chore(deps): update all-ci-updates by renovate[bot] · Pull Request #2148 · projectcapsule/capsule

renovate · 2026-09-17T00:26:57Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
argo-cd	HelmChart	minor	`10.6.4` → `10.10.3`	`10.11.6` (+5)
cert-manager (source)	HelmChart	patch	`v1.21.1` → `v1.21.2`	`v1.21.3`
dex (source)	HelmChart	minor	`0.24.1` → `0.26.0`
kube-prometheus-stack (source)	HelmChart	minor	`92.0.0` → `92.3.1`	`92.14.1` (+14)
pyroscope (source)	HelmChart	minor	`2.2.1` → `2.4.0`	`2.4.2` (+1)
tempo (source)	HelmChart	minor	`3.0.0` → `3.1.0`	`3.2.1` (+1)

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

argoproj/argo-helm (argo-cd)

`v10.10.3`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update dependency argoproj/argo-cd to v3.5.5 by @argoproj-renovate[bot] in #4133

Full Changelog: argoproj/argo-helm@argo-workflows-2.0.12...argo-cd-10.10.3

`v10.10.2`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(github): complete Security Insights for the Security Slam Cleaner badge by @jmeridth in #4123
fix(argo-cd): keep zero maxUnavailable in PDBs by @tico24 in #4111

Full Changelog: argoproj/argo-helm@argo-cd-10.10.1...argo-cd-10.10.2

`v10.10.1`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(deps): update renovatebot/github-action action to v46.3.7 by @argoproj-renovate[bot] in #4106
chore(argo-cd): Update ghcr.io/dexidp/dex Docker tag to v2.46.0 by @argoproj-renovate[bot] in #4120

Full Changelog: argoproj/argo-helm@argo-cd-10.10.0...argo-cd-10.10.1

`v10.10.0`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.93.0 by @argoproj-renovate[bot] in #4117
feat(argo-cd): add server.enabled for Argo CD Core installation by @berlewis in #4118

New Contributors

@berlewis made their first contribution in #4118

Full Changelog: argoproj/argo-helm@argo-cd-10.9.7...argo-cd-10.10.0

`v10.9.7`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update dependency argoproj/argo-cd to v3.5.4 by @argoproj-renovate[bot] in #4119

Full Changelog: argoproj/argo-helm@argo-rollouts-2.43.6...argo-cd-10.9.7

`v10.9.6`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.93.0 by @argoproj-renovate[bot] in #4114

Full Changelog: argoproj/argo-helm@argo-workflows-2.0.9...argo-cd-10.9.6

`v10.9.5`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

feat(argo-cd): support custom secret name for redis password by @maarous in #3951

New Contributors

@maarous made their first contribution in #3951

Full Changelog: argoproj/argo-helm@argo-cd-10.9.4...argo-cd-10.9.5

`v10.9.4`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 in the dependencies group by @dependabot[bot] in #4107
fix(argo-cd): overwrite partial argocd-dex binary in dex copyutil init container by @Cozm1n1412 in #4105

New Contributors

@Cozm1n1412 made their first contribution in #4105

Full Changelog: argoproj/argo-helm@argo-cd-10.9.3...argo-cd-10.9.4

`v10.9.3`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.92.1 by @argoproj-renovate[bot] in #4102

Full Changelog: argoproj/argo-helm@argocd-apps-2.0.6...argo-cd-10.9.3

`v10.9.2`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(deps): bump the dependencies group with 2 updates by @dependabot[bot] in #4080
chore(deps): update renovatebot/github-action action to v46.3.1 by @argoproj-renovate[bot] in #4077
ci(github): reinstate draft-PR lifecycle via octo-sts by @jmeridth in #4084
ci(github): add actionlint, shellcheck, and zizmor linting for workflows and scripts by @jmeridth in #4086
fix(github): resolve fork PRs by head SHA against the open PR list by @jmeridth in #4085
fix(argo-cd): honor gRPC TXT service config overrides by @PhuocOng in #4082

Full Changelog: argoproj/argo-helm@argo-cd-10.9.1...argo-cd-10.9.2

`v10.9.1`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update dependency argoproj/argo-cd to v3.5.3 by @argoproj-renovate[bot] in #4081

Full Changelog: argoproj/argo-helm@argo-workflows-2.0.6...argo-cd-10.9.1

`v10.9.0`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

feat(argo-cd): support unhealthyPodEvictionPolicy on PDBs by @Ranexia04 in #4074

New Contributors

@Ranexia04 made their first contribution in #4074

Full Changelog: argoproj/argo-helm@argo-workflows-2.0.5...argo-cd-10.9.0

`v10.8.4`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.91.1 by @argoproj-renovate[bot] in #4072

Full Changelog: argoproj/argo-helm@argo-cd-10.8.3...argo-cd-10.8.4

`v10.8.3`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

fix(argo-cd): set EXTENSIONS_DIR so extensions install to the served path by @jmeridth in #4068

Full Changelog: argoproj/argo-helm@argo-rollouts-2.43.1...argo-cd-10.8.3

`v10.8.2`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(deps): update renovatebot/github-action action to v46.2.6 by @argoproj-renovate[bot] in #4069
chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.91.0 by @argoproj-renovate[bot] in #4070

Full Changelog: argoproj/argo-helm@argo-cd-10.8.1...argo-cd-10.8.2

`v10.8.1`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(argo-cd): Update quay.io/argoprojlabs/argocd-extension-installer Docker tag to v1.1.0 by @argoproj-renovate[bot] in #4064

Full Changelog: argoproj/argo-helm@argo-events-2.4.26...argo-cd-10.8.1

`v10.8.0`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

docs(github): add AGENTS.md and CLAUDE.md for AI coding agents by @tico24 in #4062
docs(github): tell agents to lint locally before opening a PR by @tico24 in #4063
fix(argo-cd): add application-controller livenessProbe by @roshpr in #4051

New Contributors

@roshpr made their first contribution in #4051

Full Changelog: argoproj/argo-helm@argo-cd-10.7.2...argo-cd-10.8.0

`v10.7.2`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

fix(argo-cd): add app.kubernetes.io/part-of: argocd to secretTem… by @martijnhybrit in #4018

New Contributors

@martijnhybrit made their first contribution in #4018

Full Changelog: argoproj/argo-helm@argocd-image-updater-1.3.1...argo-cd-10.7.2

`v10.7.1`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

chore(github): move pdrastil to emeritus by @jmeridth in #4056
fix(argo-cd): bump redis-ha Redis image to patched OpenSSL base by @jmeridth in #4057

Full Changelog: argoproj/argo-helm@argo-cd-10.7.0...argo-cd-10.7.1

`v10.7.0`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

feat(argo-cd): add VPA startupBoost passthrough for all components by @lemon0333 in #4033

Full Changelog: argoproj/argo-helm@argo-events-2.4.25...argo-cd-10.7.0

cert-manager/cert-manager (cert-manager)

`v1.21.2`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.2 fixes controller and webhook panics, data races, ACME renewal and HTTP-01 solver bugs, and a Gateway API dnsNames bug. It stops the ACME and Vault issuers copying untrusted HTTP response bodies into status conditions and Events, and tightens ambient AWS credential use for namespaced Vault Issuers. It also updates Go and several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

ACME Issuer response bodies are no longer reflected into Issuer status conditions or Kubernetes Events. Only ACME problem documents are surfaced (bounded in length); other responses are reported by HTTP status code alone, with the full error available in the controller logs. (#9239, @FelixPhipps)
Cap ACME server response bodies at 16 MiB to guard against unbounded-body denial-of-service. (#9222, @FelixPhipps)
De-duplicate dnsNames when multiple Gateway/ListenerSet listeners share a Secret (#9234, @speer)
Fix certificate renewal windows using February 29 cron schedules across non-leap century years. (#9240, @wieghx)
Fix validating webhook panics when AdmissionReview requests omit optional fields, by routing identity, approval, and resource validation on the always-present Resource/SubResource fields and denying (rather than silently allowing) requests with an unset or mismatched resource. As a side effect, validation is now also enforced for equivalent-converted requests on non-v1 API versions, which previously could skip validation. (#9235, @lunarwhite)
Fixed HTTP-01 solver cleanup so that a solver ingress, pod or service that has already been deleted no longer fails the cleanup with a NotFound error. (#9278, @arpitjain099)
Fixed a bug where replaces field was being populated for the wrong issuer on issuer changes (#9236, @hjoshi123)
Fixed a data race in the ACME HTTP-01 self-check that could occur when custom DNS servers were configured. (#9313, @shashankvarma499)
Fixed a panic in the certificates-issuing controller when a CertificateRequest has a failure time set but no Ready condition. (#9238, @thc1006)
Fixed a race in pkg/scheduler where the cleanup of a fired timer could cancel a newer timer scheduled for the same object, silently dropping a rescheduled poll. (#9312, @shashankvarma499)
Fixed an issue where the body of a non-Vault HTTP response from spec.vault.server could be copied into the Vault Issuer's Ready condition and its Kubernetes Events. Such responses now report only the HTTP status code, and Vault's own error messages are truncated before being persisted. (#9262, @FelixPhipps)
Ingress-shim no longer removes the applyset label from cached Ingress and Gateway objects (#9314, @KR-Ravindra)
The ACME HTTP-01 self-check no longer reflects the fetched response body in Challenge.status.reason, preventing disclosure of internal response contents reachable via redirects. The response is still available in the controller's debug logs. (#9232, @FelixPhipps)
The vault issuer no longer authenticates to Vault using the cert-manager controller's ambient AWS credentials for AWS IAM auth on a namespaced Issuer, unless ambient credentials are explicitly enabled via --issuer-ambient-credentials. ClusterIssuer and explicit serviceAccountRef (IRSA) configurations are unaffected. (#9231, @FelixPhipps)

Other (Cleanup or Flake)

Upgrade Go to 1.26.6, which includes security fixes to the go command, and the crypto/tls, encoding/asn1, encoding/xml, html/template, net, net/http, and net/url packages. (#9151, @wallrj)
Upgrade Go to 1.26.8. (#9323, @wallrj)
Bump google.golang.org/grpc to v1.83.2 to fix reported security vulnerabilities (#9255, #9317)
Bump golang.org/x/crypto to v0.56.0 to fix reported security vulnerabilities (#9265)

dexidp/helm-charts (dex)

`v0.26.0`

Compare Source

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors.

What's Changed

Update dex by @sagikazarmark in #172

Full Changelog: dexidp/helm-charts@dex-0.25.2...dex-0.26.0

`v0.25.2`

Compare Source

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors.

What's Changed

fix: favicon by @sagikazarmark in #170

Full Changelog: dexidp/helm-charts@dex-0.25.1...dex-0.25.2

`v0.25.1`

Compare Source

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors.

What's Changed

ci: update kubernetes versions by @sagikazarmark in #169

Full Changelog: dexidp/helm-charts@dex-0.25.0...dex-0.25.1

`v0.25.0`

Compare Source

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors.

prometheus-community/helm-charts (kube-prometheus-stack)

`v92.3.1`

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @renovate[bot] in #7363

Full Changelog: prometheus-community/helm-charts@prometheus-conntrack-stats-exporter-0.5.41...kube-prometheus-stack-92.3.1

`v92.3.0`

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

[CI] Update github-workflow dependency updates by @renovate[bot] in #7359
[kube-prometheus-stack] Update grafana Docker tag to v13.5.0 by @renovate[bot] in #7360

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-92.2.0...kube-prometheus-stack-92.3.0

`v92.2.0`

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

[kube-prometheus-stack] Update grafana Docker tag to v13.4.0 by @renovate[bot] in #7358

Full Changelog: prometheus-community/helm-charts@prometheus-29.36.1...kube-prometheus-stack-92.2.0

`v92.1.1`

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

[kube-prometheus-stack] Update grafana Docker tag to v13.3.1 by @renovate[bot] in #7350
[CI] Update github-workflow dependency updates by @renovate[bot] in #7345

Full Changelog: prometheus-community/helm-charts@prometheus-29.36.0...kube-prometheus-stack-92.1.1

`v92.1.0`

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

[kube-prometheus-stack] Update grafana Docker tag to v13.3.0 by @renovate[bot] in #7348

Full Changelog: prometheus-community/helm-charts@prometheus-blackbox-exporter-11.20.0...kube-prometheus-stack-92.1.0

grafana/helm-charts (pyroscope)

`v2.4.0`

Compare Source

A horizontally scalable, highly available, multi-tenant continuous profiling database.

Source commit: grafana/pyroscope@2988a37

Tag on source: https://github.com/grafana/pyroscope/releases/tag/pyroscope-2.4.0

`v2.3.2`

Compare Source

A horizontally scalable, highly available, multi-tenant continuous profiling database.

Source commit: grafana/pyroscope@a784291

Tag on source: https://github.com/grafana/pyroscope/releases/tag/pyroscope-2.3.2

`v2.3.1`

Compare Source

A horizontally scalable, highly available, multi-tenant continuous profiling database.

Source commit: grafana/pyroscope@f9616ac

Tag on source: https://github.com/grafana/pyroscope/releases/tag/pyroscope-2.3.1

grafana-community/helm-charts (tempo)

`v3.1.0`

Compare Source

Grafana Tempo Single Binary Mode

What's Changed

[tempo] Update docker.io/grafana/tempo Docker tag to v3.1.0 by @renovate[bot] in #851

Full Changelog: grafana-community/helm-charts@tempo-vulture-0.14.0...tempo-3.1.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-09-17T00:31:13Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.03%. Comparing base (362089e) to head (1197819).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2148   +/-   ##
=======================================
  Coverage   50.03%   50.03%           
=======================================
  Files         489      489           
  Lines       29981    29981           
=======================================
  Hits        15002    15002           
  Misses      14977    14977           
  Partials        2        2

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate Bot added the renovate label Sep 17, 2026

renovate Bot force-pushed the renovate/all-ci-updates branch from 04357b2 to 8965e15 Compare September 17, 2026 18:29

renovate Bot changed the title ~~chore(deps): update helm release argo-cd to v10.7.0~~ chore(deps): update helm release argo-cd to v10.7.1 Sep 17, 2026

renovate Bot force-pushed the renovate/all-ci-updates branch from 8965e15 to de7b33f Compare September 17, 2026 22:57

renovate Bot changed the title ~~chore(deps): update helm release argo-cd to v10.7.1~~ chore(deps): update all-ci-updates Sep 17, 2026

renovate Bot force-pushed the renovate/all-ci-updates branch 10 times, most recently from 1151bbc to f23e5ce Compare September 25, 2026 17:30

renovate Bot force-pushed the renovate/all-ci-updates branch 6 times, most recently from 329603f to fab96ef Compare September 30, 2026 17:43

lemacbacon approved these changes Oct 1, 2026

View reviewed changes

renovate Bot force-pushed the renovate/all-ci-updates branch 6 times, most recently from e2bb0e7 to ea08f10 Compare October 8, 2026 11:29

renovate Bot force-pushed the renovate/all-ci-updates branch from ea08f10 to 0826eea Compare October 9, 2026 00:23

renovate Bot force-pushed the renovate/all-ci-updates branch 13 times, most recently from 753630c to 4819803 Compare October 16, 2026 17:44

renovate Bot force-pushed the renovate/all-ci-updates branch 10 times, most recently from a1f249e to 3155f76 Compare October 27, 2026 01:16

chore(deps): update all-ci-updates

1197819

renovate Bot force-pushed the renovate/all-ci-updates branch from 3155f76 to 1197819 Compare October 27, 2026 12:26

Navigation Menu

Repository navigation

chore(deps): update all-ci-updates - #2148

chore(deps): update all-ci-updates#2148
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-ci-updates

renovate Bot commented Sep 17, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Sep 17, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Sep 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

codecov Bot commented Sep 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Sep 17, 2026 •

edited

Loading

codecov Bot commented Sep 17, 2026 •

edited

Loading