Update all non-major dependencies by renovate[bot] · Pull Request #472 · FairwindsOps/nova

renovate · 2026-08-05T20:00:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
alpine (source)	final	minor	`3.23.4` → `3.24.1`
cimg/go	docker	patch	`1.26.2` → `1.26.5`
github.com/Masterminds/semver/v3	require	minor	`v3.4.0` → `v3.5.0`
github.com/google/go-containerregistry	require	patch	`v0.21.5` → `v0.21.8`	`v0.21.9`
helm.sh/helm/v3	require	minor	`v3.20.2` → `v3.21.3`
k8s.io/api	require	minor	`v0.35.4` → `v0.36.3`
k8s.io/apimachinery	require	minor	`v0.35.4` → `v0.36.3`
k8s.io/client-go	require	minor	`v0.35.4` → `v0.36.3`
sigs.k8s.io/controller-runtime	require	minor	`v0.23.3` → `v0.24.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.21.8`

Compare Source

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2353
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in #2367
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in #2368
build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in #2363
build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in #2377
build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #2375
Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in #2330
feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in #2358
Document tag and digest reference semantics by @Haihan-Jiang in #2325
remote: release pull limiter slot when body is read to EOF by @knQzx in #2373
tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in #2370
authn: read Podman auth from XDG config by @vigneshakaviki in #2379
transport: per-host bearer token exchange on cross-host redirect by @amitzig in #2360
mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in #2371
fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in #2356
feat(remote): add WithReferrersTagFallback option by @kevinmdavis in #2366
mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in #2372
tarball: use correct file extension for zstd/uncompressed by @milas in #2382
build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in #2380
actions: update actions to be pinned by hash by @Subserial in #2384
Bump go version to 1.26.5 by @Subserial in #2388

New Contributors

@xuxiaowei-com-cn made their first contribution in #2358
@knQzx made their first contribution in #2373
@arpitjain099 made their first contribution in #2370
@vigneshakaviki made their first contribution in #2379
@amitzig made their first contribution in #2360
@x64vps made their first contribution in #2356
@kevinmdavis made their first contribution in #2366
@sadmanf made their first contribution in #2372

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

`v0.21.7`

Compare Source

What's Changed

tarball: return error instead of panicking on missing rootfs.diff_ids by @iahsanGill in #2304
gcrane: honor --platform flag in copy by @iahsanGill in #2307
mutate: verify layer digests in Extract and Time by @momenashrafff in #2303
tarball: close layer readers during Write by @nandbhat in #2308
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2311
build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @dependabot[bot] in #2312
BUGFIX: Fail with error when read exceeds maximum by @inteon in #2328
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2327
fix(name): anchor loopback registry detection by @rohan-patnaik in #2314
Reject symlinks in OCI layout blobs by @mosskappa in #2306
fix(crane): avoid creating export tar on pull failure by @Haihan-Jiang in #2318
feat(kubernetes): allow ignoring pull secrets by @rohan-patnaik in #2315
fix(name): preserve localhost registry references by @rohan-patnaik in #2316
pkg/registry: export ErrNotFound by @malt3 in #2176
pkg/registry: export RedirectError by @malt3 in #2177
build(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #2343
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2344
fix: prevent SSRF in google.List() pagination by @tufstraka in #2332
internal/gzip: fix goroutine leak in ReadCloserLevel by @amarkdotdev in #2347
fix(transport): apply refreshed bearer token after cross-host redirect by @64johnlee in #2337
build(deps): bump the go-deps group across 3 directories with 4 updates by @dependabot[bot] in #2348
fix(tarball): normalize paths when matching files by @bstoll in #2334
transport: do not re-attach bearer token after cross-host redirect by @evilgensec in #2349
Bump CI go version to 1.26.4 by @Subserial in #2350

New Contributors

@momenashrafff made their first contribution in #2303
@nandbhat made their first contribution in #2308
@inteon made their first contribution in #2328
@rohan-patnaik made their first contribution in #2314
@mosskappa made their first contribution in #2306
@Haihan-Jiang made their first contribution in #2318
@tufstraka made their first contribution in #2332
@amarkdotdev made their first contribution in #2347
@64johnlee made their first contribution in #2337
@bstoll made their first contribution in #2334

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

`v0.21.6`

Compare Source

What's Changed

fix: update dependencies to use new azure sdk components by @gaganhr94 in #2262
transport: restore resp.Body in retryError so CheckError can parse it by @alliasgher in #2264
pkg/registry: return 202 Accepted for PATCH chunk uploads by @alliasgher in #2265
Follow OCI distribution spec for artifactType and annotations by @malt3 in #2269
actions: attach Codecov token to coverage tests on main by @Subserial in #2270
remote: use DeleteScope (with "delete" action) for manifest deletion by @alliasgher in #2266
remote: limit concurrent layer pulls by @gnix0 in #2271
pkg/registry: reject corrupt disk blobs by @gnix0 in #2272
mutate: close layer readers during export by @gnix0 in #2277
crane/flatten: preserve image media type when flattening by @alliasgher in #2267
build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by @dependabot[bot] in #2273
build(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by @dependabot[bot] in #2278
build(deps): bump the go-deps group across 3 directories with 6 updates by @dependabot[bot] in #2280
Replace go-homedir with os.UserHomeDir by @jammie-jelly in #2282
pkg/name: only treat .localhost as non-HTTPS, not .local by @blackwell-systems in #2281
transport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by @marwan9696 in #2285
test(mutate): add Extract round-trip test for filesystem object preservation by @blackwell-systems in #2283
experiments: remove deprecated support for estargz by @thaJeztah in #2288
build(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by @dependabot[bot] in #2289
fix: limit HTTP response body reads to prevent OOM by @evilgensec in #2296
build(deps): bump the go-deps group across 3 directories with 6 updates by @dependabot[bot] in #2297
transport: block redirects from token server to private/link-local addresses (SSRF fix) by @evilgensec in #2292
pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by @anishesg in #2279
validate: skip non-layer layers by @imjasonh in #2298
remote: validate foreign layer URLs to prevent SSRF (fixes #2259) by @evilgensec in #2293
remote: block SSRF via private-IP Location headers in blob uploads by @adilburaksen in #2295
fix(mutate): preserve config blob and layers for non-Docker OCI artifacts by @blackwell-systems in #2286
fix: preserve per-occurrence layer identity in mutate.Image.Layers() by @iahsanGill in #2299
transport: retry HTTP 429 (Too Many Requests) by @iahsanGill in #2301
transport: allow bearer realm at same host:port as registry by @iahsanGill in #2302
Update go version to 1.26.3 by @Subserial in #2300

New Contributors

@gaganhr94 made their first contribution in #2262
@alliasgher made their first contribution in #2264
@malt3 made their first contribution in #2269
@gnix0 made their first contribution in #2271
@blackwell-systems made their first contribution in #2281
@marwan9696 made their first contribution in #2285
@anishesg made their first contribution in #2279
@adilburaksen made their first contribution in #2295
@iahsanGill made their first contribution in #2299

Full Changelog: google/go-containerregistry@v0.21.5...v0.21.6

helm/helm (helm.sh/helm/v3)

`v3.21.3`: Helm v3.21.3

Compare Source

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

MacOS amd64 (checksum / 76d0db4730b05d3d625eee11e80f0721b32b4d8422f4e5d093de6337bf3ac9f8)
MacOS arm64 (checksum / 19879a848cad832b7a1ac24b767a481d20fb3b95ab53a220849649422ada144e)
Linux amd64 (checksum / 15e041a93a590dce8100f39385cd98c84a765c9e36aeeb9e2dc6ff9e4769e2e0)
Linux arm (checksum / 60f3106ba5e24371af51574fccf489d382d2f59c56ce566d02f2a6f00bf4fb3b)
Linux arm64 (checksum / 67f58155079ff9ffab98ba5c88daff0ed9b542f3a4732f5dd426dde7dd0f5244)
Linux i386 (checksum / 95e7ef76d4631f30e3f6c17d4355420878ca85771dbe7deb7b797521007aebe4)
Linux ppc64le (checksum / c8657c0f77b7d3e2f9508c4a9a545b5862d01690f2a528fbbe659a3a4d534382)
Linux s390x (checksum / d6c2dd29b32da1cb9dfef5af0cb93a1f391beca4e714779186330681b39f4b59)
Linux riscv64 (checksum / ff063cc304a60af858242aa71b5635852d65aa7d3301a46eca17a31c54e8d994)
Windows amd64 (checksum / ff490897e07e976c65a9bd7690cfc139b35ba5e8f25d00eaf1e53a30f1ad3f62)
Windows arm64 (checksum / 1d409b98f99a38704ccb3f0917cbad2417ed53f75751902b6bd84447803b69a9)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

Apply suggestions from code review 1ad6e68 (Benoit Tigeot)
fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e (Benoit Tigeot)
chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178b (dependabot[bot])

`v3.21.2`: Helm v3.21.2

Compare Source

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Update Kubernetes client libraries to v1.36

Installation and Upgrading

Download Helm v3.21.2. The common platform binaries are here:

MacOS amd64 (checksum / 82ac9105e657267cb029b5bf27ed28e35db104777328a036a84d345046f9f329)
MacOS arm64 (checksum / aea537342b4c03cf58e089cb8dc99468087bb1a0218531df40462faca3f6c5d3)
Linux amd64 (checksum / 0a745198de24545d0055cd8414bc8d2ba10363ef5f5d38369ea1b399671cc083)
Linux arm (checksum / d6c5ea4a0c0d8b68a525caa4fe969c5db5627365c66dc2878fe72ac1d6325f15)
Linux arm64 (checksum / bbd559fc0547f1d96ccbc68fe4f1cb98f01808f36538139e669369066b781267)
Linux i386 (checksum / 4f1d9f68c884cc143fc768d583c32cf23317713fc1e8ccbf309bb1d1ddafa15f)
Linux ppc64le (checksum / 8f0e57e13260e0c0008fec80629b560dc8891281ba3f0cd5d57895b8a5f76d8e)
Linux s390x (checksum / daf652ddbf37d5e896187d1ccc1f2868df8f261c1af5b5f2f1639022623aeefb)
Linux riscv64 (checksum / 9e4dbd48868bf92835dd0de11387b1d82636330740b8943064da233b12791964)
Windows amd64 (checksum / 5f346e3338617e9fd1b8c216065383061bdb3bde26cb6b3abc8ce0481354a513)
Windows arm64 (checksum / e77859867482549e5613255605e7680bc72b308ea62b91ecc4626ed4ba116670)

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.21.3 will contain only bug fixes.
3.22.0 is the next (and final) Helm 3 feature release

Changelog

chore(deps): bump the k8s-io group with 2 updates 1259634 (dependabot[bot])
fixes b52e276 (Matheus Pimenta)
chore(deps): bump the k8s-io group across 1 directory with 2 updates 3342dbf (dependabot[bot])

Full Changelog: helm/helm@v3.21.1...v3.21.2

`v3.21.1`: Helm v3.21.1

Compare Source

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error #31920
Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32152
Bumped Go from 1.25 to 1.26 #32168
Dependency version updates

Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

MacOS amd64 (checksum / dd353172bc8cef8c1845501043b82224520a79ff8b2cd4388ec5bfa060ce96b9)
MacOS arm64 (checksum / 779ac09ad0cf333b12402555a32bd26174462384aba2f5a3845876f45d34146a)
Linux amd64 (checksum / a349c62d6ab2d5d11f044fc0d3afa6deed7d27cc7d5c351f536b169d9fc2cc1a)
Linux arm (checksum / ae52acbd13d1efa0d787aa679519da813c114c1b29b68e09a781fe258fc5c696)
Linux arm64 (checksum / 9b3deeecb56c4795aa806858fa4d6388c049e3edfcd771723bd12c1cbef66893)
Linux i386 (checksum / 1901a40be004699a2ac2cf05874bd84dfbed1f791327a0bc65c351d537b0f139)
Linux ppc64le (checksum / 136daecc0f4650158b2adedf14f29022402d92fd111041e55b4038c3df97c3bb)
Linux s390x (checksum / e5601b71342cba12ffd504c03c710769134fbec5bbdea6c90c859506e54d7591)
Linux riscv64 (checksum / e22b20fe16f6bd0d9729034ae76a9e81708bd94b0aa9628f617dc3dfbe876a2b)
Windows amd64 (checksum / e9d0dbeac9c9923c1b444ac4a1fc8e59d9f9afbeb30b4b6e9a00ac60a45b9459)
Windows arm64 (checksum / 9b8b803b27a5c1bdcbc75bcf8d1bf45c8f2ffede8ae29bed3ec093746b9807f9)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

fix(action): avoid nil REST client getter panic when installing CRDs c56dd00 (sergiochan)
fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f (Terry Howe)
chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120 (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f8 (dependabot[bot])
chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8b (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f (dependabot[bot])
Update .github/env 402225f (Terry Howe)
ci: bump golangci-lint to v2.11.3 for go 1.26 00eac21 (Terry Howe)
chore: bump go to 1.26 bec346a (Terry Howe)
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 58b6ccf (dependabot[bot])
chore(deps): bump github.com/distribution/distribution/v3 30b9f51 (dependabot[bot])
chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 858aa47 (dependabot[bot])
chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 1af25d4 (dependabot[bot])
chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 97e4bc3 (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 29bdd1b (dependabot[bot])
fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 bad6cd4 (Terry Howe)
chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 75c2e9b (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 cd4dac3 (dependabot[bot])

Full Changelog: helm/helm@v3.21.0...v3.21.1

`v3.21.0`: Helm v3.21.0

Compare Source

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

[!WARNING]
Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Kubernetes client libraries to v1.36
notable changes here

Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

MacOS amd64 (checksum / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)
MacOS arm64 (checksum / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)
Linux amd64 (checksum / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)
Linux arm (checksum / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)
Linux arm64 (checksum / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)
Linux i386 (checksum / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)
Linux ppc64le (checksum / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)
Linux s390x (checksum / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)
Linux riscv64 (checksum / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)
Windows amd64 (checksum / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)
Windows arm64 (checksum / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.21.1 will contain only bug fixes.
3.22.0 is the next feature release for Kubernetes v1.37

Changelog

[v3] Bump to version v3.21 e0878d4 (George Jenkins)
fix: upgrade opentelemetry packages to patch CVEs 13d5fc4 (Terry Howe)
fix: Chart dot-name path bug 2552884 (George Jenkins)
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5 (Terry Howe)
add image index test b0dfec5 (Pedro Tôrres)
fix pulling charts from OCI indices e629995 (Pedro Tôrres)
chore(deps): bump the k8s-io group with 7 updates 9c854fb (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 a692247 (dependabot[bot])
chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 9f2a7f6 (dependabot[bot])
chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 79f039b (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 45210d5 (dependabot[bot])
Remove refactorring changes from coalesce_test.go e2df39f (Evans Mungai)
Fix import 97affe0 (Evans Mungai)
Update pkg/chart/common/util/coalesce_test.go c264166 (Evans Mungai)
Fix lint warning d409df8 (Evans Mungai)
Preserve nil values in chart already 6fdd101 (Evans Mungai)
fix(values): preserve nil values when chart default is empty map b13743c (Evans Mungai)
chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 703999d (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 a04be96 (dependabot[bot])

New Contributors

@KrzysztofDziankowski made their first contribution in #31829

Full Changelog: helm/helm@v3.20.0...v3.21.0

kubernetes/api (k8s.io/api)

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.7`

Compare Source

`v0.35.6`

Compare Source

`v0.35.5`

Compare Source

kubernetes/client-go (k8s.io/client-go)

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.7`

Compare Source

`v0.35.6`

Compare Source

`v0.35.5`

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

`v0.24.1`

Compare Source

What's Changed

[release-0.24] 🐛 Fix regression in Apply typed error handling by @k8s-infra-cherrypick-robot in #3516

Full Changelog: <https://github.com/kubernetes-sigs/controller-runtime/compare/v0.24.0

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-05T20:00:07Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

13 additional dependencies were updated

Details:

Package	Change
`github.com/cyphar/filepath-securejoin`	`v0.6.1` -> `v0.7.0`
`github.com/docker/cli`	`v29.4.0+incompatible` -> `v29.6.2+incompatible`
`github.com/klauspost/compress`	`v1.18.5` -> `v1.19.1`
`github.com/lib/pq`	`v1.11.2` -> `v1.12.3`
`golang.org/x/net`	`v0.51.0` -> `v0.55.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.47.0`
`golang.org/x/term`	`v0.40.0` -> `v0.44.0`
`golang.org/x/text`	`v0.34.0` -> `v0.38.0`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`k8s.io/apiextensions-apiserver`	`v0.35.3` -> `v0.36.2`
`k8s.io/kube-openapi`	`v0.0.0-20260304202019-5b3e3fdb0acf` -> `v0.0.0-20260317180543-43fb72c5454a`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.2` -> `v6.3.3`

CLAassistant · 2026-08-05T20:00:28Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

fairwinds-insights · 2026-08-07T19:55:17Z

Fairwinds Insights Scan Results

View the full report at insights.fairwinds.com.

✅ No new Action Items detected!

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026

renovate Bot requested review from sudermanjr and transient1 as code owners August 5, 2026 20:00

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026

Update all non-major dependencies

e53d675

renovate Bot force-pushed the renovate/all-non-major branch from fd461b6 to e53d675 Compare August 7, 2026 19:51

Navigation Menu

Uh oh!

Update all non-major dependencies - #472

Update all non-major dependencies#472
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-non-major

renovate Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

CLAassistant commented Aug 5, 2026

Uh oh!

fairwinds-insights Bot commented Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v3.21.3: Helm v3.21.3

Installation and Upgrading

What's Next

Changelog

v3.21.2: Helm v3.21.2

Notable Changes

Installation and Upgrading

What's Next

Changelog

v3.21.1: Helm v3.21.1

Notable Changes

Installation and Upgrading

What's Next

Changelog

v3.21.0: Helm v3.21.0

Notable Changes

Installation and Upgrading

What's Next

Changelog

New Contributors

What's Changed

Configuration

Uh oh!

renovate Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

CLAassistant commented Aug 5, 2026

Uh oh!

fairwinds-insights Bot commented Aug 7, 2026

Fairwinds Insights Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Aug 5, 2026 •

edited

Loading

`v3.21.3`: Helm v3.21.3

`v3.21.2`: Helm v3.21.2

`v3.21.1`: Helm v3.21.1

`v3.21.0`: Helm v3.21.0

renovate Bot commented Aug 5, 2026 •

edited

Loading