[renovate]

This PR contains the following updates:

Package	Type	Update	Change
kubeseal	tools	minor	0.37.0 → 0.41.2

---

Release Notes

bitnami/sealed-secrets (kubeseal)

v0.41.2

Compare Source

• Failing pipelines during release

v0.41.1

Compare Source

• Failing pipelines during release

v0.41.0

Compare Source

• Heal manually modified Secrets (#​2073)
• fix(controller): remove redundant scheme registration from NewController, fixing a startup abort ("concurrent map read and map write") with --additional-namespaces introduced in v0.39.0 (#​2046)
• fix(multidocyaml): do not panic on malformed YAML in /v1/verify (#​2074)
• controller: with --watch-for-secrets, dynamically detect new, updated, and deleted sealing key secrets without a restart (#​2034)
• Add terminating newline to end of prometheusrule.yaml (#​2055)
• Bump Golang to 1.27.3 (#​2077)
• Bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1 (#​2075)
• Bump distroless/static from 5813399 to 9e0130b in /docker (#​2076)
• Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 (#​2071)
• Bump golang.org/x/crypto from 0.57.0 to 0.58.0 (#​2072)
• Bump github.com/onsi/gomega from 1.43.1 to 1.44.0 (#​2065)
• Bump k8s.io/code-generator from 0.37.0 to 0.37.1 (#​2064)
• Bump k8s.io/client-go from 0.37.0 to 0.37.1 (#​2067)
• Bump github.com/onsi/gomega from 1.43.0 to 1.43.1 (#​2062)
• Bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 (#​2061)
• Bump golang.org/x/crypto from 0.56.0 to 0.57.0 (#​2057)
• Bump distroless/static from f2ea270 to 5813399 in /docker (#​2056)
• Bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 (#​2058)

v0.40.0

Compare Source

• Bump Golang to 1.26.8 (#​2050)
• [Security] Stop /v1/rotate from acting as a decryption oracle (#​2049)
• Bump golang.org/x/crypto from 0.55.0 to 0.56.0 (#​2048)
• Bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 (#​2047)
• Bump github.com/onsi/gomega from 1.42.1 to 1.43.0 (#​2044)
• Bump k8s.io/code-generator from 0.36.4 to 0.37.0 (#​2042)
• Bump k8s.io/client-go from 0.36.4 to 0.37.0 (#​2041)
• Enable encryptedData to be omitted by setting key to null in template (#​1871)
• Bump k8s.io/code-generator from 0.36.3 to 0.36.4 (#​2036)
• Add imports to force vendoring required codegen tools (#​2020)
• Bump distroless/static from 9197324 to f2ea270 in /docker (#​2038)
• Bump k8s.io/client-go from 0.36.3 to 0.36.4 (#​2039)
• Bump k8s.io/api from 0.36.3 to 0.36.4 (#​2037)

v0.39.1

Compare Source

• Bump Golang to 1.26.7 (#​2029)
• Bump Golang to 1.26.6 (#​2028)
• Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#​2026)
• Bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1 (#​2027)
• test(controller): fix flaky TestReadKey RSA key comparison (#​2021)

v0.39.0

Compare Source

• [Security] fix: stop /v1/verify from acting as a decryption oracle (#​2019)
• fix(controller): start HTTP early for large additional-namespaces lists (#​2018)
• Rate-limit the /v1/rotate endpoint (#​1971)
• test(controller): poll for server readiness instead of sleeping (#​2010)
• Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 (#​2016)
• Bump k8s.io/code-generator from 0.36.2 to 0.36.3 (#​2014)
• Bump github.com/mattn/go-isatty from 0.0.23 to 0.0.24 (#​2011)
• Bump k8s.io/client-go from 0.36.2 to 0.36.3 (#​2012)
• Bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 (#​2009)
• Bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#​2007)
• Bump distroless/static from 3592aa8 to 9197324 in /docker (#​2008)
• Allow setting hostUsers on deployment (#​1978)
• Add --metrics-omit-secret-labels to skip per-SealedSecret labels on condition_info (#​1972)
• Revert ArtifactHub repository metadata OCI push (#​2005)

v0.38.4

Compare Source

• Incomplete release for credentials problems

v0.38.3

Compare Source

• Imcomplete release for credentials problems

v0.38.2

Compare Source

• Publish Artifact Hub repository metadata for verified publisher status (#​2000)
• Add Artifact Hub badge to README (#​1999)
• Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.32.0 (#​1998)
• Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 (#​1997)
• Bump k8s.io/client-go from 0.36.1 to 0.36.2 (#​1996)
• Bump k8s.io/api from 0.36.1 to 0.36.2 (#​1994)
• Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 (#​1995)
• Bump k8s.io/code-generator from 0.36.1 to 0.36.2 (#​1993)

v0.38.1

Compare Source

• Incomplete release for credentials problems

v0.38.0

Compare Source

• feat: add ppc64le architecture support (#​1973)
• Adding default prometheusRule in helmChart to watch out of sync secrets (#​1980)
• Update security context defaults to comply with restricted pod security standard profile (#​1981)
• fix: add mutex locking to KeyRegistry to prevent data races (#​1905)
• Bump Golang to 1.26.4 (#​1987)
• Migrate all bitnami-labs references to bitnami org (#​1983)
• Change oci registry for publishing the chart (#​1970)
• Revert "Fix oci push" (#​1979)
• Bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#​1984)
• Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 (#​1985)
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#​1977)
• Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 (#​1976)
• Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 (#​1975)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.