Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update loki (cgr.dev/defenseunicorns.com/k8s-sidecar-fips, cgr.dev/defenseunicorns.com/loki-fips, cgr.dev/defenseunicorns.com/nginx-fips, docker.io/grafana/loki, docker.io/kiwigrid/k8s-sidecar, loki, registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar, registry1.dso.mil/ironbank/opensource/grafana/loki, registry1.dso.mil/ironbank/opensource/nginx/nginx-alpine)
• chore(deps): update support-deps (@eslint/eslintrc, @playwright/test, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @vitest/coverage-v8, astral-sh/uv, defenseunicorns/kubernetes-fluent-client, defenseunicorns/uds-cli, defenseunicorns/uds-common, eslint, ghcr.io/defenseunicorns/packages/uds-k3d, ghcr.io/stefanprodan/podinfo, ghcr.io/zarf-dev/packages/init, globals, google/go-containerregistry, https://github.com/stefanprodan/podinfo.git, js-yaml, kubernetes-fluent-client, likec4, lint-staged, mcr.microsoft.com/playwright, playwright, tsx, vitest, zarf-dev/zarf)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update falco
• chore(deps): update iac support dependencies to v3.1.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package ###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2: no-result, Failed to look up docker package ###ZARF_REGISTRY###/defenseunicorns.com/istio-proxy-fips: no-result, Failed to look up docker package ###ZARF_REGISTRY###/istio/proxyv2: no-result.

Files affected: src/istio/values/registry1/istiod.yaml, src/istio/values/unicorn/istiod.yaml, src/istio/values/upstream/istiod.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update istio (base, cgr.dev/defenseunicorns.com/istio-install-cni-fips, cgr.dev/defenseunicorns.com/istio-pilot-fips, cgr.dev/defenseunicorns.com/istio-proxy-fips, cgr.dev/defenseunicorns.com/ztunnel-fips, cni, docker.io/istio/install-cni, docker.io/istio/pilot, docker.io/istio/proxyv2, docker.io/istio/ztunnel, gateway, istio/istio, istiod, kubernetes-sigs/gateway-api, ztunnel)
• chore(deps): update pepr to v2.0.1
• chore(deps): update metrics-server to v3.14.0
• chore(deps): update vector to v0.58.0 (cgr.dev/defenseunicorns.com/vector-fips, registry1.dso.mil/ironbank/opensource/timberio/vector, timberio/vector, vector)
• chore(deps): update grafana (cgr.dev/defenseunicorns.com/busybox-fips, cgr.dev/defenseunicorns.com/curl-fips, cgr.dev/defenseunicorns.com/grafana-fips, cgr.dev/defenseunicorns.com/k8s-sidecar-fips, docker.io/curlimages/curl, docker.io/grafana/grafana, docker.io/library/busybox, ghcr.io/kiwigrid/k8s-sidecar, grafana, registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar)
• chore(deps): update prometheus-stack (kube-prometheus-stack, prometheus-blackbox-exporter, quay.io/prometheus-operator/prometheus-config-reloader, quay.io/prometheus-operator/prometheus-operator)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (27)

.github/actions/renovate-readiness/action.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/actions/save-logs/action.yaml (1)

• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/actions/setup-tools/action.yaml (5)

• defenseunicorns/setup-uds v1.0.2@d6add59d4c2ca789ed7c92741e91bd340b4e950b
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• astral-sh/setup-uv v10.0.1@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
• node 24
• astral-sh/uv 0.12.7 → [Updates: 0.12.10]

.github/actions/setup/action.yaml (1)

• chainguard-dev/setup-chainctl v0.5.1@2cddd35a2f120d9973e58094dc6878c93cf58c28

.github/actions/slack-alert/action.yaml (1)

• slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d

.github/workflows/check-ca-certs.yaml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/checkpoint.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/commitlint.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24

.github/workflows/docs-shim.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/lula.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24

.github/workflows/private-pki-test.yaml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/publish.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/pull-request-conditionals.yaml (7)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
• dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/scorecard.yaml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/scripts-test.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020

.github/workflows/slack-test-alert.yaml

.github/workflows/slim-dev-test.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/snapshot-release.yaml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/tag-and-release.yaml (2)

• googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/test-aks.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/login v3.0.2@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c → [Updates: v3.1.0]
• opentofu/setup-opentofu v2.0.2@a1320f892987e89d278cc92dc5adc984fb93aca4
• azure/login v3.0.2@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c → [Updates: v3.1.0]

.github/workflows/test-cli-matrix.yaml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• defenseunicorns/setup-uds v1.0.2@d6add59d4c2ca789ed7c92741e91bd340b4e950b
• defenseunicorns/setup-uds v1.0.2@d6add59d4c2ca789ed7c92741e91bd340b4e950b
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• defenseunicorns/setup-uds v1.0.2@d6add59d4c2ca789ed7c92741e91bd340b4e950b

.github/workflows/test-eks.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c
• opentofu/setup-opentofu v2.0.2@a1320f892987e89d278cc92dc5adc984fb93aca4

.github/workflows/test-iac.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d

.github/workflows/test-k3d-ha.yaml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/test-rke2.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c
• opentofu/setup-opentofu v2.0.2@a1320f892987e89d278cc92dc5adc984fb93aca4

.github/workflows/test-shim.yaml

.github/workflows/test.yaml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

helm-values (54)

src/authservice/chart/values.yaml

src/authservice/values/registry1-values.yaml (1)

• registry1.dso.mil/ironbank/istio-ecosystem/authservice 1.1.8-fips

src/authservice/values/unicorn-values.yaml (1)

• cgr.dev/defenseunicorns.com/authservice-fips v1.1.8

src/authservice/values/upstream-values.yaml (1)

• ghcr.io/istio-ecosystem/authservice/authservice 1.1.8

src/envoy-gateway/values/registry1-values.yaml (2)

• registry1.dso.mil/ironbank/opensource/envoy_proxy/community/gateway v1.9.1
• registry1.dso.mil/ironbank/opensource/envoy_proxy/envoy-distroless v1.39.1

src/envoy-gateway/values/unicorn-values.yaml (2)

• cgr.dev/defenseunicorns.com/envoy-gateway-fips v1.9.1
• cgr.dev/defenseunicorns.com/envoy-fips distroless-v1.39.1

src/envoy-gateway/values/upstream-values.yaml (2)

• docker.io/envoyproxy/gateway v1.9.1
• docker.io/envoyproxy/envoy distroless-v1.39.1

src/falco/values/registry1-values.yaml (2)

• registry1.dso.mil/ironbank/opensource/falcosecurity/falco 0.44.1
• registry1.dso.mil/ironbank/opensource/falcosecurity/falcosidekick 2.35.0

src/falco/values/unicorn-values.yaml (2)

• cgr.dev/defenseunicorns.com/falco-fips v0.44.1
• cgr.dev/defenseunicorns.com/falcosidekick-fips v2.35.0

src/falco/values/upstream-values.yaml (2)

• docker.io/falcosecurity/falco 0.44.1
• docker.io/falcosecurity/falcosidekick 2.35.0

src/grafana/values/registry1-values.yaml (4)

• registry1.dso.mil/ironbank/opensource/grafana/grafana 13.1.0
• registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal 9.8
• registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal 9.8
• registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar 2.8.1 → [Updates: 2.11.2]

src/grafana/values/unicorn-values.yaml (4)

• cgr.dev/defenseunicorns.com/grafana-fips v13.1.0 → [Updates: v13.2.1]
• cgr.dev/defenseunicorns.com/busybox-fips 1.37.0 → [Updates: v1.38.0]
• cgr.dev/defenseunicorns.com/curl-fips v8.21.0 → [Updates: v8.22.0]
• cgr.dev/defenseunicorns.com/k8s-sidecar-fips v2.8.1 → [Updates: v2.11.2]

src/grafana/values/upstream-values.yaml (4)

• ghcr.io/kiwigrid/k8s-sidecar 2.8.1 → [Updates: 2.11.2]
• docker.io/grafana/grafana 13.1.0 → [Updates: 13.2.1]
• docker.io/library/busybox 1.37.0 → [Updates: 1.38.0]
• docker.io/curlimages/curl 8.21.0 → [Updates: 8.22.0]

src/istio/values/registry1/cni.yaml (1)

• registry1.dso.mil/ironbank/tetrate/istio/install-cni 1.30.3-fips

src/istio/values/registry1/istiod.yaml (3)

• registry1.dso.mil/ironbank/tetrate/istio/pilot 1.30.3-fips
• ###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2 1.30.3-fips
• ###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2 1.30.3-fips

src/istio/values/registry1/ztunnel.yaml (1)

• registry1.dso.mil/ironbank/tetrate/istio/ztunnel 1.30.3-fips

src/istio/values/unicorn/cni.yaml (1)

• cgr.dev/defenseunicorns.com/istio-install-cni-fips v1.30.3 → [Updates: v1.30.4]

src/istio/values/unicorn/istiod.yaml (3)

• cgr.dev/defenseunicorns.com/istio-pilot-fips v1.30.3 → [Updates: v1.30.4]
• ###ZARF_REGISTRY###/defenseunicorns.com/istio-proxy-fips v1.30.3
• ###ZARF_REGISTRY###/defenseunicorns.com/istio-proxy-fips v1.30.3

src/istio/values/unicorn/ztunnel.yaml (1)

• cgr.dev/defenseunicorns.com/ztunnel-fips v1.30.3 → [Updates: v1.30.4]

src/istio/values/upstream/cni.yaml (1)

• docker.io/istio/install-cni 1.30.3-distroless → [Updates: 1.31.0-distroless]

src/istio/values/upstream/istiod.yaml (3)

• docker.io/istio/pilot 1.30.3-distroless → [Updates: 1.31.0-distroless]
• ###ZARF_REGISTRY###/istio/proxyv2 1.30.3-distroless
• ###ZARF_REGISTRY###/istio/proxyv2 1.30.3-distroless

src/istio/values/upstream/ztunnel.yaml (1)

• docker.io/istio/ztunnel 1.30.3-distroless → [Updates: 1.31.0-distroless]

src/keycloak/chart/values.yaml (2)

• quay.io/keycloak/keycloak 26.7.3
• ghcr.io/defenseunicorns/uds/identity-config 0.31.0

src/keycloak/values/registry1-values.yaml (2)

• registry1.dso.mil/ironbank/opensource/keycloak/keycloak-fips 26.7.3-fips
• registry1.dso.mil/ironbank/opensource/defenseunicorns/uds/uds-identity-config 0.31.0

src/keycloak/values/unicorn-values.yaml (1)

• cgr.dev/defenseunicorns.com/keycloak-fips v26.7.3

src/keycloak/values/upstream-values.yaml (1)

• quay.io/keycloak/keycloak 26.7.3

src/loki/values/registry1-values.yaml (4)

• registry1.dso.mil/ironbank/opensource/grafana/loki 3.7.6 → [Updates: 3.7.7]
• registry1.dso.mil/ironbank/opensource/nginx/nginx-alpine 1.30.3 → [Updates: 1.31.4]
• registry1.dso.mil/ironbank/opensource/memcached/memcached 1.6.45
• registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar 2.10.1 → [Updates: 2.11.2]

src/loki/values/unicorn-values.yaml (4)

• cgr.dev/defenseunicorns.com/loki-fips v3.7.6 → [Updates: v3.7.7]
• cgr.dev/defenseunicorns.com/nginx-fips v1.31.3 → [Updates: v1.31.5]
• cgr.dev/defenseunicorns.com/memcached-fips v1.6.45
• cgr.dev/defenseunicorns.com/k8s-sidecar-fips v2.10.1 → [Updates: v2.11.2]

src/loki/values/upstream-values.yaml (4)

• docker.io/grafana/loki 3.7.6 → [Updates: 3.7.7]
• docker.io/nginxinc/nginx-unprivileged 1.31-alpine
• docker.io/memcached 1.6.45-alpine
• docker.io/kiwigrid/k8s-sidecar 2.10.1 → [Updates: 2.11.2]

src/metrics-server/values/registry1-values.yaml (1)

• registry1.dso.mil/ironbank/opensource/kubernetes-sigs/metrics-server v0.9.0

src/metrics-server/values/unicorn-values.yaml (1)

• cgr.dev/defenseunicorns.com/metrics-server-fips v0.9.0

src/metrics-server/values/upstream-values.yaml (1)

• registry.k8s.io/metrics-server/metrics-server v0.9.0

src/portal/values/unicorn-values.yaml (1)

• ghcr.io/defenseunicorns/uds-portal 0.5.1

src/portal/values/upstream-values.yaml (1)

• ghcr.io/defenseunicorns/uds-portal 0.5.1

src/prometheus-stack/values/registry1/blackbox-exporter.yaml (2)

• registry1.dso.mil/ironbank/opensource/prometheus/blackbox_exporter v0.28.0
• registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader v0.93.1

src/prometheus-stack/values/registry1/kube-prometheus-stack.yaml (7)

• registry1.dso.mil/ironbank/opensource/prometheus/alertmanager v0.34.0
• registry1.dso.mil/ironbank/opensource/kubernetes/kube-state-metrics v2.20.0
• registry1.dso.mil/ironbank/opensource/prometheus/prometheus v3.14.0
• registry1.dso.mil/ironbank/opensource/prometheus/node-exporter v1.12.1
• registry1.dso.mil/ironbank/opensource/ingress-nginx/kube-webhook-certgen v1.6.9
• registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator v0.93.1
• registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader v0.93.1

src/prometheus-stack/values/unicorn/blackbox-exporter.yaml (2)

• cgr.dev/defenseunicorns.com/prometheus-blackbox-exporter-fips 0.28.0
• cgr.dev/defenseunicorns.com/prometheus-config-reloader-fips v0.93.1

src/prometheus-stack/values/unicorn/kube-prometheus-stack.yaml (7)

• cgr.dev/defenseunicorns.com/prometheus-alertmanager-fips v0.34.0
• cgr.dev/defenseunicorns.com/kube-state-metrics-fips v2.20.0
• cgr.dev/defenseunicorns.com/prometheus-fips v3.14.0
• cgr.dev/defenseunicorns.com/prometheus-node-exporter-fips v1.12.1
• cgr.dev/defenseunicorns.com/kube-webhook-certgen-fips v1.15.10
• cgr.dev/defenseunicorns.com/prometheus-operator-fips v0.93.1
• cgr.dev/defenseunicorns.com/prometheus-config-reloader-fips v0.93.1

src/prometheus-stack/values/upstream/blackbox-exporter.yaml (2)

• quay.io/prometheus/blackbox-exporter v0.28.0
• quay.io/prometheus-operator/prometheus-config-reloader v0.93.1 → [Updates: v0.94.0]

src/prometheus-stack/values/upstream/kube-prometheus-stack.yaml (7)

• quay.io/prometheus/alertmanager v0.34.0
• registry.k8s.io/kube-state-metrics/kube-state-metrics v2.20.0
• quay.io/prometheus/prometheus v3.14.0
• quay.io/prometheus/node-exporter v1.12.1
• registry.k8s.io/ingress-nginx/kube-webhook-certgen v1.6.9
• quay.io/prometheus-operator/prometheus-operator v0.93.1 → [Updates: v0.94.0]
• quay.io/prometheus-operator/prometheus-config-reloader v0.93.1 → [Updates: v0.94.0]

src/test/app-admin.yaml (1)

• docker.io/kong/httpbin 0.2.3

src/test/app-ambient-authservice-tenant.yaml (2)

• docker.io/kong/httpbin 0.2.3
• docker.io/kong/httpbin 0.2.3

src/test/app-curl.yaml

src/test/app-egress-ambient.yaml

src/test/app-egress-sidecar.yaml

src/test/app-sidecar-authservice-tenant.yaml (1)

• docker.io/kong/httpbin 0.2.3

src/test/app-tenant.yaml

src/vector/values/registry1-values.yaml (1)

• registry1.dso.mil/ironbank/opensource/timberio/vector 0.57.0 → [Updates: 0.58.0]

src/vector/values/unicorn-values.yaml (1)

• cgr.dev/defenseunicorns.com/vector-fips v0.57.0 → [Updates: v0.58.0]

src/vector/values/upstream-values.yaml (1)

• timberio/vector 0.57.0-distroless-static → [Updates: 0.58.0-distroless-static]

src/velero/values/registry1-values.yaml (3)

• registry1.dso.mil/ironbank/opensource/velero/velero v1.18.2
• registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws v1.14.2
• registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-microsoft-azure v1.14.2

src/velero/values/unicorn-values.yaml (3)

• cgr.dev/defenseunicorns.com/velero-fips v1.18.2
• cgr.dev/defenseunicorns.com/velero-plugin-for-aws-fips v1.14.2
• cgr.dev/defenseunicorns.com/velero-plugin-for-microsoft-azure-fips v1.14.2

src/velero/values/upstream-values.yaml (3)

• velero/velero v1.18.2
• velero/velero-plugin-for-aws v1.14.2
• velero/velero-plugin-for-microsoft-azure v1.14.2

test/vitest/trust-bundle/manifests/app-pki.yaml

kubernetes (25)

src/pepr/uds-cluster-crds/templates/clusterconfig.uds.dev.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/pepr/uds-cluster-crds/templates/exemptions.uds.dev.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/pepr/uds-cluster-crds/templates/packages.uds.dev.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/prometheus-stack/chart/templates/coredns-netpol.yaml (1)

• NetworkPolicy networking.k8s.io/v1

src/test/app-admin.yaml (2)

• docker.io/kong/httpbin 0.2.3
• Deployment apps/v1

src/test/app-ambient-authservice-tenant.yaml (4)

• docker.io/kong/httpbin 0.2.3
• docker.io/kong/httpbin 0.2.3
• Deployment apps/v1
• Deployment apps/v1

src/test/app-curl.yaml (9)

• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1

src/test/app-egress-ambient.yaml (3)

• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1

src/test/app-egress-sidecar.yaml (2)

• Deployment apps/v1
• Deployment apps/v1

src/test/app-sidecar-authservice-tenant.yaml (2)

• docker.io/kong/httpbin 0.2.3
• Deployment apps/v1

src/test/app-tenant.yaml (1)

• Deployment apps/v1

src/velero/chart/templates/crds/backuprepositories.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/backups.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/backupstoragelocations.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/datadownloads.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/datauploads.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/deletebackuprequests.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/downloadrequests.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/podvolumebackups.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/podvolumerestores.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/restores.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/schedules.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/serverstatusrequests.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

src/velero/chart/templates/crds/volumesnapshotlocations.yaml (1)

• CustomResourceDefinition apiextensions.k8s.io/v1

test/vitest/trust-bundle/manifests/app-pki.yaml (1)

• Deployment apps/v1

npm (7)

docs/.c4/package.json (4)

• @types/node ^24.0.0 → [Updates: ^24.0.0]
• likec4 ^1.43.0 → [Updates: ^1.43.0]
• typescript ^7.0.0
• playwright ^1.48.2 → [Updates: ^1.48.2]

package.json (16)

• pepr 2.0.0
• @commitlint/cli 21.2.2
• @commitlint/config-conventional 21.2.2
• @eslint/eslintrc ^3.3.1 → [Updates: ^3.3.1]
• @eslint/js ^9.39.0
• eslint ^10.0.0 → [Updates: ^10.0.0]
• @types/ws ^8.18.1
• @typescript-eslint/eslint-plugin ^8.59.4 → [Updates: ^8.59.4]
• @typescript-eslint/parser ^8.59.4 → [Updates: ^8.59.4]
• @vitest/coverage-v8 ^4.0.0 → [Updates: ^5.0.0]
• globals ^17.0.0 → [Updates: ^17.0.0]
• husky 9.1.7
• lint-staged 17.3.0 → [Updates: 17.4.1]
• prettier ^3.6.2
• vitest ^4.0.0 → [Updates: ^5.0.0]
• node >=20.0.0

scripts/renovate/package.json (7)

• semver ^7.5.4
• yaml ^2.8.3
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• @types/semver ^7.5.6
• tsx ^4.23.1 → [Updates: ^4.23.1]
• vitest ^4.0.0 → [Updates: ^5.0.0]
• typescript ^7.0.0

scripts/root-ca-retriever/package.json (9)

• @types/node ^24.0.0 → [Updates: ^24.0.0]
• tsx ^4.23.1 → [Updates: ^4.23.1]
• typescript ^7.0.0
• vitest ^4.0.0 → [Updates: ^5.0.0]
• @types/adm-zip ^0.5.7
• adm-zip ^0.6.0
• csv-parse ^7.0.0
• js-yaml ^5.2.2 → [Updates: ^5.2.2]
• @types/js-yaml ^4.0.9

test/playwright/package.json (3)

• @playwright/test ^1.61.0 → [Updates: ^1.61.0]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• typescript ^7.0.0

test/vitest/package.json (4)

• @types/node ^24.0.0 → [Updates: ^24.0.0]
• kubernetes-fluent-client ^3.11.8 → [Updates: ^3.11.8]
• typescript ^7.0.0
• vitest ^4.0.0 → [Updates: ^5.0.0]

test/vitest/trust-bundle/package.json (4)

• @types/node ^24.0.0
• kubernetes-fluent-client ^3.6.3
• typescript ^7.0.0
• vitest ^4.0.0 → [Updates: ^5.0.0]

regex (136)

.github/actions/autogenerated-check/action.yaml

.github/actions/check-multiarch/action.yaml

.github/actions/check-multiarch/action.yaml (1)

• google/go-containerregistry v0.22.0 → [Updates: v0.22.1]

.github/actions/setup-tools/action.yaml

.github/actions/setup-tools/action.yaml (2)

• defenseunicorns/uds-cli v0.36.0 → [Updates: v0.37.0]
• astral-sh/uv 0.12.7 → [Updates: 0.12.10]

.github/actions/setup-tools/action.yaml (2)

• k3d-io/k3d v5.9.0
• helm-unittest/helm-unittest v1.1.2

.github/bundles/aks/uds-bundle.yaml (1)

• ghcr.io/zarf-dev/packages/init v0.85.0

.github/bundles/eks/uds-bundle.yaml (1)

• ghcr.io/zarf-dev/packages/init v0.85.0

.github/bundles/rke2/uds-bundle.yaml (2)

• ghcr.io/defenseunicorns/packages/uds/pod-identity-webhook 0.3.1-upstream
• ghcr.io/zarf-dev/packages/init v0.85.0

.github/test-infra/aws/eks/cluster.tf (1)

• bottlerocket-os/bottlerocket v1.53.0

.github/test-infra/aws/rke2/iam.tf (1)

• kubernetes-sigs/aws-load-balancer-controller v3.5.0

.github/test-infra/aws/rke2/scripts/helmchart-template.yaml (2)

• aws-cloud-controller-manager 0.0.11
• aws-load-balancer-controller 3.5.0

.github/test-infra/aws/rke2/scripts/user_data.sh (1)

• longhorn 1.12.1

.github/workflows/lula.yaml (1)

• defenseunicorns/lula 0.9.5

.github/workflows/test-aks.yaml (1)

• opentofu/opentofu 1.12.6

.github/workflows/test-cli-matrix.yaml (1)

• defenseunicorns/uds-cli v0.36.0 → [Updates: v0.37.0]

.github/workflows/test-eks.yaml (1)

• opentofu/opentofu 1.12.6

.github/workflows/test-rke2.yaml (1)

• opentofu/opentofu 1.12.6

.vscode/settings.json (3)

• defenseunicorns/uds-cli v0.36.0 → [Updates: v0.37.0]
• defenseunicorns/uds-cli v0.36.0 → [Updates: v0.37.0]
• defenseunicorns/uds-cli v0.36.0 → [Updates: v0.37.0]

bundles/k3d-slim-dev/uds-bundle.yaml

bundles/k3d-slim-dev/uds-bundle.yaml (2)

• ghcr.io/defenseunicorns/packages/uds-k3d 0.20.2-airgap → [Updates: 0.20.3-airgap]
• ghcr.io/zarf-dev/packages/init v0.84.0 → [Updates: v0.85.0]

bundles/k3d-standard/uds-bundle.yaml (2)

• ghcr.io/defenseunicorns/packages/uds-k3d 0.20.2-airgap → [Updates: 0.20.3-airgap]
• ghcr.io/zarf-dev/packages/init v0.84.0 → [Updates: v0.85.0]

src/authservice/chart/Chart.yaml (2)

• ghcr.io/istio-ecosystem/authservice/authservice 1.1.8
• ghcr.io/istio-ecosystem/authservice/authservice 1.1.8

src/authservice/zarf.yaml (3)

• ghcr.io/istio-ecosystem/authservice/authservice 1.1.8
• registry1.dso.mil/ironbank/istio-ecosystem/authservice 1.1.8-fips
• cgr.dev/defenseunicorns.com/authservice-fips v1.1.8

src/envoy-gateway/common/zarf.yaml (1)

• docker.io/envoyproxy/gateway-helm 1.9.1

src/envoy-gateway/zarf.yaml (6)

• docker.io/envoyproxy/gateway v1.9.1
• docker.io/envoyproxy/envoy distroless-v1.39.1
• registry1.dso.mil/ironbank/opensource/envoy_proxy/community/gateway v1.9.1
• registry1.dso.mil/ironbank/opensource/envoy_proxy/envoy-distroless v1.39.1
• cgr.dev/defenseunicorns.com/envoy-gateway-fips v1.9.1
• cgr.dev/defenseunicorns.com/envoy-fips distroless-v1.39.1

src/falco/chart/rules/incubating-rules.yaml

src/falco/chart/rules/sandbox-rules.yaml

src/falco/chart/rules/stable-rules.yaml

src/falco/chart/tests/rules_configmap_test.yaml

src/falco/chart/tests/rules_overrides_test.yaml

src/falco/common/zarf.yaml (1)

• falco 9.1.0

src/falco/tasks.yaml

src/falco/tasks.yaml (3)

• falcosecurity/rules 5.1.0 → [Updates: 5.2.0]
• falcosecurity/rules 6.1.0 → [Updates: 6.2.0]
• falcosecurity/rules 6.0.1

src/falco/zarf.yaml (6)

• docker.io/falcosecurity/falco 0.44.1
• docker.io/falcosecurity/falcosidekick 2.35.0
• registry1.dso.mil/ironbank/opensource/falcosecurity/falco 0.44.1
• registry1.dso.mil/ironbank/opensource/falcosecurity/falcosidekick 2.35.0
• cgr.dev/defenseunicorns.com/falco-fips v0.44.1
• cgr.dev/defenseunicorns.com/falcosidekick-fips v2.35.0

src/grafana/chart/tests/grafana_sso_groups_test.yaml

src/grafana/chart/tests/grafana_uptime_toggle_test.yaml

src/grafana/common/zarf.yaml (1)

• grafana 12.7.2 → [Updates: 13.2.2]

src/grafana/tasks.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

src/grafana/tasks.yaml (1)

• mcr.microsoft.com/playwright v1.62.1-noble → [Updates: v1.63.0-noble]

src/grafana/tasks.yaml

src/grafana/zarf.yaml (11)

• docker.io/grafana/grafana 13.1.0 → [Updates: 13.2.1]
• docker.io/curlimages/curl 8.21.0 → [Updates: 8.22.0]
• docker.io/library/busybox 1.37.0 → [Updates: 1.38.0]
• ghcr.io/kiwigrid/k8s-sidecar 2.8.1 → [Updates: 2.11.2]
• registry1.dso.mil/ironbank/opensource/grafana/grafana 13.1.0
• registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal 9.8
• registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar 2.8.1 → [Updates: 2.11.2]
• cgr.dev/defenseunicorns.com/grafana-fips v13.1.0 → [Updates: v13.2.1]
• cgr.dev/defenseunicorns.com/busybox-fips 1.37.0 → [Updates: v1.38.0]
• cgr.dev/defenseunicorns.com/curl-fips v8.21.0 → [Updates: v8.22.0]
• cgr.dev/defenseunicorns.com/k8s-sidecar-fips v2.8.1 → [Updates: v2.11.2]

src/istio/charts/uds-istio-config/tests/proxy_protocol_envoyfilter_test.yaml

src/istio/charts/uds-istio-config/tests/tenant_domain_test.yaml

src/istio/common/chart/tests/classification_banner_test.yaml

src/istio/common/zarf.yaml (1)

• kubernetes-sigs/gateway-api v1.6.1 → [Updates: v1.6.2]

src/istio/common/zarf.yaml

src/istio/common/zarf.yaml (4)

• base 1.30.3 → [Updates: 1.30.4]
• istiod 1.30.3 → [Updates: 1.30.4]
• cni 1.30.3 → [Updates: 1.30.4]
• ztunnel 1.30.3 → [Updates: 1.30.4]

src/istio/tasks.yaml (4)

• istio/istio 1.30.3 → [Updates: 1.31.0]
• kubernetes-sigs/gateway-api v1.6.1 → [Updates: v1.6.2]
• kubernetes-sigs/gateway-api v1.6.1 → [Updates: v1.6.2]
• kubernetes-sigs/gateway-api v1.6.1 → [Updates: v1.6.2]

src/istio/tasks.yaml

src/istio/tasks.yaml (2)

• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]

src/istio/values/registry1/istiod.yaml (2)

• registry1.dso.mil/ironbank/tetrate/istio/proxyv2 1.30.3-fips
• registry1.dso.mil/ironbank/tetrate/istio/proxyv2 1.30.3-fips

src/istio/values/unicorn/istiod.yaml (2)

• cgr.dev/defenseunicorns.com/istio-proxy-fips v1.30.3 → [Updates: v1.30.4]
• cgr.dev/defenseunicorns.com/istio-proxy-fips v1.30.3 → [Updates: v1.30.4]

src/istio/values/upstream/istiod.yaml (2)

• docker.io/istio/proxyv2 1.30.3-distroless → [Updates: 1.31.0-distroless]
• docker.io/istio/proxyv2 1.30.3-distroless → [Updates: 1.31.0-distroless]

src/istio/zarf.yaml (12)

• docker.io/istio/pilot 1.30.3-distroless → [Updates: 1.31.0-distroless]
• docker.io/istio/proxyv2 1.30.3-distroless → [Updates: 1.31.0-distroless]
• docker.io/istio/install-cni 1.30.3-distroless → [Updates: 1.31.0-distroless]
• docker.io/istio/ztunnel 1.30.3-distroless → [Updates: 1.31.0-distroless]
• registry1.dso.mil/ironbank/tetrate/istio/proxyv2 1.30.3-fips
• registry1.dso.mil/ironbank/tetrate/istio/pilot 1.30.3-fips
• registry1.dso.mil/ironbank/tetrate/istio/install-cni 1.30.3-fips
• registry1.dso.mil/ironbank/tetrate/istio/ztunnel 1.30.3-fips
• cgr.dev/defenseunicorns.com/istio-pilot-fips v1.30.3 → [Updates: v1.30.4]
• cgr.dev/defenseunicorns.com/istio-proxy-fips v1.30.3 → [Updates: v1.30.4]
• cgr.dev/defenseunicorns.com/istio-install-cni-fips v1.30.3 → [Updates: v1.30.4]
• cgr.dev/defenseunicorns.com/ztunnel-fips v1.30.3 → [Updates: v1.30.4]

src/istio/zarf.yaml (4)

• gateway 1.30.3 → [Updates: 1.30.4]
• gateway 1.30.3 → [Updates: 1.30.4]
• gateway 1.30.3 → [Updates: 1.30.4]
• gateway 1.30.3 → [Updates: 1.30.4]

src/keycloak/chart/Chart.yaml (1)

• quay.io/keycloak/keycloak 26.7.3

src/keycloak/chart/tests/kc_account_inactivity_test.yaml

src/keycloak/chart/tests/kc_admin_api_allowed_principals_test.yaml

src/keycloak/chart/tests/kc_admin_domain_test.yaml

src/keycloak/chart/tests/kc_annotations_test.yaml

src/keycloak/chart/tests/kc_dashboards_test.yaml

src/keycloak/chart/tests/kc_debug_autoscaling_test.yaml

src/keycloak/chart/tests/kc_extra_volumes_test.yaml

src/keycloak/chart/tests/kc_fips_jce_security_test.yaml

src/keycloak/chart/tests/kc_fips_mode_test.yaml

src/keycloak/chart/tests/kc_http_retry_test.yaml

src/keycloak/chart/tests/kc_infinispan_virtual_threads_test.yaml

src/keycloak/chart/tests/kc_observability_alerts_test.yaml

src/keycloak/chart/tests/kc_postgresql_created_secret_test.yaml

src/keycloak/chart/tests/kc_postgresql_default_test.yaml

src/keycloak/chart/tests/kc_postgresql_existing_secret_test.yaml

src/keycloak/chart/tests/kc_postgresql_mixed_secrets_test.yaml

src/keycloak/chart/tests/kc_realm_display_name_test.yaml

src/keycloak/chart/tests/kc_session_stickiness_test.yaml

src/keycloak/chart/tests/kc_sso_session_inflight_logins_test.yaml

src/keycloak/chart/tests/kc_third_party_tls_header_test.yaml

src/keycloak/chart/tests/kc_truststore_paths_test.yaml

src/keycloak/chart/tests/kc_uptime_toggle_test.yaml

src/keycloak/chart/tests/kc_waypoint_config_test.yaml

src/keycloak/chart/tests/kc_x509_provider_test.yaml

src/keycloak/chart/values.yaml (1)

• defenseunicorns/uds-identity-config 0.31.0

src/keycloak/common/zarf.yaml (1)

• quay.io/keycloak/keycloak 26.7.3

src/keycloak/tasks.yaml (1)

• defenseunicorns/uds-identity-config v0.31.0

src/keycloak/tasks.yaml (1)

• ghcr.io/defenseunicorns/uds/identity-config 0.31.0

src/keycloak/zarf.yaml (6)

• quay.io/keycloak/keycloak 26.7.3
• ghcr.io/defenseunicorns/uds/identity-config 0.31.0
• registry1.dso.mil/ironbank/opensource/keycloak/keycloak-fips 26.7.3-fips
• registry1.dso.mil/ironbank/opensource/defenseunicorns/uds/uds-identity-config 0.31.0
• cgr.dev/defenseunicorns.com/keycloak-fips v26.7.3
• ghcr.io/defenseunicorns/uds/identity-config 0.31.0

src/loki/common/zarf.yaml (1)

• loki 18.9.0 → [Updates: 18.12.1]

src/loki/zarf.yaml (12)

• docker.io/grafana/loki 3.7.6 → [Updates: 3.7.7]
• docker.io/nginxinc/nginx-unprivileged 1.31-alpine
• docker.io/memcached 1.6.45-alpine
• docker.io/kiwigrid/k8s-sidecar 2.10.1 → [Updates: 2.11.2]
• registry1.dso.mil/ironbank/opensource/grafana/loki 3.7.6 → [Updates: 3.7.7]
• registry1.dso.mil/ironbank/opensource/nginx/nginx-alpine 1.30.3 → [Updates: 1.31.4]
• registry1.dso.mil/ironbank/opensource/memcached/memcached 1.6.45
• registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar 2.10.1 → [Updates: 2.11.2]
• cgr.dev/defenseunicorns.com/loki-fips v3.7.6 → [Updates: v3.7.7]
• cgr.dev/defenseunicorns.com/nginx-fips v1.31.3 → [Updates: v1.31.5]
• cgr.dev/defenseunicorns.com/memcached-fips v1.6.45
• cgr.dev/defenseunicorns.com/k8s-sidecar-fips v2.10.1 → [Updates: v2.11.2]

src/metrics-server/common/zarf.yaml (1)

• metrics-server 3.13.1 → [Updates: 3.14.0]

src/metrics-server/zarf.yaml (3)

• registry.k8s.io/metrics-server/metrics-server v0.9.0
• registry1.dso.mil/ironbank/opensource/kubernetes-sigs/metrics-server v0.9.0
• cgr.dev/defenseunicorns.com/metrics-server-fips v0.9.0

src/pepr/tasks.yaml (1)

• istio/istio 1.30.3 → [Updates: 1.31.0]

src/pepr/tasks.yaml (6)

• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]

src/pepr/uds-exemptions/tests/custom_exemptions_test.yaml

src/pepr/uds-exemptions/tests/istio_gateway_nodeport_test.yaml

src/pepr/uds-operator-config/tests/clusterconfig_test.yaml

src/pepr/uds-operator-config/tests/operator_config_secret_test.yaml

src/portal/common/zarf.yaml (1)

• defenseunicorns/uds-portal v0.5.1

src/portal/common/zarf.yaml (1)

• https://github.com/defenseunicorns/uds-portal.git v0.5.1

src/portal/tasks.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

src/portal/tasks.yaml (1)

• mcr.microsoft.com/playwright v1.62.1-noble → [Updates: v1.63.0-noble]

src/portal/tasks.yaml

src/portal/values/unicorn-values.yaml (1)

• ghcr.io/defenseunicorns/uds-portal 0.5.1

src/portal/values/upstream-values.yaml (1)

• ghcr.io/defenseunicorns/uds-portal 0.5.1

src/portal/zarf.yaml (2)

• ghcr.io/defenseunicorns/uds-portal 0.5.1
• ghcr.io/defenseunicorns/uds-portal 0.5.1

src/prometheus-stack/chart/tests/probe_alerting_rules_no_crd_test.yaml

src/prometheus-stack/chart/tests/probe_alerting_rules_test.yaml

src/prometheus-stack/common/zarf.yaml (2)

• kube-prometheus-stack 88.5.2 → [Updates: 90.0.0]
• prometheus-blackbox-exporter 11.17.2 → [Updates: 11.18.0]

src/prometheus-stack/tasks.yaml (3)

• prometheus-operator/prometheus-operator v0.93.1 → [Updates: v0.94.0]
• prometheus-operator/prometheus-operator v0.93.1 → [Updates: v0.94.0]
• prometheus-operator/prometheus-operator v0.93.1 → [Updates: v0.94.0]

src/prometheus-stack/tasks.yaml

src/prometheus-stack/tasks.yaml (3)

• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]
• defenseunicorns/kubernetes-fluent-client 3.12.0 → [Updates: 3.12.3]

src/prometheus-stack/zarf.yaml (27)

• quay.io/prometheus/node-exporter v1.12.1-distroless
• quay.io/prometheus-operator/prometheus-operator v0.93.1 → [Updates: v0.94.0]
• registry.k8s.io/kube-state-metrics/kube-state-metrics v2.20.0
• quay.io/prometheus/alertmanager v0.34.0
• quay.io/prometheus-operator/prometheus-config-reloader v0.93.1 → [Updates: v0.94.0]
• quay.io/prometheus/prometheus v3.14.0
• registry.k8s.io/ingress-nginx/kube-webhook-certgen v1.6.9
• registry1.dso.mil/ironbank/opensource/prometheus/node-exporter v1.12.1
• registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator v0.93.1
• registry1.dso.mil/ironbank/opensource/kubernetes/kube-state-metrics v2.20.0
• registry1.dso.mil/ironbank/opensource/prometheus/alertmanager v0.34.0
• registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader v0.93.1
• registry1.dso.mil/ironbank/opensource/prometheus/prometheus v3.14.0
• registry1.dso.mil/ironbank/opensource/ingress-nginx/kube-webhook-certgen v1.6.9
• cgr.dev/defenseunicorns.com/prometheus-node-exporter-fips v1.12.1
• cgr.dev/defenseunicorns.com/prometheus-operator-fips v0.93.1
• cgr.dev/defenseunicorns.com/kube-state-metrics-fips v2.20.0
• cgr.dev/defenseunicorns.com/prometheus-alertmanager-fips v0.34.0
• cgr.dev/defenseunicorns.com/prometheus-config-reloader-fips v0.93.1
• cgr.dev/defenseunicorns.com/prometheus-fips v3.14.0
• cgr.dev/defenseunicorns.com/kube-webhook-certgen-fips v1.15.10
• quay.io/prometheus/blackbox-exporter v0.28.0
• quay.io/prometheus-operator/prometheus-config-reloader v0.93.1 → [Updates: v0.94.0]
• registry1.dso.mil/ironbank/opensource/prometheus/blackbox_exporter v0.28.0
• registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader v0.93.1
• cgr.dev/defenseunicorns.com/prometheus-blackbox-exporter-fips 0.28.0
• cgr.dev/defenseunicorns.com/prometheus-config-reloader-fips v0.93.1

src/prometheus-stack/zarf.yaml (1)

• prometheus-operator-crds 31.0.1

src/test/tasks.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

src/test/tasks.yaml (1)

• mcr.microsoft.com/playwright v1.62.1-noble → [Updates: v1.63.0-noble]

src/test/tasks.yaml

src/test/zarf.yaml (2)

• docker.io/kong/httpbin 0.2.3
• ghcr.io/stefanprodan/podinfo 6.14.1 → [Updates: 6.15.0]

src/test/zarf.yaml (1)

• https://github.com/stefanprodan/podinfo.git 6.14.1 → [Updates: 6.15.0]

src/vector/common/zarf.yaml (1)

• vector 0.57.0 → [Updates: 0.58.0]

src/vector/zarf.yaml (3)

• timberio/vector 0.57.0-distroless-static → [Updates: 0.58.0-distroless-static]
• registry1.dso.mil/ironbank/opensource/timberio/vector 0.57.0 → [Updates: 0.58.0]
• cgr.dev/defenseunicorns.com/vector-fips v0.57.0 → [Updates: v0.58.0]

src/velero/common/zarf.yaml (1)

• velero 12.1.0

src/velero/tasks.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

src/velero/tasks.yaml (1)

• velero 12.1.0

src/velero/zarf.yaml (9)

• velero/velero v1.18.2
• velero/velero-plugin-for-aws v1.14.2
• velero/velero-plugin-for-microsoft-azure v1.14.2
• registry1.dso.mil/ironbank/opensource/velero/velero v1.18.2
• registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws v1.14.2
• registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-microsoft-azure v1.14.2
• cgr.dev/defenseunicorns.com/velero-fips v1.18.2
• cgr.dev/defenseunicorns.com/velero-plugin-for-aws-fips v1.14.2
• cgr.dev/defenseunicorns.com/velero-plugin-for-microsoft-azure-fips v1.14.2

tasks/create.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

tasks/create.yaml (2)

• registry1.dso.mil/ironbank/opensource/defenseunicorns/pepr/controller v2.0.0
• defenseunicorns/pepr v2.0.0 → [Updates: v2.0.1]

tasks/deploy.yaml

tasks/lint.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

tasks/lint.yaml

tasks/lint.yaml

tasks/setup.yaml (2)

• ghcr.io/defenseunicorns/packages/uds-k3d 0.20.2-airgap → [Updates: 0.20.3-airgap]
• zarf-dev/zarf v0.84.0 → [Updates: v0.85.0]

tasks/setup.yaml (1)

• redis 8.10.1

tasks/test.yaml (1)

• defenseunicorns/uds-common v1.28.1 → [Updates: v1.28.3]

tasks/test.yaml (1)

• mcr.microsoft.com/playwright v1.62.1-noble → [Updates: v1.63.0-noble]

tasks/test.yaml

tasks/test.yaml (1)

• mcr.microsoft.com/playwright v1.62.1-noble → [Updates: v1.63.0-noble]

test/playwright/private-pki/tasks.yaml (1)

• mcr.microsoft.com/playwright v1.62.1-noble → [Updates: v1.63.0-noble]

renovate-config (1)

renovate.json

terraform (15)

.github/test-infra/aws/eks/cluster.tf (1)

• terraform-aws-modules/eks/aws ~> 21.25.0

.github/test-infra/aws/eks/main.tf

.github/test-infra/aws/eks/rds.tf (1)

• terraform-aws-modules/rds/aws 7.2.1

.github/test-infra/aws/eks/versions.tf (4)

• aws ~> 6.0
• local ~> 2.0
• random ~> 3.0
• hashicorp/terraform >= 1.8.0

.github/test-infra/aws/modules/irsa/versions.tf (2)

• aws >= 5.0
• hashicorp/terraform >= 1.8.0

.github/test-infra/aws/modules/kms/versions.tf (2)

• aws >= 5.0
• hashicorp/terraform >= 1.8.0

.github/test-infra/aws/modules/s3/versions.tf (2)

• aws >= 5.0
• hashicorp/terraform >= 1.8.0

.github/test-infra/aws/rke2/iam.tf

.github/test-infra/aws/rke2/irsa.tf (1)

• terraform-aws-modules/s3-bucket/aws 5.15.4

.github/test-infra/aws/rke2/modules/storage/main.tf

.github/test-infra/aws/rke2/modules/storage/versions.tf (3)

• aws >= 5.52.0
• random ~> 3.9.0
• hashicorp/terraform >= 1.8.0

.github/test-infra/aws/rke2/rds.tf (1)

• terraform-aws-modules/rds/aws 7.2.1

.github/test-infra/aws/rke2/storage.tf

.github/test-infra/aws/rke2/versions.tf (4)

• aws ~> 6.0
• random ~> 3.0
• tls ~> 4.0
• hashicorp/terraform >= 1.8.0

.github/test-infra/azure/aks/versions.tf (4)

• azurerm ~> 5.0
• local ~> 2.0
• random ~> 3.0
• hashicorp/terraform >= 1.8.0

---

• Check this box to trigger a request for Renovate to run again on this repository