in
[https://github.com/go-git/go-git/pull/1084](https://redirect.github.com/go-git/go-git/pull/1084)
- storage: dotgit, head reference usually comes first by
[@&#8203;aymanbagabas](https://redirect.github.com/aymanbagabas) in
[https://github.com/go-git/go-git/pull/1085](https://redirect.github.com/go-git/go-git/pull/1085)
- build: bump golang.org/x/text from 0.14.0 to 0.15.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1091](https://redirect.github.com/go-git/go-git/pull/1091)
- build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1094](https://redirect.github.com/go-git/go-git/pull/1094)
- build: bump golang.org/x/net from 0.24.0 to 0.25.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1093](https://redirect.github.com/go-git/go-git/pull/1093)
- git: Added an example for Repository.Branches by
[@&#8203;johnmatthiggins](https://redirect.github.com/johnmatthiggins)
in
[https://github.com/go-git/go-git/pull/1088](https://redirect.github.com/go-git/go-git/pull/1088)
- git: worktree_commit, Modify checking empty commit. Fixes
[#&#8203;723](https://redirect.github.com/go-git/go-git/issues/723) by
[@&#8203;onee-only](https://redirect.github.com/onee-only) in
[https://github.com/go-git/go-git/pull/1050](https://redirect.github.com/go-git/go-git/pull/1050)
- plumbing: transport/http, Wrap http errors to return reason. Fixes
[#&#8203;1097](https://redirect.github.com/go-git/go-git/issues/1097) by
[@&#8203;ggambetti](https://redirect.github.com/ggambetti) in
[https://github.com/go-git/go-git/pull/1100](https://redirect.github.com/go-git/go-git/pull/1100)
- build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1106](https://redirect.github.com/go-git/go-git/pull/1106)
- build: bump golang.org/x/text from 0.15.0 to 0.16.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1107](https://redirect.github.com/go-git/go-git/pull/1107)
- Bumps Go versions and go-billy by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1056](https://redirect.github.com/go-git/go-git/pull/1056)
- \_examples: Fixed a dead link COMPATIBILITY.md by
[@&#8203;gecko655](https://redirect.github.com/gecko655) in
[https://github.com/go-git/go-git/pull/1109](https://redirect.github.com/go-git/go-git/pull/1109)
- build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in
/cli/go-git by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1115](https://redirect.github.com/go-git/go-git/pull/1115)
- build: bump github.com/elazarl/goproxy from
v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb
by [@&#8203;hbelmiro](https://redirect.github.com/hbelmiro) in
[https://github.com/go-git/go-git/pull/1124](https://redirect.github.com/go-git/go-git/pull/1124)
- build: bump golang.org/x/net from 0.25.0 to 0.26.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1104](https://redirect.github.com/go-git/go-git/pull/1104)
- Add option approximating `git clean -x` flag. by
[@&#8203;msuozzo](https://redirect.github.com/msuozzo) in
[https://github.com/go-git/go-git/pull/995](https://redirect.github.com/go-git/go-git/pull/995)
- Revert "Add option approximating `git clean -x` flag." by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1129](https://redirect.github.com/go-git/go-git/pull/1129)
- Fix reference updated concurrently error for the filesystem storer by
[@&#8203;Javier-varez](https://redirect.github.com/Javier-varez) in
[https://github.com/go-git/go-git/pull/1116](https://redirect.github.com/go-git/go-git/pull/1116)
- build: bump golang.org/x/net from 0.26.0 to 0.27.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1134](https://redirect.github.com/go-git/go-git/pull/1134)
- utils: merkletrie, Align error message with upstream by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1142](https://redirect.github.com/go-git/go-git/pull/1142)
- plumbing: transport/file, Change paths to absolute by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1141](https://redirect.github.com/go-git/go-git/pull/1141)
- plumbing: gitignore, Fix loading of ignored .gitignore files. by
[@&#8203;Achilleshiel](https://redirect.github.com/Achilleshiel) in
[https://github.com/go-git/go-git/pull/1114](https://redirect.github.com/go-git/go-git/pull/1114)
- build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1147](https://redirect.github.com/go-git/go-git/pull/1147)
- plumbing: transport/ssh, Add support for SSH
[@&#8203;cert-authority](https://redirect.github.com/cert-authority). by
[@&#8203;Javier-varez](https://redirect.github.com/Javier-varez) in
[https://github.com/go-git/go-git/pull/1157](https://redirect.github.com/go-git/go-git/pull/1157)
- build: run example tests during CI workflow by
[@&#8203;crazybolillo](https://redirect.github.com/crazybolillo) in
[https://github.com/go-git/go-git/pull/1030](https://redirect.github.com/go-git/go-git/pull/1030)
- storage: filesystem, Fix object cache not working due to uninitialised
objects being put into cache by
[@&#8203;SatelliteMind](https://redirect.github.com/SatelliteMind) in
[https://github.com/go-git/go-git/pull/1138](https://redirect.github.com/go-git/go-git/pull/1138)
- git: Fix fetching missing commits by
[@&#8203;AriehSchneier](https://redirect.github.com/AriehSchneier) in
[https://github.com/go-git/go-git/pull/1032](https://redirect.github.com/go-git/go-git/pull/1032)
- plumbing: format/packfile, remove duplicate checks in findMatch() by
[@&#8203;edigaryev](https://redirect.github.com/edigaryev) in
[https://github.com/go-git/go-git/pull/1152](https://redirect.github.com/go-git/go-git/pull/1152)
- git: worktree, Fix file reported as `Untracked` while it is committed
by [@&#8203;rodrigocam](https://redirect.github.com/rodrigocam) in
[https://github.com/go-git/go-git/pull/1023](https://redirect.github.com/go-git/go-git/pull/1023)
- build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1160](https://redirect.github.com/go-git/go-git/pull/1160)
- plumbing: filemode, Remove check for setting size of .git/index file
by [@&#8203;nicholasSUSE](https://redirect.github.com/nicholasSUSE) in
[https://github.com/go-git/go-git/pull/1159](https://redirect.github.com/go-git/go-git/pull/1159)
- build: bump golang.org/x/net from 0.27.0 to 0.28.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1163](https://redirect.github.com/go-git/go-git/pull/1163)
- Fix some lint warning and increase stalebot to 180 days by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1128](https://redirect.github.com/go-git/go-git/pull/1128)
- adjust path extracted from file: url on Windows by
[@&#8203;tomqwpl](https://redirect.github.com/tomqwpl) in
[https://github.com/go-git/go-git/pull/416](https://redirect.github.com/go-git/go-git/pull/416)
- build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1164](https://redirect.github.com/go-git/go-git/pull/1164)
- Add RestoreStaged to Worktree that mimics the behaviour of git restore
--staged <file>... by
[@&#8203;ben-tbotlabs](https://redirect.github.com/ben-tbotlabs) in
[https://github.com/go-git/go-git/pull/493](https://redirect.github.com/go-git/go-git/pull/493)
- plumbing: signature, support the same x509 signature formats as git by
[@&#8203;yoavamit](https://redirect.github.com/yoavamit) in
[https://github.com/go-git/go-git/pull/1169](https://redirect.github.com/go-git/go-git/pull/1169)
- fix: allow discovery of non bare repos in fsLoader by
[@&#8203;jakobmoellerdev](https://redirect.github.com/jakobmoellerdev)
in
[https://github.com/go-git/go-git/pull/1170](https://redirect.github.com/go-git/go-git/pull/1170)
- build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1178](https://redirect.github.com/go-git/go-git/pull/1178)
- build: bump golang.org/x/text from 0.17.0 to 0.18.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1179](https://redirect.github.com/go-git/go-git/pull/1179)
- build: bump golang.org/x/net from 0.28.0 to 0.29.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1184](https://redirect.github.com/go-git/go-git/pull/1184)
- Consume push URLs when they are provided by
[@&#8203;mcepl](https://redirect.github.com/mcepl) in
[https://github.com/go-git/go-git/pull/1191](https://redirect.github.com/go-git/go-git/pull/1191)
- \*: use gocheck's MkDir instead of TempDir for tests. Fixes
[#&#8203;807](https://redirect.github.com/go-git/go-git/issues/807) by
[@&#8203;uragirii](https://redirect.github.com/uragirii) in
[https://github.com/go-git/go-git/pull/1194](https://redirect.github.com/go-git/go-git/pull/1194)
- build: bump golang.org/x/net from 0.29.0 to 0.30.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1200](https://redirect.github.com/go-git/go-git/pull/1200)
- worktree: .git/index not correctly generated when running on Windows
by [@&#8203;BeChris](https://redirect.github.com/BeChris) in
[https://github.com/go-git/go-git/pull/1198](https://redirect.github.com/go-git/go-git/pull/1198)
- git: worktree, Fix sparse reset. Fixes
[#&#8203;90](https://redirect.github.com/go-git/go-git/issues/90) by
[@&#8203;onee-only](https://redirect.github.com/onee-only) in
[https://github.com/go-git/go-git/pull/1101](https://redirect.github.com/go-git/go-git/pull/1101)
- git: worktree, Pass context on updateSubmodules. Fixes
[#&#8203;1098](https://redirect.github.com/go-git/go-git/issues/1098) by
[@&#8203;onee-only](https://redirect.github.com/onee-only) in
[https://github.com/go-git/go-git/pull/1154](https://redirect.github.com/go-git/go-git/pull/1154)
- build: bump github.com/go-git/go-billy/v5 from
5.5.1-0.20240427054813-8453aa90c6ec to 5.6.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1211](https://redirect.github.com/go-git/go-git/pull/1211)
- Update contributing guidelines by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1217](https://redirect.github.com/go-git/go-git/pull/1217)
- build: bump github.com/ProtonMail/go-crypto from 1.0.0 to 1.1.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1222](https://redirect.github.com/go-git/go-git/pull/1222)
- build: bump golang.org/x/sys from 0.26.0 to 0.27.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1223](https://redirect.github.com/go-git/go-git/pull/1223)
- build: bump golang.org/x/crypto from 0.28.0 to 0.29.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1221](https://redirect.github.com/go-git/go-git/pull/1221)
- build: bump github.com/ProtonMail/go-crypto from 1.1.1 to 1.1.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1226](https://redirect.github.com/go-git/go-git/pull/1226)
- build: bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1232](https://redirect.github.com/go-git/go-git/pull/1232)
- build: bump github.com/ProtonMail/go-crypto from 1.1.2 to 1.1.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1231](https://redirect.github.com/go-git/go-git/pull/1231)
- build: General improvements around fuzzing by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1229](https://redirect.github.com/go-git/go-git/pull/1229)
- build: bump golang.org/x/net from 0.30.0 to 0.32.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1241](https://redirect.github.com/go-git/go-git/pull/1241)
- build: group dependabot updates for golang.org by
[@&#8203;AriehSchneier](https://redirect.github.com/AriehSchneier) in
[https://github.com/go-git/go-git/pull/1243](https://redirect.github.com/go-git/go-git/pull/1243)
- build: bump github/codeql-action from 2.22.11 to 3.27.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1244](https://redirect.github.com/go-git/go-git/pull/1244)
- build: bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /cli/go-git
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1246](https://redirect.github.com/go-git/go-git/pull/1246)
- build: bump golang.org/x/crypto from 0.30.0 to 0.31.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1247](https://redirect.github.com/go-git/go-git/pull/1247)
- build: bump github.com/gliderlabs/ssh from 0.3.7 to 0.3.8 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1248](https://redirect.github.com/go-git/go-git/pull/1248)
- add comment preventing people from creating invalid trees by
[@&#8203;petar](https://redirect.github.com/petar) in
[https://github.com/go-git/go-git/pull/732](https://redirect.github.com/go-git/go-git/pull/732)
- build: bump github/codeql-action from 3.27.6 to 3.27.9 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1250](https://redirect.github.com/go-git/go-git/pull/1250)
- plumbing: Properly encode index version 4 by
[@&#8203;BeChris](https://redirect.github.com/BeChris) in
[https://github.com/go-git/go-git/pull/1251](https://redirect.github.com/go-git/go-git/pull/1251)
- Fix typos by [@&#8203;deining](https://redirect.github.com/deining) in
[https://github.com/go-git/go-git/pull/1148](https://redirect.github.com/go-git/go-git/pull/1148)
- Fix reset files in subfolders by
[@&#8203;linglo](https://redirect.github.com/linglo) in
[https://github.com/go-git/go-git/pull/1177](https://redirect.github.com/go-git/go-git/pull/1177)
- git: update switch cases by
[@&#8203;hezhizhen](https://redirect.github.com/hezhizhen) in
[https://github.com/go-git/go-git/pull/1182](https://redirect.github.com/go-git/go-git/pull/1182)
- build: bump golang.org/x/net from 0.32.0 to 0.33.0 in the golang-org
group by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1256](https://redirect.github.com/go-git/go-git/pull/1256)
- fix(1212): Fix invalid reference name error while cloning branches
containing /- by
[@&#8203;varmakarthik12](https://redirect.github.com/varmakarthik12) in
[https://github.com/go-git/go-git/pull/1257](https://redirect.github.com/go-git/go-git/pull/1257)
- pktline : accept upercase hexadecimal value as pktline length
information by [@&#8203;BeChris](https://redirect.github.com/BeChris) in
[https://github.com/go-git/go-git/pull/1220](https://redirect.github.com/go-git/go-git/pull/1220)
- build: bump github/codeql-action from 3.27.9 to 3.28.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1260](https://redirect.github.com/go-git/go-git/pull/1260)
- build: bump github.com/elazarl/goproxy from
0.0.0-20240618083138-03be62527ccb to 1.2.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/go-git/go-git/pull/1262](https://redirect.github.com/go-git/go-git/pull/1262)
- git: worktree_commit, sanitize author and commiter name and email
before creating the commit object. Fixes
[#&#8203;680](https://redirect.github.com/go-git/go-git/issues/680) by
[@&#8203;BeChris](https://redirect.github.com/BeChris) in
[https://github.com/go-git/go-git/pull/1261](https://redirect.github.com/go-git/go-git/pull/1261)

#### New Contributors

- [@&#8203;johnmatthiggins](https://redirect.github.com/johnmatthiggins)
made their first contribution in
[https://github.com/go-git/go-git/pull/1088](https://redirect.github.com/go-git/go-git/pull/1088)
- [@&#8203;ggambetti](https://redirect.github.com/ggambetti) made their
first contribution in
[https://github.com/go-git/go-git/pull/1100](https://redirect.github.com/go-git/go-git/pull/1100)
- [@&#8203;gecko655](https://redirect.github.com/gecko655) made their
first contribution in
[https://github.com/go-git/go-git/pull/1109](https://redirect.github.com/go-git/go-git/pull/1109)
- [@&#8203;hbelmiro](https://redirect.github.com/hbelmiro) made their
first contribution in
[https://github.com/go-git/go-git/pull/1124](https://redirect.github.com/go-git/go-git/pull/1124)
- [@&#8203;msuozzo](https://redirect.github.com/msuozzo) made their
first contribution in
[https://github.com/go-git/go-git/pull/995](https://redirect.github.com/go-git/go-git/pull/995)
- [@&#8203;Javier-varez](https://redirect.github.com/Javier-varez) made
their first contribution in
[https://github.com/go-git/go-git/pull/1116](https://redirect.github.com/go-git/go-git/pull/1116)
- [@&#8203;Achilleshiel](https://redirect.github.com/Achilleshiel) made
their first contribution in
[https://github.com/go-git/go-git/pull/1114](https://redirect.github.com/go-git/go-git/pull/1114)
- [@&#8203;crazybolillo](https://redirect.github.com/crazybolillo) made
their first contribution in
[https://github.com/go-git/go-git/pull/1030](https://redirect.github.com/go-git/go-git/pull/1030)
- [@&#8203;SatelliteMind](https://redirect.github.com/SatelliteMind)
made their first contribution in
[https://github.com/go-git/go-git/pull/1138](https://redirect.github.com/go-git/go-git/pull/1138)
- [@&#8203;rodrigocam](https://redirect.github.com/rodrigocam) made
their first contribution in
[https://github.com/go-git/go-git/pull/1023](https://redirect.github.com/go-git/go-git/pull/1023)
- [@&#8203;nicholasSUSE](https://redirect.github.com/nicholasSUSE) made
their first contribution in
[https://github.com/go-git/go-git/pull/1159](https://redirect.github.com/go-git/go-git/pull/1159)
- [@&#8203;tomqwpl](https://redirect.github.com/tomqwpl) made their
first contribution in
[https://github.com/go-git/go-git/pull/416](https://redirect.github.com/go-git/go-git/pull/416)
- [@&#8203;ben-tbotlabs](https://redirect.github.com/ben-tbotlabs) made
their first contribution in
[https://github.com/go-git/go-git/pull/493](https://redirect.github.com/go-git/go-git/pull/493)
- [@&#8203;yoavamit](https://redirect.github.com/yoavamit) made their
first contribution in
[https://github.com/go-git/go-git/pull/1169](https://redirect.github.com/go-git/go-git/pull/1169)
- [@&#8203;uragirii](https://redirect.github.com/uragirii) made their
first contribution in
[https://github.com/go-git/go-git/pull/1194](https://redirect.github.com/go-git/go-git/pull/1194)
- [@&#8203;petar](https://redirect.github.com/petar) made their first
contribution in
[https://github.com/go-git/go-git/pull/732](https://redirect.github.com/go-git/go-git/pull/732)
- [@&#8203;deining](https://redirect.github.com/deining) made their
first contribution in
[https://github.com/go-git/go-git/pull/1148](https://redirect.github.com/go-git/go-git/pull/1148)
- [@&#8203;linglo](https://redirect.github.com/linglo) made their first
contribution in
[https://github.com/go-git/go-git/pull/1177](https://redirect.github.com/go-git/go-git/pull/1177)
- [@&#8203;varmakarthik12](https://redirect.github.com/varmakarthik12)
made their first contribution in
[https://github.com/go-git/go-git/pull/1257](https://redirect.github.com/go-git/go-git/pull/1257)

**Full Changelog**:
https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-29 04:00:55 +01:00
TrueCharts BotandGitHub 298d76cc4c chore(flux): update image metallb-config 8.2.5 → 8.3.1 (clustertool) (#30366) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [metallb-config](https://truecharts.org/charts/premium/metallb-config)
([source](https://redirect.github.com/metallb/metallb)) | minor |
`8.2.5` -> `8.3.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-29 03:21:19 +01:00
TrueCharts BotandGitHub 2861b90d87 chore(flux): update image clusterissuer 9.2.6 → 9.3.1 (clustertool) (#30361) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | minor | `9.2.6` -> `9.3.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-29 03:20:33 +01:00
TrueCharts BotandGitHub 82ef877b19 chore(flux): update image traefik 30.1.1 → 30.1.2 (clustertool) (#30407) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.1.1` -> `30.1.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-29 02:41:36 +01:00
TrueCharts-Bot 27c6015d72 Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2024-12-29 00:14:23 +00:00
TrueCharts BotandGitHub b15ef5f759 chore(flux): update image volsync 2.6.1 → 2.6.2 (clustertool) (#30400) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync))
| patch | `2.6.1` -> `2.6.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:46:55 +01:00
TrueCharts BotandGitHub f982d2300c chore(flux): update image traefik-crds 3.3.0 → 3.3.1 (clustertool) (#30398) 2024-12-28 13:46:06 +01:00
TrueCharts BotandGitHub 6cad34a4e2 chore(flux): update image traefik 30.1.0 → 30.1.1 (clustertool) (#30397) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.1.0` -> `30.1.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:45:36 +01:00
TrueCharts BotandGitHub 3a5dfd18d3 chore(flux): update image spegel 2.1.1 → 2.1.2 (clustertool) (#30396) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [spegel](https://truecharts.org/charts/system/spegel)
([source](https://ghcr.io/spegel-org/spegel)) | patch | `2.1.1` ->
`2.1.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:43:24 +01:00
TrueCharts BotandGitHub 3d41269cd1 chore(flux): update image snapshot-controller 3.5.0 → 3.5.1 (clustertool) (#30395) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[snapshot-controller](https://truecharts.org/charts/system/snapshot-controller)
([source](https://redirect.github.com/kubernetes-csi/external-snapshotter))
| patch | `3.5.0` -> `3.5.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:41:21 +01:00
TrueCharts BotandGitHub 0ff9b1f718 chore(flux): update image kubernetes-reflector 6.3.0 → 6.3.1 (clustertool) (#30393) 2024-12-28 13:39:43 +01:00
TrueCharts BotandGitHub 1e59df10b0 chore(flux): update image kubernetes-dashboard 1.11.0 → 1.11.1 (clustertool) (#30392) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[kubernetes-dashboard](https://truecharts.org/charts/premium/kubernetes-dashboard)
([source](https://redirect.github.com/kubernetes-dashboard/kubernetes-dashboard))
| patch | `1.11.0` -> `1.11.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:39:37 +01:00
TrueCharts BotandGitHub 18b666e108 chore(flux): update image kubelet-csr-approver 1.2.0 → 1.2.1 (clustertool) (#30391) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[kubelet-csr-approver](https://truecharts.org/charts/system/kubelet-csr-approver)
([source](https://ghcr.io/postfinance/kubelet-csr-approver)) | patch |
`1.2.0` -> `1.2.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:33:13 +01:00
TrueCharts BotandGitHub b1897e1e0c chore(flux): update image cert-manager 6.3.0 → 6.3.1 (clustertool) (#30389) 2024-12-28 13:31:00 +01:00
TrueCharts BotandGitHub 602794f59a chore(flux): update image blocky 16.7.0 → 16.7.1 (clustertool) (#30388) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.7.0` ->
`16.7.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 13:30:52 +01:00
TrueCharts BotandGitHub ddcc71fdc1 chore(flux): update image volsync 2.5.1 → 2.6.1 (clustertool) (#30374) 2024-12-28 11:49:04 +01:00
TrueCharts BotandGitHub c63c34b6d4 chore(flux): update image traefik-crds 3.2.4 → 3.3.0 (clustertool) (#30372) 2024-12-28 11:48:58 +01:00
TrueCharts BotandGitHub 7384a1244f chore(flux): update image prometheus-operator 8.11.1 → 8.12.0 (clustertool) (#30368) 2024-12-28 11:48:28 +01:00
TrueCharts BotandGitHub 852e2305e3 chore(flux): update image traefik 30.0.4 → 30.1.0 (clustertool) (#30371) 2024-12-28 11:48:23 +01:00
TrueCharts BotandGitHub 65c7306c4f chore(flux): update image spegel 2.0.8 → 2.1.1 (clustertool) (#30370) 2024-12-28 11:48:16 +01:00
TrueCharts BotandGitHub 2662ce3a1d chore(flux): update image snapshot-controller 3.3.2 → 3.5.0 (clustertool) (#30369) 2024-12-28 11:47:49 +01:00
TrueCharts BotandGitHub 5a5aef8cfd chore(flux): update image kubernetes-reflector 6.2.2 → 6.3.0 (clustertool) (#30365) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[kubernetes-reflector](https://truecharts.org/charts/system/kubernetes-reflector)
([source](https://redirect.github.com/emberstack/kubernetes-reflector))
| minor | `6.2.2` -> `6.3.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-28 11:47:43 +01:00
TrueCharts BotandGitHub bcce4c04f8 chore(flux): update image kubelet-csr-approver 1.1.3 → 1.2.0 (clustertool) (#30363) 2024-12-28 11:40:10 +01:00
TrueCharts BotandGitHub a221dd12e8 chore(flux): update image cert-manager 6.2.3 → 6.3.0 (clustertool) (#30360) 2024-12-28 11:40:04 +01:00
TrueCharts BotandGitHub 97eafebcb4 chore(flux): update image kubernetes-dashboard 1.10.1 → 1.11.0 (clustertool) (#30364) 2024-12-28 11:40:01 +01:00
TrueCharts BotandGitHub 4c426780af chore(flux): update image blocky 16.6.4 → 16.7.0 (clustertool) (#30359) 2024-12-28 11:39:59 +01:00
TrueCharts BotandGitHub 66bec1563e chore(flux): update image metallb-config 8.2.4 → 8.2.5 (clustertool) (#30344) 2024-12-28 11:19:01 +01:00
TrueCharts BotandGitHub eb50882ebd chore(flux): update image clusterissuer 9.2.5 → 9.2.6 (clustertool) (#30343) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | patch | `9.2.5` -> `9.2.6` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 11:18:51 +01:00
TrueCharts BotandGitHub a7e53f789c fix(deps): update module sigs.k8s.io/controller-runtime v0.19.2 → v0.19.3 (clustertool) (#30157) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[sigs.k8s.io/controller-runtime](https://redirect.github.com/kubernetes-sigs/controller-runtime)
| require | patch | `v0.19.2` -> `v0.19.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>kubernetes-sigs/controller-runtime
(sigs.k8s.io/controller-runtime)</summary>

###
[`v0.19.3`](https://redirect.github.com/kubernetes-sigs/controller-runtime/releases/tag/v0.19.3)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/controller-runtime/compare/v0.19.2...v0.19.3)

#### What's Changed

- 🐛 Refactor certificate watcher to use polling, instead of fsnotify by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3023](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3023)
- 🐛 Use leader elector with client timeout by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3031](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3031)

**Full Changelog**:
https://github.com/kubernetes-sigs/controller-runtime/compare/v0.19.2...v0.19.3

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 03:39:20 +00:00
TrueCharts BotandGitHub 09ab290450 fix(deps): update module helm.sh/helm/v3 v3.16.3 → v3.16.4 (clustertool) (#30156) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [helm.sh/helm/v3](https://redirect.github.com/helm/helm) | require |
patch | `v3.16.3` -> `v3.16.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>helm/helm (helm.sh/helm/v3)</summary>

###
[`v3.16.4`](https://redirect.github.com/helm/helm/releases/tag/v3.16.4):
Helm v3.16.4

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.16.3...v3.16.4)

Helm v3.16.4 is a patch release. Users are encouraged to upgrade for the
best experience. Users are encouraged to upgrade for the best
experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

#### Installation and Upgrading

Download Helm v3.16.4. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.16.4-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-darwin-amd64.tar.gz.sha256sum)
/ 8dc25671120a4af197afe7ad9041fb8e1dd71bc01e5ef73dba1139cbc9e9f44b)
- [MacOS arm64](https://get.helm.sh/helm-v3.16.4-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-darwin-arm64.tar.gz.sha256sum)
/ e2442d8f05d53d84c39b869bc5fe5affad247ee2f4c706a040919c146edb1f94)
- [Linux amd64](https://get.helm.sh/helm-v3.16.4-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-amd64.tar.gz.sha256sum)
/ fc307327959aa38ed8f9f7e66d45492bb022a66c3e5da6063958254b9767d179)
- [Linux arm](https://get.helm.sh/helm-v3.16.4-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-arm.tar.gz.sha256sum)
/ 432e774d1087d3773737888d384c62477b399227662b42cbf0c32e95e6e72556)
- [Linux arm64](https://get.helm.sh/helm-v3.16.4-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-arm64.tar.gz.sha256sum)
/ d3f8f15b3d9ec8c8678fbf3280c3e5902efabe5912e2f9fcf29107efbc8ead69)
- [Linux i386](https://get.helm.sh/helm-v3.16.4-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-386.tar.gz.sha256sum)
/ 6022b34e165a5196827043c77bcd1fa28ef48109b3a4af46e8660ddb0a6c44e0)
- [Linux ppc64le](https://get.helm.sh/helm-v3.16.4-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-ppc64le.tar.gz.sha256sum)
/ 0ba4375a6dcf6117a8e7729fbed36d9220f8ad98dbc7aabc16186f22917caead)
- [Linux s390x](https://get.helm.sh/helm-v3.16.4-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-s390x.tar.gz.sha256sum)
/ 10b88dc2afd97267feba8283d58dcb1c937defb7df8de152c86b60aaece47d59)
- [Linux riscv64](https://get.helm.sh/helm-v3.16.4-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.16.4-linux-riscv64.tar.gz.sha256sum)
/ e733c727de7644cfeb25b094e1f0a56c53a7cb437c93c992aa92e6c7b9f6af93)
- [Windows amd64](https://get.helm.sh/helm-v3.16.4-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.16.4-windows-amd64.zip.sha256sum)
/ 9bb114c12e530a7129fd3d78fc1784e813dd7a6e29e5f9b5af8bc83fd1066d36)
- [Windows arm64](https://get.helm.sh/helm-v3.16.4-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.16.4-windows-arm64.zip.sha256sum)
/ a4afeee93031920ec08b7e880c859a159bcd222837a81196cadaeb42408ad0b3)

This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2
5E36 B98E ` and can be found at
[@&#8203;mattfarina](https://redirect.github.com/mattfarina) [keybase
account](https://keybase.io/mattfarina). Please use the attached
signatures for verifying this release using `gpg`.

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

#### What's Next

-   3.17.0 is the next feature release and will be on January 15, 2025

#### Changelog

- Bump golang.org/x/crypto from 0.30.0 to 0.31.0
[`7877b45`](https://redirect.github.com/helm/helm/commit/7877b45b63f95635153b29a42c0c2f4273ec45ca)
(dependabot\[bot])
- Bump the k8s-io group with 7 updates
[`848e586`](https://redirect.github.com/helm/helm/commit/848e586c27f05d84bc19d082f395098aba0b7619)
(dependabot\[bot])

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-28 02:03:50 +00:00
TrueCharts-Bot 52ae54364a Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2024-12-28 00:12:19 +00:00
TrueCharts BotandGitHub c9ef877ddf chore(flux): update image app-template 3.5.1 → 3.6.0 (clustertool) (#30170) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| app-template | minor | `3.5.1` -> `3.6.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 21:17:28 +00:00
TrueCharts BotandGitHub 5b8761e2ae chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.1 (clustertool) (#30168) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| minor | `v1.8.4` -> `v1.9.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.9.1`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.1)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.0...v1.9.1)

#### [Talos
1.9.1](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.1)
(2024-12-26)

Welcome to the v1.9.1 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### Component Updates

-   Linux: 6.12.6
-   CNI plugins: 1.6.1

Talos is built with Go 1.23.4.

##### Contributors

-   Andrey Smirnov
-   Dmitry Sharshakov
-   Noel Georgi

##### Changes

<details><summary>15 commits</summary>
<p>

-
[@&#8203;`348472f`](https://redirect.github.com/siderolabs/talos/commit/348472f9e)
release(v1.9.1): prepare release
-
[@&#8203;`e702542`](https://redirect.github.com/siderolabs/talos/commit/e702542d1)
fix: ignore member not found error on leave cluster
-
[@&#8203;`2125206`](https://redirect.github.com/siderolabs/talos/commit/2125206f1)
test: use node informer instead of raw watch
-
[@&#8203;`73c25ee`](https://redirect.github.com/siderolabs/talos/commit/73c25ee8d)
fix: talosctl support and race tests
-
[@&#8203;`edd7844`](https://redirect.github.com/siderolabs/talos/commit/edd78441b)
fix: update go-blockdevice to v2.0.9
-
[@&#8203;`c1f975c`](https://redirect.github.com/siderolabs/talos/commit/c1f975c0b)
fix: use correct default search domain
-
[@&#8203;`ff91a75`](https://redirect.github.com/siderolabs/talos/commit/ff91a754f)
fix: reduce installer image
-
[@&#8203;`9cebe5e`](https://redirect.github.com/siderolabs/talos/commit/9cebe5e28)
fix: fix `Failed to initialize SELinux labeling handle` udev error
-
[@&#8203;`852cf5a`](https://redirect.github.com/siderolabs/talos/commit/852cf5ac7)
feat: bring Linux 6.12.6, CNI plugins 1.6.1
-
[@&#8203;`5f83c83`](https://redirect.github.com/siderolabs/talos/commit/5f83c83e1)
docs: document Kubernetes service registry incompat with K8s 1.32
-
[@&#8203;`3f87286`](https://redirect.github.com/siderolabs/talos/commit/3f872860f)
fix: dashboard crash on CPU data
-
[@&#8203;`f84ba2a`](https://redirect.github.com/siderolabs/talos/commit/f84ba2a9b)
docs: fix several typos
-
[@&#8203;`972044e`](https://redirect.github.com/siderolabs/talos/commit/972044e10)
chore: support gcr.io auth for cache and image gen
-
[@&#8203;`7908c93`](https://redirect.github.com/siderolabs/talos/commit/7908c9382)
fix: make talosctl time work with PTP time sync
-
[@&#8203;`48cb3a6`](https://redirect.github.com/siderolabs/talos/commit/48cb3a6e6)
fix: restore previous disk serial fetching

</p>
</details>

##### Changes from siderolabs/go-talos-support
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-talos-support@`0f784bd`](https://redirect.github.com/siderolabs/go-talos-support/commit/0f784bd)
fix: avoid deadlock on context cancel

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>3 commits</summary>
<p>

-
[siderolabs/pkgs@`45c4ba4`](https://redirect.github.com/siderolabs/pkgs/commit/45c4ba4)
fix: patch containerd with CNI deadlock fix
-
[siderolabs/pkgs@`13c5fc6`](https://redirect.github.com/siderolabs/pkgs/commit/13c5fc6)
feat: update Linux to 6.12.6
-
[siderolabs/pkgs@`6ed389e`](https://redirect.github.com/siderolabs/pkgs/commit/6ed389e)
feat: update Linux firmware to
[`2024121`](https://redirect.github.com/siderolabs/talos/commit/20241210)

</p>
</details>

##### Dependency Changes

-   **github.com/containernetworking/plugins**     v1.6.0 -> v1.6.1
-   **github.com/opencontainers/runc**             v1.2.2 -> v1.2.3
-   **github.com/siderolabs/go-blockdevice/v2**    v2.0.7 -> v2.0.9
-   **github.com/siderolabs/go-talos-support**     v0.1.1 -> v0.1.2
- **github.com/siderolabs/pkgs** v1.9.0-12-g9576b97 ->
v1.9.0-15-g45c4ba4
-   **github.com/siderolabs/talos/pkg/machinery**  v1.9.0 -> v1.9.1

Previous release can be found at
[v1.9.0](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.0)

#### Images

    ghcr.io/siderolabs/flannel:v0.26.1
    registry.k8s.io/coredns/coredns:v1.12.0
    gcr.io/etcd-development/etcd:v3.5.17
    registry.k8s.io/kube-apiserver:v1.32.0
    registry.k8s.io/kube-controller-manager:v1.32.0
    registry.k8s.io/kube-scheduler:v1.32.0
    registry.k8s.io/kube-proxy:v1.32.0
    ghcr.io/siderolabs/kubelet:v1.32.0
    ghcr.io/siderolabs/installer:v1.9.1
    registry.k8s.io/pause:3.10

###
[`v1.9.0`](https://redirect.github.com/siderolabs/talos/blob/HEAD/CHANGELOG.md#Changes-since-v190-alpha2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.8.4...v1.9.0)

<details><summary>44 commits</summary>
<p>

-
[`af5d6b8c4`](https://redirect.github.com/siderolabs/talos/commit/af5d6b8c4166c7461f1774991e2896b11d503585)
fix: show SELinux labels on pseudo-fs
-
[`f46922fa9`](https://redirect.github.com/siderolabs/talos/commit/f46922fa9a815a2e9002c31dcc2793bf6dd93952)
chore: fix dockerfile warnings
-
[`a13f82c59`](https://redirect.github.com/siderolabs/talos/commit/a13f82c59456574238a75959ff395746c93f1cfa)
feat: udev: label device nodes
-
[`e899fb37f`](https://redirect.github.com/siderolabs/talos/commit/e899fb37fde7ec2b39d4b0fa77c7a6b1ac9d9f16)
feat: label created files in /etc
-
[`5f68c17ed`](https://redirect.github.com/siderolabs/talos/commit/5f68c17edab70451ec775e292222d9c634f4e863)
feat: implement image cache configuration
-
[`0ffb2187a`](https://redirect.github.com/siderolabs/talos/commit/0ffb2187a3e56744a6b67698882acf8281c147dd)
feat: registry proxy
-
[`77cf84fb5`](https://redirect.github.com/siderolabs/talos/commit/77cf84fb572213e59880a05edcc1b1b365987ac4)
feat: support generating iso with imagecache
-
[`5de6275b8`](https://redirect.github.com/siderolabs/talos/commit/5de6275b8f883f6c3e7a17c04b427c0ff8b9e3f5)
chore: image cache generator improvements
-
[`1a8cc5f8b`](https://redirect.github.com/siderolabs/talos/commit/1a8cc5f8b277faec7cf00a3acc8e91a31f99ce85)
feat: add SELinux labels to volumes
-
[`61b9129e0`](https://redirect.github.com/siderolabs/talos/commit/61b9129e0c29b2402235065f27888459e6054e7a)
fix: add directory entries and filemode to tarball
-
[`4caeae21e`](https://redirect.github.com/siderolabs/talos/commit/4caeae21e548039a6a03471d35405788515a8751)
refactor: optimize flags and SetLabel
-
[`6074a870a`](https://redirect.github.com/siderolabs/talos/commit/6074a870ad7c63775a39c84b72f79699976a4a1f)
feat: add e2fsprogs to talos rootfs
-
[`7ffcf5b93`](https://redirect.github.com/siderolabs/talos/commit/7ffcf5b932cc4064e5680efb20bf6fe6e7179cd4)
docs: update getting started
-
[`c4c1a0d7c`](https://redirect.github.com/siderolabs/talos/commit/c4c1a0d7c73d13e78bef935612cfdd593749a783)
fix: make vmware platform common code build on all arches
-
[`cc768037f`](https://redirect.github.com/siderolabs/talos/commit/cc768037f8d4bb022e98ddd4762f483ffd2a7a7f)
feat: implement block device wipe
-
[`6fb518ae5`](https://redirect.github.com/siderolabs/talos/commit/6fb518ae57a7cea0cf0959309167805c6f2582a5)
fix: don't activate LVM volumes in agent mode
-
[`0e3ed3072`](https://redirect.github.com/siderolabs/talos/commit/0e3ed307232eff54a42236489433eb8b6757cb6d)
fix: no longer leak `Close` reader
-
[`4dc58cfdf`](https://redirect.github.com/siderolabs/talos/commit/4dc58cfdf3ef99c67d6d1885216154d21294da74)
chore: small fixes
-
[`f400ae911`](https://redirect.github.com/siderolabs/talos/commit/f400ae911b49bd87b2c085ecc794ba44f0be0118)
fix: small fixes for image cache generation
-
[`93754b7de`](https://redirect.github.com/siderolabs/talos/commit/93754b7de6cec285e8e48d330be3c938dcd3e9c4)
fix: config and platform manifest generation
-
[`95b2fc946`](https://redirect.github.com/siderolabs/talos/commit/95b2fc946ec1d8166738d7bb2573e5d20d336afe)
feat: image cache gen
-
[`e4c6186c6`](https://redirect.github.com/siderolabs/talos/commit/e4c6186c63ea8faabf2feb82a997a7dbdd35d966)
chore: remove i915/amdgpu drivers
-
[`744ad12a6`](https://redirect.github.com/siderolabs/talos/commit/744ad12a6e59c57b88869c055d598244f25e2e38)
docs: update replicated-local-storage-with-openebs.md
-
[`fd713e451`](https://redirect.github.com/siderolabs/talos/commit/fd713e45140f08b69bf0c08a28ca734685cb7672)
feat: add permanent hardware addr to device selectors
-
[`d55a96e8c`](https://redirect.github.com/siderolabs/talos/commit/d55a96e8cbbc8d013b6258da304d5c63590e2679)
refactor: remove SELinux client_u and client_r
-
[`3a5b55fd2`](https://redirect.github.com/siderolabs/talos/commit/3a5b55fd2215f1b3b88868766f4220fcd1bdf1b5)
fix: allow CEL expressions config merge
-
[`f1b15f580`](https://redirect.github.com/siderolabs/talos/commit/f1b15f580eed5be808b6f657570540ae1906488a)
chore: remove replace for safchain/ethtool
-
[`f9697a9a0`](https://redirect.github.com/siderolabs/talos/commit/f9697a9a07316226e13aa0d9a659f67fedaf7f47)
fix: register controlplane node with NoSchedule taint
-
[`30f8b5a9f`](https://redirect.github.com/siderolabs/talos/commit/30f8b5a9f76441d933341b91d753ae141a9f4d10)
fix: registry mirror fallback handling
-
[`0f41e7743`](https://redirect.github.com/siderolabs/talos/commit/0f41e77434d6080270a3a18a8af0387791e8f282)
feat: allow for onlink directive (nocloud)
-
[`e26d0043e`](https://redirect.github.com/siderolabs/talos/commit/e26d0043e022eccf5ea9c9d9b4a57e4bff1f80cc)
chore: code cleanup
-
[`43fe3807a`](https://redirect.github.com/siderolabs/talos/commit/43fe3807a807a58ecf264f1628c5919f86d369b4)
feat: implement tracking of blockdevice secondaries
-
[`8a7476c3a`](https://redirect.github.com/siderolabs/talos/commit/8a7476c3ae1fdf5d4314d8915da72bc2cce19e38)
fix: install on non-empty disk
-
[`8b4253d18`](https://redirect.github.com/siderolabs/talos/commit/8b4253d18544318e55f4886782a41b0e74155101)
feat: update etcd to v3.5.17
-
[`5a0fd5b88`](https://redirect.github.com/siderolabs/talos/commit/5a0fd5b8829657f487db594d90c5b31841c78a66)
refactor: move early initialization functions to pre-initialize phase
-
[`9916e2cd8`](https://redirect.github.com/siderolabs/talos/commit/9916e2cd8a32706a32572f408dc313bbfa159539)
chore: update pkgs/tools/extras for Go 1.23.3
-
[`20bbf0235`](https://redirect.github.com/siderolabs/talos/commit/20bbf02355c1ab12084ba36b3d1bea151029c2d6)
docs: update vultr documentation
-
[`aea98940b`](https://redirect.github.com/siderolabs/talos/commit/aea98940b7047c9e7f343efbbb8315c1bc6226d2)
fix: arch linux search paths and names for QEMU provisioner
-
[`682718d4c`](https://redirect.github.com/siderolabs/talos/commit/682718d4c99ff0bbae7be8b82eb6548e9b939f41)
fix: use imager incoming version for extension validation
-
[`9a02ecc49`](https://redirect.github.com/siderolabs/talos/commit/9a02ecc49fa801d7282bba4733698b8d7d6c221e)
feat: rewrite install disk selector to use CEL expressions
-
[`eba35f441`](https://redirect.github.com/siderolabs/talos/commit/eba35f4413c732d351d82d5b646fc3053e6239e3)
docs: add note about PSP in Rook-Ceph guide
-
[`38b80fb1d`](https://redirect.github.com/siderolabs/talos/commit/38b80fb1dab586a9f14473d03415b793c2dfcda0)
docs: add missing `--talosconfig` parameter to end of Hetzner guide
-
[`a07f66c91`](https://redirect.github.com/siderolabs/talos/commit/a07f66c9187b7a99211d3f9af286844511d66954)
docs: gcp: fix controlplane nodes tags
-
[`4fe6dc8a0`](https://redirect.github.com/siderolabs/talos/commit/4fe6dc8a0a86e0096797b3ce433a627fb973c962)
chore: clean dns code

</p>
</details>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 21:16:31 +00:00
TrueCharts BotandGitHub 089d4f57cd chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.32.0 (clustertool) (#30169) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/kubelet](https://redirect.github.com/siderolabs/kubelet)
| minor | `v1.31.4` -> `v1.32.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/kubelet (ghcr.io/siderolabs/kubelet)</summary>

###
[`v1.32.0`](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.4...v1.32.0)

[Compare
Source](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.4...v1.32.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 21:14:06 +00:00
TrueCharts BotandGitHub 7ee5579439 fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.10 → v3.0.14 (clustertool) (#30153) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper)
| require | patch | `v3.0.10` -> `v3.0.14` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>budimanjojo/talhelper
(github.com/budimanjojo/talhelper/v3)</summary>

###
[`v3.0.14`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.14)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.13...v3.0.14)

#### Changelog

-
[`215d5c3`](https://redirect.github.com/budimanjojo/talhelper/commit/215d5c30003be2d26810ad74e210b654675c9a30)
chore(container): update ghcr.io/siderolabs/talosctl docker tag to
v1.9.1
-
[`7290bba`](https://redirect.github.com/budimanjojo/talhelper/commit/7290bba0c5a47a8cfb51eaeb93174b3df20d7c7a)
chore(deps): update dependency siderolabs/talos to v1.9.1
-
[`57ac460`](https://redirect.github.com/budimanjojo/talhelper/commit/57ac460f392e3821876099a17be6d391c350ac24)
chore(github-action): update renovatebot/github-action action to v41.0.7
-
[`062710b`](https://redirect.github.com/budimanjojo/talhelper/commit/062710bed3d49c8452b3817abf93be3e1921a3e4)
chore(schema): update talos-extensions.yaml JSON schema
-
[`e5b6289`](https://redirect.github.com/budimanjojo/talhelper/commit/e5b628982aae08d3380b8c3c675319a7c7ff4464)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;767](https://redirect.github.com/budimanjojo/talhelper/issues/767))
-
[`39b4426`](https://redirect.github.com/budimanjojo/talhelper/commit/39b4426ca0cc1ba6e73b162385b2560165772362)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;768](https://redirect.github.com/budimanjojo/talhelper/issues/768))
-
[`383f7a4`](https://redirect.github.com/budimanjojo/talhelper/commit/383f7a4072133d6f503a7b3a11422ccb12fe63c6)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;772](https://redirect.github.com/budimanjojo/talhelper/issues/772))
-
[`e41bff1`](https://redirect.github.com/budimanjojo/talhelper/commit/e41bff110d3bb5d1ab7d3d141920cbb189a31ebf)
feat: update Scoop for talhelper version v3.0.13
-
[`c5694c0`](https://redirect.github.com/budimanjojo/talhelper/commit/c5694c02df8e35e3522a5d3f5d55b55a197efddc)
feat: update flake
([#&#8203;764](https://redirect.github.com/budimanjojo/talhelper/issues/764))
-
[`9d3ac71`](https://redirect.github.com/budimanjojo/talhelper/commit/9d3ac71d081cb677187f903d40ca2da06ec31732)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.13
-
[`cf46333`](https://redirect.github.com/budimanjojo/talhelper/commit/cf463337876d60f284c9b1ac2f15becb5c3106f3)
fix(deps): update module github.com/gookit/validate to v1.5.4
-
[`a2afb3b`](https://redirect.github.com/budimanjojo/talhelper/commit/a2afb3b5c93230aac88ce6d094a35532eb3cd036)
fix(deps): update module github.com/siderolabs/image-factory to v0.6.5
-
[`ed02149`](https://redirect.github.com/budimanjojo/talhelper/commit/ed021494f03c5a02c43f3dc5b260d490976314e6)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.10.0-alpha.0
-
[`8972aef`](https://redirect.github.com/budimanjojo/talhelper/commit/8972aef306e52a6af328901ada56a948c6dfa987)
fix(go): update go builder version for image-factory

###
[`v3.0.13`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.13)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.12...v3.0.13)

#### Changelog

-
[`a12adeb`](https://redirect.github.com/budimanjojo/talhelper/commit/a12adebc6a77f0574808e1a43937fdce7756d880)
chore(container): update bitnami/kubectl docker tag to v1.32.0
-
[`94b6e44`](https://redirect.github.com/budimanjojo/talhelper/commit/94b6e440903ba579c82cc5f512f20fd29433b7ef)
chore(container): update ghcr.io/siderolabs/talosctl docker tag to
v1.9.0
-
[`c8216ce`](https://redirect.github.com/budimanjojo/talhelper/commit/c8216ce94e4cf9a400dc4ac40930e7835e60412f)
chore(deps): update dependency siderolabs/talos to v1.9.0
-
[`368d00e`](https://redirect.github.com/budimanjojo/talhelper/commit/368d00e0727c2d2e3d91354d2a56c26bab6b10da)
chore(schema): update talos-extensions.yaml JSON schema
-
[`25a0649`](https://redirect.github.com/budimanjojo/talhelper/commit/25a0649733a0770c71840d9d65f2b11a9b70ce9d)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;761](https://redirect.github.com/budimanjojo/talhelper/issues/761))
-
[`e085b66`](https://redirect.github.com/budimanjojo/talhelper/commit/e085b665ff321ac4d9280387b95bb7465a2fdbe5)
feat(readme): thank you
[@&#8203;qjoly](https://redirect.github.com/qjoly) for the sponsor!
-
[`8c6db96`](https://redirect.github.com/budimanjojo/talhelper/commit/8c6db96f7ce5bcbd6cd16c2a11b4bd808674e978)
feat(validate): add validator for `installDiskSelector`
-
[`a30b5b9`](https://redirect.github.com/budimanjojo/talhelper/commit/a30b5b9a4e57a06c3c16e0a99af2ac5b6aa70f1c)
feat: update Scoop for talhelper version v3.0.12
-
[`ee90684`](https://redirect.github.com/budimanjojo/talhelper/commit/ee9068499cc8947e9674f7d0f866b76032e02e47)
feat: update flake
-
[`b93b064`](https://redirect.github.com/budimanjojo/talhelper/commit/b93b064341a060f78a239b451c0ea944ea3fc952)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.12
-
[`c036706`](https://redirect.github.com/budimanjojo/talhelper/commit/c0367069dba79e07569371afc29d8e6e9ff1bfed)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.9.0
-
[`b90eb69`](https://redirect.github.com/budimanjojo/talhelper/commit/b90eb692396f96971722a821758dd5d54dcf9c3a)
fix(goreleaser): fix typo in arm64v8 platform container build

###
[`v3.0.12`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.12)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.11...v3.0.12)

#### Changelog

-
[`bd6c6bc`](https://redirect.github.com/budimanjojo/talhelper/commit/bd6c6bc79a19009f140cea8a54106bb99c8c4873)
chore(container): update goreleaser/goreleaser docker tag to v2.5.0
-
[`72342aa`](https://redirect.github.com/budimanjojo/talhelper/commit/72342aaf353f0b2bd968f0f109619b6ea9041aea)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;752](https://redirect.github.com/budimanjojo/talhelper/issues/752))
-
[`0eec788`](https://redirect.github.com/budimanjojo/talhelper/commit/0eec78890fac38454d77965fa9c96d4e698a9c11)
feat(debug): show the defined schematic in debug mode
-
[`84d3565`](https://redirect.github.com/budimanjojo/talhelper/commit/84d3565b7c08e66cb182f82bb71ce4d201758f4a)
feat: update Scoop for talhelper version v3.0.11
-
[`e8ecf68`](https://redirect.github.com/budimanjojo/talhelper/commit/e8ecf68cda1458660301500e6a31383d0aaabe0e)
feat: update flake
([#&#8203;750](https://redirect.github.com/budimanjojo/talhelper/issues/750))
-
[`a19cfd5`](https://redirect.github.com/budimanjojo/talhelper/commit/a19cfd501de22a35eacdcc8299b5d0a6be18413a)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.11

###
[`v3.0.11`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.11)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.10...v3.0.11)

#### Changelog

-
[`9c7dd4d`](https://redirect.github.com/budimanjojo/talhelper/commit/9c7dd4de20d58606b7bde106853b83aa38313666)
chore(container): update alpine docker tag to v3.21.0
-
[`94487e8`](https://redirect.github.com/budimanjojo/talhelper/commit/94487e8cc82617dc9be8b50de94edd33ce1e56ad)
chore(container): update bitnami/kubectl docker tag to v1.31.3
-
[`a5341aa`](https://redirect.github.com/budimanjojo/talhelper/commit/a5341aa19d4d6d03c34b034c36323fb8c6239232)
chore(container): update bitnami/kubectl docker tag to v1.31.4
-
[`be19512`](https://redirect.github.com/budimanjojo/talhelper/commit/be19512c54f106d1e4d028fbb06231e0661a9c74)
chore(container): update ghcr.io/getsops/sops docker tag to v3.9.2
-
[`9395350`](https://redirect.github.com/budimanjojo/talhelper/commit/939535015ddf19348475f0c3af1d9ab90066f1a2)
chore(container): update ghcr.io/siderolabs/talosctl docker tag to
v1.8.4
-
[`d4960ee`](https://redirect.github.com/budimanjojo/talhelper/commit/d4960eed2ed79e932ef0ddb4d7d2b948d5462e75)
chore(container): update golangci/golangci-lint docker tag to v1.62.2
-
[`253413f`](https://redirect.github.com/budimanjojo/talhelper/commit/253413fea3620ce7c3964af5c529e6b23118b6e5)
chore(container): update goreleaser/goreleaser docker tag to v2.4.6
-
[`d7ffc26`](https://redirect.github.com/budimanjojo/talhelper/commit/d7ffc26da9a927186d61d728509f02c5426f76c0)
chore(container): update goreleaser/goreleaser docker tag to v2.4.7
-
[`a8e836c`](https://redirect.github.com/budimanjojo/talhelper/commit/a8e836ce65662386b54e0cf1f12c54fe4fd28e3a)
chore(container): update goreleaser/goreleaser docker tag to v2.4.8
-
[`ca3cac8`](https://redirect.github.com/budimanjojo/talhelper/commit/ca3cac86e55a27764778a4783ab0f33d68a76a77)
chore(container): update
mcr.microsoft.com/devcontainers/go:1.23-bookworm docker digest to
[`a417a34`](https://redirect.github.com/budimanjojo/talhelper/commit/a417a34)
([#&#8203;744](https://redirect.github.com/budimanjojo/talhelper/issues/744))
-
[`f7a7aa3`](https://redirect.github.com/budimanjojo/talhelper/commit/f7a7aa36ca59c3df13ec987d27ca04483df0dfcb)
chore(deps): update dependency siderolabs/talos to v1.8.4
-
[`a9dedfb`](https://redirect.github.com/budimanjojo/talhelper/commit/a9dedfb31b0ab292eff5b30d50bc63582a44d057)
chore(github-action): update actions/setup-go action to v5.2.0
-
[`8eb2b53`](https://redirect.github.com/budimanjojo/talhelper/commit/8eb2b5368e3dfc86bbd2aad69b9c74e18c76cb2a)
chore(github-action): update renovatebot/github-action action to v41.0.3
-
[`cebf682`](https://redirect.github.com/budimanjojo/talhelper/commit/cebf6823d676e2da4158c2ee6ec970c3e88eb295)
chore(github-action): update renovatebot/github-action action to v41.0.4
-
[`80e98bf`](https://redirect.github.com/budimanjojo/talhelper/commit/80e98bf25ec929ca2f0bdbaa582af08579248996)
chore(github-action): update renovatebot/github-action action to v41.0.5
-
[`439f072`](https://redirect.github.com/budimanjojo/talhelper/commit/439f072fee5854a6f188455e2e6d9d1cf2477a33)
chore(github-action): update renovatebot/github-action action to v41.0.6
-
[`1793f99`](https://redirect.github.com/budimanjojo/talhelper/commit/1793f993a8a1dc01d79aa2ca2c37d95bd5b099f3)
chore(schema): update talos-extensions.yaml JSON schema
-
[`059baf1`](https://redirect.github.com/budimanjojo/talhelper/commit/059baf1ccb421f1808856a3ca607f989a8b23035)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;716](https://redirect.github.com/budimanjojo/talhelper/issues/716))
-
[`d0ce70a`](https://redirect.github.com/budimanjojo/talhelper/commit/d0ce70a5cc7739f86e1b60cc9d032df0f2ce9601)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;722](https://redirect.github.com/budimanjojo/talhelper/issues/722))
-
[`c18474f`](https://redirect.github.com/budimanjojo/talhelper/commit/c18474f4863ef527ec70d50df2b250091f781ef4)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;723](https://redirect.github.com/budimanjojo/talhelper/issues/723))
-
[`4819673`](https://redirect.github.com/budimanjojo/talhelper/commit/481967366ec220d5e9bd7a1de51104a9f6329bf2)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;724](https://redirect.github.com/budimanjojo/talhelper/issues/724))
-
[`f49b181`](https://redirect.github.com/budimanjojo/talhelper/commit/f49b181a6ecc512093d751166e2cc689f1482e58)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;726](https://redirect.github.com/budimanjojo/talhelper/issues/726))
-
[`246f2e4`](https://redirect.github.com/budimanjojo/talhelper/commit/246f2e43a92240a16e885329383f6e1410307c75)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;732](https://redirect.github.com/budimanjojo/talhelper/issues/732))
-
[`90d5d69`](https://redirect.github.com/budimanjojo/talhelper/commit/90d5d6978d2c1f1f809af77967048543eb69b5b4)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;734](https://redirect.github.com/budimanjojo/talhelper/issues/734))
-
[`c0b46d0`](https://redirect.github.com/budimanjojo/talhelper/commit/c0b46d07ac183b64e18225be88701b51c57ebb78)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;736](https://redirect.github.com/budimanjojo/talhelper/issues/736))
-
[`94df294`](https://redirect.github.com/budimanjojo/talhelper/commit/94df2946e63d792b470f17ab76bea1e052c992f1)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;739](https://redirect.github.com/budimanjojo/talhelper/issues/739))
-
[`87a1d82`](https://redirect.github.com/budimanjojo/talhelper/commit/87a1d8220c6b4f5650c45bdf4d44a18af0dd20b3)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;743](https://redirect.github.com/budimanjojo/talhelper/issues/743))
-
[`d834e42`](https://redirect.github.com/budimanjojo/talhelper/commit/d834e42a5af9f9b2b0c9e34de42e90b57c979ecb)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;745](https://redirect.github.com/budimanjojo/talhelper/issues/745))
-
[`4d5078c`](https://redirect.github.com/budimanjojo/talhelper/commit/4d5078c84e8a3e6025ba7a6bc1b836a7c9fe7537)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;748](https://redirect.github.com/budimanjojo/talhelper/issues/748))
-
[`6461aee`](https://redirect.github.com/budimanjojo/talhelper/commit/6461aee3a37f6075e089535fe58cc3f36b244174)
feat(flake): update flake.lock file for go v1.23.3
-
[`89c250c`](https://redirect.github.com/budimanjojo/talhelper/commit/89c250c1efebe54fb321fb493833022b3e451cbc)
feat(readme): thank you
[@&#8203;DrMxrcy](https://redirect.github.com/DrMxrcy) for the sponsor!
-
[`6b0a8ac`](https://redirect.github.com/budimanjojo/talhelper/commit/6b0a8ac83e5dc459204541161cb2bc3c31842f3a)
feat(readme): thank you
[@&#8203;Toastyice](https://redirect.github.com/Toastyice) for the
generous sponsor!
-
[`b6d2d6f`](https://redirect.github.com/budimanjojo/talhelper/commit/b6d2d6ff584904785697f3074ef71d501626ed36)
feat: update Scoop for talhelper version v3.0.10
-
[`8ba27b8`](https://redirect.github.com/budimanjojo/talhelper/commit/8ba27b8366a9e0f60a3ed067460826332c7db01d)
feat: update flake
-
[`48cc0b6`](https://redirect.github.com/budimanjojo/talhelper/commit/48cc0b637e0252f5b335ffa33593bddad7bacfee)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.10
-
[`891f95b`](https://redirect.github.com/budimanjojo/talhelper/commit/891f95b67db6af723ea0ff2afaeb3b3385b1d0f6)
fix(deps): update module github.com/getsops/sops/v3 to v3.9.2
-
[`47f8483`](https://redirect.github.com/budimanjojo/talhelper/commit/47f848339f228c446d090aabd8f106ee24d6e9f5)
fix(deps): update module github.com/gookit/validate to v1.5.3
-
[`59de8b0`](https://redirect.github.com/budimanjojo/talhelper/commit/59de8b0e5207b4dc4dfbd1d45262d47fc1e2bfe3)
fix(deps): update module github.com/siderolabs/image-factory to v0.6.1
-
[`e24f6bf`](https://redirect.github.com/budimanjojo/talhelper/commit/e24f6bff4702449356441f7833f3e69cca03b687)
fix(deps): update module github.com/siderolabs/image-factory to v0.6.2
-
[`b75a206`](https://redirect.github.com/budimanjojo/talhelper/commit/b75a2068fdb28ed245aa02e1285bd04ed75ff648)
fix(deps): update module github.com/siderolabs/image-factory to v0.6.3
-
[`5e81959`](https://redirect.github.com/budimanjojo/talhelper/commit/5e81959c0190cdd272a761f5795c06d22e7db9a3)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.9.0-alpha.3
-
[`7b40333`](https://redirect.github.com/budimanjojo/talhelper/commit/7b403338d24db553e68ebfd5f21208aa6f0f6c46)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.9.0-beta.0
-
[`460debf`](https://redirect.github.com/budimanjojo/talhelper/commit/460debf83431a15be4ea44c133ce91cc85e0cadb)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.9.0-beta.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 20:45:30 +00:00
TrueCharts BotandGitHub e2d0168db1 fix(deps): update module github.com/getsops/sops/v3 v3.9.1 → v3.9.2 (clustertool) (#30154) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/getsops/sops/v3](https://redirect.github.com/getsops/sops)
| replace | patch | `v3.9.1` -> `v3.9.2` |
| [github.com/getsops/sops/v3](https://redirect.github.com/getsops/sops)
| require | patch | `v3.9.1` -> `v3.9.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>getsops/sops (github.com/getsops/sops/v3)</summary>

###
[`v3.9.2`](https://redirect.github.com/getsops/sops/releases/tag/v3.9.2)

[Compare
Source](https://redirect.github.com/getsops/sops/compare/v3.9.1...v3.9.2)

##### Installation

To install `sops`, download one of the pre-built binaries provided for
your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

##### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.linux.amd64

##### Move the binary in to your PATH
mv sops-v3.9.2.linux.amd64 /usr/local/bin/sops

##### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of this file, run the following commands:

```shell

##### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.checksums.sig

##### Verify the checksums file
cosign verify-blob sops-v3.9.2.checksums.txt \
  --certificate sops-v3.9.2.checksums.pem \
  --signature sops-v3.9.2.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature:

```shell

##### Verify the binary using the checksums file
sha256sum -c sops-v3.9.2.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries,
packages, and SBOMs can be found within the artifacts associated with
this release. It is presented through an [in-toto](https://in-toto.io/)
link metadata file named `sops-v3.9.2.intoto.jsonl`. To verify the
provenance of an artifact, you can utilize the
[`slsa-verifier`](https://redirect.github.com/slsa-framework/slsa-verifier#artifacts)
tool:

```shell

##### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.intoto.jsonl

##### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.9.2.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.9.2
```

##### Container Images

The `sops` binaries are also available as container images, based on
Debian (slim) and Alpine Linux. The Debian-based container images
include any dependencies which may be required to make use of certain
key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud
KMS. The Alpine-based container images are smaller in size, but do not
include these dependencies.

These container images are available for the following architectures:
`linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.9.2`
-   `ghcr.io/getsops/sops:v3.9.2-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.9.2`
-   `quay.io/getsops/sops:v3.9.2-alpine`

##### Verify container image signature

The container images are signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.9.2 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA
provenance](https://slsa.dev/provenance/v0.2) attestations. For more
information around the verification of this, please refer to the
[`slsa-verifier`
documentation](https://redirect.github.com/slsa-framework/slsa-verifier#containers).

##### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible
within the artifacts enclosed with this release. It is presented as an
[SPDX](https://spdx.dev/) JSON file, formatted as
`<binary>.spdx.sbom.json`.

##### What's Changed

- build(deps): Bump the go group with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1645](https://redirect.github.com/getsops/sops/pull/1645)
- build(deps): Bump the ci group with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1644](https://redirect.github.com/getsops/sops/pull/1644)
- build(deps): Bump the go group with 12 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1649](https://redirect.github.com/getsops/sops/pull/1649)
- build(deps): Bump the ci group with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1648](https://redirect.github.com/getsops/sops/pull/1648)
- build(deps): Bump the go group with 6 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1653](https://redirect.github.com/getsops/sops/pull/1653)
- build(deps): Bump the ci group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1654](https://redirect.github.com/getsops/sops/pull/1654)
- build(deps): Bump serde_json from 1.0.128 to 1.0.132 in
/functional-tests in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1655](https://redirect.github.com/getsops/sops/pull/1655)
- fix(azkv): handle whitespace in Azure Key Vault URLs by
[@&#8203;sEpt0r](https://redirect.github.com/sEpt0r) in
[https://github.com/getsops/sops/pull/1652](https://redirect.github.com/getsops/sops/pull/1652)
- build(deps): Bump the go group with 7 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1662](https://redirect.github.com/getsops/sops/pull/1662)
- build(deps): Bump the ci group with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1664](https://redirect.github.com/getsops/sops/pull/1664)
- build(deps): Bump the rust group in /functional-tests with 2 updates
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1663](https://redirect.github.com/getsops/sops/pull/1663)
- build(deps): Bump the ci group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1673](https://redirect.github.com/getsops/sops/pull/1673)
- build(deps): Bump the rust group in /functional-tests with 2 updates
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1670](https://redirect.github.com/getsops/sops/pull/1670)
- build(deps): Bump github/codeql-action from 3.27.1 to 3.27.4 in the ci
group by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1677](https://redirect.github.com/getsops/sops/pull/1677)
- build(deps): Bump the rust group in /functional-tests with 3 updates
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1676](https://redirect.github.com/getsops/sops/pull/1676)
- build(deps): Bump the ci group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1685](https://redirect.github.com/getsops/sops/pull/1685)
- build(deps): Bump the go group across 1 directory with 18 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1686](https://redirect.github.com/getsops/sops/pull/1686)
- Correctly handle comments during JSON serialization by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1647](https://redirect.github.com/getsops/sops/pull/1647)
- Update Rust dependencies by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1689](https://redirect.github.com/getsops/sops/pull/1689)
- fix(config): remove unused variables and align error casing by
[@&#8203;nicklasfrahm](https://redirect.github.com/nicklasfrahm) in
[https://github.com/getsops/sops/pull/1687](https://redirect.github.com/getsops/sops/pull/1687)
- keyservice: update protobuf to a recent release, and make go code
generation reproducible by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1688](https://redirect.github.com/getsops/sops/pull/1688)
- build(deps): Bump the go group with 8 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1693](https://redirect.github.com/getsops/sops/pull/1693)
- Release 3.9.2 by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1691](https://redirect.github.com/getsops/sops/pull/1691)

##### New Contributors

- [@&#8203;sEpt0r](https://redirect.github.com/sEpt0r) made their first
contribution in
[https://github.com/getsops/sops/pull/1652](https://redirect.github.com/getsops/sops/pull/1652)
- [@&#8203;nicklasfrahm](https://redirect.github.com/nicklasfrahm) made
their first contribution in
[https://github.com/getsops/sops/pull/1687](https://redirect.github.com/getsops/sops/pull/1687)

**Full Changelog**:
https://github.com/getsops/sops/compare/v3.9.1...v3.9.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 19:50:04 +01:00
TrueCharts BotandGitHub 8756290126 fix(deps): update kubernetes packages v0.31.3 → v0.31.4 (clustertool) (patch) (#30152) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [k8s.io/api](https://redirect.github.com/kubernetes/api) | require |
patch | `v0.31.3` -> `v0.31.4` |
|
[k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery)
| require | patch | `v0.31.3` -> `v0.31.4` |
| [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) |
require | patch | `v0.31.3` -> `v0.31.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>kubernetes/api (k8s.io/api)</summary>

###
[`v0.31.4`](https://redirect.github.com/kubernetes/api/compare/v0.31.3...v0.31.4)

[Compare
Source](https://redirect.github.com/kubernetes/api/compare/v0.31.3...v0.31.4)

</details>

<details>
<summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary>

###
[`v0.31.4`](https://redirect.github.com/kubernetes/apimachinery/compare/v0.31.3...v0.31.4)

[Compare
Source](https://redirect.github.com/kubernetes/apimachinery/compare/v0.31.3...v0.31.4)

</details>

<details>
<summary>kubernetes/client-go (k8s.io/client-go)</summary>

###
[`v0.31.4`](https://redirect.github.com/kubernetes/client-go/compare/v0.31.3...v0.31.4)

[Compare
Source](https://redirect.github.com/kubernetes/client-go/compare/v0.31.3...v0.31.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 19:47:51 +01:00
TrueCharts BotandGitHub c109a6e7c9 chore(flux): update image kyverno 3.3.3 → 3.3.4 (clustertool) (#30068) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kyverno](https://redirect.github.com/kyverno/kyverno) | patch |
`3.3.3` -> `3.3.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 12:21:16 +01:00
TrueCharts BotandGitHub 8cbc7e1bb3 chore(flux): update helm release cilium 1.16.4 → 1.16.5 (clustertool) (#30065) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.16.4`
-> `1.16.5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.16.5`](https://redirect.github.com/cilium/cilium/releases/tag/v1.16.5):
1.16.5

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.16.4...1.16.5)

## Summary of Changes

**Minor Changes:**

- hubble: Stop building 32-bit binaries (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35974](https://redirect.github.com/cilium/cilium/issues/35974),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))

**Bugfixes:**

- Address potential connectivity disruption when using either L7 / DNS
Network policies in combination with per-endpoint routes and
hostLegacyRouting, or L7 / DNS network policies in combination with
IPsec network encryption. (Backport PR
[#&#8203;36540](https://redirect.github.com/cilium/cilium/issues/36540),
Upstream PR
[#&#8203;36484](https://redirect.github.com/cilium/cilium/issues/36484),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- bgp: fix race in bgp stores (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35971](https://redirect.github.com/cilium/cilium/issues/35971),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- BGPv1: Fix race by reconciliation of services with
externalTrafficPolicy=Local by populating locally available services
after performing service diff (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36230](https://redirect.github.com/cilium/cilium/issues/36230),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- BGPv2: Fix race by reconciliation of services with
externalTrafficPolicy=Local by populating locally available services
after performing service diff (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36165](https://redirect.github.com/cilium/cilium/issues/36165),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- Cilium agent now waits until endpoints have restored before starting
accepting new xDS streams. (Backport PR
[#&#8203;36049](https://redirect.github.com/cilium/cilium/issues/36049),
Upstream PR
[#&#8203;35984](https://redirect.github.com/cilium/cilium/issues/35984),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Cilium no longer keeps old DNS-IP mappings alive while reaping newer
ones, leading to spurious drops in connections to domains with many IPs
associated. (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36252](https://redirect.github.com/cilium/cilium/issues/36252),
[@&#8203;bimmlerd](https://redirect.github.com/bimmlerd))
- cilium-health-ep controller is made to be more robust against
successive failures. (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35936](https://redirect.github.com/cilium/cilium/issues/35936),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- DNS proxy port is no longer released when endpoint with a DNS policy
fails to regenerate successfully. A potential deadlock between CEC/CCEC
parser and endpoint policy update is removed. (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36142](https://redirect.github.com/cilium/cilium/issues/36142),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Envoy "initial fetch timeout" warnings are now demoted to info level,
as they are expected to happen during Cilium Agent restart. (Backport PR
[#&#8203;36049](https://redirect.github.com/cilium/cilium/issues/36049),
Upstream PR
[#&#8203;36060](https://redirect.github.com/cilium/cilium/issues/36060),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Fix an issue where pod-to-world traffic goes up stack when BPF host
routing is enabled with tunnel. (Backport PR
[#&#8203;35861](https://redirect.github.com/cilium/cilium/issues/35861),
Upstream PR
[#&#8203;35098](https://redirect.github.com/cilium/cilium/issues/35098),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- Fix identity leak for kvstore identity mode (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;34893](https://redirect.github.com/cilium/cilium/issues/34893),
[@&#8203;odinuge](https://redirect.github.com/odinuge))
- Fix potential Cilium agent panic during endpoint restoration,
occurring if the corresponding pod gets deleted while the agent is
restarting. This regression only affects Cilium v1.16.4. (Backport PR
[#&#8203;36302](https://redirect.github.com/cilium/cilium/issues/36302),
Upstream PR
[#&#8203;36292](https://redirect.github.com/cilium/cilium/issues/36292),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gateway-api: Fix gateway checks for namespace (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;35452](https://redirect.github.com/cilium/cilium/issues/35452),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Remove hostLegacyRouting in clustermesh (Backport PR
[#&#8203;36357](https://redirect.github.com/cilium/cilium/issues/36357),
Upstream PR
[#&#8203;35418](https://redirect.github.com/cilium/cilium/issues/35418),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- helm: Use an absolute FQDN for the Hubble peer-service endpoint to
avoid incorrect DNS resolution outside the cluster (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;36005](https://redirect.github.com/cilium/cilium/issues/36005),
[@&#8203;devodev](https://redirect.github.com/devodev))
- hubble: consistently use v as prefix for the Hubble version (Backport
PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;35891](https://redirect.github.com/cilium/cilium/issues/35891),
[@&#8203;rolinh](https://redirect.github.com/rolinh))
- iptables: Fix data race in iptables manager (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35902](https://redirect.github.com/cilium/cilium/issues/35902),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- lrp: update LRP services with stale backends on agent restart
(Backport PR
[#&#8203;36106](https://redirect.github.com/cilium/cilium/issues/36106),
Upstream PR
[#&#8203;36036](https://redirect.github.com/cilium/cilium/issues/36036),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- policy: Fix bug that allowed port ranges to be attached to L7
policies, which is not permitted.
([#&#8203;36050](https://redirect.github.com/cilium/cilium/issues/36050),
[@&#8203;nathanjsweet](https://redirect.github.com/nathanjsweet))
- Unbreak the cilium-dbg preflight migrate-identity command (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36089](https://redirect.github.com/cilium/cilium/issues/36089),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Use `strconv.Itoa` instead of `string()` for the correct behavior when
converting `kafka.ErrorCode` from `int32` to `string`. Add relevant unit
tests for Kafka plugin and handler. (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35856](https://redirect.github.com/cilium/cilium/issues/35856),
[@&#8203;nddq](https://redirect.github.com/nddq))

**CI Changes:**

- \[v1.16] ci: modularize chart CI push workflow
([#&#8203;35958](https://redirect.github.com/cilium/cilium/issues/35958),
[@&#8203;ferozsalam](https://redirect.github.com/ferozsalam))
- gh: conformance-clustermesh: test with IPsec + BPF NodePort (Backport
PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36384](https://redirect.github.com/cilium/cilium/issues/36384),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gha: configure environment in build-images-base/image-digests job
(Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36318](https://redirect.github.com/cilium/cilium/issues/36318),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- node_local_store: prevent racey tests while using mock node store.
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35945](https://redirect.github.com/cilium/cilium/issues/35945),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- Remove unnecessary hubble port-forward commands (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;33523](https://redirect.github.com/cilium/cilium/issues/33523),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))

**Misc Changes:**

- \[v1.16] docs: egress masquerade selector
([#&#8203;36333](https://redirect.github.com/cilium/cilium/issues/36333),
[@&#8203;viktor-kurchenko](https://redirect.github.com/viktor-kurchenko))
- \[v1.16] images: bump cni plugins to v1.6.0
([#&#8203;36092](https://redirect.github.com/cilium/cilium/issues/36092),
[@&#8203;ferozsalam](https://redirect.github.com/ferozsalam))
- bugtool: dump tail-call map for bpf_wireguard (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36183](https://redirect.github.com/cilium/cilium/issues/36183),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;36155](https://redirect.github.com/cilium/cilium/issues/36155),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;36275](https://redirect.github.com/cilium/cilium/issues/36275),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;36443](https://redirect.github.com/cilium/cilium/issues/36443),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16) (patch)
([#&#8203;36277](https://redirect.github.com/cilium/cilium/issues/36277),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;35546](https://redirect.github.com/cilium/cilium/issues/35546),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;36152](https://redirect.github.com/cilium/cilium/issues/36152),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;36279](https://redirect.github.com/cilium/cilium/issues/36279),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;36444](https://redirect.github.com/cilium/cilium/issues/36444),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.16)
([#&#8203;36153](https://redirect.github.com/cilium/cilium/issues/36153),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.22.9 docker digest to
[`147f428`](https://redirect.github.com/cilium/cilium/commit/147f428)
(v1.16)
([#&#8203;36222](https://redirect.github.com/cilium/cilium/issues/36222),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.22.10 (v1.16)
([#&#8203;36441](https://redirect.github.com/cilium/cilium/issues/36441),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.30.7-1732605705-2aa20ee3acb68cd38d57669af19508bea8f0ba62 (v1.16)
([#&#8203;36180](https://redirect.github.com/cilium/cilium/issues/36180),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8 (v1.16)
([#&#8203;36495](https://redirect.github.com/cilium/cilium/issues/36495),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/lvh-images/kind docker tag to
bpf-20241129.013349 (v1.16)
([#&#8203;36278](https://redirect.github.com/cilium/cilium/issues/36278),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/lvh-images/kind docker tag to
bpf-20241206.013345 (v1.16)
([#&#8203;36442](https://redirect.github.com/cilium/cilium/issues/36442),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.16) (patch)
([#&#8203;36154](https://redirect.github.com/cilium/cilium/issues/36154),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- docs: Add the tls:// prefix before the IP address (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36118](https://redirect.github.com/cilium/cilium/issues/36118),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- docs: Fix typo in multi-pool section title (Backport PR
[#&#8203;36312](https://redirect.github.com/cilium/cilium/issues/36312),
Upstream PR
[#&#8203;36305](https://redirect.github.com/cilium/cilium/issues/36305),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- docs: In k0s guide, remove dashes to fix invalid Bash variable names.
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35923](https://redirect.github.com/cilium/cilium/issues/35923),
[@&#8203;yilas](https://redirect.github.com/yilas))
- docs: lrp: fix kernel version requirement for skipRedirectFromBackend
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35921](https://redirect.github.com/cilium/cilium/issues/35921),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- docs: system-requirements: require 5.4 kernel (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36386](https://redirect.github.com/cilium/cilium/issues/36386),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: WireGuard doesn't require overlay port in Network Firewalls
(Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36208](https://redirect.github.com/cilium/cilium/issues/36208),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Endpoint populate new policymap early if empty (Backport PR
[#&#8203;36479](https://redirect.github.com/cilium/cilium/issues/36479),
Upstream PR
[#&#8203;36361](https://redirect.github.com/cilium/cilium/issues/36361),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- envoy: Configure internal_address_config to avoid warning log
(Backport PR
[#&#8203;36015](https://redirect.github.com/cilium/cilium/issues/36015),
Upstream PR
[#&#8203;35943](https://redirect.github.com/cilium/cilium/issues/35943),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- envoy: Pass tofqdns-proxy-response-max-delay to Envoy (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36330](https://redirect.github.com/cilium/cilium/issues/36330),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- fix(deps): update module golang.org/x/crypto to v0.31.0 \[security]
(v1.16)
([#&#8203;36530](https://redirect.github.com/cilium/cilium/issues/36530),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- Fixed BGP documentation (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35953](https://redirect.github.com/cilium/cilium/issues/35953),
[@&#8203;seadog007](https://redirect.github.com/seadog007))
- images: Use cilium-builder image instead of golang to build hubble
(Backport PR
[#&#8203;36312](https://redirect.github.com/cilium/cilium/issues/36312),
Upstream PR
[#&#8203;35697](https://redirect.github.com/cilium/cilium/issues/35697),
[@&#8203;learnitall](https://redirect.github.com/learnitall))
- lrp: fix kernel version requirement in warning log (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36141](https://redirect.github.com/cilium/cilium/issues/36141),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- Makefile: fix swagger definition for automatic renovate updates
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35979](https://redirect.github.com/cilium/cilium/issues/35979),
[@&#8203;aanm](https://redirect.github.com/aanm))
- proxy: Take proxy port reference for new redirects immediately
(Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36435](https://redirect.github.com/cilium/cilium/issues/36435),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- proxyports: Resolve data races in test (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36399](https://redirect.github.com/cilium/cilium/issues/36399),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- proxyports: Sleep a bit longer in tests (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36389](https://redirect.github.com/cilium/cilium/issues/36389),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Remove duplicated watch on services and endpoint in the cilium-agent
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35838](https://redirect.github.com/cilium/cilium/issues/35838),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
- Rework error handling logic in neighbor discovery (Backport PR
[#&#8203;36093](https://redirect.github.com/cilium/cilium/issues/36093),
Upstream PR
[#&#8203;35144](https://redirect.github.com/cilium/cilium/issues/35144),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- Silence spurious clustermesh-related warnings (Backport PR
[#&#8203;36225](https://redirect.github.com/cilium/cilium/issues/36225),
Upstream PR
[#&#8203;35867](https://redirect.github.com/cilium/cilium/issues/35867),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Update documentation for egress masquerading behavior (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36267](https://redirect.github.com/cilium/cilium/issues/36267),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))

**Other Changes:**

- \[1.16] ci/ipsec-upgrade: increase cilium status wait duration
([#&#8203;36082](https://redirect.github.com/cilium/cilium/issues/36082),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- \[v1.16] cilium, service: Fix checkLBSrcRange propagation to LB map
([#&#8203;36511](https://redirect.github.com/cilium/cilium/issues/36511),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- install: Update image digests for v1.16.4
([#&#8203;36047](https://redirect.github.com/cilium/cilium/issues/36047),
[@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
- jrajahalme/v1.16 cilium cli
([#&#8203;36541](https://redirect.github.com/cilium/cilium/issues/36541),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Revert "workflows/ipsec: Cover Ingress"
([#&#8203;36116](https://redirect.github.com/cilium/cilium/issues/36116),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))

#### Docker Manifests

##### cilium


`quay.io/cilium/cilium:v1.16.5@&#8203;sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d`

`quay.io/cilium/cilium:stable@sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d`

##### clustermesh-apiserver


`quay.io/cilium/clustermesh-apiserver:v1.16.5@&#8203;sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958`

`quay.io/cilium/clustermesh-apiserver:stable@sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958`

##### docker-plugin


`quay.io/cilium/docker-plugin:v1.16.5@&#8203;sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768`

`quay.io/cilium/docker-plugin:stable@sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768`

##### hubble-relay


`quay.io/cilium/hubble-relay:v1.16.5@&#8203;sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00`

`quay.io/cilium/hubble-relay:stable@sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00`

##### operator-alibabacloud


`quay.io/cilium/operator-alibabacloud:v1.16.5@&#8203;sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0`

`quay.io/cilium/operator-alibabacloud:stable@sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0`

##### operator-aws


`quay.io/cilium/operator-aws:v1.16.5@&#8203;sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476`

`quay.io/cilium/operator-aws:stable@sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476`

##### operator-azure


`quay.io/cilium/operator-azure:v1.16.5@&#8203;sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9`

`quay.io/cilium/operator-azure:stable@sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9`

##### operator-generic


`quay.io/cilium/operator-generic:v1.16.5@&#8203;sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039`

`quay.io/cilium/operator-generic:stable@sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039`

##### operator


`quay.io/cilium/operator:v1.16.5@&#8203;sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940`

`quay.io/cilium/operator:stable@sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 12:20:43 +01:00
TrueCharts BotandGitHub 753bda6b9a chore(flux): update helm release metallb 0.14.8 → 0.14.9 (clustertool) (#30066) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [metallb](https://metallb.universe.tf)
([source](https://redirect.github.com/metallb/metallb)) | patch |
`0.14.8` -> `0.14.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>metallb/metallb (metallb)</summary>

###
[`v0.14.9`](https://redirect.github.com/metallb/metallb/releases/tag/v0.14.9)

[Compare
Source](https://redirect.github.com/metallb/metallb/compare/v0.14.8...v0.14.9)

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-9

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 12:20:09 +01:00
TrueCharts BotandGitHub b92ab98394 chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.8.4 (clustertool) (#30063) 2024-12-27 12:17:47 +01:00
TrueCharts BotandGitHub 7b13dc055f chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.31.4 (clustertool) (#30064) 2024-12-27 12:17:01 +01:00
TrueCharts BotandGitHub fee5f591dc fix(deps): update module golang.org/x/crypto v0.29.0 → v0.31.0 [security] (#29837) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/crypto | require | minor | `v0.29.0` -> `v0.31.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

### GitHub Vulnerability Alerts

####
[CVE-2024-45337](https://redirect.github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909)

Applications and libraries which misuse the
ServerConfig.PublicKeyCallback callback may be susceptible to an
authorization bypass.

The documentation for ServerConfig.PublicKeyCallback says that "A call
to this function does not guarantee that the key offered is in fact used
to authenticate." Specifically, the SSH protocol allows clients to
inquire about whether a public key is acceptable before proving control
of the corresponding private key. PublicKeyCallback may be called with
multiple keys, and the order in which the keys were provided cannot be
used to infer which key the client successfully authenticated with, if
any. Some applications, which store the key(s) passed to
PublicKeyCallback (or derived information) and make security relevant
determinations based on it once the connection is established, may make
incorrect assumptions.

For example, an attacker may send public keys A and B, and then
authenticate with A. PublicKeyCallback would be called only twice, first
with A and then with B. A vulnerable application may then make
authorization decisions based on key B for which the attacker does not
actually control the private key.

Since this API is widely misused, as a partial mitigation
golang.org/x/crypto@v0.31.0 enforces the property that, when
successfully authenticating via public key, the last key passed to
ServerConfig.PublicKeyCallback will be the key used to authenticate the
connection. PublicKeyCallback will now be called multiple times with the
same key, if necessary. Note that the client may still not control the
last key passed to PublicKeyCallback if the connection is then
authenticated with a different method, such as PasswordCallback,
KeyboardInteractiveCallback, or NoClientAuth.

Users should be using the Extensions field of the Permissions return
value from the various authentication callbacks to record data
associated with the authentication attempt instead of referencing
external state. Once the connection is established the state
corresponding to the successful authentication attempt can be retrieved
via the ServerConn.Permissions field. Note that some third-party
libraries misuse the Permissions type by sharing it across
authentication attempts; users of third-party libraries should refer to
the relevant projects for guidance.

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 09:57:41 +00:00
TrueCharts BotandGitHub 8a610ba0bf fix(deps): update module filippo.io/age v1.2.0 → v1.2.1 [security] (#29835) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [filippo.io/age](https://redirect.github.com/FiloSottile/age) |
require | patch | `v1.2.0` -> `v1.2.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

### GitHub Vulnerability Alerts

####
[GHSA-32gq-x56h-299c](https://redirect.github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c)

A plugin name containing a path separator may allow an attacker to
execute an arbitrary binary.

Such a plugin name can be provided to the age CLI through an
attacker-controlled recipient or identity string, or to the
[`plugin.NewIdentity`](https://pkg.go.dev/filippo.io/age/plugin#NewIdentity),
[`plugin.NewIdentityWithoutData`](https://pkg.go.dev/filippo.io/age/plugin#NewIdentityWithoutData),
or
[`plugin.NewRecipient`](https://pkg.go.dev/filippo.io/age/plugin#NewRecipient)
APIs.

On UNIX systems, a directory matching `${TMPDIR:-/tmp}/age-plugin-*`
needs to exist for the attack to succeed.

The binary is executed with a single flag, either
`--age-plugin=recipient-v1` or `--age-plugin=identity-v1`. The standard
input includes the recipient or identity string, and the random file key
(if encrypting) or the header of the file (if decrypting). The format is
constrained by the [age-plugin](https://c2sp.org/age-plugin) protocol.

An equivalent issue was fixed by the
[rage](https://redirect.github.com/str4d/rage) project, see advisory
[GHSA-4fg7-vxc8-qx5w](https://redirect.github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w).

Thanks to ⬡-49016 for reporting this.

---

### Release Notes

<details>
<summary>FiloSottile/age (filippo.io/age)</summary>

###
[`v1.2.1`](https://redirect.github.com/FiloSottile/age/releases/tag/v1.2.1):
age v1.2.1: security fix

[Compare
Source](https://redirect.github.com/FiloSottile/age/compare/v1.2.0...v1.2.1)

This release fixes a security vulnerability that could allow an attacker
to execute an arbitrary binary under certain conditions.

See GHSA-32gq-x56h-299c.

Plugin names may now only contain alphanumeric characters or the four
special characters `+-._`.

Thanks to ⬡-49016 for reporting this issue.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 02:40:03 +01:00
Stavros KoisGitHubKjeld Schouten
 		76665fe7ab chore(common): update min helm version (#29810) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  #29809 

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
 2024-12-03 19:32:23 +01:00
alfi0812GitHubKjeld Schouten
 		ea7a259e79 Update Dockerfile (#29793) 
Remove krew install. As it does not work in the docker file

**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
 2024-11-27 13:57:55 +00:00
alfi0812andGitHub afa869fdb6 Update devcontainer ENV and settings (#29791) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
 2024-11-26 15:36:34 +01:00
alfi0812GitHubKjeld Schouten
 		db62c9469a Update devcontainer.json (#29703) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
 2024-11-24 15:01:21 +01:00
TrueCharts BotandGitHub d9f1f4702f fix(deps): update module sigs.k8s.io/controller-runtime v0.19.1 → v0.19.2 (clustertool) (#29694) 2024-11-23 03:04:25 +01:00
TrueCharts BotandGitHub a6408d4025 chore(flux): update image traefik 30.0.3 → 30.0.4 (clustertool) (#29731) 2024-11-23 02:53:11 +01:00