Update go.mod dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/alitto/pond/v2	v2.5.0 → v2.6.0			require	minor
github.com/argoproj/argo-cd/v3	v3.1.7 → v3.2.6			require	minor
github.com/go-chi/chi/v5	v5.2.3 → v5.2.4			require	patch
github.com/gofiber/fiber/v2	v2.52.9 → v2.52.10			require	patch
github.com/jedib0t/go-pretty/v6	v6.6.8 → v6.7.8			require	minor
github.com/knadh/koanf/providers/file	v1.2.0 → v1.2.1			require	patch
github.com/spf13/cobra	v1.10.1 → v1.10.2			require	patch
go (source)	1.24.7 → 1.25.6			toolchain	minor

---

Release Notes

alitto/pond (github.com/alitto/pond/v2)

v2.6.0

Compare Source

What's Changed

• chore(deps): bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​131
• feat(disable-queue): Allow disabling task queue by setting it to 0 by @​alitto in #​132 (Thanks @​korotin 🙌)
• feat(optional-panic-recovery): Add option to disable panic recovery by @​alitto in #​133 (Thanks @​snichols 🙌)

Breaking Changes

• Setting the queue size option to zero (0) via WithQueueSize(0) now disables the task queue altogether (all task submissions block until a worker becomes available unless the pool is set to non-blocking mode). Before this change, setting queue size to 0 would cause the queue to be unbounded. Pools are still unbounded by default, but now there's a constant that can be used to set queue size to unbounded explicitly. E.g. pond.NewPool(10, pond.WithQueueSize(pond.Unbounded)).

Full Changelog: alitto/pond@v2.5.0...v2.6.0

argoproj/argo-cd (github.com/argoproj/argo-cd/v3)

v3.2.6

Compare Source

v3.2.5

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• fafbd44: feat: Cherry-pick to 3.2 update notifications engine to v0.5.1 0.20251223091026 8c0c96d (#​25930) (@​reggie-k)

Bug fixes

• d7d9674: fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (cherry-pick #​25622 for 3.2) (#​25911) (@​argo-cd-cherry-pick-bot[bot])
• e6f5403: fix: Only show please update resource specification message when spec… (cherry-pick #​25066 for 3.2) (#​25895) (@​argo-cd-cherry-pick-bot[bot])

Documentation

• e9d03a6: docs: Run make codegen for notifications engine changes (#​25958) (@​reggie-k)
• b67eb40: docs: link to source hydrator (cherry-pick #​25813 for 3.2) (#​25814) (@​argo-cd-cherry-pick-bot[bot])

Dependency updates

• 8a0633b: chore(deps): bump go to 1.25.5 (cherry-pick) (#​25805) (@​nitishfy)

Other work

• b414696: chore(cherry-pick-3.2): bump expr to v1.17.7 (#​25889) (@​nitishfy)
• 51c6375: ci: test against k8s 1.34.2 (cherry-pick #​25856 for 3.2) (#​25859) (@​argo-cd-cherry-pick-bot[bot])

Full Changelog: argoproj/argo-cd@v3.2.3...v3.2.5

v3.2.4

Compare Source

Important notice about this release

This release is invalid, please use the v3.2.5 instead.

v3.2.3

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Dependency updates

• 8f903c3: chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.46.0 (#​25791) (@​anandf)

Full Changelog: argoproj/argo-cd@v3.2.2...v3.2.3

v3.2.2

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 122f4db: fix(hydrator): appset should preserve annotation when hydration is requested (cherry-pick #​25644 for 3.2) (#​25654) (@​argo-cd-cherry-pick-bot[bot])
• 33b5043: fix(oidc): check userinfo endpoint in AuthMiddleware (cherry-pick #​23586 for 3.2) (#​25415) (@​mkilchhofer)
• 784f62c: fix(server): update resourceVersion on Terminate retry (cherry-pick #​25650 for 3.2) (#​25718) (@​argo-cd-cherry-pick-bot[bot])
• 732b16f: fix: create read and write secret for same url (cherry-pick #​25581 for 3.2) (#​25589) (@​argo-cd-cherry-pick-bot[bot])

Documentation

• 26b7fb2: docs: add added healthchecks to upgrade docs (cherry-pick #​25487 for 3.2) (#​25490) (@​argo-cd-cherry-pick-bot[bot])
• 0ace9bb: docs: sync-waves guide: Use markdown formatting (cherry-pick #​25372 for 3.2) (#​25659) (@​lindhe)

Dependency updates

• 95e7cdb: chore(deps): bumped k8s.io/kubernetes v1.34.0 to v1.34.2 - manual cherry-pick of 25682 for 3-2 (#​25687) (@​reggie-k)
• 88fe638: chore(deps):bumped gitops-engine to v0.7.1-0.20251217140045-5baed5604d2d with bumped k8s.io/kubernetes to 1.34.2 (#​25708) (@​reggie-k)

Other work

• 024c7e6: chore: reference gitops-engine fork with nil pointer fix (#​25522) (@​ivanpedersen)
• 6398ec3: chore: release champ 3.3 (cherry-pick #​25202 for 3.2) (#​25663) (@​argo-cd-cherry-pick-bot[bot])
• a297038: test(controller): avoid race in test (cherry-pick #​25655 for 3.2) (#​25691) (@​argo-cd-cherry-pick-bot[bot])

Full Changelog: argoproj/argo-cd@v3.2.1...v3.2.2

v3.2.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 6dd5e7a: fix(ui): add null-safe handling for assignedWindows in status panel (cherry-pick #​25128 for 3.2) (#​25180) (@​argo-cd-cherry-pick-bot[bot])
• dabdf39: fix(ui): overlapping UI elements and add resource units to tooltips (cherry-pick #​24717 for 3.2) (#​25225) (@​choejwoo)
• cd8df17: fix: Allow the ISVC to be healthy when the Stopped Condition is False (cherry-pick #​25312 for 3.2) (#​25318) (@​argo-cd-cherry-pick-bot[bot])
• 27c5065: fix: revert #​24197 (cherry-pick #​25294 for 3.2) (#​25314) (@​argo-cd-cherry-pick-bot[bot])
• 29f869c: fix: the concurrency issue with git detached processing in Repo Server (#​25101) (cherry-pick #​25127 for 3.2) (#​25448) (@​dudinea)
• 7bd02d7: fix:(ui) don't render ApplicationSelector unless the panel is showing (cherry-pick #​25201 for 3.2) (#​25208) (@​argo-cd-cherry-pick-bot[bot])

Documentation

• c11e67d: docs: Document usage of ?. in notifications triggers and fix examples (#​25352) (cherry-pick #​25418 for 3.2) (#​25421) (@​argo-cd-cherry-pick-bot[bot])
• a0a1843: docs: Improve switch to annotation tracking docs, clarifying that a new Git commit may be needed to avoid orphan resources - (cherry-pick #​25309 for 3.2) (#​25338) (@​reggie-k)
• 86c9994: docs: update user content for deleting applications (cherry-pick #​25124 for 3.2) (#​25174) (@​argo-cd-cherry-pick-bot[bot])

Other work

• 1545390: fix(cherry-pick): bump gitops-engine ssd regression (#​25226) (@​pjiang-dev)

Full Changelog: argoproj/argo-cd@v3.2.0...v3.2.1

v3.2.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Please note that users operating large monorepos may encounter repo-server lock contention requiring pod restarts. A fix is under review and will be included in the next patch release.

Changelog

Features

• be8e79e: feat(appset): add pprof endpoints (cherry-pick #​25044 for 3.2) (#​25051) (@​rumstead)
• 79f152c: feat(appset): deleting applications in order when Progressive sync enabled on applicationSet (#​23465) (@​ranakan19)
• b1a9fab: feat(appset): enhance ApplicationSet status debugging logs (#​23869) (@​somln)
• a5c6898: feat(appset): increase concurrent reconcile maximum to max int64 (#​23721) (@​rumstead)
• 6a20776: feat(cli): Support Server-Side Diff CLI (#​23978) (@​pjiang-dev)
• 69f7d39: feat(cli): add 'get-resource' command (#​23196) (#​23609) (@​cjcocokrisp)
• 853b8dd: feat(cli): support password prompt input when --password is not provided in bcrypt cli (#​23906) (@​gyu-young-park)
• 5a8b427: feat(controller): Permit using newer revision when retrying failed sync (#​11494) (#​23038) (@​olivergondza)
• 5c9a5ef: feat(health): Add healthCheck for CRD DatadogMetric (#​23464) (@​Nicolas-Richard)
• d3de443: feat(health): CronJob health and suspend, resume and terminate Job actions (#​23991) (@​agaudreault)
• 36f1a59: feat(health): add health checks for GitOps Promoter (#​23663) (@​crenshaw-dev)
• 99fea7c: feat(helm): upgrade to 3.18.3 (#​23618) (@​crenshaw-dev)
• e8e39a9: feat(helm): upgrading helm to 3.18.4 (#​23724) (@​mubarak-j)
• 6f6c39d: feat(hydrator): Commit message templating (#​23679) (#​24204) (@​pbhatnagar-oss)
• e85e353: feat(hydrator): Credential template to source hydrator (#​23999) (@​pbhatnagar-oss)
• 562194b: feat(hydrator): add .gitattributes file to hydrated repo root (#​23678) (#​23725) (@​FourFifthsCode)
• 8b2799c: feat(hydrator): parallelize repo-server calls (#​24451) (#​24436) (@​crenshaw-dev)
• a6a78ef: feat(kustomize): upgrade to 5.7.0 (#​23619) (@​crenshaw-dev)
• d954789: feat(server): 3scale health checks (#​24327) (#​24326) (@​ammachado)
• 5b8e4b5: feat(server): pass authenticated userId as header to extensions (#​24356) (@​agaudreault)
• 2229f9d: feat(ui): Add hydration in status to dashboard application tiles (#​24319) (@​adityaraj178)
• 13c47ee: feat(ui): Added repo connection state message (#​24175) (@​surajyadav1108)
• 72d054d: feat(ui): Requests info for Cpu and Mem added to Pod details (#​20637) (@​surajyadav1108)
• 762114c: feat(ui): Sort by application-sync-order in the list page (#​23521) (#​24191) (@​downfa11)
• 97af89a: feat(ui): add prune option to application rollback (#​23861) (#​23932) (@​anthisfan)
• 8d018bb: feat(ui): add sortable columns to application list (#​24213) (#​24535) (@​downfa11)
• 6212ea2: feat(ui): adjust line-height and spacing for multi-line text in details row (#​24173) (@​jiwlee97)
• 26b970b: feat: Add gRPC health check in argocd-server (#​24276) (@​krapie)
• dcf1965: feat: Add health checks for Coralogix (#​23853) (@​daniel-leinov)
• 4e63bc7: feat: Adding ExtensionService health-check (#​23576) (@​solomon-kibret)
• be042c4: feat: AppSet PR generator return 0 results upon repo not found instead of failing (#​23447) (@​reggie-k)
• 3401d3b: feat: Export metrics to track number of users (#​20801) (#​23343) (@​sathiya06)
• c447628: feat: Implement Altinity clickhouse-operator CRD health checks (#​24017) (@​acze)
• 6028dea: feat: add OpenTelemetry trace context propagation for HTTP requests (#​23029) (@​yafeiaa)
• 3af3a05: feat: add sso-host flag for OAuth2 login configuration (#​22738) (#​22784) (@​PaleHazy)
• feab307: feat: add status.resourcesCount field to appset and change limit default (#​24698) (#​24711) (@​alexmt)
• 29df864: feat: add title matching filter for Pull Request Generator (#​23569) (@​nitishfy)
• fca42e3: feat: log a warning instead of debug when repository webhook does not match an application (#​23939) (@​fernandocarletti)
• 7ae14c8: feat: preserve non-hydrated files during hydration (#​24129) (@​nitishfy)
• c012702: feat: read argocd password from stdin (#​23520) (@​nitishfy)
• 07bd5e0: feat: show operation state UI (#​23589) (@​Aaron-9900)
• 14a22ad: feat: update unpause action for Numaproj CRDs (#​24036) (@​dpadhiar)

Bug fixes

• 48a7030: fix(UI): Add missing icon colors to auto-sync (#​23962) (@​surajyadav1108)
• aff3ae3: fix(api): app create --upsert should not error on invalid current destination (#​23922) (@​agaudreault)
• fb94cad: fix(applications): update application navigation URLs (#​22671) (#​23285) (@​Ruby-rc)
• 460111f: fix(applicationset): Git generator: Don't append default object to literal empty json array (#​23500) (#​23513) (@​ChristianCiach)
• ac4ae17: fix(appset): When Appset is deleted, the controller should reconcile applicationset #​23723 (#​23823) (@​sangdammad)
• 31e0f42: fix(appset): add applicationset leader election to roles and clean up (#​14369) (#​23976) (@​rumstead)
• d269e6f: fix(appset): add applicationsets to the built-in readonly role (#​24190) (#​24318) (@​crenshaw-dev)
• 6ec1aa1: fix(appset): do not remove progressive sync conditions (#​23506) (@​agaudreault)
• 03ac864: fix(cli): avoid panic in configure command when no local config exists (#​23085) (#​23967) (@​krapie)
• 7f5ef5c: fix(cli): correct typo in bcrypt error message (#​23849) (@​gyu-young-park)
• 70c8f46: fix(cli): honor ALL_PROXY and other proxy environment variables (#​24177) (@​SinnoLn)
• f13aa46: fix(cli): respect refresh type when running with specified revision (#​22463) (#​22462) (@​thejoeejoee)
• c4d99bb: fix(controller): expose ARGOCD_SYNC_WAVE_DELAY as configurable parameter (#​24536) (@​u-kai)
• e981167: fix(controller): get commit server url from env (#​23536) (@​nobbs)
• 83d553c: fix(controller): impersonation with destination name (#​23309) (#​23504) (@​crenshaw-dev)
• e0f4b00: fix(darwin): remove the need for cgo when building a darwin binary on linux (#​23507) (@​rumstead)
• d7364b4: fix(dashboard): Allow quantile label as float and integer (#​24087) (@​adberger)
• b20fd43: fix(discovery): add missing lua syntax and return to discovery (fixes #​24257) (#​24262) (@​jan-mrm)
• 614c85c: fix(docs): fix applicationsetcontroller.enable.github.api.metrics to false in docs cm (#​23516) (@​reggie-k)
• 4501ebb: fix(docs): include v3.1 upgrade docs (#​23529) (@​mubarak-j)
• 786b24e: fix(health): CRD health check message (#​23690) (#​23691) (@​crenshaw-dev)
• f4c4c66: fix(health): add logic for disabled policies (#​21347) (@​dhaiducek)
• 91b8bba: fix(health): custom resource health for flux helm repository of type oci (#​24294) (@​adberger)
• 35e3897: fix(health): incorrect reason in PullRequest script (cherry-pick #​24826 for 3.2) (#​24828) (@​argo-cd-cherry-pick-bot[bot])
• 8fa3e47: fix(health): remove CronJob progressing/suspended status (#​24430) (@​agaudreault)
• 4821d71: fix(health): typo in PromotionStrategy health.lua (cherry-pick #​24726 for 3.2) (#​24760) (@​argo-cd-cherry-pick-bot[bot])
• c68ec27: fix(health): undeclared var used in ChangeTransferPolicy check (#​23912) (@​crenshaw-dev)
• d1251f4: fix(health): use promotion resource Ready condition regardless of reason (cherry-pick #​24971 for 3.2) (#​24973) (@​argo-cd-cherry-pick-bot[bot])
• 56320a7: fix(hydrator): handle empty path (#​24349) (@​crenshaw-dev)
• 4d16fdc: fix(hydrator): normalize repo URL when grouping (#​23564) (#​23565) (@​crenshaw-dev)
• c60a727: fix(hydrator): omit Argocd- trailers from hydrator.metadata (#​23463) (@​crenshaw-dev)
• 02de363: fix(metrics): grpc prometheus stats missing (#​23877) (#​23838) (@​pbhatnagar-oss)
• 50531e6: fix(oci): loosen up layer restrictions (cherry-pick #​24640 for 3.2) (#​24648) (@​argo-cd-cherry-pick-bot[bot])
• b96401b: fix(project): Do not block project update when a cluster referenced in an App doesn't exist (#​23659) (@​OpenGuidou)
• e8f8610: fix(security): repository.GetDetailedProject exposes repo secrets (#​24387) (@​crenshaw-dev)
• 796f72c: fix(server): Send Azure DevOps token via git extra headers (#​23478) (#​23631) (@​mikebordon)
• 1ba3929: fix(server): ensure resource health status is inferred on application retrieval (#​24832) (cherry-pick #​24851 for 3.2) (#​24865) (@​argo-cd-cherry-pick-bot[bot])
• f420cce: fix(server): make parameterized resource actions backwards-compatible (#​23695) (@​crenshaw-dev)
• 0a1572b: fix(server): preserve webhook secret references on server restart (#​22588) (#​23905) (@​somln)
• 8c8902b: fix(server): validate new project on update (#​23970) (#​23973) (@​agaudreault)
• 1fbd63d: fix(sync): auto-sync loop when FailOnSharedResource (#​23357) (#​23641) (@​agaudreault)
• 65a082b: fix(sync): do not retry when sync timeout has elapsed (#​24020) (@​agaudreault)
• 9dfa9db: fix(sync): operations in errors without status cause infinite auto-sync loop (#​23356) (@​agaudreault)
• 3349949: fix(test): TestFailKustomizeBuildPatches fails on MacOS dev. env (#​23737) (@​dudinea)
• 965c83e: fix(test): Test_SSHCreds_Environ_TempFileCleanupOnInvalidProxyURL fails on Macos dev. env. (#​23755) (@​dudinea)
• c880373: fix(tests): race condition creating the sync id (#​23460) (@​agaudreault)
• 8884b27: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (cherry-pick #​24802 for 3.2) (#​25123) (@​argo-cd-cherry-pick-bot[bot])
• d54c8af: fix(ui): Made App name font bolder in applications-list rows (#​24256) (@​surajyadav1108)
• 1bc9adb: fix(ui): account detail page crashes for accounts with empty capabilities (#​23787) (@​hanxiaop)
• 04d1ca4: fix(ui): catch AbortError during data fetch cancellation (#​24054) (@​youhonglian)
• 24b0ecc: fix(ui): convert GroupWrapper to a functional component (#​23796) (@​jiwlee97)
• 564e507: fix(ui): convert PolicyWrapper component to functional component (#​23809) (@​jiwlee97)
• dd1547f: fix(ui): convert RevisionFormField components to functional components (#​23813) (@​chansuke)
• d6ecc66: fix(ui): enable natural sort ordering for resources, add autocomplete attributes to login form #​22853 ([#​23599](https://redirect.github.com/argoproj/argo-cd/issu

[github-actions]

Test Results

0 tests   - 80   0 ✅  - 80   0s ⏱️ -8s
0 suites  -  6   0 💤 ± 0 
0 files    -  1   0 ❌ ± 0 

Results for commit f6965e2. ± Comparison against base commit 7ded3df.

♻️ This comment has been updated with latest results.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 36 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/compute/metadata	v0.6.0 -> v0.7.0
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.18.0 -> v1.19.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.10.1 -> v1.11.0
github.com/Azure/azure-sdk-for-go/sdk/internal	v1.11.1 -> v1.11.2
github.com/Masterminds/semver/v3	v3.3.1 -> v3.4.0
github.com/argoproj/gitops-engine	v0.7.1-0.20250905160054-e48120133eec -> v0.7.1-0.20251108235403-13d5172d3ee2
github.com/bmatcuk/doublestar/v4	v4.8.1 -> v4.9.1
github.com/casbin/casbin/v2	v2.107.0 -> v2.123.0
github.com/casbin/govaluate	v1.7.0 -> v1.10.0
github.com/fxamacker/cbor/v2	v2.8.0 -> v2.9.0
github.com/golang-jwt/jwt/v5	v5.2.2 -> v5.3.0
github.com/google/gnostic-models	v0.6.9 -> v0.7.0
github.com/hashicorp/go-retryablehttp	v0.7.7 -> v0.7.8
github.com/modern-go/reflect2	v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/r3labs/diff/v3	v3.0.1 -> v3.0.2
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.60.0 -> v0.63.0
golang.org/x/oauth2	v0.30.0 -> v0.31.0
golang.org/x/time	v0.12.0 -> v0.13.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250519155744-55703ea1f237 -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250519155744-55703ea1f237 -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/grpc	v1.73.0 -> v1.75.1
k8s.io/api	v0.33.1 -> v0.34.0
k8s.io/apiextensions-apiserver	v0.33.1 -> v0.34.0
k8s.io/apimachinery	v0.33.1 -> v0.34.0
k8s.io/apiserver	v0.33.1 -> v0.34.0
k8s.io/cli-runtime	v0.33.1 -> v0.34.0
k8s.io/client-go	v0.33.1 -> v0.34.0
k8s.io/component-base	v0.33.1 -> v0.34.0
k8s.io/component-helpers	v0.33.1 -> v0.34.0
k8s.io/controller-manager	v0.33.1 -> v0.34.0
k8s.io/kube-aggregator	v0.33.1 -> v0.34.0
k8s.io/kube-openapi	v0.0.0-20250610211856-8b98d1ed966a -> v0.0.0-20250710124328-f3f2b991d03b
k8s.io/kubectl	v0.33.1 -> v0.34.0
k8s.io/kubernetes	v1.33.1 -> v1.34.0
sigs.k8s.io/kustomize/api	v0.19.0 -> v0.20.1
sigs.k8s.io/kustomize/kyaml	v0.19.0 -> v0.20.1

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 42 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/compute/metadata	v0.6.0 -> v0.7.0
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.18.0 -> v1.19.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.10.1 -> v1.11.0
github.com/Azure/azure-sdk-for-go/sdk/internal	v1.11.1 -> v1.11.2
github.com/Masterminds/semver/v3	v3.3.1 -> v3.4.0
github.com/argoproj/gitops-engine	v0.7.1-0.20250905160054-e48120133eec -> v0.7.1-0.20251217140045-5baed5604d2d
github.com/bmatcuk/doublestar/v4	v4.8.1 -> v4.9.1
github.com/casbin/casbin/v2	v2.107.0 -> v2.123.0
github.com/casbin/govaluate	v1.7.0 -> v1.10.0
github.com/fxamacker/cbor/v2	v2.8.0 -> v2.9.0
github.com/golang-jwt/jwt/v5	v5.2.2 -> v5.3.0
github.com/google/gnostic-models	v0.6.9 -> v0.7.0
github.com/hashicorp/go-retryablehttp	v0.7.7 -> v0.7.8
github.com/modern-go/reflect2	v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/r3labs/diff/v3	v3.0.1 -> v3.0.2
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.60.0 -> v0.63.0
golang.org/x/crypto	v0.42.0 -> v0.46.0
golang.org/x/net	v0.44.0 -> v0.47.0
golang.org/x/oauth2	v0.30.0 -> v0.31.0
golang.org/x/sync	v0.17.0 -> v0.19.0
golang.org/x/sys	v0.36.0 -> v0.39.0
golang.org/x/term	v0.35.0 -> v0.38.0
golang.org/x/text	v0.29.0 -> v0.32.0
golang.org/x/time	v0.12.0 -> v0.13.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250519155744-55703ea1f237 -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250519155744-55703ea1f237 -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/grpc	v1.73.0 -> v1.75.1
k8s.io/api	v0.33.1 -> v0.34.0
k8s.io/apiextensions-apiserver	v0.33.1 -> v0.34.0
k8s.io/apimachinery	v0.33.1 -> v0.34.0
k8s.io/apiserver	v0.33.1 -> v0.34.0
k8s.io/cli-runtime	v0.33.1 -> v0.34.0
k8s.io/client-go	v0.33.1 -> v0.34.0
k8s.io/component-base	v0.33.1 -> v0.34.0
k8s.io/component-helpers	v0.33.1 -> v0.34.0
k8s.io/controller-manager	v0.33.1 -> v0.34.0
k8s.io/kube-aggregator	v0.33.1 -> v0.34.0
k8s.io/kube-openapi	v0.0.0-20250610211856-8b98d1ed966a -> v0.0.0-20250710124328-f3f2b991d03b
k8s.io/kubectl	v0.33.1 -> v0.34.0
k8s.io/kubernetes	v1.33.1 -> v1.34.2
sigs.k8s.io/kustomize/api	v0.19.0 -> v0.20.1
sigs.k8s.io/kustomize/kyaml	v0.19.0 -> v0.20.1