up: update sops library and other deps (#181)

* up: update sops lib and other deps
* pipe: update docker push action

.github/workflows/ci.yaml

@@ -189,7 +189,7 @@ jobs:
       # UPDATE_HERE
       # https://github.com/docker/build-push-action/releases
       - name: Docker build
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: false

.github/workflows/release.yaml

@@ -81,7 +81,7 @@ jobs:
       # https://github.com/docker/build-push-action/releases
       - name: Docker build
         if: env.SKIP_RELEASE == ''
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: true

.github/workflows/reviewdog.yaml

@@ -24,6 +24,8 @@ jobs:
       # https://github.com/reviewdog/action-actionlint/releases
       - name: action-lint
         uses: reviewdog/action-actionlint@v1
+        with:
+          actionlint_flags: "actionlint -shellcheck="
 
       # UPDATE_HERE
       # https://github.com/reviewdog/action-hadolint/releases

.tool-versions

@@ -2,24 +2,24 @@
 # https://github.com/kubernetes-sigs/kubebuilder/releases
 kubebuilder 3.15.0
 # https://golang.org/dl/
-golang 1.22.3
+golang 1.22.4
 # https://github.com/mozilla/sops/releases
-sops 3.8.1
+sops 3.9.0
 # https://github.com/kubernetes-sigs/kustomize/releases
-kustomize 5.4.1
+kustomize 5.4.2
 # https://github.com/rancher/k3d/releases
 k3d 5.6.3
 # https://github.com/kubernetes/kubernetes/releases
-kubectl 1.30.1
+kubectl 1.30.2
 # https://github.com/helm/helm/releases
-helm 3.15.0
+helm 3.15.2
 # https://github.com/norwoodj/helm-docs/releases
 helm-docs 1.13.1
 # https://github.com/yannh/kubeconform/releases
 kubeconform 0.6.6
 # https://github.com/git-chglog/git-chglog/releases
 git-chglog 0.15.4
 # https://github.com/golangci/golangci-lint/releases
-golangci-lint 1.58.1
+golangci-lint 1.59.1
 # https://github.com/cli/cli/releases
-github-cli 2.49.2
+github-cli 2.52.0

Dockerfile

@@ -2,7 +2,7 @@
 # https://wiki.ubuntu.com/Releases
 # https://hub.docker.com/_/ubuntu/tags?page=1&name=noble
 # UPDATE_HERE
-FROM ubuntu:mantic-20240427 as asdf-builder
+FROM ubuntu:mantic-20240530 as asdf-builder
 
 # UPDATE_HERE
 # https://github.com/asdf-vm/asdf/releases
@@ -55,7 +55,7 @@ RUN CGO_ENABLED=0 GO111MODULE=on go build -a -o manager cmd/main.go
 
 ############################################################
 # UPDATE_HERE
-FROM ubuntu:mantic-20240427
+FROM ubuntu:mantic-20240530
 
 # Install build tools
 RUN apt-get -y update \

Makefile

@@ -1,14 +1,14 @@
 # UPDATE_HERE
 # !!!!!!! NOTE: GOEXPERIMENT=nocoverageredesign is temp until 1.23.x
 GO := GOEXPERIMENT=nocoverageredesign GOPROXY=https://proxy.golang.org go
-SOPS_SEC_OPERATOR_VERSION := 0.13.0
+SOPS_SEC_OPERATOR_VERSION := 0.13.1
 
 # https://github.com/kubernetes-sigs/controller-tools/releases
 CONTROLLER_GEN_VERSION := "v0.15.0"
 # https://github.com/kubernetes-sigs/controller-runtime/releases
 CONTROLLER_RUNTIME_VERSION := "v0.18.2"
 # https://github.com/kubernetes-sigs/kustomize/releases
-KUSTOMIZE_VERSION := "v5.4.1"
+KUSTOMIZE_VERSION := "v5.4.2"
 # use `setup-envtest list` to obtain the list of available versions
 # until fixed, can't use newer version, see:
 #   https://github.com/kubernetes-sigs/controller-runtime/issues/1571

README.md

@@ -23,7 +23,7 @@ encrypted files stored in `git` repository.
 
 | Kubernetes | Sops | Chart | Operator |
 |---|---|---|---|
-| v1.30.x | v3.8.1 | 0.19.0 | 0.13.0 |
+| v1.30.x | v3.9.0 | 0.19.1 | 0.13.1 |
 | v1.29.x | v3.8.1 | 0.18.6 | 0.12.6 |
 | v1.28.x | v3.8.1 | 0.17.4 | 0.11.4 |
 | v1.27.x | v3.7.3 | 0.15.5 | 0.9.5 |

chart/helm3/sops-secrets-operator/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 # UPDATE_HERE
-version: 0.19.0
-appVersion: 0.13.0
+version: 0.19.1
+appVersion: 0.13.1
 type: application
 description: Helm chart deploys sops-secrets-operator
 name: sops-secrets-operator

chart/helm3/sops-secrets-operator/Makefile

@@ -4,7 +4,7 @@ CHART_NAME?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^name:/ { gsub(
 VERSION_TAG?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^version/ { gsub(/['\'',]/, ""); print $$2; }')
 
 # UPDATE_HERE
-K8S_VERSION := "1.30.1"
+K8S_VERSION := "1.30.2"
 
 SHELL=/bin/bash
 

chart/helm3/sops-secrets-operator/README.md

@@ -134,11 +134,11 @@ The following table lists the configurable parameters of the Sops-secrets-operat
 | healthProbes.readiness | object | `{"initialDelaySeconds":5,"periodSeconds":10}` | Readiness probe configuration |
 | image.pullPolicy | string | `"Always"` | Operator image pull policy |
 | image.repository | string | `"isindir/sops-secrets-operator"` | Operator image name |
-| image.tag | string | `"0.13.0"` | Operator image tag |
+| image.tag | string | `"0.13.1"` | Operator image tag |
 | imagePullSecrets | list | `[]` | Secrets to pull image from private docker repository |
 | initImage.pullPolicy | string | `"Always"` | Init container image pull policy |
 | initImage.repository | string | `"ubuntu"` | Init container image name |
-| initImage.tag | string | `"mantic-20240427"` | Init container image tag |
+| initImage.tag | string | `"mantic-20240530"` | Init container image tag |
 | kubeconfig | object | `{"enabled":false,"path":null}` | Paths to a kubeconfig. Only required if out-of-cluster. |
 | logging | object | `{"development":false,"encoder":"json","level":"info","stacktraceLevel":"error","timeEncoding":"iso8601"}` | Logging configuration section suggested values Development Mode (encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode (encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error) (default) |
 | logging.development | bool | `false` | Zap Development Mode enabled |