Skip to content

chore(deps): update regex#235

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/regex
Open

chore(deps): update regex#235
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/regex

Conversation

@renovate

@renovate renovate Bot commented Jun 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
argoproj/argo-cd patch v3.4.3 → v3.4.4
eclipse-theia/theia-blueprint minor v1.71.101 → v1.72.300
hashicorp/terraform patch v1.15.5 → v1.15.6
helm/helm patch v4.2.0 → v4.2.2
kubernetes/kubernetes patch v1.36.1 → v1.36.2
kubevirt/kubevirt patch v1.8.2 → v1.8.4
terraform-linters/tflint minor v0.62.1 → v0.63.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v3.4.4

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.4/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.4/manifests/ha/install.yaml
Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog
Bug fixes
Other work

Full Changelog: argoproj/argo-cd@v3.4.3...v3.4.4

eclipse-theia/theia-blueprint (eclipse-theia/theia-blueprint)

v1.72.300

Compare Source

hashicorp/terraform (hashicorp/terraform)

v1.15.6

Compare Source

1.15.6 (June 10, 2026)

BUG FIXES:

  • Fixed an issue where resources being removed from state via removed block were incorrectly listed under planned_values in json representations of the plan file. (#​38665)

  • console: Fixed a panic caused by evaluating an expression involving deprecated values (#​38676)

  • Fix exit code for plan, query, and refresh commands for variable-related errors (#​38685)

  • Fix two module installation edge cases with null and sensitive/ephemeral module sources (#​38704)

helm/helm (helm/helm)

v4.2.2: Helm v4.2.2

Compare Source

Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32214
Installation and Upgrading

Download Helm v4.2.2. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881c (George Jenkins)

Full Changelog: helm/helm@v4.2.1...v4.2.2

v4.2.1: Helm v4.2.1

Compare Source

Helm v4.2.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #​31925
  • Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #​32056
  • Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #​31757
  • Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32081
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #​32153
  • Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 #​32128
  • Dependency updates

Installation and Upgrading

Download Helm v4.2.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#​31925) d591a19 (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#​32056) 2a9fcae (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 ffa5bd6 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 9f9dbaf (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 64a2891 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 e54a4a2 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 acb762b (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 768586d (dependabot[bot])
  • fix(version): avoid false range detection on prerelease x/X eabfae5 (Benoit Tigeot)
  • fix(version): version range || can has no space e3fd51f (Benoit Tigeot)
  • feat: report in debug the version we select with version range arg 1e47395 (Benoit Tigeot)
  • fix: prevent warning when using version range constraints a33e239 (Benoit Tigeot)
  • fix(kube): always propagate context.Canceled in WaitForDelete fa06d44 (Terry Howe)
  • fix(kube): prevent spurious early exit in WaitForDelete during informer sync 360d483 (Terry Howe)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 7651edf (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 b132e7e (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 eee491a (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 3e3c575 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 c4ce2bb (dependabot[bot])
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 3892dc2 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 c4bbb62 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 a0d7f16 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 8a3de05 (dependabot[bot])
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 57a4803 (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b33ae02 (dependabot[bot])

Full Changelog: helm/helm@v4.2.0...v4.2.1

kubernetes/kubernetes (kubernetes/kubernetes)

v1.36.2

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubevirt/kubevirt (kubevirt/kubevirt)

v1.8.4

Compare Source

tag v1.8.4
Tagger: Federico Fossemo ffossemo@redhat.com

This release follows v1.8.3 and consists of 31 changes, contributed by 12 people, leading to 60 files changed, 1901 insertions(+), 475 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/kubevirt/releases/tag/v1.8.4.

The primary release artifact of KubeVirt is the git tree. The release tag is
signed and can be verified using git tag -v v1.8.4.

Pre-built containers are published on Quay and can be viewed at: https://quay.io/kubevirt/.

Notable changes

  • [PR #​17987][Ronilerr] Adding missing metrics, recording rules and alerts for virt components
  • [PR #​17962][UdayYendva] Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 to address CVE-2026-35469 (GHSA-pc3f-x583-g7j2).
  • [PR #​18059][kubevirt-bot] Use --expand-cpu-features and --supported-cpu-features in node-labeller for
  • [PR #​18031][SamAlber] Fixed a gRPC connection leak in virt-handler's GetLauncherClient that caused unbounded memory growth, socket accumulation, and goroutine leaks when multiple controllers raced to create connections for the same VMI.

Contributors

12 people contributed to this release:

6 ronilerr rrabinov@redhat.com
3 Adi Aloni aaloni@redhat.com
2 Samuel Albershtein salbersh@redhat.com
2 bmordeha bmordeha@redhat.com
1 Javier Cano Cano jcanocan@redhat.com
1 Lee Yarwood lyarwood@redhat.com
1 Or Shoval oshoval@redhat.com
1 Oren Cohen ocohen@redhat.com
1 Uday Yendava uyendava@redhat.com
1 fossedihelm ffossemo@redhat.com

Additional Resources

-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQT336LhfFzgGMwYm4OriYWHZ3eqPAUCai/AYwAKCRCriYWHZ3eq
PJWrAQCHqk74Hfcw/NssGvFo1tGhhYr96XE3eiiZJ+NEWIqGVAEA54l9iwEj2ibo
TNawajpxXOk2lQAOLEE0hraThtenJQs=
=3Wgo
-----END PGP SIGNATURE-----

v1.8.3

Compare Source

tag v1.8.3
Tagger: Federico Fossemo ffossemo@redhat.com

This release follows v1.8.2 and consists of 75 changes, contributed by 21 people, leading to 457 files changed, 81936 insertions(+), 33796 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/kubevirt/releases/tag/v1.8.3.

The primary release artifact of KubeVirt is the git tree. The release tag is
signed and can be verified using git tag -v v1.8.3.

Pre-built containers are published on Quay and can be viewed at: https://quay.io/kubevirt/.

Notable changes

  • [PR #​17988][kubevirt-bot] Fix symlink traversal in VMExport dir handler
  • [PR #​17876][nirdothan] Fixed VMI status reporting the pod's IPv6 address instead of the guest's when using bridge binding on a network with IPv6 IPAM.
  • [PR #​17660][kubevirt-bot] Updated virt-template to v0.1.8
  • [PR #​17745][kubevirt-bot] Fixed virt-controller DRA claim rendering for GPU/HostDevice resources by preserving per-device claim/request tuples (including shared claim names with different requests).
  • [PR #​17863][fossedihelm] Fixed multi-device VFIO passthrough VMs failing to start with "cannot limit locked memory" by scaling virt-handler's memlock rlimit to account for per-device memory locking, matching libvirt's calculation introduced in v8.7.0.
  • [PR #​17823][kubevirt-bot] Fix VirtualMachineStuckOnNode and VMCannotBeEvicted alerts failing during live migration due to duplicate kubevirt_vmi_info series
  • [PR #​17727][mhenriks] Gate PCI topology on machine type, not just architecture
  • [PR #​17761][kubevirt-bot] Bug fix: virt-operator error messages no longer dump entire resource structs via %+v, preventing the KubeVirt CR from exceeding the etcd 3MB object size limit when resource creation fails
  • [PR #​17658][dshchedr] Fixed GuestPanicked event details for non-root virt-launcher
  • [PR #​17765][kubevirt-bot] fix: cross-namespace live migration now works on IPv6 clusters
  • [PR #​17738][kubevirt-bot] Fix VM with PCI hostdev failing to restart after hotplug block volume
  • [PR #​17706][avlitman] multiple recording rules are deprecated in favor of new names, in order to comply with the recording rules naming conventions. kubevirt_vm_created_total recording rule and kubevirt_vm_created_by_pod_total metric are deprecated completely
  • [PR #​17646][kubevirt-bot] Fixed virt-api truncating deep subresources (vnc/screenshot, sev/*, evacuate/cancel) when constructing SubjectAccessReviews, causing authorization checks against incorrect subresource names.
  • [PR #​17631][kubevirt-bot] VEP-10: bug fixes for DRA Devices to align kubevirt implementation to KEP-5304
  • [PR #​17590][sbiradar10] Bump google.golang.org/grpc to 1.79.3 to remediate CVE GHSA-p77j-4mvh-x3m3
  • [PR #​17612][kubevirt-bot] Fix: GuestAgentPing liveness/readiness probes no longer cause Kubernetes to restart the virt-launcher pod when the guest agent is temporarily unreachable for a non-fault reason; suppression covers live migration (both pre-copy target and post-copy source) and any intentional or transient VM pause such as user pause, snapshot, save, or dump.

Contributors

21 people contributed to this release:

9 Jed Lejosne jed@redhat.com
6 Lee Yarwood lyarwood@redhat.com
5 Nir Dothan ndothan@redhat.com
5 fossedihelm ffossemo@redhat.com
3 Alay Patel alayp@nvidia.com
3 Michael Henriksen mhenriks@redhat.com
3 Or Shoval oshoval@redhat.com
2 Shirly Radco sradco@redhat.com
2 Simone Tiraboschi stirabos@redhat.com
1 Alex Kalenyuk akalenyu@redhat.com
1 Denys Shchedrivyi dshchedr@redhat.com
1 Emanuele Prella eprella@redhat.com
1 Felix Matouschek fmatouschek@redhat.com
1 Harshitha MS harshitha.ms@ibm.com
1 Michal Skrivanek michal.skrivanek@redhat.com
1 Samuel Albershtein salbersh@redhat.com
1 Shiwani Biradar sbiradar@redhat.com
1 avlitman alitman@redhat.com
1 dsionov dsionov@redhat.com

Additional Resources

-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQT336LhfFzgGMwYm4OriYWHZ3eqPAUCaiAx0wAKCRCriYWHZ3eq
PMaFAP9jeRNDbhf8Ypeg4iz+SDlKkz6GhBxhr9vdC2+dnjmu3QEAy3sh6/YAM0U9
85tsDC+DUftR/xnIhTHQKhzFylJ1DQM=
=iJs2
-----END PGP SIGNATURE-----

terraform-linters/tflint (terraform-linters/tflint)

v0.63.1

Compare Source

What's Changed

[!NOTE]
This release contains only a fix for the release pipeline; the actual behavior remains unchanged from v0.63.0.

Chores

Full Changelog: terraform-linters/tflint@v0.63.0...v0.63.1

v0.63.0

Compare Source

What's Changed

[!NOTE]
Due to a release pipeline issue, this release does not have a corresponding artifact attestation.
If you need to pass gh attestation verify, please use v0.63.1.

Enhancements
Chores

Full Changelog: terraform-linters/tflint@v0.62.1...v0.63.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update dependency aquasecurity/trivy to v0.71.0 chore(deps): update regex Jun 2, 2026
@renovate renovate Bot force-pushed the renovate/regex branch from b9960dd to 54fa15a Compare June 2, 2026 17:12
@renovate renovate Bot changed the title chore(deps): update regex chore(deps): update regex to v0.63.0 Jun 3, 2026
@renovate renovate Bot force-pushed the renovate/regex branch from 54fa15a to 6945d95 Compare June 3, 2026 06:30
@renovate renovate Bot changed the title chore(deps): update regex to v0.63.0 chore(deps): update regex Jun 3, 2026
@renovate renovate Bot force-pushed the renovate/regex branch 8 times, most recently from 87d8aaf to 80bfdac Compare June 9, 2026 02:44
@renovate renovate Bot force-pushed the renovate/regex branch 12 times, most recently from c33da82 to ab55eb7 Compare June 19, 2026 04:15
@renovate renovate Bot force-pushed the renovate/regex branch 3 times, most recently from be202e6 to 601f3cf Compare June 22, 2026 05:46
@renovate renovate Bot force-pushed the renovate/regex branch from 601f3cf to 6a0dca5 Compare June 23, 2026 00:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants