fix(deps): update dependencies (minor) to v0.5.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/opendefensecloud/charts/dependency-controller	minor	0.4.0 → 0.5.0
ghcr.io/opendefensecloud/dependency-controller	minor	0.4.0 → 0.5.0
ghcr.io/opendefensecloud/dependency-webhook	minor	0.4.0 → 0.5.0

---

Release Notes

opendefensecloud/dependency-controller (ghcr.io/opendefensecloud/dependency-controller)

v0.5.0

Compare Source

This release moves the controller onto the kcp 0.32 / Kubernetes 1.36 component set,
fixes duplicated entries in delete-denial messages, and adds tooling to test against
several kcp versions.

The helm chart now respects that there are two different images for webhook and controller.
This is a breaking change you need to account for in your values.yaml

Highlights

kcp 0.32 and Kubernetes 1.36 (#​147)

The controller is now built against kcp SDK 0.32.3 and Kubernetes 0.36.3, together
with controller-runtime 0.24.1, multicluster-runtime 0.24.1 and
multicluster-provider 0.8.0.

kcp	Kubernetes	Status
0.32.x	1.36	Supported
0.31.x	1.35	Supported
0.30.x	1.34	Best effort
≤ 0.29.x	≤ 1.33	Not supported

Existing kcp 0.31 deployments keep working — no action is required. Both 0.31.x
and 0.32.x are covered by the integration and e2e suites. See
docs/compatibility.md for what each tier means and why the
boundary sits there.

Each blocking dependent is reported once (#​108)

When a DELETE was denied, the webhook could name the same blocking resource several
times - it is now ensured to only show each resource exactly once.

Test against a matrix of kcp versions (#​147)

The test targets (integration & e2e tests) can now run against several kcp servers instead of a single pinned
one.

What's Changed

• chore(deps): update dependency opendefensecloud/dev-kit to v1.0.10 by @​renovate[bot] in #​95
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.30.0 by @​renovate[bot] in #​97
• chore(deps): update golang version sync to v1.26.4 by @​renovate[bot] in #​92
• chore(deps): update module ginkgo to v2.30.0 by @​renovate[bot] in #​96
• Report each blocking dependent once on delete by @​BergCyrill in #​108
• Add Security Policy by @​Perseus985 in #​110
• Add codeowners file by @​Perseus985 in #​111
• chore(deps): update github/codeql-action action to v4.37.0 by @​renovate[bot] in #​93
• chore(deps): update golang version sync to v1.26.5 by @​renovate[bot] in #​99
• chore(deps): update actions/checkout action to v6.0.3 by @​renovate[bot] in #​94
• chore(deps): update gcr.io/distroless/static:nonroot docker digest to d29e660 by @​renovate[bot] in #​113
• chore(deps): update docker/build-push-action action to v7.3.0 by @​renovate[bot] in #​114
• chore(deps): update docker/login-action action to v4.4.0 by @​renovate[bot] in #​116
• chore(deps): update docker/setup-buildx-action action to v4.2.0 by @​renovate[bot] in #​118
• chore(deps): update docker/metadata-action action to v6.2.0 by @​renovate[bot] in #​117
• chore(deps): update actions/attest-build-provenance action to v4.1.1 by @​renovate[bot] in #​109
• chore(deps): update actions/setup-go action to v6.5.0 by @​renovate[bot] in #​107
• chore(deps): update dependency opendefensecloud/dev-kit to v1.0.11 by @​renovate[bot] in #​105
• chore(deps): update docker/setup-qemu-action action to v4.2.0 by @​renovate[bot] in #​120
• chore(deps): update golangci/golangci-lint-action action to v9.3.0 by @​renovate[bot] in #​121
• add helm webhook image by @​the-vas in #​127
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.32.1 by @​renovate[bot] in #​126
• chore(deps): update module ginkgo to v2.32.1 by @​renovate[bot] in #​100
• Fix E2E Tests by @​BergCyrill in #​130
• fix(deps): update module github.com/kcp-dev/multicluster-provider/client to v0.8.0 by @​renovate[bot] in #​124
• Dependency bump for kcp sdk & apigen by @​BergCyrill in #​132
• chore(deps): update github/codeql-action action to v4.37.7 by @​renovate[bot] in #​129
• chore(deps): update ossf/scorecard-action action to v2.4.4 by @​renovate[bot] in #​133
• chore(deps): update golang version sync to v1.26.6 by @​renovate[bot] in #​131
• chore(deps): update module osv-scanner to v2.5.1 by @​renovate[bot] in #​122
• chore(deps): update actions/attest-build-provenance action to v4.2.2 by @​renovate[bot] in #​135
• chore(deps): update dependency opendefensecloud/dev-kit to v1.0.14 by @​renovate[bot] in #​128
• chore(deps): update google/osv-scanner-action action to v2.5.1 by @​renovate[bot] in #​136
• chore(deps): update docker/login-action action to v4.6.0 by @​renovate[bot] in #​138
• chore(deps): update actions/checkout action to v6.1.0 by @​renovate[bot] in #​137
• fix(deps): update module github.com/onsi/gomega to v1.42.1 by @​renovate[bot] in #​139
• chore(deps): update actions/checkout action to v7 by @​renovate[bot] in #​141
• fix(deps): update module github.com/stretchr/testify to v1.12.0 by @​renovate[bot] in #​140
• chore(deps): update actions/setup-go action to v7 by @​renovate[bot] in #​142
• Coordinated kcp 0.32 / k8s 0.36 component update by @​BergCyrill in #​147
• Pin golangci-lint & fix linting issue by @​BergCyrill in #​150
• Bump golang.org/x/text by @​BergCyrill in #​151
• ci: migrate from deprecated attest wrappers to actions/attest by @​cbrgm in #​152

New Contributors

• @​the-vas made their first contribution in #​127
• @​cbrgm made their first contribution in #​152

Full Changelog: opendefensecloud/dependency-controller@v0.4.0...v0.4.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 5am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.