chore(deps): update all-ci-updates

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anchore/sbom-action	action	patch	v0.24.0 → v0.24.2
argo-cd		patch	10.4.0 → 10.4.2	10.9.0 (+14)
github/codeql-action	action	patch	v4.37.7 → v4.37.9	v4.38.0
kube-prometheus-stack (source)		minor	88.5.3 → 88.6.1	88.6.5 (+3)
securego/gosec	action	minor	v2.28.0 → v2.29.0
tempo (source)		minor	2.2.4 → 2.3.0	2.4.0

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.24.2

Compare Source

Added Features

• bump eslint from 10.8.1 to 10.9.0 [#​724 @​dependabot]

Additional Changes

• add makefile target to bump syft [#​620 @​willmurphyscode]
• update zizmor workflow triggers [#​624 @​wagoodman]
• require zizmor security events [#​621 @​wagoodman]

(Full Changelog)

v0.24.1

Compare Source

argoproj/argo-helm (argo-cd)

v10.4.2

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

• chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.90.0 by @​argoproj-renovate[bot] in #​4039

Full Changelog: argoproj/argo-helm@argo-cd-10.4.1...argo-cd-10.4.2

v10.4.1

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

• chore(argo-cd): Update dependency argoproj/argo-cd to v3.5.2 by @​argoproj-renovate[bot] in #​4040

Full Changelog: argoproj/argo-helm@argo-workflows-2.0.3...argo-cd-10.4.1

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

• Update default CodeQL bundle version to 2.26.4. #​4106

v4.37.8

Compare Source

No user facing changes.

prometheus-community/helm-charts (kube-prometheus-stack)

v88.6.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @​renovate[bot] in #​7223

Full Changelog: prometheus-community/helm-charts@prometheus-operator-admission-webhook-0.43.3...kube-prometheus-stack-88.6.1

v88.6.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Add HTTPRoute timeout support by @​U-S-jun in #​7221

Full Changelog: prometheus-community/helm-charts@prometheus-redis-exporter-6.30.0...kube-prometheus-stack-88.6.0

v88.5.4

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update Helm release grafana to v12.11.2 by @​renovate[bot] in #​7213

Full Changelog: prometheus-community/helm-charts@prometheus-ipmi-exporter-0.8.2...kube-prometheus-stack-88.5.4

securego/gosec (securego/gosec)

v2.29.0

Compare Source

Changelog

• deb5446 analyzers/G703: stop treating Clean/Abs/PathEscape as path-traversal sanitizers (#​1723)
• 2e13f16 fix(junit): properly escape XML in failure text (#​1718)
• 3833037 fix(csv): capture and report write errors on flush (#​1716)
• f6d07d7 fix(report): root path matching in formatters (#​1719)
• 17d3916 fix(config): handle nosec tags with leading hash (#​1717)
• 3958f0e Update all dependencies (#​1720)
• 9c38a86 Add support for go version 1.27.0 and update to version 1.25.14 and 1… (#​1726)
• 2eb4727 Update all dependencies (#​1713)
• 5e72efc Update all dependencies (#​1710)
• 45b083a fix(G202): don't flag strings.Builder built from constants (#​1707)
• 82da19c ci: allow fork PR checkout in barry-ai-security-review job (#​1708)
• 9f7cd13 Update all dependencies (#​1709)
• 1769a22 Downgrade min Go version (#​1706)
• 5bb2909 Udpate action to use gosec v2.28.0 (#​1705)

grafana-community/helm-charts (tempo)

v2.3.0

Compare Source

Grafana Tempo Single Binary Mode

What's Changed

• [CI] Update dependency losisin/helm-values-schema-json to v2.6.0 by @​renovate[bot] in #​757
• [tempo] Add Gateway API HTTPRoute support by @​KyriosGN0 in #​740

Full Changelog: grafana-community/helm-charts@loki-18.11.2...tempo-2.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 34.50%. Comparing base (633b0f3) to head (8f2ad8e).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2121   +/-   ##
=======================================
  Coverage   34.50%   34.50%           
=======================================
  Files         419      419           
  Lines       27721    27721           
=======================================
+ Hits         9564     9566    +2     
+ Misses      17438    17437    -1     
+ Partials      719      718    -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.