fix(deps): update go dependencies by renovate[bot] · Pull Request #855 · giantswarm/security-bundle

renovate · 2026-09-24T03:27:26Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/fluxcd/helm-controller/api	`v1.6.4` → `v1.7.1`
github.com/giantswarm/apptest-framework/v5	`v5.2.6` → `v5.4.2`
github.com/giantswarm/clustertest/v5	`v5.6.0` → `v5.6.5`
github.com/onsi/ginkgo/v2	`v2.33.0` → `v2.33.1`
github.com/onsi/gomega	`v1.43.1` → `v1.44.0`
k8s.io/api	`v0.37.0` → `v0.37.2`
k8s.io/apimachinery	`v0.37.0` → `v0.37.2`
sigs.k8s.io/controller-runtime	`v0.25.1` → `v0.25.2`

Release Notes

fluxcd/helm-controller (github.com/fluxcd/helm-controller/api)

`v1.7.1`

Compare Source

Changelog

v1.7.1 changelog

Container images

docker.io/fluxcd/helm-controller:v1.7.1
ghcr.io/fluxcd/helm-controller:v1.7.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

`v1.7.0`

Compare Source

Changelog

v1.7.0 changelog

Container images

docker.io/fluxcd/helm-controller:v1.7.0
ghcr.io/fluxcd/helm-controller:v1.7.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

`v1.6.5`

Compare Source

Changelog

v1.6.5 changelog

Container images

docker.io/fluxcd/helm-controller:v1.6.5
ghcr.io/fluxcd/helm-controller:v1.6.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

giantswarm/apptest-framework (github.com/giantswarm/apptest-framework/v5)

`v5.4.2`

Compare Source

Changed

Go: Update dependencies.

`v5.4.1`

Compare Source

Changed

Go: Update dependencies.

`v5.4.0`

Compare Source

Changed

Go: Update cluster-standup-teardown to v6.1.0.

`v5.3.3`

Compare Source

Changed

Go: Update dependencies.

`v5.3.2`

Compare Source

Fixed

A standalone HelmRelease installed in-cluster with WithHelmServiceAccountName() is now installed as such: Helm no longer tries to create the target namespace, which the impersonated service account is forbidden to do, and the service account is required instead of created without permissions.
Uninstalling an in-cluster HelmRelease now waits for it and for the HelmReleases and App CRs it installed to be removed before the workload cluster is torn down, so a bundle testing itself no longer leaves its organization namespace stuck terminating.

`v5.3.1`

Compare Source

Changed

Go: Update dependencies.

`v5.3.0`

Compare Source

Added

WithClusterValues() makes a HelmRelease read the cluster's <cluster>-cluster-values ConfigMap ahead of the suite's own values, which nothing injects under Flux the way app-operator does for App CRs. Off by default, as charts that reject unknown values cannot take it.
defaultapphelmrelease e2e suite: covers a default app suite that also sets WithHelmRelease(true), which has to leave the cluster chart's HelmRelease untouched.
A wait that times out now dumps the conditions and events of every HelmRelease and App CR that is not ready, along with the non-running pods, instead of only reporting that something never became ready.
HelmReleaseConfig.ValuesFrom takes an ordered set of values sources, merged in App platform order: all ConfigMaps before all Secrets, each by ascending priority, with the suite's own values in the user config slot.
WithDefaultAppName() sets the name the cluster chart gives a default app's App CR / HelmRelease, for the few apps named after neither the app name nor the chart name.
bundles.OverrideChild() takes the child as a plain ChildOverride instead of an App, so the override can be built for either install mode. OverrideChildApp() stays as a wrapper.
InAppBundle can now be combined with WithHelmRelease. The parent bundle is installed as a HelmRelease the MC owns, impersonating the automation service account, and the child's version is pinned through the parent's values.
bundles.ChildValues() returns the child override as a values layer, so both install modes build it the same way.
InAppBundle is now rejected for MC test suites, on both install paths. Bundle charts reach their children through the cluster's kubeconfig secret, which does not exist when the MC is the target.

Changed

The bundle values file is now rendered as a Go template on the App CR path too, as it already was under Flux. A file that has to reach the chart with literal {{ }} in it now needs them escaped.
Go: Update clustertest to v5.6.0 and delegate the Flux source and HelmRelease version handling to it. Sources are now created as source.toolkit.fluxcd.io/v1, which the client scheme registers, so the framework no longer registers it itself. This requires source-controller v1.6 (Flux 2.6) or newer. An OCIRepository without a chart version now resolves through the * semver range instead of the latest tag, which excludes pre-release versions.
Go: Update dependencies.

Fixed

A values file that is not a valid Go template now fails the suite with the file named, instead of panicking. A values file that exists but cannot be read is no longer treated as absent, which installed the chart's defaults and passed.
The pre-install of an upgrade suite no longer rewrites the app under test. It ran off the shared application, so the install step that followed reinstalled the previous version instead of the version being tested.
WithClusterValues now works for a bundle installed as a HelmRelease, where it was silently ignored, and is rejected when the HelmRelease is installed outside the cluster's org namespace, where Flux cannot read the ConfigMap.
A wait that times out on a HelmRelease outside the cluster's org namespace now dumps that namespace rather than describing unrelated resources.
Default apps are no longer installed by the framework when WithHelmRelease is set, which overwrote the HelmRelease owned by the cluster chart.
Upgrade suites for default apps now wait for the app to be reconciled at the version under test before running the tests.
mcAppTest e2e suite: install the hello-world test app via an OCIRepository + Flux HelmRelease instead of an App CR, matching the basic suite. The App CR path injects the cluster-values, which hello-world v3.x rejects.
HelmRelease mode now applies the same defaults to MC tests as to workload cluster tests: the HelmRelease is created in the cluster's org namespace and reaches the cluster through its own kubeconfig secret. A management cluster is a CAPI cluster like any other, so its apps are installed the same way. Previously an MC test got no kubeconfig secret and impersonated an auto-created service account that holds no permissions, so the install could not succeed.
mcAppTest e2e suite: turn off the hello-world chart's Ingress, which defaults to the nginx class that an MC has no IngressClass for, so the install was rejected by the load balancer controller's admission webhook.
WithHelmServiceAccountName() is now opt-in for the in-cluster installs that need it (app bundles, for example) instead of defaulting to a per-app service account, and it suppresses the kubeconfig secret default rather than being silently dropped.
HelmRelease version assertions now check the deployed release instead of the attempted revision, so an upgrade that is only starting or that rolled back no longer passes.
Non-upgrade default app suites now wait for the app to be deployed at the version under test instead of skipping the install step and asserting nothing. A Release app override that silently did not take effect now fails the suite rather than having it test the Release's version.
The Flux source CR is now deleted during cleanup even when no source URL was set. The framework creates the source either way, and leaving it behind pinned the next run to the previous run's chart version.
Bundle child overrides no longer set the child's chart name to its app name. WithHelmChartName() now feeds the override, so a child whose chart is published under a different name is pulled correctly.
Bundle child overrides no longer emit empty values. A catalog or namespace the suite didn't set was overriding the bundle chart's own default with an empty string.
Bundle suites now wait for the bundle's child to be deployed at the version under test. Previously an App CR bundle suite passed as soon as the parent bundle reached deployed, which only means helm upgrade succeeded.
The values file is now rendered as a Go template in HelmRelease mode, as it already was on the App CR path, so a suite using {{ .ClusterName }} no longer installs with literal braces. Both paths now substitute the cluster name, namespace and organization.
The pkg/aws docs referenced a /v3 import path; the module is /v5.
The version of the app under test is now resolved once, up front, and read back off the Application in every install mode. HelmRelease mode read E2E_APP_VERSION at each step instead, keeping a leading v that no chart is published under.

giantswarm/clustertest (github.com/giantswarm/clustertest/v5)

`v5.6.5`

Compare Source

Changed

Go: Update dependencies.

`v5.6.4`

Compare Source

Changed

Go: Update dependencies.
Go: Update to v1.27.2.
CI: Use the architect orb's commands instead of custom tool installation steps.

`v5.6.3`

Compare Source

Changed

Go: Update dependencies.

`v5.6.2`

Compare Source

Changed

Go: Update dependencies.

`v5.6.1`

Compare Source

Changed

Bumped gitsemver from v2.0.1 to v3.0.1, which moves the import path to
github.com/giantswarm/gitsemver/v3. WithVersion now also routes the gitsemver v3 dev-build schema
X.Y.Z-r<branch-hash>t<timestamp>h<sha> to the -test catalog. Before this, a chart built from a branch
by a toolchain on gitsemver v3 was looked up in the stable catalog and never found. The superseded
X.Y.Z-dev.<branch>.<date>.<time> schema is still recognised.
Go: Update dependencies.

onsi/ginkgo (github.com/onsi/ginkgo/v2)

`v2.33.1`

Compare Source

Fixes

Add several missing fields to spec report JSON output.

onsi/gomega (github.com/onsi/gomega)

`v1.44.0`

Compare Source

Fixes

BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#925) [26e3c6b]
BeNumerically("~") no longer overflows when computing the distance between extreme integers (#928) [1955764]
BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#927) [10e2aca]
HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#929) [ffc577a]
HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#926) [dc91598]
MatchJSON no longer treats numbers too large for a float64 as equal to one another (#930) [9d619a5]
MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#931) [8ef1aa7, 630fe12]
HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#934) [af1b777]
MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#933) [2773796]
MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#932) [c0dbd89, 2565350]

kubernetes/api (k8s.io/api)

`v0.37.2`

Compare Source

`v0.37.1`

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.37.2`

Compare Source

`v0.37.1`

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

`v0.25.2`

Compare Source

What's Changed

[release-0.25] 🐛 Fix SubResourceCreateOptions.ApplyToSubResourceCreate by @k8s-infra-cherrypick-robot in #3600
[release-0.25] ✨ Add metrics handler options by @k8s-infra-cherrypick-robot in #3603
[release-0.25] 📖 Document that ReadYourWrite doesn't work correctly with > 1 Namespace by @k8s-infra-cherrypick-robot in #3610
[release-0.25] ✨ Add a metric for the readyourwite consistency wait duration by @k8s-infra-cherrypick-robot in #3613

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-24T03:27:28Z

ℹ️ Artifact update notice

File name: tests/e2e/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

68 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.27.1` -> `1.27.3`
`github.com/Azure/go-ansiterm`	`v0.0.0-20250102033503-faa5f7b0171c` -> `v0.0.0-20261013165250-51075c6ea6bc`
`github.com/Microsoft/go-winio`	`v0.6.2` -> `v0.6.4`
`github.com/ProtonMail/go-crypto`	`v1.4.1` -> `v1.5.2`
`github.com/cenkalti/backoff/v7`	`v7.0.0` -> `v7.0.1`
`github.com/cert-manager/cert-manager`	`v1.21.2` -> `v1.21.3`
`github.com/emicklei/go-restful/v3`	`v3.13.0` -> `v3.14.0`
`github.com/fluxcd/cli-utils`	`v1.2.3` -> `v1.4.0`
`github.com/fluxcd/pkg/apis/acl`	`v0.10.0` -> `v0.12.0`
`github.com/fluxcd/pkg/apis/kustomize`	`v1.20.0` -> `v1.23.0`
`github.com/fluxcd/pkg/apis/meta`	`v1.31.0` -> `v1.38.0`
`github.com/fluxcd/source-controller/api`	`v1.9.5` -> `v1.10.0`
`github.com/fxamacker/cbor/v2`	`v2.9.3` -> `v2.9.6`
`github.com/giantswarm/cluster-standup-teardown/v6`	`v6.0.7` -> `v6.1.3`
`github.com/go-git/go-billy/v5`	`v5.9.1` -> `v5.9.2`
`github.com/go-git/go-git/v5`	`v5.19.2` -> `v5.19.3`
`github.com/go-openapi/jsonpointer`	`v1.0.0` -> `v1.0.2`
`github.com/go-openapi/jsonreference`	`v1.0.1` -> `v1.0.3`
`github.com/go-openapi/swag`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/cmdutils`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/conv`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/fileutils`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/jsonutils`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/loading`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/mangling`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/netutils`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/pools`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/stringutils`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/typeutils`	`v0.29.1` -> `v0.29.2`
`github.com/go-openapi/swag/yamlutils`	`v0.29.1` -> `v0.29.2`
`github.com/google/pprof`	`v0.0.0-20260902005441-ca85771921e4` -> `v0.0.0-20261016150608-1facf8f91b50`
`github.com/huandu/xstrings`	`v1.5.0` -> `v1.6.3`
`github.com/ianlancetaylor/demangle`	`v0.0.0-20260724033716-83e58baca724` -> `v0.0.0-20261012173340-cbb8aaea4290`
`github.com/mattn/go-colorable`	`v0.1.15` -> `v0.1.16`
`github.com/mattn/go-runewidth`	`v0.0.29` -> `v0.0.31`
`github.com/pjbgf/sha1cd`	`v0.6.0` -> `v0.7.0`
`github.com/prometheus/client_golang`	`v1.24.1` -> `v1.25.0`
`github.com/prometheus/common`	`v0.71.0` -> `v0.72.1`
`github.com/prometheus/procfs`	`v0.22.0` -> `v0.23.0`
`github.com/shopspring/decimal`	`v1.4.0` -> `v1.6.0`
`go.opentelemetry.io/otel/exporters/stdout/stdoutlog`	`v0.19.0` -> `v0.21.0`
`go.opentelemetry.io/proto/otlp`	`v1.11.0` -> `v1.11.1`
`golang.org/x/crypto`	`v0.56.0` -> `v0.58.0`
`golang.org/x/mod`	`v0.41.0` -> `v0.42.0`
`golang.org/x/net`	`v0.58.0` -> `v0.61.0`
`golang.org/x/oauth2`	`v0.36.0` -> `v0.37.0`
`golang.org/x/sync`	`v0.23.0` -> `v0.24.0`
`golang.org/x/sys`	`v0.47.0` -> `v0.49.0`
`golang.org/x/term`	`v0.45.0` -> `v0.47.0`
`golang.org/x/text`	`v0.42.0` -> `v0.43.0`
`golang.org/x/time`	`v0.15.0` -> `v0.16.0`
`golang.org/x/tools`	`v0.49.0` -> `v0.52.0`
`helm.sh/helm/v4`	`v4.2.4` -> `v4.3.1`
`k8s.io/apiextensions-apiserver`	`v0.37.0` -> `v0.37.1`
`k8s.io/apiserver`	`v0.37.0` -> `v0.37.1`
`k8s.io/cli-runtime`	`v0.37.0` -> `v0.37.1`
`k8s.io/client-go`	`v0.37.0` -> `v0.37.1`
`k8s.io/cluster-bootstrap`	`v0.37.0` -> `v0.37.1`
`k8s.io/component-base`	`v0.37.0` -> `v0.37.1`
`k8s.io/kubectl`	`v0.37.0` -> `v0.37.1`
`k8s.io/streaming`	`v0.37.0` -> `v0.37.2`
`k8s.io/utils`	`v0.0.0-20260707023825-cf1189d6abe3` -> `v0.0.0-20261023123148-ca04ba58ecab`
`oras.land/oras-go/v2`	`v2.6.2` -> `v2.7.0`
`sigs.k8s.io/cluster-api`	`v1.14.2` -> `v1.14.3`
`sigs.k8s.io/cluster-api/api`	`v1.14.2` -> `v1.14.3`
`sigs.k8s.io/gateway-api`	`v1.6.2` -> `v1.6.3`
`sigs.k8s.io/json`	`v0.0.0-20250730193827-2d320260d730` -> `v0.0.0-20260909141634-11ed52e25bc5`
`sigs.k8s.io/kustomize/api`	`v0.21.1` -> `v0.21.2`
`sigs.k8s.io/kustomize/kyaml`	`v0.21.1` -> `v0.21.2`

circleci-architect · 2026-09-24T03:28:18Z

Published Helm chart `security-bundle`

2.4.1-raaebddfct20261028212334h8237d3d


Chart	`security-bundle`
Version	`2.4.1-raaebddfct20261028212334h8237d3d`
OCI reference	`oci://gsoci.azurecr.io/charts/giantswarm/security-bundle:2.4.1-raaebddfct20261028212334h8237d3d`
Digest	`sha256:9f74b0cd299407050e28b1b0c65d3d4bb4f519ca011fcd28c67fe050bd062101`
Registry	public — `gsoci.azurecr.io`
Git catalog	default-test-catalog (index)

Pull this chart

helm pull oci://gsoci.azurecr.io/charts/giantswarm/security-bundle --version 2.4.1-raaebddfct20261028212334h8237d3d

_{Posted by architect-orb · build 4119 · commit 8237d3d · updated in place on every push}

stone-z · 2026-10-28T21:23:58Z

/run app-test-suites

tinkerers-ci · 2026-10-28T21:25:45Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run app-test-suites-single PROVIDER=capa TARGET_SUITES=./tests/e2e/suites/basic

renovate · 2026-10-28T21:28:26Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

stone-z · 2026-10-28T23:07:09Z

Needs giantswarm/apptest-framework#772

stone-z · 2026-10-29T14:50:27Z

/run app-test-suites

renovate Bot added the dependencies Pull requests that update a dependency file label Sep 24, 2026

renovate Bot requested a review from a team as a code owner September 24, 2026 03:27

renovate Bot added the renovate PR created by RenovateBot label Sep 24, 2026

renovate Bot enabled auto-merge (squash) September 24, 2026 03:27

renovate Bot force-pushed the renovate/go-dependencies branch from e43a386 to affb910 Compare September 24, 2026 22:51

renovate Bot changed the title ~~fix(deps): update go dependencies to v0.37.1~~ fix(deps): update go dependencies Sep 24, 2026

renovate Bot force-pushed the renovate/go-dependencies branch 3 times, most recently from 2c3df84 to ab42bc8 Compare October 1, 2026 18:18

renovate Bot force-pushed the renovate/go-dependencies branch 6 times, most recently from 485abb5 to 6b69049 Compare October 12, 2026 13:52

QuentinBisson added the marge/pending label Oct 13, 2026

renovate Bot force-pushed the renovate/go-dependencies branch 10 times, most recently from 07f0362 to c86cb39 Compare October 20, 2026 08:55

renovate Bot force-pushed the renovate/go-dependencies branch 2 times, most recently from 18a4dd7 to 3f1c52a Compare October 21, 2026 00:37

renovate Bot force-pushed the renovate/go-dependencies branch 6 times, most recently from e58cea0 to c7b9bfb Compare October 28, 2026 19:59

stone-z approved these changes Oct 28, 2026

View reviewed changes

fix(deps): update go dependencies

8237d3d

stone-z force-pushed the renovate/go-dependencies branch from c7b9bfb to 8237d3d Compare October 28, 2026 21:23

stone-z mentioned this pull request Oct 28, 2026

chore(deps): update golang docker tag to v1.27.3 giantswarm/apptest-framework#772

Merged

1 task done

renovate Bot merged commit ab4215c into main Oct 29, 2026
8 of 9 checks passed

renovate Bot deleted the renovate/go-dependencies branch October 29, 2026 15:26

Navigation Menu

Repository navigation

fix(deps): update go dependencies - #855

fix(deps): update go dependencies#855
renovate[bot] merged 1 commit into
mainfrom
renovate/go-dependencies

renovate Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

circleci-architect Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

stone-z commented Oct 28, 2026

Uh oh!

tinkerers-ci Bot commented Oct 28, 2026

Uh oh!

renovate Bot commented Oct 28, 2026

Uh oh!

stone-z commented Oct 28, 2026

Uh oh!

stone-z commented Oct 29, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Container images

Changelog

Container images

Changelog

Container images

Changed

Changed

Changed

Changed

Fixed

Changed

Added

Changed

Fixed

Changed

Changed

Changed

Changed

Changed

Fixes

Fixes

What's Changed

Configuration

Uh oh!

renovate Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: tests/e2e/go.mod

Uh oh!

circleci-architect Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Published Helm chart security-bundle

Uh oh!

stone-z commented Oct 28, 2026

Uh oh!

tinkerers-ci Bot commented Oct 28, 2026

Uh oh!

renovate Bot commented Oct 28, 2026

Edited/Blocked Notification

Uh oh!

stone-z commented Oct 28, 2026

Uh oh!

stone-z commented Oct 29, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Sep 24, 2026 •

edited

Loading

renovate Bot commented Sep 24, 2026 •

edited

Loading

circleci-architect Bot commented Sep 24, 2026 •

edited

Loading

Published Helm chart `security-bundle`