Update dependency open-policy-agent/gatekeeper to v3.18.1

[renovate]

This PR contains the following updates:

Package	Update	Change
open-policy-agent/gatekeeper	minor	v3.17.1 -> v3.18.1

---

Release Notes

open-policy-agent/gatekeeper (open-policy-agent/gatekeeper)

v3.18.1

Compare Source

Chores

• bump golang.org/x/crypto from 0.28.0 to 0.31.0 (#​3735) (#​3740) #​3740 (Jaydip Gabani)
• update operation generate in deployment yaml and add docs, CP (#​3738) (#​3748) #​3748 (Jaydip Gabani)
• Prepare v3.18.1 release (#​3749) #​3749 (github-actions[bot])

v3.18.0

Compare Source

Notable Changes

• 🎓 CEL-based policies enforced through Gatekeeper is GA!
• ⚙️ Operation generate to guard CRD and VAP/VAPB generation.

Features

• add logStatsAdmission and logStatsAudit into Helm chart (#​3526) #​3526 (Yuedong Wu)
• Implement config pod status (#​3544) #​3544 (avinash patnala)
• Gator sync test support (#​3098) #​3098 (Anlan Du)
• add generate operation and wait for VAPB generation (#​3573) #​3573 (Jaydip Gabani)
• moving CEL engine to GA (#​3685) #​3685 (Jaydip Gabani)
• Add commonLabels to Deployments (#​3684) #​3684 (Wyatt Fry)
• support expansion in gator verify (#​3650) #​3650 (David Lee)

Bug Fixes

• vap error logging for rego only templates (#​3520) #​3520 (Martijn van der Ploeg)
• liniting error in gatekeeper-controller-manager-poddisruptionbudget.yaml (#​3519) #​3519 (tberreis)
• helm warning when setting NetworkPolicy ingress rule(s) (#​3541) #​3541 (Sebastian Stephan)
• Move K8scel driver from framework (#​3570) #​3570 (avinash patnala)

Documentation

• add alibabacloud to the list of managed services using Gatekeeper in … (#​3521) #​3521 (DahuK)
• refine alibaba cloud logo png (#​3514) (#​3524) #​3524 (DahuK)
• update mutation docs (#​3553) #​3553 (m1schka-bdr)
• Update milestone release cadence (#​3657) #​3657 (Rita Zhang)
• Fix vapb argument (#​3694) #​3694 (Yi Rae Kim)

Code Refactoring

• Move setting up Obj to old obj on Delete logic to target handler (#​3511) #​3511 (avinash patnala)

Continuous Integration

• remove dockerfile buildplatform (#​3491) #​3491 (Sertaç Özercan)
• updating trivy version (#​3691) #​3691 (Jaydip Gabani)
• push container images to ghcr.io as well (#​3658) #​3658 (Takahiro Tsuruda)
• fix trivy throttling (#​3696) #​3696 (Sertaç Özercan)
• fix ghcr push (#​3698) #​3698 (Sertaç Özercan)
• fix gator image for ghcr (#​3700) #​3700 (Sertaç Özercan)
• bump to go 1.23 in gha (#​3699) #​3699 (Sertaç Özercan)
• gha to check for typos in docs (#​3703) #​3703 (Sertaç Özercan)

Chores

• removing wait of vapb deletion, cherry-pick (#​3718) (#​3724) #​3724 (Jaydip Gabani)
• Prepare v3.18.0-rc.1 release (#​3725) #​3725 (github-actions[bot])
• bump the k8s group with 5 updates (#​3503) #​3503 (dependabot[bot])
• bump micromatch from 4.0.5 to 4.0.8 in /website (#​3517) #​3517 (dependabot[bot])
• bump the all group across 1 directory with 3 updates (#​3512) #​3512 (dependabot[bot])
• bump golang from 1.22-bullseye to 1.23-bullseye in /test/image (#​3505) #​3505 (dependabot[bot])
• bump golang from 1.22-bookworm to 1.23-bookworm in /build/tooling (#​3506) #​3506 (dependabot[bot])
• adding design doc for exporting violation interface (#​3515) #​3515 (Jaydipkumar Arvindbhai Gabani)
• adding helm lint ci test (#​3536) #​3536 (Jaydipkumar Arvindbhai Gabani)
• Patch docs for 3.17.1 release (#​3540) #​3540 (github-actions[bot])
• bump kubectl from v1.30.3 to v1.31.1 (#​3543) #​3543 (dependabot[bot])
• bump golang from 31dc846 to 1a5326b in /build/tooling (#​3533) #​3533 (dependabot[bot])
• bump golang from ecef830 to 45b4337 in /test/image (#​3531) #​3531 (dependabot[bot])
• Updating GK -> opa versions (#​3537) #​3537 (Jaydip Gabani)
• adding common function for error reporting for constraint (#​3486) #​3486 (Jaydip Gabani)
• bumping opa to 0.68.0 (#​3561) #​3561 (Jaydip Gabani)
• bump webpack from 5.76.3 to 5.95.0 in /website (#​3562) #​3562 (dependabot[bot])
• bump golang from 45b4337 to 1a26d5a in /test/image (#​3566) #​3566 (dependabot[bot])
• bump golang from 1a5326b to dba79eb in /build/tooling (#​3565) #​3565 (dependabot[bot])
• bump express from 4.19.2 to 4.21.0 in /website (#​3542) #​3542 (dependabot[bot])
• bump github.com/prometheus/client_golang from 1.20.2 to 1.20.4 (#​3575) #​3575 (dependabot[bot])
• bump the k8s group with 4 updates (#​3547) #​3547 (dependabot[bot])
• bump google.golang.org/grpc from 1.66.0 to 1.66.3 (#​3644) #​3644 (dependabot[bot])
• bump the all group across 1 directory with 9 updates (#​3649) #​3649 (dependabot[bot])
• bump distroless/static-debian12 from 8dd8d3c to 69830f2 in /test/externaldata/dummy-provider (#​3567) #​3567 (dependabot[bot])
• bump distroless/static-debian12 from 8dd8d3c to 69830f2 (#​3564) #​3564 (dependabot[bot])
• remove setting alpha flags out of box (#​3578) #​3578 (Jaydip Gabani)
• bump golang from 1.22-bookworm to 1.23-bookworm (#​3551) #​3551 (dependabot[bot])
• bump golang from 1.22-bookworm to 1.23-bookworm in /test/externaldata/dummy-provider (#​3549) #​3549 (dependabot[bot])
• bump golang from 18d2f94 to 2341ddf in /build/tooling (#​3655) #​3655 (dependabot[bot])
• bump golang from ebaf58d to ecb3fe7 in /test/image (#​3654) #​3654 (dependabot[bot])
• bump the all group with 6 updates (#​3672) #​3672 (dependabot[bot])
• bump golang from 37189aa to 2341ddf (#​3670) #​3670 (dependabot[bot])
• Update constraint framework to version without k8scel (#​3680) #​3680 (Max Smythe)
• adding scoped ea with vap ep demo (#​3687) #​3687 (Jaydip Gabani)
• bump the all group across 1 directory with 2 updates (#​3692) #​3692 (dependabot[bot])
• bump golang from 2341ddf to 0e3377d (#​3688) #​3688 (dependabot[bot])
• bump golang from 2341ddf to 0e3377d in /build/tooling (#​3689) #​3689 (dependabot[bot])
• bump distroless/static-debian12 from 69830f2 to f4a57e8 (#​3695) #​3695 (dependabot[bot])
• bump kubectl from v1.31.1 to v1.31.2 (#​3671) #​3671 (dependabot[bot])
• bump the k8s group across 1 directory with 5 updates (#​3679) #​3679 (dependabot[bot])
• bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 (#​3653) #​3653 (dependabot[bot])
• bump distroless/static-debian12 from 69830f2 to cc226ca in /test/externaldata/dummy-provider (#​3666) #​3666 (dependabot[bot])
• bump golang from ecb3fe7 to 2341ddf in /test/image (#​3668) #​3668 (dependabot[bot])
• bump golang from 1a5326b to 2341ddf in /test/externaldata/dummy-provider (#​3665) #​3665 (dependabot[bot])
• bump golang from 0e3377d to 3f3b9da (#​3704) #​3704 (dependabot[bot])
• bump golang from 1f001ad to 3f3b9da in /test/externaldata/dummy-provider (#​3706) #​3706 (dependabot[bot])
• bump golang from 2341ddf to 3f3b9da in /test/image (#​3709) #​3709 (dependabot[bot])
• bump golang from 0e3377d to 3f3b9da in /build/tooling (#​3708) #​3708 (dependabot[bot])
• bump distroless/static-debian12 from cc226ca to f4a57e8 in /test/externaldata/dummy-provider (#​3705) #​3705 (dependabot[bot])
• bump the all group with 2 updates (#​3707) #​3707 (dependabot[bot])
• adding enforcement point status, vapgeneratestatus (#​3686) #​3686 (Jaydip Gabani)
• updating VAP default failure policy to fail (#​3702) #​3702 (Jaydip Gabani)
• Prepare v3.18.0-rc.0 release (#​3712) #​3712 (github-actions[bot])
• Prepare v3.18.0 release (#​3736) #​3736 (github-actions[bot])

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.