Update all dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
alpine	minor	3.18 -> 3.19
app-template	minor	2.3.0 -> 2.4.0
argo-workflows	patch	0.39.6 -> 0.39.9
cert-manager	patch	v1.13.2 -> v1.13.3
contour (source)	patch	15.0.0 -> 15.0.1
keycloak (source)	patch	17.3.5 -> 17.3.6
kube-prometheus-stack (source)	minor	55.0.0 -> 55.3.1
python	patch	3.12.0 -> 3.12.1
terragrunt	minor	0.53.8 -> 0.54.1
velero (source)	patch	5.1.6 -> 5.1.7

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

argoproj/argo-helm (argo-workflows)

v0.39.9

Compare Source

A Helm chart for Argo Workflows

What's Changed

• chore(deps): bump actions/setup-python from 4.7.1 to 5.0.0 by @​dependabot in https://github.com/argoproj/argo-helm/pull/2382
• chore(deps): bump actions/stale from 8.0.0 to 9.0.0 by @​dependabot in https://github.com/argoproj/argo-helm/pull/2380
• chore(deps): bump actions/labeler from 4.3.0 to 5.0.0 by @​dependabot in https://github.com/argoproj/argo-helm/pull/2381
• fix(argo-workflows): fix helm lint error when extraObjects is defined by @​workwithprashant in https://github.com/argoproj/argo-helm/pull/2384

New Contributors

• @​workwithprashant made their first contribution in https://github.com/argoproj/argo-helm/pull/2384

Full Changelog: argoproj/argo-helm@argo-workflows-0.39.8...argo-workflows-0.39.9

v0.39.8

Compare Source

A Helm chart for Argo Workflows

What's Changed

• feat(argo-workflows): Add support for sso filterGroupsRegex by @​nhavens in https://github.com/argoproj/argo-helm/pull/2379

New Contributors

• @​nhavens made their first contribution in https://github.com/argoproj/argo-helm/pull/2379

Full Changelog: argoproj/argo-helm@argo-rollouts-2.32.7...argo-workflows-0.39.8

v0.39.7

Compare Source

A Helm chart for Argo Workflows

What's Changed

• fix(argo-workflows): Fix OAuth redirect URL autoconfig. by @​vladlosev in https://github.com/argoproj/argo-helm/pull/2369

Full Changelog: argoproj/argo-helm@argo-workflows-0.39.6...argo-workflows-0.39.7

cert-manager/cert-manager (cert-manager)

v1.13.3

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

⚠️ Read about the breaking changes in cert-manager 1.13 before you upgrade from a < v1.13 version!

This patch release contains fixes for the following security vulnerabilities in the cert-manager-controller:

• GO-2023-2334: Decryption of malicious PBES2 JWE objects can consume unbounded system resources.

If you use ArtifactHub Security report or trivy, this patch will also silence the following warning about a vulnerability in code which is imported but not used by the cert-manager-controller:

• CVE-2023-47108: DoS vulnerability in otelgrpc due to unbound cardinality metrics.

An ongoing security audit of cert-manager suggested some changes to the webhook code to mitigate DoS attacks, and these are included in this patch release.

Changes

Bug or Regression

• The webhook server now returns HTTP error 413 (Content Too Large) for requests with body size >= 3MiB. This is to mitigate DoS attacks that attempt to crash the webhook process by sending large requests that exceed the available memory. (#​6507, @​inteon)
• The webhook server now returns HTTP error 400 (Bad Request) if the request contains an empty body. (#​6507, @​inteon)
• The webhook server now returns HTTP error 500 (Internal Server Error) rather than crashing, if the code panics while handling a request. (#​6507, @​inteon)
• Mitigate potential "Slowloris" attacks by setting ReadHeaderTimeout in all http.Server instances. (#​6538, @​wallrj)
• Upgrade Go modules: otel, docker, and jose to fix CVE alerts. See GHSA-8pgv-569h-w5rw, GHSA-jq35-85cj-fj4p, and GHSA-2c7c-3mj9-8fqh. (#​6514, @​inteon)

Dependencies

Added

Nothing has changed.

Changed

• cloud.google.com/go/firestore: v1.11.0 → v1.12.0
• cloud.google.com/go: v0.110.6 → v0.110.7
• github.com/felixge/httpsnoop: v1.0.3 → v1.0.4
• github.com/go-jose/go-jose/v3: v3.0.0 → v3.0.1
• github.com/go-logr/logr: v1.2.4 → v1.3.0
• github.com/golang/glog: v1.1.0 → v1.1.2
• github.com/google/go-cmp: v0.5.9 → v0.6.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.45.0 → v0.46.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.44.0 → v0.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel/metric: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel/sdk: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel/trace: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel: v1.19.0 → v1.20.0
• go.uber.org/goleak: v1.2.1 → v1.3.0
• golang.org/x/sys: v0.13.0 → v0.14.0
• google.golang.org/genproto/googleapis/api: f966b18 → b8732ec
• google.golang.org/genproto: f966b18 → b8732ec
• google.golang.org/grpc: v1.58.3 → v1.59.0

Removed

Nothing has changed.

prometheus-community/helm-charts (kube-prometheus-stack)

v55.3.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] bump prometheus image tag to 2.48.1 by @​lukas-unity in https://github.com/prometheus-community/helm-charts/pull/4082

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-55.3.0...kube-prometheus-stack-55.3.1

v55.3.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Allow configuration of sessionAffinityConfig by @​karloramone in https://github.com/prometheus-community/helm-charts/pull/4076

New Contributors

• @​karloramone made their first contribution in https://github.com/prometheus-community/helm-charts/pull/4076

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-55.2.0...kube-prometheus-stack-55.3.0

v55.2.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Allow to define editable property on dashboards by @​jkroepke in https://github.com/prometheus-community/helm-charts/pull/4024

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-55.1.1...kube-prometheus-stack-55.2.0

v55.1.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [CI] Run shellcheck on custom lint file by @​GMartinez-Sisti in https://github.com/prometheus-community/helm-charts/pull/4072
• Bump actions/setup-python from 4 to 5 by @​dependabot in https://github.com/prometheus-community/helm-charts/pull/4079
• [kube-prometheus-stack] Shellcheck linter file by @​GMartinez-Sisti in https://github.com/prometheus-community/helm-charts/pull/4073

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-55.1.0...kube-prometheus-stack-55.1.1

v55.1.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Allow run Prometheus Operator Webhook receiver separately by @​jkroepke in https://github.com/prometheus-community/helm-charts/pull/4023

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-55.0.1...kube-prometheus-stack-55.1.0

v55.0.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Add custom CI actions by @​jkroepke in https://github.com/prometheus-community/helm-charts/pull/4065

Full Changelog: prometheus-community/helm-charts@prometheus-postgres-exporter-5.3.0...kube-prometheus-stack-55.0.1

python/cpython (python)

v3.12.1

Compare Source

gruntwork-io/terragrunt (terragrunt)

v0.54.1

Compare Source

Updated CLI args, config attributes and blocks

• catalog
• scaffold

Description

• Updated documentation for scaffold and catalog commands.
• Removed blank lines from generated HCL code by scaffold command.
• Fixed passing of terraform source URL from catalog to scaffold.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2838
• https://github.com/gruntwork-io/terragrunt/pull/2839
• https://github.com/gruntwork-io/terragrunt/pull/2842

v0.54.0

Compare Source

Updated CLI args, config attributes and blocks

• catalog
• scaffold

Description

• New CLI option catalog
• New CLI option scaffold
• Updated version check regular expression.

Special thanks

Special thanks to @​wyardley for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2821
• https://github.com/gruntwork-io/terragrunt/pull/2829
• https://github.com/gruntwork-io/terragrunt/pull/2815
• https://github.com/gruntwork-io/terragrunt/pull/2817

vmware-tanzu/helm-charts (velero)

v5.1.7

Compare Source

A Helm chart for velero

---

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.