Skip to content

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Nov 15, 2025

This PR contains the following updates:

Package Change Age Confidence Update
github.com/cli/cli/v2 v2.83.0 -> v2.83.1 age confidence patch
github.com/golangci/golangci-lint/v2 v2.6.1 -> v2.6.2 age confidence patch
golang.org/x/tools v0.38.0 -> v0.39.0 age confidence minor
helm/helm v3.19.0 -> v3.19.2 age confidence patch
k8s.io/code-generator v0.34.1 -> v0.34.2 age confidence patch
kubernetes/kubernetes v1.34.1 -> v1.34.2 age confidence patch
kyverno/kyverno v1.15.2 -> v1.16.0 age confidence minor
mikefarah/yq v4.48.1 -> v4.48.2 age confidence patch
operator-framework/operator-sdk v1.41.1 -> v1.42.0 age confidence minor
protocolbuffers/protobuf v33.0 -> v33.1 age confidence minor
sigs.k8s.io/kustomize/kustomize/v5 v5.7.1 -> v5.8.0 age confidence minor

Release Notes

cli/cli (github.com/cli/cli/v2)

v2.83.1: GitHub CLI 2.83.1

Compare Source

What's Changed
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

Full Changelog: cli/cli@v2.83.0...v2.83.1

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.6.2

Compare Source

  1. Bug fixes
    • fmt command with symlinks
    • use file depending on build configuration to invalidate cache
  2. Linters bug fixes
    • testableexamples: from 1.0.0 to 1.0.1
    • testpackage: from 1.1.1 to 1.1.2
helm/helm (helm/helm)

v3.19.2: Helm v3.19.2

Compare Source

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026
Changelog
  • [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.1: Helm v3.19.1

Compare Source

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.0.0 is the next major release and will be on November 12, 2025
  • 3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026
Changelog
  • chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c2 (dependabot[bot])
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d (Benoit Tigeot)
  • Avoid "panic: interface conversion: interface {} is nil" 2f619be (Benoit Tigeot)
  • Fix helm pull untar dir check with repo urls 8112d47 (Luna Stadler)
  • Fix deprecation warning 5dff7ce (Benoit Tigeot)
  • chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d2 (dependabot[bot])
  • Add timeout flag to repo add and update flags a833710 (Reinhard Nägele)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81 (Dirk Müller)
kubernetes/code-generator (k8s.io/code-generator)

v0.34.2

Compare Source

kubernetes/kubernetes (kubernetes/kubernetes)

v1.34.2: Kubernetes v1.34.2

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kyverno/kyverno (kyverno/kyverno)

v1.16.0

Compare Source

New Adopters
✨ Added ✨
API Versions
🐛 Fixed 🐛
  • (CLI)Fixed apply command return code regardless of output format (#​12629)
  • Fixed resource name matching for edge case when name is auto-generated (#​13584)
  • (CLI) Fix an issue display resource names for excluded resources in kyverno test output (#​13625)
  • Fixed an issue to queue reports that belong to a certain policy when this policy gets an event (#​13664)
  • Fixed an issue ro update lastRefreshInterval of the globalcontextentry (#​13700)
  • Fixed OpenSSF scorecard critical issue (#​13812)
  • Fixed namespace termination logging (#​13866)
  • Fixed a panic issue in the reports controller (#​13885)
  • Updated conditional logic to correct reportsServer value reference (#​13893)
  • Fixed background scan reporting to consume resourceFilter for new policy types (#​13919)
  • (ClI) Fixed issue to evaluate userInfo for VAPs and MAPs in the CLI (#​13920)
  • Fixed a reporting issue for pod controllers regarding reportProperties and custom messages (#​13952)
  • Fixed issue to block mutating policies upon compilation errors (#​13972)
  • Fixed namespace selector matching for PolicyException (#​13975)
  • Reduce memory usage by disabling histogram min/max tracking (#​13962)
  • Enhanced logs for generate rule attempts execution for rejected resources (#​14056)
  • Fixed autogen rule conversion regarding metadata paths translation(#​14208)
Helm
  • Cleaned up unused helm hooks (#​13716)
  • Supported configurable podAnnotations for test pods (#​13767)
  • Shortened helm hook names (#​13966)
  • Create standalone CRDs chart (#​13988)
  • Fixed to make helm templating value global (#​14144)
  • Added new policy types to migration job (#​14162)
🔧 Others 🔧
Dependencies
  • chore(deps): bump the kubernetes group across 2 directories with 2 updates (#​14210)
  • chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#​14196)
  • chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 in /.github/actions/run-tests (#​14188)
  • chore(deps): bump ubuntu from 59a458b to 66460d5 in /.devcontainer (#​14172)
  • chore(deps): bump github/codeql-action from 4.30.7 to 4.30.8 (#​14157)
  • chore(deps): bump adRise/update-pr-branch from 0.10.1 to 0.10.2 (#​14156)
  • chore(deps): bump ubuntu from 728785b to 59a458b in /.devcontainer (#​14147)
  • chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#​14141)
  • chore(deps): bump fluxcd/flux2 from 2.7.1 to 2.7.2 (#​14137)
  • chore(deps): bump github/codeql-action from 3.30.6 to 4.30.7 (#​14133)
  • chore(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#​14126)
  • chore(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.3 (#​14125)
  • chore(deps): bump fluxcd/flux2 from 2.7.0 to 2.7.1 (#​14123)
  • chore(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10 (#​14120)
  • chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 (#​14118)
  • chore(deps): bump ubuntu from 353675e to fdb6c9c in /.devcontainer (#​14110)
  • chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#​14101)
  • chore(deps): bump fluxcd/flux2 from 2.6.4 to 2.7.0 (#​14100)
  • chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 (#​14091)
  • chore(deps): bump github/codeql-action from 3.30.4 to 3.30.5 (#​14083)
  • chore(deps): bump github.com/cyphar/filepath-securejoin from 0.4.1 to 0.5.0 (#​14077)
  • chore(deps): bump github/codeql-action from 3.30.3 to 3.30.4 (#​14074)
  • chore(deps): bump github.com/aptible/supercronic from 0.2.34 to 0.2.36 (#​14064)
  • chore(deps): bump sigs.k8s.io/release-utils from 0.12.1 to 0.12.2 (#​14059)
  • chore(deps): bump ubuntu from 590e57a to 353675e in /.devcontainer (#​14026)
  • chore(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 (#​14021)
  • chore(deps): bump ubuntu from 9cbed75 to 590e57a in /.devcontainer (#​14019)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#​14014)
  • chore(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#​14013)
  • chore(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 in /.github/actions/run-tests (#​14011)
  • chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.1 (#​13986)
  • chore(deps): bump github/codeql-action from 3.30.2 to 3.30.3 (#​13984)
  • chore(deps): bump github/codeql-action from 3.30.0 to 3.30.2 (#​13979)
  • chore(deps): bump oras-project/setup-oras from 1.2.3 to 1.2.4 (#​13970)
  • chore(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#​13957)
  • chore(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#​13956)
  • chore(deps): bump ubuntu from 7c06e91 to 9cbed75 in /.devcontainer (#​13955)
  • chore(deps): bump aquasecurity/trivy-action from 0.33.0 to 0.33.1 (#​13951)
  • chore(deps): bump actions/setup-go from 5.5.0 to 6.0.0 in /.github/actions/setup-build-env (#​13950)
  • chore(deps): bump actions/setup-python from 5.6.0 to 6.0.0 (#​13948)
  • chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /hack/controller-gen (#​13944)
  • chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#​13942)
  • chore(deps): bump github/codeql-action from 3.29.11 to 3.30.0 (#​13938)
  • chore(deps): bump kyverno/action-install-chainsaw from 0.2.12 to 0.2.13 in /.github/actions/run-tests (#​13917)
  • chore(deps): bump github.com/google/cel-go from 0.26.0 to 0.26.1 (#​13914)
  • chore(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 (#​13911)
  • chore(deps): bump kyverno/action-install-chainsaw from 0.2.12 to 0.2.13 (#​13906)
  • chore(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.2 (#​13900)
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#​13892)
  • chore(deps): bump github/codeql-action from 3.29.9 to 3.29.11 (#​13884)
  • chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 (#​13882)
  • chore(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 (#​13881)
  • chore(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 (#​13880)
  • chore(deps): bump azure/setup-helm from 4.3.0 to 4.3.1 (#​13870)
  • chore(deps): bump azure/setup-helm from 4.3.0 to 4.3.1 in /.github/actions/run-tests (#​13869)
  • chore(deps): bump cbrgm/cleanup-stale-branches-action from 1.1.32 to 1.2.0 (#​13863)
  • chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (#​13844)
  • chore(deps): bump the kubernetes group across 3 directories with 7 updates (#​13839)
  • chore(deps): bump ubuntu from a08e551 to 7c06e91 in /.devcontainer (#​13833)
  • chore(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (#​13832)
  • chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 in /.github/actions/run-tests (#​13828)
  • chore(deps): bump sigs.k8s.io/release-utils from 0.12.0 to 0.12.1 (#​13815)
  • chore(deps): bump github/codeql-action from 3.29.7 to 3.29.8 (#​13814)
  • chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#​13787)
  • chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 (#​13786)
  • chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#​13753)
  • chore(deps): bump cbrgm/cleanup-stale-branches-action from 1.1.31 to 1.1.32 (#​13742)
  • chore(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 (#​13727)
  • chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 (#​13713)
  • chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.9.1 to 0.10.1 (#​13706)
  • chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 (#​13686)
  • chore(deps): bump sigs.k8s.io/kustomize/api from 0.20.0 to 0.20.1 (#​13669)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.20.0 to 0.20.1 (#​13668)
  • chore(deps): bump github/codeql-action from 3.29.3 to 3.29.4 (#​13667)
  • chore(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 (#​13659)
  • chore(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 (#​13658)
  • chore(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.59.0 to 0.59.1 in the otel group across 1 directory (#​13649)
  • chore(deps): bump github/codeql-action from 3.29.2 to 3.29.3 (#​13648)
  • chore(deps): bump ubuntu from c4570d2 to a08e551 in /.devcontainer (#​13638)
  • chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 in /.github/actions/run-tests (#​13616)
  • chore(deps): bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0 (#​13613)
  • chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 (#​13597)
  • chore(deps): bump the kubernetes group across 3 directories with 7 updates (#​13596)
  • chore(deps): bump ubuntu from e356c06 to c4570d2 in /.devcontainer (#​13595)
  • chore(deps): bump ubuntu from 440dcf6 to e356c06 in /.devcontainer (#​13590)
  • chore(deps): bump github.com/google/cel-go from 0.23.2 to 0.26.0 (#​13579)
  • chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 (#​13551)
  • chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 (#​13542)
  • chore(deps): bump fluxcd/flux2 from 2.6.3 to 2.6.4 (#​13540)
  • chore(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 (#​13527)
  • chore(deps): bump ubuntu from 89ef6e4 to 440dcf6 in /.devcontainer (#​13516)
New Contributors

Full Changelog: kyverno/kyverno@v1.15.2...v1.16.0

mikefarah/yq (mikefarah/yq)

v4.48.2

Compare Source

operator-framework/operator-sdk (operator-framework/operator-sdk)

v1.42.0

Compare Source

What's Changed
New Contributors

Full Changelog: operator-framework/operator-sdk@v1.41.0...v1.42.0

protocolbuffers/protobuf (protocolbuffers/protobuf)

v33.1: Protocol Buffers v33.1

Compare Source

Announcements
  • Protobuf News may include additional announcements or pre-announcements for upcoming changes.
C++
Java
  • Expose NestedInFileClass naming helpers for Java immutable. (#​24401) (5737cd2)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: Renovate Bot <[email protected]>
@octo-sts octo-sts bot added dependencies Pull requests that update a dependency file ok-to-test labels Nov 15, 2025
@cert-manager-prow cert-manager-prow bot added dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Nov 15, 2025
Copy link
Member

@erikgb erikgb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@cert-manager-prow cert-manager-prow bot added the lgtm Indicates that a PR is ready to be merged. label Nov 15, 2025
@cert-manager-prow
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@cert-manager-prow cert-manager-prow bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 15, 2025
@cert-manager-prow cert-manager-prow bot merged commit 4479013 into main Nov 15, 2025
6 checks passed
@octo-sts octo-sts bot deleted the renovate/tools branch November 16, 2025 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. dependencies Pull requests that update a dependency file lgtm Indicates that a PR is ready to be merged. ok-to-test size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants