chore(deps): update all non-major dependencies (master) - #302
Open
renovate[bot] wants to merge 1 commit into
Open
chore(deps): update all non-major dependencies (master)#302renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/master-all-minor-patch
branch
13 times, most recently
from
August 18, 2026 14:02
18c858a to
5bb910d
Compare
amuraru
added a commit
that referenced
this pull request
Aug 18, 2026
The 3.9.2 Kafka image was published as 2.13-3.9.2-jdk21.0.11 instead of the plain 2.13-3.9.2 shape prior releases used, so the packageRule's matchCurrentValue/versioning regex (scoped to the plain shape only) couldn't see it as a valid version. Renovate silently had nothing to bump, and PR #302 shipped with DefaultKafkaImage still on 3.9.1. Extend the versioning regex to parse an optional -jdk<major>.<interim>.<update> suffix, mapping jdk major/update onto the regex versioning module's build/revision slots so both tag shapes compare correctly against each other. This does not gate jdk-major jumps the way 'compatibility' gates the scala prefix - that's deferred to the same operator-side migration already planned for the apache/kafka 4.x bump. Since this changes which tags are valid for the ghcr.io image line, manually cut over the two DefaultKafkaImage/defaultKafkaImage constants to the now-current 2.13-3.9.2-jdk21.0.11 tag; Renovate will track further -jdk<version> bumps automatically going forward. The ~20 config/samples/**/docs/benchmarks/** references still pinned to 3.9.1 are left for Renovate's own follow-up PR (same customManager/packageRule now covers them) rather than hand-edited here to avoid conflicting with that automated PR. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
5 tasks
amuraru
added a commit
that referenced
this pull request
Aug 18, 2026
…#317) The 3.9.2 Kafka image was published as 2.13-3.9.2-jdk21.0.11 instead of the plain 2.13-3.9.2 shape prior releases used, so the packageRule's matchCurrentValue/versioning regex (scoped to the plain shape only) couldn't see it as a valid version. Renovate silently had nothing to bump, and PR #302 shipped with DefaultKafkaImage still on 3.9.1. Extend the versioning regex to parse an optional -jdk<major>.<interim>.<update> suffix, mapping jdk major/update onto the regex versioning module's build/revision slots so both tag shapes compare correctly against each other. This does not gate jdk-major jumps the way 'compatibility' gates the scala prefix - that's deferred to the same operator-side migration already planned for the apache/kafka 4.x bump. Since this changes which tags are valid for the ghcr.io image line, manually cut over the two DefaultKafkaImage/defaultKafkaImage constants to the now-current 2.13-3.9.2-jdk21.0.11 tag; Renovate will track further -jdk<version> bumps automatically going forward. The ~20 config/samples/**/docs/benchmarks/** references still pinned to 3.9.1 are left for Renovate's own follow-up PR (same customManager/packageRule now covers them) rather than hand-edited here to avoid conflicting with that automated PR. Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
renovate
Bot
force-pushed
the
renovate/master-all-minor-patch
branch
8 times, most recently
from
August 19, 2026 17:14
3585bf3 to
e2ac169
Compare
renovate
Bot
force-pushed
the
renovate/master-all-minor-patch
branch
from
August 20, 2026 00:02
e2ac169 to
cb4b31d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.0.3-adbe-20250804→3.0.3-adbe-202607220.6.0→0.7.01.7.0→1.7.10.2.15-adobe-20260423→0.2.15-adobe-202608180.28.0-adobe-20260731→0.29.01.4.0→1.5.02.13-3.9.1→2.13-3.9.2-jdk21.0.113.8.4-0.2.15-adobe-20250923→3.8.4-0.2.15-adobe-202608181.26→1.271.25-alpine→1.27-alpine1.26→1.272.12.2→2.13.04.2.3→4.2.44.2.3→4.2.488.2.0→88.5.03.1.0→3.10.0d639050→d9690b7a7f84ee→ae694e8v0.20.0→v0.22.11.12.1→1.12.21.12.1→1.12.2Release Notes
adobe/cruise-control (adobe/cruise-control)
v3.0.3-adbe-20260722Compare Source
What's Changed
Full Changelog: adobe/cruise-control@3.0.3-adbe-20251008...3.0.3-adbe-20260722
v3.0.3-adbe-20260423Compare Source
CruiseControl image to use latest jdk 21.0.11
v3.0.3-adbe-20251008Compare Source
What's Changed
New Contributors
Full Changelog: adobe/cruise-control@3.0.3-adbe-20250804...3.0.3-adbe-20251008
projectcontour/helm-charts (contour)
v0.7.0Compare Source
Helm chart for Contour - an open source Kubernetes ingress controller that works by deploying the Envoy proxy as a reverse proxy and load balancer.
What's Changed
Full Changelog: projectcontour/helm-charts@contour-0.6.0...contour-0.7.0
adobe/zookeeper-operator (ghcr.io/adobe/helm-charts/zookeeper-operator)
v0.2.15-adobe-20260818Compare Source
adobe/koperator (ghcr.io/adobe/koperator)
v0.29.0Compare Source
What's Changed
Full Changelog: 0.28.0-adobe-20260731...0.29.0
golangci/golangci-lint (golangci/golangci-lint)
v2.13.0Compare Source
Released on 2026-08-19
dupword: from 0.1.7 to 0.1.8 (new optionskip-raw-strings)errcheck: from 1.10.0 to 1.20.0exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)exhaustruct: deprecated and replaced byexhaustruct_v5fatcontext: from 0.9.0 to 0.10.0 (new options:check-loops,check-function-literals)goconst: add option `exclude-goconst: from 1.10.0 to 1.11.0 (new option:ignore-map-keys)gofumpt: from 0.9.2 to 0.11.0 (new options:extra.group-params,extra.clothe-returns,extra.balance-calls)gomoddirectives: from 0.8.0 to 0.9.0 (new option:replace-allow-all)gosec: from 2.26.1 to 2.27.1govet-modernize: from 0.44.0 to 0.49.0 (fmtappendfis removed. New analyzersatomictypes,embedlit,errorsastype,importcomment,reflecttypeassert,slicesclip, andslicesbackward.waitgroupis renamedwaitgroupgo)iface: from 1.4.3 to 1.5.0 (new analyzer:unusedmethod)noinlineerr: from 1.0.5 to 1.0.6nonamedreturns: from 1.0.6 to 1.0.8 (new option:allow-unused-named-returns)recvcheck: from 0.2.0 to 0.3.0 (new default exclusions) types`unparam: from2dd26e2to2dd26e2clickhouse-go-linter: from 1.2.0 to 1.2.1errname: from 1.1.1 to 1.1.2exhaustruct: from 5.0.2 to 5.0.3funcorder: add missingFunctionfieldginkgolinter: from 0.23.0 to 0.23.1gocheckcompilerdirectives: from 1.3.0 to 1.4.0gocritic: from 0.14.3 to 0.14.4gomoddirectives: add missingIgnoreForbiddenfieldiface: from 1.4.2 to 1.4.3mirror: from 1.3.0 to 1.3.3nilnil: from 1.1.1 to 1.1.2protogetter: from 0.3.20 to 0.3.21helm/helm (helm)
v4.2.4Compare Source
prometheus-community/helm-charts (kube-prometheus-stack)
v88.5.0Compare Source
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
What's Changed
Full Changelog: prometheus-community/helm-charts@prometheus-kafka-exporter-3.1.1...kube-prometheus-stack-88.5.0
v88.4.0Compare Source
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
What's Changed
Full Changelog: prometheus-community/helm-charts@kube-state-metrics-8.4.0...kube-prometheus-stack-88.4.0
v88.3.0Compare Source
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
What's Changed
New Contributors
Full Changelog: prometheus-community/helm-charts@prometheus-pingdom-exporter-3.4.4...kube-prometheus-stack-88.3.0
kubernetes-sigs/kustomize (kubernetes-sigs/kustomize)
v3.10.0Compare Source
In this version,
buildonly works if the--enable_kyamlflag is left to its default value oftrue.All
k8s.io/*code has been removed.This flag will be removed in v4.0.0, along with all code structures that allowed
kyamlandk8s.iocode to co-exist.Fall back to v3.8.10 for k8s.io-backed behavior.
1fa3b22Pin to api v0.8.03ae1aa7Delete dependence on k8s.io/...f98edf1Unpin from api.v3.9.4Compare Source
Picks up two changes relevant to closing #1500
0508c89Pin to apie036f85Pin to cmd/config v0.9.1b062ce0Pin to kyaml v0.10.9264bfa8Unpin; back to development mode.09bc6e7Pin to cmd/config v0.9.0adb2f22Pin to kyaml v0.10.8bbccee0Fix message in generated code.71f4cecfixed ports merging issue and refactored some kyaml.walk code5db7928Drop unused quantity protobuf - avoid bad init.v3.9.3Compare Source
Includes all fixes listed in api/v0.7.3.
Binary still has apimachinery deps, but
--enable_kyamlistrueby default.For an equivalent version with kyaml disabled by default, use kustomize/v3.8.10, or just run
41df2bePin to api v0.7.3a684592Pin to api v0.6.9b0cfa15Pin to cmd/config v0.8.9c077ed4Pin to kyaml v0.10.7 and cli-utils v0.23.1b9f05ddExpose some top level kustomize commands.a54cd12Delete fixgomod.shae060ccAdd documentation/help on preserving the digest9b4fdcfAdd support for setting the name while keeping the digestbb2d63aUse raw string to avoid double escapeb501238Add support for setting new tag while preserving the current name0cf1898Back to development mode; unpin the modulesv3.9.2Compare Source
21 issues closed and 33 prs merged since release v3.9.1
Mostly bugs in merging and quoting using kyaml.
8a65ecePin to api v0.7.240bf89aPin to cmd/config v0.8.886e9983Pin to kyaml v0.10.6 and cli-utils v0.22.48c6a9f6Move plugin lister to avoid import cycle.ce2ab48Unpin kyaml, cmd/config, apiv3.9.1Compare Source
This version of kustomize manipulates YAML using the kyaml module in this repo instead of the kubernetes apimachinery modules.
This is the way forward.
You can help kustomize by trying this version, and filing issues if you have trouble.
If you hit a blocking issue, you can use the legacy code paths for a build as follows:
Or, you can use kustomize v3.8.9, which is identical to v3.9.1 except that the default value of the
--enable_kyamlflag is false. In some setups, it might be easier to install a different binary than to specify a flag on each build.6977c83Pin to api/v0.7.1 (--enableKyaml=true)8732671Pin to api/v0.6.80d6b232Pin to cmd/confg v0.8.7c63ed03Pin to kyaml v0.10.5f7b2f0cPin to gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c338910dIn module replacements, drop specific version numbers.002215dUnpin kyamlc0a754eUnpin api module.8dd6f2bdescribe the format of image tag that is allowedd25e1efUnpin apiv3.8.10Compare Source
Hopefully the last API release with apimachinery deps active by default.
a684592Pin to api v0.6.9b0cfa15Pin to cmd/config v0.8.9c077ed4Pin to kyaml v0.10.7 and cli-utils v0.23.1b9f05ddExpose some top level kustomize commands.a54cd12Delete fixgomod.shae060ccAdd documentation/help on preserving the digest9b4fdcfAdd support for setting the name while keeping the digestbb2d63aUse raw string to avoid double escapeb501238Add support for setting new tag while preserving the current name0cf1898Back to development mode; unpin the modulesv3.8.9Compare Source
The 3.8 branch of kustomize has legacy apimachinery dependence.
Try the 3.9 branch, and if you have trouble, fall back to 3.8.
8732671Pin to api/v0.6.80d6b232Pin to cmd/confg v0.8.7c63ed03Pin to kyaml v0.10.5f7b2f0cPin to gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c338910dIn module replacements, drop specific version numbers.002215dUnpin kyamlc0a754eUnpin api module.8dd6f2bdescribe the format of image tag that is allowedd25e1efUnpin apiv3.8.8Compare Source
This release is a rollup of all bug fixes to 10 Dec 2020.
It depends on apimachinery code flows.
125762dPin kustomize to api/v0.6.7cb2b376Pin to api v0.6.7c04c13aUnpin kustomize from api.b4ad4b6Pin to api v0.6.6e849b16Pin to cmd/config v0.8.6575b4efPin to kyaml v0.10.3 cliutils v0.22.1e1fd74bAutomated Go mod cache updates.51ba54aRevert "helm values on inflator config"f6e5eedhelm values on inflator config spec.724bbe9connected allowresourcesidchanges bool to allow_id_changes flag32dd194Automated go.sum updates.8f7bcb9update Go version to 1.15a5f3d5cUse DepProvider in tests to access kyaml impls.a12db91mark the list-builtin command alphac610e3aAdd command to list builtin pluginsa2087f0added kustomize edit set labelfa3caaaUnpin everything post v3.8.7 releasev3.8.7Compare Source
Changelog
ad092ccMerge pull request #3216 from monopole/pin_api_v0.6.50a9fc6cPin to api_v0.6.5v3.8.6Compare Source
Changelog
c174743Merge pull request #3152 from Shell32-Natsu/masterf689868Pin to api 0.6.4v3.8.5Compare Source
Changelog
4052cd4Merge pull request #3069 from monopole/pinToCmdConfigV0.8.221ac400Pin to cmd/config/v0.8.2v3.8.4Compare Source
Changelog
8285af8Merge pull request #3017 from monopole/updateREADME5fa1282Update release instructions.5a0abc8Merge pull request #3016 from monopole/pinToApiV0.6.23f2508fPin to api v0.6.2v3.8.3Compare Source
Changelog
161af9dMerge pull request #3002 from monopole/pinToApiV0_6_1b115c95Pin to api/v0.6.1v3.8.2Compare Source
A rollup a bug fixes since v.3.8.1
Most fixes happened in the kyaml libraries, which the kustomize API depends on.
Changelog
e2973f6Merge pull request #2915 from monopole/pinToKustomizeApiv_0_6_02bf9fc8Pin to kustomize api v0.6.0v3.8.1Compare Source
v3.8.1 continues work to rebase kustomize on kyaml.
Kustomize transformers in the v3.8 branch don't depend on kubernetes/* modules. Such dependence exists in the v3.7 branch.
The i/o code in v3.8 still depends on kubernetes/*, but this dependence is being removed to allow reintegration with kubectl.
This release purports to fix an issue arising from the switchover.
This release includes allowing empty lists in resources to be
explicitly declared and retained as such.
So YAML like
won't be dropped in the course of transformation or formatting, as may happen to other empty fields.
Present but declaratively empty list (array) fields are handy as documentation and as
targets for array extension under the fine print of rfc6902.
It's likely going to be important to allow patches to add entries to list fields that are completely missing (creating such fields in the process, as long as openapi type declarations are respected), but that's a different issue.
partial Changelog
155411fPin to kustomize/api v0.5.122ee7cbPre v3.8.1; Add e2e tests pinned at v3.8.0(Other changes in the kyaml module)
v3.8.0Compare Source
v3.8.0 has no new features, and no change in the API relative to v3.7.0, but the output will change.
The output may order fields within objects differently, and generally do a better job dropping empty fields. This should have no impact on cluster behavior, and no impact on object-to-object comparisons, but it may cause (text-based) YAML comparison tests to fail (in tests maintained outside the kustomize repository).
In v3.8.0, the transformations still (technically) depend on apimachinery, but by default won't use apimachinery code paths - they'll use kyaml instead. That's what changes the output.
If v3.8.0 causes problems for you, switch back to v3.7.0 for now, but please examine your tests, adjusting them to the new behavior, and file issues for anything that looks not just different, but incorrect.
This will help improve kyaml. kyaml, not apimachinery, is the backing library for k8s yaml manipulation going forward. This work is required to close #2506 (breaking dependence on apimachinery), which in turn blocks #1500.
There's no global flag to switch back to the old behavior. A global flag could have been introduced, but it would have been impractical. If the flag's default had been to use the old apimachinery code, nobody would have tried the new flag, thus nobody would have tried the new kyaml code. And switching flags in CD scripts is as annoying or more annoying than simply switching back to the 3.7.0 binary.
For those interested, a transformer in the 3.8.0 framework can use the old apimachinery code by using an explicit config containing the line
This option will, however, go away in the next release.
Post v3.8.0, all apimachery dependence will be removed. This will greatly simplify the code base and allow a new version of kustomize to be reintroduced to kubectl.
Changelog
5a02286Switch kustomize to api/v0.5.0v3.7.0Compare Source
A rollup of all bug fixes since v3.6.1 (2020 May 27), primarily fixes to the underlying yaml libraries.
Includes an initial (alpha) framework allowing kustomize to share functions with kpt.
v3.6.1Compare Source
v3.6.0 didn't work with
go installbecause it had relative path replacements in thego.modfile; see #2462.This release has that issue fixed, and includes #2537.
v3.6.0Compare Source
This release works via binary download, but in its initial form did not work with
go installbecause some relative path replacement directives were mistakenly left in place.FWIW, go install works with
Feel free to skip this and go directly to v3.6.1
Changelog
def978bpin kustomize to cmd/kubectl_v0_1_0v3.5.5Compare Source
Changelog
5213426Pin kustomize to api v0.3.370b1cfeUpdate build scriptsv3.5.4Compare Source
Changelog
52efd8cUpgrade some deps in kustomize.39c42d7update VERSIONS for cmd/resource and cmd/config3bb7c1cupdate versions for kustomize 3.5.4v3.5.3Compare Source
Changelog
5ba90feupdate go.mod for releasev3.5.2Compare Source
kustomize CLI pinned at kustomize API v0.3.0
To see new alpha features, set
KUSTOMIZE_ENABLE_ALPHA_COMMANDStotrue, e.g.Changelog
68af986Add kubeval function example.60188ebAddress issues in release scripts0b9aa41Pin kustomize to specific versions of local deps.e059768Update zh/INSTALL.md46f1f1bfixv3.5.1Compare Source
kustomize/v3.5.1is equivalent tokustomize/3.4.0--- because we screwed up some module tagging in v3.5.0, and want a quick fix to supercede v3.5.0 in people's caches.Please wait for 3.5.2 to try new features.
v3.4.0Compare Source
Bumping minor version because this is the first kustomize release to be completely independent of the kubernetes/kubernetes repo.
The kustomize binary now depends on the just released kustomize API v0.2.0, which in turns depends on a local clone of kubernetes
api,apimachineryandclient-gosnapshotted from tagkubernetes-1.16.2, stored underpseudo/k8s. This change should allow the kubectl CLI to depend on the kustomize API in the same way that the kustomize CLI depends on it.The new kustomize API and binary represent a period of weeks spent reducing and defining the kustomization API, defining multiple modules in one repo (and how to release them), and defining a path forward for kubectl and other CLI's that would like to use the kustomize API. Thanks for your patience.
Changelog
2dd148aPin kustomize and the plugins to kust Api v0.2.0v3.3.0Compare Source
First release of kustomize executable that depends on the new separately published API module.
This means
The official kustomize CLI consumes a distinct kustomize API .
The CLI module, which is now unimportable (containing only a
mainpackage and internal libraries), can follow semver with respect to commands and flags, e.g. flag removal requires incrementing the major version number.The API module, a normal collection of Go packages, can now follow semver with respect to just those package signatures and not get confused with the CLI. This lets it be incorporated safely into other clients, e.g. kubectl.
Changelog
b0b3a70Fix internal kustomize CLI depsce7ebe3Make all releases draft by default02f9b98Move kustomize back to v3f77143cPin kustomize CLI to API v0.1.19b50b78Use latest cloudbuilder image.v3.2.3Compare Source
Changelog
f8412aaHave kustomize CLI depend on kustomize Go API v3.3.1v3.2.2Compare Source
Changelog
3c9d828Have kustomize CLI depend on kustomize Go API v3.3.0apache/avro (org.apache.avro:avro-maven-plugin)
v1.12.2Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.