Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 9, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
anchore/sbom-action action patch v0.20.10 -> v0.20.11 age confidence
github.com/cert-manager/cert-manager require patch v1.19.1 -> v1.19.2 age confidence
k8s.io/api require patch v0.34.2 -> v0.34.3 age confidence
k8s.io/apiextensions-apiserver require patch v0.34.2 -> v0.34.3 age confidence
k8s.io/apimachinery require patch v0.34.2 -> v0.34.3 age confidence
k8s.io/client-go require patch v0.34.2 -> v0.34.3 age confidence
step-security/harden-runner action minor v2.13.3 -> v2.14.0 age confidence

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.20.11

Compare Source

Changes in v0.20.11

cert-manager/cert-manager (github.com/cert-manager/cert-manager)

v1.19.2

Compare Source

kubernetes/api (k8s.io/api)

v0.34.3

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.34.3

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.3

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.14.0

Compare Source

What's Changed
  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Dec 9, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 11 additional dependencies were updated

Details:

Package Change
golang.org/x/crypto v0.42.0 -> v0.45.0
golang.org/x/mod v0.27.0 -> v0.29.0
golang.org/x/net v0.44.0 -> v0.47.0
golang.org/x/sync v0.17.0 -> v0.18.0
golang.org/x/sys v0.36.0 -> v0.38.0
golang.org/x/term v0.35.0 -> v0.37.0
golang.org/x/text v0.29.0 -> v0.31.0
golang.org/x/tools v0.36.0 -> v0.38.0
k8s.io/apiserver v0.34.2 -> v0.34.3
k8s.io/component-base v0.34.2 -> v0.34.3
k8s.io/kms v0.34.2 -> v0.34.3

@renovate renovate bot requested a review from fsandel as a code owner December 9, 2025 16:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5d2c9fe to de806fb Compare December 9, 2025 18:20
@renovate renovate bot changed the title chore(deps): update module github.com/cert-manager/cert-manager to v1.19.2 chore(deps): update all non-major dependencies Dec 10, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from de806fb to 8c1c8ff Compare December 10, 2025 03:54
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8c1c8ff to 1ed378a Compare December 10, 2025 06:15
@renovate renovate bot merged commit ffa2eeb into main Dec 10, 2025
4 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch December 10, 2025 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant