⚡ Match Highlights: defenseunicorns/uds cli/issues/

renovate · 2026-10-22T00:29:22Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
aqua:defenseunicorns/uds-cli	tools	minor	`0.39.0` → `0.40.0`
defenseunicorns/uds-common		patch	`v1.32.1` → `v1.32.2`
defenseunicorns/uds-core		minor	`1.15.1` → `1.16.0`
docker.io/library/nginx (source)		patch	`1.31.7` → `1.31.8`
docker/login-action	action	minor	`v4.6.0` → `v4.7.0`
ghcr.io/defenseunicorns/packages/uds-k3d		patch	`0.21.2` → `0.21.3`
ghcr.io/defenseunicorns/packages/uds-k3d		patch	`0.21.2-airgap` → `0.21.3-airgap`
ghcr.io/defenseunicorns/packages/uds/core		minor	`1.15.1-upstream` → `1.16.0-upstream`
ghcr.io/stefanprodan/charts/podinfo		minor	`6.15.0` → `6.17.0`
ghcr.io/stefanprodan/podinfo		minor	`6.15.0` → `6.17.0`
github/codeql-action	action	patch	`v4.39.0` → `v4.39.1`
github:goreleaser/goreleaser	tools	minor	`2.18.3` → `2.19.0`
goreleaser/goreleaser		minor	`v2.18.3` → `v2.19.0`
goreleaser/goreleaser	uses-with	minor	`v2.18.3` → `v2.19.0`
hk	tools	minor	`2.7.0` → `2.10.0`	`2.11.0`
https://github.com/stefanprodan/podinfo.git		minor	`6.15.0` → `6.17.0`
jdx/mise	uses-with	patch	`2026.10.17` → `2026.10.25`
jdx/mise-action	action	patch	`v5.2.0` → `v5.2.4`	`v5.2.5`
nginx (source)		patch	`1.31.7` → `1.31.8`
node (source)	tools	major	`24.22.1` → `26.13.0`
podinfo		minor	`6.15.0` → `6.17.0`
prometheus-node-exporter (source)		patch	`4.60.0` → `4.60.1`
stefanprodan/podinfo		minor	`6.15.0` → `6.17.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

defenseunicorns/uds-cli (aqua:defenseunicorns/uds-cli)

`v0.40.0`

Compare Source

⚠ BREAKING CHANGES

deps: Zarf package creation now packages symlink target contents, including files outside the source tree, and fails on dangling links. Review symlinks before rebuilding packages. Additionally, UDS CLI library users who access Zarf package definitions through deployment hooks or custom loaders may need to update their code for Zarf v0.88’s public API changes.

Features

add a skill for migrating legacy bundle manifests to Bundles Next HCL (#1544) (01f8d23)
allow configuring injector image on init (#1614) (6c30541)
skip architecture check (#1615) (53483c0)

Miscellaneous

bump go versions in go.mod and mise.toml (#1618) (00137a9)
deps: update application dependencies to v0.24.0 (#1596) (7a70538)
deps: update application-deps (#1600) (786c023)
deps: update support-deps (#1588) (5b724fb)
deps: update support-deps (#1593) (a53fb24)
deps: update support-deps (#1597) (340607a)
deps: update support-deps (#1608) (0edac8b)
deps: update support-deps (#1610) (e9f80a2)
deps: update support-deps (#1619) (84a694c)
deps: update support-deps to v1.15.0 (#1609) (ca56bbe)
deps: update zarf to v0.88.0 (435df5f)
deps: upgrade golang.org/x/net to v0.60.0 (d05b8af)

defenseunicorns/uds-common

`v1.32.2`

Compare Source

Miscellaneous

deps: update support-deps to v44.171.5 (#813) (50121ff)
deps: update uds common foundation dependencies (#811) (2592701)
deps: update uds common foundation dependencies to v1.15.1 (#809) (ca0d5d0)
deps: update uds common foundation dependencies to v1.15.3 (#816) (fab02df)
deps: update uds common package dependencies to v1.31.7 (#806) (435b3d8)
deps: update uds common package dependencies to v1.31.8 (#812) (405101a)
deps: update uds common support dependencies (#803) (1067843)
deps: update uds common support dependencies (#810) (9cd03dd)
deps: update uds common support dependencies (#814) (1402695)
deps: update uds common support dependencies (#815) (c383422)
run SBOM shim image as none (#807) (6a66da7)

defenseunicorns/uds-core

`v1.16.0`

Compare Source

Bug Fixes

ci: harden log collection and cluster readiness (#3004) (61d79e6)
ci: retry package creation and diagnose slow values renders (#3006) (b4030a0)
deps: bump images (#3150) (5e9b2c5)
deps: bump pepr upstream/unicorn to 2.0.5 (#3115) (727e781)
operator: make egress and orphan cleanup reliable (#3007) (83366ad)
operator: preserve status recovery when event writes fail (#3008) (955a011)
prevent cross-namespace Keycloak client ownership bypass (#3101) (99ef104)
test: isolate Vitest network tests and bound requests (#3003) (899a6ca)
test: make gateway and probe fixtures clean up reliably (#3005) (fc8435d)

Miscellaneous

clean up release notes 1.15.3 (#3159) (9e9c7c0)
config: migrate Renovate config (#3114) (c486a45)
deps-dev: bump vite from 8.0.16 to 8.3.5 in /scripts/renovate (#3140) (d4d638a)
deps-dev: bump vite from 8.2.2 to 8.3.4 in /docs/.c4 (#3121) (31e0e65)
deps: bump fast-copy from 4.0.2 to 4.2.0 (#3094) (7e32116)
deps: bump proxy-addr from 2.0.7 to 2.0.8 (#3093) (2c00965)
deps: bump source-map-js from 1.2.1 to 1.2.2 in /test/vitest (#3092) (dfcb106)
deps: bump upstream/unicorn identity-config to 0.32.3 (#3118) (a8c69b9)
deps: bump vite from 8.0.16 to 8.3.5 in /test/vitest (#3120) (3e70935)
deps: group KFC updates with Pepr (#3145) (2393ad1)
deps: update falco (#3106) (3dd6f07)
deps: update iac support dependencies to v0.88.0 (#3103) (13e6add)
deps: update iac support dependencies to v3.6.1 (#3137) (9c53d39)
deps: update istio (#3102) (b72696e)
deps: update k3s test matrix (#3061) (5f97324)
deps: update k3s test matrix (#3126) (d508b02)
deps: update keycloak to v0.32.4 (#3139) (3c9539c)
deps: update keycloak to v26.8.1 (#3064) (30bc41f)
deps: update loki (#3096) (e12d4ca)
deps: update loki (#3111) (aecddbf)
deps: update pepr to v2.0.5 (#3113) (c8fe924)
deps: update portal to v0.5.3 (#3112) (2f9ab02)
deps: update portal to v0.6.0 (#3161) (89969db)
deps: update prometheus-stack (#3132) (eab0a45)
deps: update prometheus-stack to v92.7.0 (#3088) (0aa4f08)
deps: update support dependencies to 0feab53 (#3153) (9049710)
deps: update support-deps (#3087) (4464952)
deps: update support-deps (#3107) (8deabe9)
deps: update support-deps (#3141) (791be9e)
deps: update vector to v0.60.0 (#3108) (151a923)
deps: update velero to v12.2.1 (#3062) (f737a8c)
docs: add release notes for 1.15.1 (#3117) (af924ab)
docs: clarify service account security boundary (#3133) (1e35274)
docs: release notes 1.16 (#3163) (f087aae)
docs: update release notes for 1.15.3 (#3157) (0d93f76)
fix public certs helper script to properly handle fingerprint (#3128) (f0e2e22)
tests: reuse alternate SSO login for alt-sso tests (#3109) (8fab47e)
update package requirements for clarity (#3104) (572d505)

`v1.15.4`

Compare Source

Bug Fixes

deps: update falco (#3106) (backport-1.15) (#3175) (c03ff92)

`v1.15.3`

Compare Source

Bug Fixes

ci: harden log collection and cluster readiness (#3004) (61d79e6)
ci: retry package creation and diagnose slow values renders (#3006) (b4030a0)
deps: bump images (#3150) (5e9b2c5)
deps: bump pepr upstream/unicorn to 2.0.5 (#3115) (727e781)
operator: make egress and orphan cleanup reliable (#3007) (83366ad)
operator: preserve status recovery when event writes fail (#3008) (955a011)
prevent cross-namespace Keycloak client ownership bypass (#3101) (99ef104)
test: isolate Vitest network tests and bound requests (#3003) (899a6ca)
test: make gateway and probe fixtures clean up reliably (#3005) (fc8435d)

Miscellaneous

clean up release notes 1.15.3 (#3159) (9e9c7c0)
config: migrate Renovate config (#3114) (c486a45)
deps-dev: bump vite from 8.0.16 to 8.3.5 in /scripts/renovate (#3140) (d4d638a)
deps-dev: bump vite from 8.2.2 to 8.3.4 in /docs/.c4 (#3121) (31e0e65)
deps: bump fast-copy from 4.0.2 to 4.2.0 (#3094) (7e32116)
deps: bump proxy-addr from 2.0.7 to 2.0.8 (#3093) (2c00965)
deps: bump source-map-js from 1.2.1 to 1.2.2 in /test/vitest (#3092) (dfcb106)
deps: bump upstream/unicorn identity-config to 0.32.3 (#3118) (a8c69b9)
deps: bump vite from 8.0.16 to 8.3.5 in /test/vitest (#3120) (3e70935)
deps: group KFC updates with Pepr (#3145) (2393ad1)
deps: update falco (#3106) (3dd6f07)
deps: update iac support dependencies to v0.88.0 (#3103) (13e6add)
deps: update iac support dependencies to v3.6.1 (#3137) (9c53d39)
deps: update istio (#3102) (b72696e)
deps: update k3s test matrix (#3061) (5f97324)
deps: update k3s test matrix (#3126) (d508b02)
deps: update keycloak to v0.32.4 (#3139) (3c9539c)
deps: update keycloak to v26.8.1 (#3064) (30bc41f)
deps: update loki (#3096) (e12d4ca)
deps: update loki (#3111) (aecddbf)
deps: update pepr to v2.0.5 (#3113) (c8fe924)
deps: update portal to v0.5.3 (#3112) (2f9ab02)
deps: update portal to v0.6.0 (#3161) (89969db)
deps: update prometheus-stack (#3132) (eab0a45)
deps: update prometheus-stack to v92.7.0 (#3088) (0aa4f08)
deps: update support dependencies to 0feab53 (#3153) (9049710)
deps: update support-deps (#3087) (4464952)
deps: update support-deps (#3107) (8deabe9)
deps: update support-deps (#3141) (791be9e)
deps: update vector to v0.60.0 (#3108) (151a923)
deps: update velero to v12.2.1 (#3062) (f737a8c)
docs: add release notes for 1.15.1 (#3117) (af924ab)
docs: clarify service account security boundary (#3133) (1e35274)
docs: release notes 1.16 (#3163) (f087aae)
docs: update release notes for 1.15.3 (#3157) (0d93f76)
fix public certs helper script to properly handle fingerprint (#3128) (f0e2e22)
tests: reuse alternate SSO login for alt-sso tests (#3109) (8fab47e)
update package requirements for clarity (#3104) (572d505)

`v1.15.2`

Compare Source

Bug Fixes

broken links (#1210) (9cc00e6)
disable snapshot before deletion of rds instances in eks ci (#1190) (3cbd51c)

Miscellaneous

deps: update grafana to v8.8.3 (#1195) (cd22e06)
deps: update grafana to v8.8.4 (#1206) (00e89ff)
deps: update neuvector (#1196) (5e7091e)
deps: update support-deps (#1192) (5731713)
deps: update velero to 1.15.2 (#1183) (d1bbc46)
docs: uds operator diagrams (#1179) (9b418a8)
docs: update existing diagrams (#1187) (6f0fda2)
ignore uds-docs on commit linting (#1194) (789f101)
troubleshooting docs (#1205) (3688bc7)

Documentation

add irsa config (#1203) (3567056)

nginx/docker-nginx (docker.io/library/nginx)

`v1.31.8`

Compare Source

docker/login-action

`v4.7.0`

Compare Source

Preserve explicit ECR settings in registry-auth by @crazy-max in #1089
Use registry hosts for scoped credentials by @crazy-max in #1088
Raise Docker Hub OIDC max expiry to 6 hours by @crazy-max in #1068
Log Docker Hub OIDC token exchange progress by @crazy-max in #1061
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1154.0 in #1093
Bump @docker/actions-toolkit from 0.94.0 to 0.107.0 in #1100
Bump @humanfs/node from 0.16.7 to 0.16.8 in #1077
Bump csv-parse from 7.0.1 to 7.0.3 in #1078
Bump handlebars from 4.7.9 to 4.7.10 in #1091
Bump js-yaml from 5.2.2 to 5.5.0 in #1066
Bump postcss from 8.5.22 to 8.5.26 in #1071
Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #1092
Bump source-map-js from 1.2.1 to 1.2.2 in #1090
Bump undici from 6.27.0 to 6.29.1 in #1085
Bump uuid from 14.0.1 to 14.0.3 in #1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

stefanprodan/podinfo (ghcr.io/stefanprodan/charts/podinfo)

`v6.17.0`

Compare Source

What's Changed

feat: opt-in SPIFFE mTLS for https backends by @stefanprodan in #535
Release 6.17.0 by @stefanprodan in #536

Full Changelog: stefanprodan/podinfo@6.16.0...6.17.0

`v6.16.0`

Compare Source

What's Changed

build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #527
build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #532
Add SPIFFE mTLS and an artifact server endpoint by @stefanprodan in #533
Release 6.16.0 by @stefanprodan in #534

Full Changelog: stefanprodan/podinfo@6.15.0...6.16.0

github/codeql-action

`v4.39.1`

Compare Source

Update default CodeQL bundle version to 2.27.3. #4256

goreleaser/goreleaser (github:goreleaser/goreleaser)

`v2.19.0`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.19.

Changelog

New Features

35f2281: feat(archive): configure zstd compression level and window size (#7206) (@caarlos0)
4ebadf5: feat(cask): add hooks install_steps, deprecate raw Ruby hooks (#6873) (@caarlos0)
f1e16bf: feat(ko): support linux_capabilities (#7225) (@mrueg and @caarlos0)
9926cef: feat(nix): drop the nix-hash dependency (#6824) (@caarlos0)
6386def: feat: graduate stable features out of experimental (#7126) (@caarlos0)

Security updates

6ade066: sec(deps): bump golang.org/x/ (#7201) (@caarlos0)
b690fd8: sec: update to Go 1.27.3 (#7220) (@shaanmajid)

Bug fixes

09301ea: fix(archive): propagate tar read errors in Copy (#7194) (@Lzcwbcgs)
68e5e34: fix(cask): emit brew-valid casks when builds.ignore drops os/arch combos (#7218) (@Mihir-Rabari)
e6c4afc: fix(deps): bump moby/sys/user to v0.4.1 (#7202) (@caarlos0)
713c236: fix(docker): select baseline CPU variants for Docker v2 platforms (#7189) (@zachary-satterly and @caarlos0)
26ffaba: fix(docker/v2): expand global ARG references when resolving the base image (#7203) (@LemonCondor and @caarlos0)
1b7b6a4: fix(git): redact credentials from http remote URLs too (#7191) (@Mihir-Rabari)
2d708ed: fix(ko): use actual ko version in SPDX SBOM creator (#7226) (@mrueg)
2279d65: fix: share HTTP client per upload config (#6919) (#7212) (@manish-9245 and @caarlos0)
0c3be49: fix: write cask completion stanzas in Homebrew's order (#7198) (@mustafaakcakaya)

Documentation updates

d84a697: docs: fix broken cosign link in rust-zig blog post (#7228) (@jvS0uzx)

Other work

ccaac66: chore: auto-update generated files (#7190) (@goreleaserbot)
c96c314: chore: auto-update generated files (#7200) (@goreleaserbot)
4a71e1e: chore: auto-update generated files (#7204) (@goreleaserbot)
b58a061: chore: auto-update generated files (#7223) (@goreleaserbot)
a9fb415: chore: auto-update generated files (#7230) (@goreleaserbot)

Full Changelog: goreleaser/goreleaser@v2.18.3...v2.19.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.
Reach out on Discord, Twitter, and Telegram!

jdx/hk (hk)

`v2.10.0`

Compare Source

🚀 Features

(builtins) add pyright builtin by @illesnagy1 in #1775
(builtins) add protolint builtin by @illesnagy1 in #1777
(builtins) add phpstan linter builtin by @illesnagy1 in #1778
(builtins) add dotenv-linter as a builtin by @illesnagy1 in #1779
(builtins) add osv dependency vulnerability scanner builtin by @illesnagy1 in #1782
(hook) fail a hook that runs past its timeout by @jdx in #1776
(pre-push) print reminder of stdin format if stdin contains malformed lines by @connormharris in #1781

🛡️ Security

(builtins) add trufflehog secret scanner builtin by @illesnagy1 in #1774

📦️ Dependency Updates

update dependency aube to latest by @renovate[bot] in #1765
lock file maintenance by @renovate[bot] in #1771

`v2.9.0`

Compare Source

🚀 Features

(builtins) format zsh startup files and zsh-shebang scripts with shfmt by @sahidvelji in #1759
(builtins) opentofu-validate builtin by @illesnagy1 in #1766

🐛 Bug Fixes

(ci) publish crate with generated Pkl files and email on release failure by @jdx in #1770

📦️ Dependency Updates

lock file maintenance by @renovate[bot] in #1762
lock file maintenance by @renovate[bot] in #1768

`v2.8.2`

Compare Source

🐛 Bug Fixes

(cache) write config cache files atomically by @zachbornheimer in #1750
(check) resolve file arguments from the directory hk was run in by @jdx in #1754
(pkl) embed the Pkl package in cargo install builds by @jdx in #1755

🧪 Testing

stop macOS CI flaking on fixed bats timeouts by @jdx in #1756

🛡️ Security

(install) name the git config file global hooks were written to by @sahidvelji in #1758

🔍 Other Changes

use the runner's JDK for builtin tests instead of mise java by @jdx in #1764

📦️ Dependency Updates

update jdx crates by @renovate[bot] in #1751
update rust crate usage-rs to v7.1.2 by @renovate[bot] in #1757
update mise tools by @renovate[bot] in #1761
update jdx crates by @renovate[bot] in #1763
update github actions by @renovate[bot] in #1760

New Contributors

@zachbornheimer made their first contribution in #1750

`v2.8.1`

Compare Source

🐛 Bug Fixes

(builtins) ryl_markdown deprecation warning by @illesnagy1 in #1741
(ci) skip unrelated old release tags when commenting fixed-in releases by @jdx in #1744
**(stas

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from | to | | -------------------------- | ------------------------------------------- | ----------- | ----------- | | github-tags | defenseunicorns/uds-cli | 0.39.0 | 0.40.0 | | github-tags | defenseunicorns/uds-common | v1.32.1 | v1.32.2 | | github-tags | defenseunicorns/uds-core | 1.15.1 | 1.16.0 | | docker | docker.io/library/nginx | 1.31.7 | 1.31.8 | | github-tags | docker/login-action | v4.6.0 | v4.7.0 | | docker | ghcr.io/defenseunicorns/packages/uds-k3d | 0.21.2 | 0.21.3 | | docker | ghcr.io/defenseunicorns/packages/uds/core | 1.15.1 | 1.16.0 | | docker | ghcr.io/stefanprodan/charts/podinfo | 6.15.0 | 6.17.0 | | docker | ghcr.io/stefanprodan/podinfo | 6.15.0 | 6.17.0 | | github-tags | github/codeql-action | v4.39.0 | v4.39.1 | | github-releases | goreleaser/goreleaser | v2.18.3 | v2.19.0 | | github-releases | jdx/hk | 2.7.0 | 2.10.0 | | git-tags | https://github.com/stefanprodan/podinfo.git | 6.15.0 | 6.17.0 | | github-release-attachments | jdx/mise | v2026.10.17 | v2026.10.25 | | github-tags | jdx/mise-action | v5.2.0 | v5.2.4 | | docker | nginx | 1.31.7 | 1.31.8 | | node-version | node | v24.22.1 | v26.13.0 | | helm | podinfo | 6.15.0 | 6.17.0 | | helm | prometheus-node-exporter | 4.60.0 | 4.60.1 | | github-tags | stefanprodan/podinfo | 6.15.0 | 6.17.0 |

renovate Bot requested a review from a team as a code owner October 22, 2026 00:29

renovate Bot force-pushed the renovate/support-deps branch 15 times, most recently from 9b7dbda to 967870c Compare October 29, 2026 13:08

renovate Bot force-pushed the renovate/support-deps branch 3 times, most recently from 5910570 to b495898 Compare October 31, 2026 14:47

renovate Bot force-pushed the renovate/support-deps branch from b495898 to a5cf544 Compare November 1, 2026 14:38

slaskawi approved these changes Nov 2, 2026

View reviewed changes

chance-coleman approved these changes Nov 2, 2026

View reviewed changes

chance-coleman merged commit 1d77910 into main Nov 2, 2026
83 of 84 checks passed

chance-coleman deleted the renovate/support-deps branch November 2, 2026 17:57

github-actions Bot mentioned this pull request Nov 2, 2026

chore(main): release 0.41.0 #1622

Merged

Navigation Menu

Repository navigation

chore(deps): update support-deps - #1620

chore(deps): update support-deps#1620
chance-coleman merged 1 commit into
mainfrom
renovate/support-deps

renovate Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

⚠ BREAKING CHANGES

Features

Miscellaneous

Miscellaneous

Bug Fixes

Miscellaneous

Bug Fixes

Bug Fixes

Miscellaneous

Bug Fixes

Miscellaneous

Documentation

What's Changed

What's Changed

Announcement

Changelog

New Features

Security updates

Bug fixes

Documentation updates

Other work

Helping out

Where to go next?

🚀 Features

🛡️ Security

📦️ Dependency Updates

🚀 Features

🐛 Bug Fixes

📦️ Dependency Updates

🐛 Bug Fixes

🧪 Testing

🛡️ Security

🔍 Other Changes

📦️ Dependency Updates

New Contributors

🐛 Bug Fixes

Configuration

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Oct 22, 2026 •

edited

Loading