From 281be69598b32fd795764251799871c48de37e43 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 28 Oct 2026 05:59:05 +0000
Subject: [PATCH] chore(deps): update minor and patch updates

---
 .github/workflows/python.yaml |  2 +-
 argocd-cmp/Dockerfile         | 14 +++++++-------
 mise.toml                     | 12 ++++++------
 3 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/python.yaml b/.github/workflows/python.yaml
index fbda432c..92140926 100644
--- a/.github/workflows/python.yaml
+++ b/.github/workflows/python.yaml
@@ -59,7 +59,7 @@ jobs:
       - name: Set up Python 3.10
         uses: actions/setup-python@v5
         with:
-          python-version: "3.14"
+          python-version: "3.15"
 
       - name: Bump version
         run: sed 's/version = ".*"/version = "${{ github.ref_name }}"/' -i pyproject.toml && git diff
diff --git a/argocd-cmp/Dockerfile b/argocd-cmp/Dockerfile
index 1ec23208..c867e3d4 100644
--- a/argocd-cmp/Dockerfile
+++ b/argocd-cmp/Dockerfile
@@ -1,5 +1,5 @@
-FROM python:3.14-slim AS build_base
-COPY --from=ghcr.io/astral-sh/uv:0.11.6 /uv /bin/uv
+FROM python:3.15-slim AS build_base
+COPY --from=ghcr.io/astral-sh/uv:0.13.6 /uv /bin/uv
 
 #: Build Nyl itself.
 #: -----------------
@@ -41,7 +41,7 @@ RUN \
 FROM fetch-bin-base AS argocd-bin
 # Find ArgoCD releases at https://github.com/argoproj/argo-cd/releases
 # renovate: datasource=github-releases depName=argocd packageName=argoproj/argo-cd
-ARG ARGOCD_VERSION=v3.3.6
+ARG ARGOCD_VERSION=v3.5.6
 RUN curl -sSfLo /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/download/${ARGOCD_VERSION}/argocd-linux-$(cat /BINARY_ARCH) \
     && chmod +x /usr/local/bin/argocd \
     && upx /usr/local/bin/argocd \
@@ -50,7 +50,7 @@ RUN curl -sSfLo /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releas
 FROM fetch-bin-base AS helm-bin
 # Find Helm releases at https://github.com/helm/helm/releases
 # renovate: datasource=github-releases depName=helm packageName=helm/helm
-ARG HELM_VERSION=v3.20.2
+ARG HELM_VERSION=v3.22.1
 RUN curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 \
     && chmod 700 get_helm.sh \
     && ./get_helm.sh --version $HELM_VERSION \
@@ -60,7 +60,7 @@ RUN curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/s
 FROM fetch-bin-base AS sops-bin
 # Find SOPS releases at https://github.com/getsops/sops/releases
 # renovate: datasource=github-releases depName=sops packageName=getsops/sops
-ARG SOPS_VERSION=v3.12.2
+ARG SOPS_VERSION=v3.13.3
 RUN curl -fLO https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/sops-${SOPS_VERSION}.linux.$(cat /BINARY_ARCH) \
     && mv sops-${SOPS_VERSION}.linux.$(cat /BINARY_ARCH) /usr/local/bin/sops \
     && chmod +x /usr/local/bin/sops \
@@ -69,7 +69,7 @@ RUN curl -fLO https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/
 
 FROM fetch-bin-base AS kyverno-bin
 # renovate: datasource=github-releases depName=kyverno packageName=kyverno/kyverno
-ARG KYVERNO_VERSION=1.17.1
+ARG KYVERNO_VERSION=1.19.2
 RUN \
     case "$(uname -m)" in \
         x86_64) KYVERNO_ARCH='x86_64' ;; \
@@ -84,7 +84,7 @@ RUN \
 #: Build the ArgoCD CMP server image.
 #: ----------------------------------
 
-FROM python:3.14-slim AS nyl-cmp
+FROM python:3.15-slim AS nyl-cmp
 RUN apt-get update && \
     apt-get install -y --no-install-recommends git && \
     rm -rf /var/lib/apt/lists/*
diff --git a/mise.toml b/mise.toml
index 1661f639..2372985f 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,10 +1,10 @@
 [tools]
-"cargo:tire" = "0.1.2"
-kyverno = "1.14.4"
-uv = "0.11.6"
-sops = "3.12.2"
-helm = "3.20.2"
-kubectl = "1.35.3"
+"cargo:tire" = "0.1.3"
+kyverno = "1.19.2"
+uv = "0.13.6"
+sops = "3.13.3"
+helm = "3.22.1"
+kubectl = "1.37.2"
 "pipx:slap-cli" = "1.15.0"
 
 [tasks.build-docs]