chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
anchore/sbom-action	action	patch	v0.17.8 -> v0.17.9
github.com/stackitcloud/stackit-sdk-go/core	require	minor	v0.14.0 -> v0.15.1
github.com/stackitcloud/stackit-sdk-go/services/dns	require	patch	v0.12.0 -> v0.12.1
github/codeql-action	action	minor	v2.27.7 -> v2.28.1
k8s.io/api	require	minor	v0.31.4 -> v0.32.0
k8s.io/apiextensions-apiserver	require	minor	v0.31.4 -> v0.32.0
k8s.io/apimachinery	require	minor	v0.31.4 -> v0.32.0
k8s.io/client-go	require	minor	v0.31.4 -> v0.32.0
sigs.k8s.io/structured-merge-diff/v4	replace	minor	v4.4.3 -> v4.5.0
step-security/harden-runner	action	patch	v2.10.2 -> v2.10.3

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.17.9

Compare Source

Changes in v0.17.9

• chore(deps): update Syft to v1.18.1 (#​510) [anchore-actions-token-generator]
• chore(deps): update Syft to v1.18.0 (#​509) [anchore-actions-token-generator]

github/codeql-action (github/codeql-action)

v2.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.1 - 10 Jan 2025

• CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
• Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

v2.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.0 - 20 Dec 2024

• Bump the minimum CodeQL bundle version to 2.15.5. #​2655
• Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

v2.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.8

Compare Source

kubernetes/api (k8s.io/api)

v0.32.0

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.32.0

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.32.0

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.32.0

Compare Source

kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v4)

v4.5.0

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.10.3

Compare Source

What's Changed

Fixed an issue where DNS requests using uppercase characters (e.g., EXAMPLE.com) were blocked even when the domain was present in the allowed list. This update standardizes domain names to lowercase for consistent comparison.

Full Changelog: step-security/harden-runner@v2...v2.10.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading github.com/cert-manager/cert-manager v1.16.2
go: downloading go.uber.org/zap v1.27.0
go: downloading github.com/stackitcloud/stackit-sdk-go/core v0.15.1
go: downloading github.com/stackitcloud/stackit-sdk-go/services/dns v0.12.1
go: downloading github.com/stretchr/testify v1.10.0
go: downloading k8s.io/utils v0.0.0-20241210054802-24370beab758
go: downloading go.uber.org/mock v0.5.0
go: downloading k8s.io/apiextensions-apiserver v0.32.0
go: downloading k8s.io/apimachinery v0.32.0
go: downloading k8s.io/client-go v0.32.0
go: downloading k8s.io/api v0.32.0
go: downloading k8s.io/component-base v0.32.0
go: downloading sigs.k8s.io/controller-runtime v0.19.1
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/google/gofuzz v1.2.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading golang.org/x/net v0.30.0
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading github.com/spf13/cobra v1.8.1
go: downloading k8s.io/apiserver v0.32.0
go: downloading github.com/go-logr/logr v1.4.2
go: downloading github.com/spf13/pflag v1.0.5
go: downloading github.com/golang-jwt/jwt/v5 v5.2.1
go: downloading github.com/google/uuid v1.6.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.5.0
go: downloading sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading github.com/golang/protobuf v1.5.4
go: downloading github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49
go: downloading golang.org/x/time v0.7.0
go: downloading github.com/fxamacker/cbor/v2 v2.7.0
go: downloading golang.org/x/term v0.25.0
go: downloading golang.org/x/oauth2 v0.23.0
go: downloading gopkg.in/evanphx/json-patch.v4 v4.12.0
go: downloading sigs.k8s.io/yaml v1.4.0
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading github.com/coreos/go-systemd/v22 v22.5.0
go: downloading github.com/emicklei/go-restful/v3 v3.12.1
go: downloading golang.org/x/crypto v0.28.0
go: downloading k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f
go: downloading go.opentelemetry.io/otel v1.31.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0
go: downloading go.opentelemetry.io/otel/metric v1.31.0
go: downloading go.opentelemetry.io/otel/sdk v1.31.0
go: downloading golang.org/x/sys v0.26.0
go: downloading google.golang.org/grpc v1.67.1
go: downloading gopkg.in/natefinch/lumberjack.v2 v2.2.1
go: downloading github.com/google/go-cmp v0.6.0
go: downloading github.com/json-iterator/go v1.1.12
go: downloading google.golang.org/protobuf v1.35.1
go: downloading golang.org/x/text v0.19.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/google/cel-go v0.22.0
go: downloading go.opentelemetry.io/otel/trace v1.31.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0
go: downloading github.com/fsnotify/fsnotify v1.8.0
go: downloading sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0
go: downloading github.com/NYTimes/gziphandler v1.1.1
go: downloading github.com/go-openapi/swag v0.23.0
go: downloading github.com/go-openapi/jsonreference v0.21.0
go: downloading go.opentelemetry.io/proto/otlp v1.3.1
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20241104194629-dd2ea8efbc28
go: downloading google.golang.org/genproto v0.0.0-20240730163845-b1a4ccb954bf
go: downloading k8s.io/kms v0.32.0
go: downloading github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
go: downloading go.etcd.io/etcd/client/pkg/v3 v3.5.16
go: downloading go.etcd.io/etcd/client/v3 v3.5.16
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0
go: downloading sigs.k8s.io/gateway-api v1.1.1
go: downloading github.com/go-logr/zapr v1.3.0
go: downloading github.com/evanphx/json-patch/v5 v5.9.0
go: downloading gomodules.xyz/jsonpatch/v2 v2.4.0
go: downloading golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c
go: downloading github.com/prometheus/client_golang v1.20.5
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading cel.dev/expr v0.18.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20241104194629-dd2ea8efbc28
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading golang.org/x/sync v0.8.0
go: downloading github.com/stoewer/go-strcase v1.3.0
go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
go: downloading github.com/prometheus/client_model v0.6.1
go: downloading github.com/prometheus/procfs v0.15.1
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading github.com/mailru/easyjson v0.7.7
go: downloading github.com/go-openapi/jsonpointer v0.21.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0
go: downloading github.com/google/btree v1.0.1
go: downloading go.etcd.io/etcd/api/v3 v3.5.16
go: downloading github.com/klauspost/compress v1.17.11
go: downloading github.com/prometheus/common v0.60.1
go: downloading github.com/antlr4-go/antlr/v4 v4.13.1
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/josharian/intern v1.0.0
go: downloading github.com/coreos/go-semver v0.3.1
go: downloading github.com/kylelemons/godebug v1.1.0
go: github.com/stackitcloud/stackit-cert-manager-webhook/cmd/webhook imports
	github.com/cert-manager/cert-manager/pkg/acme/webhook/cmd imports
	github.com/cert-manager/cert-manager/pkg/acme/webhook/cmd/server imports
	github.com/cert-manager/cert-manager/pkg/acme/webhook/apiserver imports
	k8s.io/apiserver/pkg/util/version: cannot find module providing package k8s.io/apiserver/pkg/util/version