Skip to content

chore(deps): update all-ci-dependencies (major)#360

Merged
oliverbaehler merged 1 commit into
mainfrom
renovate/major-all-ci-dependencies
Jul 7, 2026
Merged

chore(deps): update all-ci-dependencies (major)#360
oliverbaehler merged 1 commit into
mainfrom
renovate/major-all-ci-dependencies

Conversation

@renovate

@renovate renovate Bot commented Feb 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6.0.3 → v7.0.0
azure/setup-helm action major v4 → v5
codecov/codecov-action action major v5.5.5 → v7.0.0
docker/setup-buildx-action action major v3.12.0 → v4.2.0
docker/setup-qemu-action action major v3.7.0 → v4.2.0
goreleaser/goreleaser-action action major v6.4.0 → v7.2.3
helm uses-with major v3.21.2 → v4.2.2
zgosalvez/github-actions-ensure-sha-pinned-actions action major v4.0.2 → v5.0.5

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

v7

Compare Source

azure/setup-helm (azure/setup-helm)

v5.0.1

Compare Source

v5.0.0

Compare Source

Changed

v5

Compare Source

codecov/codecov-action (codecov/codecov-action)

v7.0.0

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v7

Compare Source

v6.0.2

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

v6.0.0

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️
What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v6

Compare Source

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
  • Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
  • Bump flatted from 3.3.3 to 3.4.2 in #​499
  • Bump glob from 10.3.12 to 13.0.6 in #​495
  • Bump handlebars from 4.7.8 to 4.7.9 in #​504
  • Bump lodash from 4.17.23 to 4.18.1 in #​523
  • Bump picomatch from 4.0.3 to 4.0.4 in #​503
  • Bump postcss from 8.5.6 to 8.5.10 in #​537
  • Bump tar from 6.2.1 to 7.5.15 in #​545
  • Bump undici from 6.23.0 to 6.25.0 in #​492
  • Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v4

Compare Source

docker/setup-qemu-action (docker/setup-qemu-action)

v4.2.0

Compare Source

v4.1.0

Compare Source

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

v4

Compare Source

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.2.3

Compare Source

What's Changed

Full Changelog: goreleaser/goreleaser-action@v7.2.2...v7.2.3

v7.2.2

Compare Source

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.2

v7.2.1

Compare Source

This fully removes the usage of the old nightly moving tag.

Full Changelog: goreleaser/goreleaser-action@v7.2.0...v7.2.1

v7.2.0

Compare Source

What's Changed

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.0

v7.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v7...v7.1.0

v7.0.0

Compare Source

What's Changed

Full Changelog: goreleaser/goreleaser-action@v6...v7.0.0

v7

Compare Source

helm/helm (helm)

v4.2.2: Helm v4.2.2

Compare Source

Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32214
Installation and Upgrading

Download Helm v4.2.2. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881c (George Jenkins)

Full Changelog: helm/helm@v4.2.1...v4.2.2

v4.2.1: Helm v4.2.1

Compare Source

Helm v4.2.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #​31925
  • Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #​32056
  • Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #​31757
  • Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32081
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #​32153
  • Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 #​32128
  • Dependency updates

Installation and Upgrading

Download Helm v4.2.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#​31925) d591a19 (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#​32056) 2a9fcae (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 ffa5bd6 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 9f9dbaf (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 64a2891 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 e54a4a2 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 acb762b (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 768586d (dependabot[bot])
  • fix(version): avoid false range detection on prerelease x/X eabfae5 (Benoit Tigeot)
  • fix(version): version range || can has no space e3fd51f (Benoit Tigeot)
  • feat: report in debug the version we select with version range arg 1e47395 (Benoit Tigeot)
  • fix: prevent warning when using version range constraints a33e239 (Benoit Tigeot)
  • fix(kube): always propagate context.Canceled in WaitForDelete fa06d44 (Terry Howe)
  • fix(kube): prevent spurious early exit in WaitForDelete during informer sync 360d483 (Terry Howe)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 7651edf (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 b132e7e (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 eee491a (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 3e3c575 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 c4ce2bb (dependabot[bot])
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 3892dc2 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 c4bbb62 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 a0d7f16 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 8a3de05 (dependabot[bot])
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 57a4803 (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b33ae02 (dependabot[bot])

Full Changelog: helm/helm@v4.2.0...v4.2.1

v4.2.0: Helm v4.2.0

Compare Source

Helm v4.2.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Switch to goreleaser for release builds
  • Kubernetes client libraries to v1.36
  • Add mustToToml template function
  • deprecate unused --hide-notes and --render-subchart-notes flags
  • --dry-run=server now respects generateName:

Installation and Upgrading

Download Helm v4.2.0. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.1 will contain only bug fixes
  • 4.3.0 is the next feature release

Changelog

  • Bump to version v4.2 0646808 (George Jenkins)
  • build: Clean up Goreleaser change (#​32098) e23bf3a (Scott Rigby)
  • fix: add -extldflags -static to dist target to match build-cross f60ab7c (Terry Howe)
  • build: use goreleaser build with manual archive creation 64aa46f (Terry Howe)
  • chore: remove build-cross dependency from test-acceptance d199a1a (Terry Howe)
  • ci: add fetch-depth 0 to canary checkout for goreleaser 8289940 (Terry Howe)
  • fix: address goreleaser build issues flagged in review c075022 (Terry Howe)
  • fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive names 04885dd (Terry Howe)
  • fix: disable goreleaser checksums.txt and restrict zip to windows only 93103ce (Terry Howe)
  • fix: use index for optional env var in version_template e49a1dc (Terry Howe)
  • fix: canary build file names eaa0910 (Terry Howe)
  • Fix archive name 5a75279 (Terry Howe)
  • fix goreleaser archive 37284a9 (Terry Howe)
  • add support for loong64 45336cc (Terry Howe)
  • fix artifact directory a9659b0 (Terry Howe)
  • update configuration to v2 e368f17 (Terry Howe)
  • remove GOTOOLCHAIN e7bea85 (Terry Howe)
  • chore: replace mitchellh/gox with goreleaser 075c096 (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 12f2c41 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 58e8ffd (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 e61bbfb (dependabot[bot])
  • Upgrade kstatus to 1.2 and controller-runtime to 0.24 081c6df (Matheus Pimenta)
  • fix: adds topLevel permissions to improve openSSF scores 277d970 (Gagan H R)
  • Upgrade Go to 1.26, Kubernetes to 1.36, kstatus to 1.1 a4a9cc7 (Matheus Pimenta)
  • fix(templating): hooks conflicting with templates in post-renderers (#​32049) 8f56f24 (Matheus Pimenta)
  • docs: fix grammar and spacing in CONTRIBUTING.md db40adb (Mohit)
  • chore(deps): bump the k8s-io group with 7 updates 775e794 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 934ace3 (dependabot[bot])
  • fix(templating): SplitManifests must preserve line endings for downstream YAML parsers (#​31952) 265c5eb (Matheus Pimenta)
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 48e2b7d (dependabot[bot])
  • Update pkg/chart/common/util/coalesce.go a8e2497 (Evans Mungai)
  • test(values): Add test for nil cleanup in partially overridden subchart maps 52fc971 (Johannes Lohmer)
  • fix(values): do not copy chart-default nils into coalesced values 0063877 (Johannes Lohmer)
  • test(values): add test for subchart nil producing %!s() 6eb4ebf (Johannes Lohmer)
  • test(values): add tests for subchart nil value regressions 5cb4e7d (Johannes Lohmer)
  • chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 [b5c7c80](https://redirect.github.com/helm/helm/commit/b5c7c80de

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov

codecov Bot commented Feb 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch from 0381319 to 5a3ce2c Compare February 21, 2026 17:12
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 3 times, most recently from d02047d to 3f6b65a Compare March 5, 2026 08:36
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 3 times, most recently from be51aaa to 21033ae Compare March 15, 2026 10:03
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 3 times, most recently from f153662 to a70d663 Compare March 26, 2026 17:42
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch from a70d663 to 4046258 Compare March 28, 2026 08:48
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch from 4046258 to 03dbfca Compare April 8, 2026 21:11
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 2 times, most recently from b851c53 to 707fff0 Compare April 23, 2026 13:36
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 2 times, most recently from c2babf2 to d5c8e3a Compare April 27, 2026 01:46
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 3 times, most recently from f135e0e to ebd05f7 Compare May 19, 2026 02:24
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 2 times, most recently from f5169cc to ef9fcc1 Compare May 27, 2026 17:06
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 3 times, most recently from ce98ca0 to d0eeacc Compare June 12, 2026 19:43
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 3 times, most recently from 8e4ae09 to 445026e Compare June 23, 2026 20:48
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 2 times, most recently from 98d3956 to e10210b Compare June 29, 2026 13:56
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch 2 times, most recently from 20de29e to fed5e91 Compare July 2, 2026 14:56
@renovate
renovate Bot force-pushed the renovate/major-all-ci-dependencies branch from fed5e91 to 1aa94e6 Compare July 7, 2026 00:04
@oliverbaehler
oliverbaehler merged commit 96eb1b2 into main Jul 7, 2026
14 of 16 checks passed
@renovate
renovate Bot deleted the renovate/major-all-ci-dependencies branch July 7, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@oliverbaehler oliverbaehler oliverbaehler approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@oliverbaehler