chore: update dependencies

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yaml

@@ -32,7 +32,7 @@ jobs:
     steps:
       - name: gather-system-info
         id: system-info
-        uses: kenchan0130/[email protected].0
+        uses: kenchan0130/[email protected].1
         continue-on-error: true
       - name: print-system-info
         run: |
@@ -108,7 +108,7 @@ jobs:
     steps:
       - name: gather-system-info
         id: system-info
-        uses: kenchan0130/[email protected].0
+        uses: kenchan0130/[email protected].1
         continue-on-error: true
       - name: print-system-info
         run: |
@@ -169,7 +169,7 @@ jobs:
     steps:
       - name: gather-system-info
         id: system-info
-        uses: kenchan0130/[email protected].0
+        uses: kenchan0130/[email protected].1
         continue-on-error: true
       - name: print-system-info
         run: |

Dockerfile

@@ -1,4 +1,4 @@
-# syntax = docker/dockerfile-upstream:1.2.0-labs
+# syntax = docker/dockerfile-upstream:1.16.0-labs
 
 # Meta args applied to stage base names.
 
@@ -102,7 +102,7 @@ COPY --from=generate-build /src/app/caps-controller-manager/api ./app/caps-contr
 COPY --from=generate-build /src/app/sidero-controller-manager/api ./app/sidero-controller-manager/api
 COPY --from=generate-build /src/app/sidero-controller-manager/internal/api ./app/sidero-controller-manager/internal/api
 
-FROM --platform=${BUILDPLATFORM} alpine:3.21 AS release-build
+FROM --platform=${BUILDPLATFORM} alpine:3.22 AS release-build
 ADD https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv4.1.0/kustomize_v4.1.0_linux_amd64.tar.gz .
 RUN  tar -xf kustomize_v4.1.0_linux_amd64.tar.gz -C /usr/local/bin && rm kustomize_v4.1.0_linux_amd64.tar.gz
 COPY ./config ./config
@@ -293,7 +293,7 @@ COPY --from=fmt-build /src /
 #
 # The markdownlint target performs linting on Markdown files.
 #
-FROM node:22.14.0-alpine AS lint-markdown
+FROM node:24.2.0-alpine AS lint-markdown
 RUN apk add --no-cache findutils
 RUN npm i -g [email protected]
 RUN npm i -g [email protected]

go.mod

@@ -5,20 +5,20 @@ go 1.24.0
 replace github.com/pensando/goipmi v0.0.0-20200303170213-e858ec1cf0b5 => github.com/talos-systems/goipmi v0.0.0-20211214143420-35f956689e67
 
 // compatibility with kube-apiserver v0.32.3, should be dropped once kube-apiserver dependency is updated
-replace github.com/google/cel-go => github.com/google/cel-go v0.22.0
+replace github.com/google/cel-go => github.com/google/cel-go v0.25.0
 
 require (
-	github.com/go-logr/logr v1.4.2
+	github.com/go-logr/logr v1.4.3
 	github.com/google/go-cmp v0.7.0
-	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
+	github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/insomniacslk/dhcp v0.0.0-20250417080101-5f8cf70e8c5f
-	github.com/jsimonetti/rtnetlink v1.4.2
-	github.com/pensando/goipmi v0.0.0-20200303170213-e858ec1cf0b5
-	github.com/pin/tftp v2.1.1-0.20200117065540-2f79be2dba4e+incompatible
+	github.com/jsimonetti/rtnetlink/v2 v2.0.3
+	github.com/pensando/goipmi eb122d901c23
+	github.com/pin/tftp f723ab0c80ed
 	github.com/pkg/errors v0.9.1
-	github.com/siderolabs/gen v0.8.0
-	github.com/siderolabs/go-blockdevice v0.4.8
+	github.com/siderolabs/gen v0.8.4
+	github.com/siderolabs/go-blockdevice/v2 v2.0.18
 	github.com/siderolabs/go-cmd v0.1.3
 	github.com/siderolabs/go-debug v0.5.0
 	github.com/siderolabs/go-kmsg v0.1.4
@@ -27,26 +27,26 @@ require (
 	github.com/siderolabs/go-retry v0.3.3
 	github.com/siderolabs/go-smbios v0.3.3
 	github.com/siderolabs/grpc-proxy v0.5.1
-	github.com/siderolabs/siderolink v0.3.14
-	github.com/siderolabs/talos/pkg/machinery v1.10.0
+	github.com/siderolabs/siderolink v0.3.15
+	github.com/siderolabs/talos/pkg/machinery v1.10.3
 	github.com/spf13/pflag v1.0.6
 	github.com/stretchr/testify v1.10.0
 	go.uber.org/zap v1.27.0
-	golang.org/x/net v0.39.0
-	golang.org/x/sync v0.13.0
-	golang.org/x/sys v0.32.0
+	golang.org/x/net v0.41.0
+	golang.org/x/sync v0.15.0
+	golang.org/x/sys v0.33.0
 	golang.zx2c4.com/wireguard/wgctrl v0.0.0-20241231184526-a9ab2273dd10
-	google.golang.org/grpc v1.72.0
+	google.golang.org/grpc v1.73.0
 	google.golang.org/protobuf v1.36.6
 	gopkg.in/yaml.v3 v3.0.1
-	k8s.io/api v0.32.3
-	k8s.io/apiextensions-apiserver v0.32.3
-	k8s.io/apimachinery v0.32.3
-	k8s.io/client-go v0.32.3
-	k8s.io/component-base v0.32.3
+	k8s.io/api v0.33.1
+	k8s.io/apiextensions-apiserver v0.33.1
+	k8s.io/apimachinery v0.33.1
+	k8s.io/client-go v0.33.1
+	k8s.io/component-base v0.33.1
 	k8s.io/klog/v2 v2.130.1
-	sigs.k8s.io/cluster-api v1.10.1
-	sigs.k8s.io/controller-runtime v0.20.4
+	sigs.k8s.io/cluster-api v1.10.2
+	sigs.k8s.io/controller-runtime v0.21.0
 )
 
 require (

package.json

@@ -19,7 +19,7 @@
     "devDependencies": {
       "autoprefixer": "^10.4.0",
       "postcss": "^8.3.7",
-      "postcss-cli": "^9.0.2"
+      "postcss-cli": "^11.0.0"
     }
   }
 

sfyra/go.mod

@@ -4,44 +4,44 @@ go 1.24.0
 
 replace (
 	// compatibility with kube-apiserver v0.32.3, should be dropped once kube-apiserver dependency is updated
-	github.com/google/cel-go => github.com/google/cel-go v0.22.0
+	github.com/google/cel-go => github.com/google/cel-go v0.25.0
 
 	// local replace
 	github.com/siderolabs/sidero => ../
 
 	// See https://github.com/talos-systems/go-loadbalancer/pull/4
 	// `go get github.com/smira/tcpproxy@combined-fixes`, then copy pseudo-version there
-	inet.af/tcpproxy => github.com/smira/tcpproxy v0.0.0-20201015133617-de5f7797b95b
+	inet.af/tcpproxy => github.com/smira/tcpproxy b6bb9b5b8252
 
-	k8s.io/api => k8s.io/api v0.32.3
-	k8s.io/apimachinery => k8s.io/apimachinery v0.32.3
-	k8s.io/apiserver => k8s.io/apiserver v0.32.3
-	k8s.io/client-go => k8s.io/client-go v0.32.3
-	k8s.io/component-base => k8s.io/component-base v0.32.3
+	k8s.io/api => k8s.io/api v0.33.1
+	k8s.io/apimachinery => k8s.io/apimachinery v0.33.1
+	k8s.io/apiserver => k8s.io/apiserver v0.33.1
+	k8s.io/client-go => k8s.io/client-go v0.33.1
+	k8s.io/component-base => k8s.io/component-base v0.33.1
 )
 
 require (
-	github.com/siderolabs/cluster-api-control-plane-provider-talos v0.5.9
+	github.com/siderolabs/cluster-api-control-plane-provider-talos v0.5.10
 	github.com/siderolabs/go-debug v0.5.0
 	github.com/siderolabs/go-loadbalancer v0.4.0
 	github.com/siderolabs/go-pointer v1.0.1
 	github.com/siderolabs/go-procfs v0.1.2
 	github.com/siderolabs/go-retry v0.3.3
 	github.com/siderolabs/net v0.4.0
-	github.com/siderolabs/sidero v0.0.0-00010101000000-000000000000
-	github.com/siderolabs/talos v1.10.0
-	github.com/siderolabs/talos/pkg/machinery v1.10.0
+	github.com/siderolabs/sidero v0.6.9
+	github.com/siderolabs/talos v1.10.3
+	github.com/siderolabs/talos/pkg/machinery v1.10.3
 	github.com/spf13/cobra v1.9.1
 	github.com/stretchr/testify v1.10.0
 	go.uber.org/zap v1.27.0
-	google.golang.org/grpc v1.72.0
+	google.golang.org/grpc v1.73.0
 	gopkg.in/yaml.v3 v3.0.1
-	k8s.io/api v0.33.0
-	k8s.io/apiextensions-apiserver v0.32.3
-	k8s.io/apimachinery v0.33.0
-	k8s.io/client-go v0.33.0
-	sigs.k8s.io/cluster-api v1.10.1
-	sigs.k8s.io/controller-runtime v0.20.4
+	k8s.io/api v0.33.1
+	k8s.io/apiextensions-apiserver v0.33.1
+	k8s.io/apimachinery v0.33.1
+	k8s.io/client-go v0.33.1
+	sigs.k8s.io/cluster-api v1.10.2
+	sigs.k8s.io/controller-runtime v0.21.0
 )
 
 require (

website/themes/docsy/assets/vendor/Font-Awesome/js-packages/@fortawesome/fontawesome-svg-core/package.json

@@ -47,7 +47,7 @@
     "node": ">=6"
   },
   "dependencies": {
-    "@fortawesome/fontawesome-common-types": "^0.2.36"
+    "@fortawesome/fontawesome-common-types": "^6.0.0"
   },
   "version": "1.2.36",
   "name": "@fortawesome/fontawesome-svg-core",

website/themes/docsy/assets/vendor/Font-Awesome/js-packages/@fortawesome/free-brands-svg-icons/package.json

@@ -47,7 +47,7 @@
     "node": ">=6"
   },
   "dependencies": {
-    "@fortawesome/fontawesome-common-types": "^0.2.36"
+    "@fortawesome/fontawesome-common-types": "^6.0.0"
   },
   "version": "5.15.4",
   "name": "@fortawesome/free-brands-svg-icons",

website/themes/docsy/assets/vendor/Font-Awesome/js-packages/@fortawesome/free-regular-svg-icons/package.json

@@ -47,7 +47,7 @@
     "node": ">=6"
   },
   "dependencies": {
-    "@fortawesome/fontawesome-common-types": "^0.2.36"
+    "@fortawesome/fontawesome-common-types": "^6.0.0"
   },
   "version": "5.15.4",
   "name": "@fortawesome/free-regular-svg-icons",

website/themes/docsy/assets/vendor/Font-Awesome/js-packages/@fortawesome/free-solid-svg-icons/package.json

@@ -47,7 +47,7 @@
     "node": ">=6"
   },
   "dependencies": {
-    "@fortawesome/fontawesome-common-types": "^0.2.36"
+    "@fortawesome/fontawesome-common-types": "^6.0.0"
   },
   "version": "5.15.4",
   "name": "@fortawesome/free-solid-svg-icons",

website/themes/docsy/assets/vendor/bootstrap/.github/workflows/browserstack.yml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Set up Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
           node-version: "${{ env.NODE }}"
           cache: npm