From 69bdea6f483bd7fa93d905f4e460c9805eb6bdde Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 10:26:51 +0200
Subject: [PATCH 1/2] Renovate: Update External dependencies (#1235)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Adoption](https://docs.renovatebot.com/merge-confidence/) |
[Passing](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update |
|---|---|---|---|---|---|---|---|
|
[github.com/golangci/golangci-lint/v2](https://redirect.github.com/golangci/golangci-lint)
| `v2.13.2` → `v2.14.0` |

|

|

|

| | minor |
|
[github.com/ironcore-dev/ironcore](https://redirect.github.com/ironcore-dev/ironcore)
| `v0.7.0` → `v0.8.0` |

|

|

|

| require | minor |
|
[kube-prometheus-stack](https://redirect.github.com/prometheus-operator/kube-prometheus)
([source](https://redirect.github.com/prometheus-community/helm-charts))
| `91.5.1` → `91.5.2` |

|

|

|

| | patch |
---
### Release Notes
golangci/golangci-lint
(github.com/golangci/golangci-lint/v2)
###
[`v2.14.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2140)
[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.13.2...v2.14.0)
*Released on 2026-09-23*
1. Bug fixes
- fix: cache of facts reloading
2. Linters new features or changes
- `exhaustive`: from 0.12.0 to 0.13.0
- `exhaustruct`: from 5.0.3 to 5.2.0 (new option:
`allow-empty-blank-assignments`)
- `go-check-sumtype`: from 0.3.1 to
[`ae6904d`](https://redirect.github.com/golangci/golangci-lint/commit/ae6904d28606)
- `gocritic`: from 0.14.4 to 0.15.0
- `gofumpt`: from v0.11.1 to 0.12.0
- `gomoddirectives`: from 0.9.0 to 0.10.0
- `gosec`: from 2.28.0 to 2.29.0 (re-enable G407)
- `govet-modernize`: from 0.49.0 to 0.50.0
- `loggercheck`: from 0.11.0 to 0.12.0
- `revive`: from 1.15.0 to 1.17.0 (new rule: `use-slices-concat`)
- `tagliatelle`: from 0.7.2 to 0.8.0
3. Linters bug fixes
- `fatcontext`: from 0.10.0 to 0.10.1
- `flock`: from 0.13.0 to 0.13.1
- `godoclint`: from 0.11.2 to 0.11.4
- `protogetter`: from 0.3.21 to 1.0.0
- `protogetter`: from 1.0.0 to 1.0.1
- `recvcheck`: from 0.3.0 to 0.3.1
- `tagalign`: from 1.4.3 to 1.4.4
ironcore-dev/ironcore
(github.com/ironcore-dev/ironcore)
###
[`v0.8.0`](https://redirect.github.com/ironcore-dev/ironcore/releases/tag/v0.8.0)
[Compare
Source](https://redirect.github.com/ironcore-dev/ironcore/compare/v0.7.0...v0.8.0)
#### Changes
#### ⚠️ Breaking
- Bump etcd to latest 3.6.x
[@friegger](https://redirect.github.com/friegger)
([#1572](https://redirect.github.com/ironcore-dev/ironcore/issues/1572))
- please ensure that v0.7.0 with etcd v.3.5.33 has been deployed to your
environment, before deploying this
#### 🐛 Bug Fixes
- Increased `controller-manager` resource limits
[@lukasfrank](https://redirect.github.com/lukasfrank)
([#1571](https://redirect.github.com/ironcore-dev/ironcore/issues/1571))
prometheus-community/helm-charts
(kube-prometheus-stack)
###
[`v91.5.2`](https://redirect.github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-91.5.2)
[Compare
Source](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-91.5.1...kube-prometheus-stack-91.5.2)
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards,
and Prometheus rules combined with documentation and scripts to provide
easy to operate end-to-end Kubernetes cluster monitoring with Prometheus
using the Prometheus Operator.
#### What's Changed
- \[kube-prometheus-stack] fix(rbac): allow operator to adjust
finalizers on configmap/secret ow… by
[@adns44](https://redirect.github.com/adns44) in
[#7295](https://redirect.github.com/prometheus-community/helm-charts/pull/7295)
#### New Contributors
- [@adns44](https://redirect.github.com/adns44) made their first
contribution in
[#7295](https://redirect.github.com/prometheus-community/helm-charts/pull/7295)
**Full Changelog**:
---
### Configuration
📅 **Schedule**: (in timezone Europe/Berlin)
- Branch creation
- "after 6pm every weekday,every weekend,before 8am every weekday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cobaltcore-dev/cortex).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
Makefile | 2 +-
go.mod | 2 +-
go.sum | 4 ++--
helm/dev/cortex-prometheus-operator/Chart.yaml | 2 +-
4 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/Makefile b/Makefile
index 220ab131a..9fceacd7c 100644
--- a/Makefile
+++ b/Makefile
@@ -59,7 +59,7 @@ GOLANGCI_LINT = $(LOCALBIN)/golangci-lint
GOTESTSUM = $(LOCALBIN)/gotestsum
CONTROLLER_TOOLS_VERSION ?= v0.22.0
-GOLANGCI_LINT_VERSION ?= v2.13.2
+GOLANGCI_LINT_VERSION ?= v2.14.0
GOTESTSUM_VERSION ?= v1.13.0
.PHONY: controller-gen
diff --git a/go.mod b/go.mod
index dcbaef531..b72947b59 100644
--- a/go.mod
+++ b/go.mod
@@ -8,7 +8,7 @@ require (
github.com/go-logr/logr v1.4.4
github.com/google/uuid v1.6.0
github.com/gophercloud/gophercloud/v2 v2.15.0
- github.com/ironcore-dev/ironcore v0.7.0
+ github.com/ironcore-dev/ironcore v0.8.0
github.com/lib/pq v1.12.3
github.com/mattn/go-sqlite3 v1.14.52
github.com/ory/dockertest v3.3.5+incompatible
diff --git a/go.sum b/go.sum
index 30f7170a4..bcc185e8d 100644
--- a/go.sum
+++ b/go.sum
@@ -123,8 +123,8 @@ github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs
github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/ironcore-dev/ironcore v0.7.0 h1:4etot/jtAkmXJj98RnyjJR16tewSSFZNDkQKgJDOxpM=
-github.com/ironcore-dev/ironcore v0.7.0/go.mod h1:1Jz0yG2Hpt838Rg5WJayj8NjiiSaIwETVogLP/VOynk=
+github.com/ironcore-dev/ironcore v0.8.0 h1:llh4S1ZK9gLdUPBAUb/dODHaiYk69x4Vi+gpF6aM0sg=
+github.com/ironcore-dev/ironcore v0.8.0/go.mod h1:1Jz0yG2Hpt838Rg5WJayj8NjiiSaIwETVogLP/VOynk=
github.com/itchyny/gojq v0.12.19 h1:ttXA0XCLEMoaLOz5lSeFOZ6u6Q3QxmG46vfgI4O0DEs=
github.com/itchyny/gojq v0.12.19/go.mod h1:5galtVPDywX8SPSOrqjGxkBeDhSxEW1gSxoy7tn1iZY=
github.com/itchyny/timefmt-go v0.1.8 h1:1YEo1JvfXeAHKdjelbYr/uCuhkybaHCeTkH8Bo791OI=
diff --git a/helm/dev/cortex-prometheus-operator/Chart.yaml b/helm/dev/cortex-prometheus-operator/Chart.yaml
index 1f80d4eb5..9c05d0fa0 100644
--- a/helm/dev/cortex-prometheus-operator/Chart.yaml
+++ b/helm/dev/cortex-prometheus-operator/Chart.yaml
@@ -10,4 +10,4 @@ dependencies:
# CRDs of the prometheus operator, such as PrometheusRule, ServiceMonitor, etc.
- name: kube-prometheus-stack
repository: oci://ghcr.io/prometheus-community/charts
- version: 91.5.1
+ version: 91.5.2
From 09928d05a5f1004e679fc9aa0bbbfaaf1cd27feb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 10:27:23 +0200
Subject: [PATCH 2/2] Renovate: Update github.com/sapcc/go-bits digest to
e0aa5c6 (#1234)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/sapcc/go-bits](https://redirect.github.com/sapcc/go-bits)
| require | digest | `d8aaf2d` → `e0aa5c6` |
---
### Configuration
📅 **Schedule**: (in timezone Europe/Berlin)
- Branch creation
- "after 6pm every weekday,every weekend,before 8am every weekday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cobaltcore-dev/cortex).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
go.mod | 8 ++++----
go.sum | 24 ++++++++++++------------
2 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/go.mod b/go.mod
index b72947b59..d0e84854d 100644
--- a/go.mod
+++ b/go.mod
@@ -15,7 +15,7 @@ require (
github.com/prometheus/client_golang v1.24.1
github.com/prometheus/client_model v0.6.3
github.com/sapcc/go-api-declarations v1.25.1
- github.com/sapcc/go-bits v0.0.0-20260917095256-d8aaf2d73069
+ github.com/sapcc/go-bits v0.0.0-20260924170438-e0aa5c665ed9
go.uber.org/zap v1.28.0
go.xyrillian.de/gg v1.16.0
golang.org/x/sync v0.23.0
@@ -106,11 +106,11 @@ require (
go.yaml.in/yaml/v3 v3.0.5 // indirect
go4.org/netipx v0.0.0-20231129151722-fdeea329fbba // indirect
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect
- golang.org/x/net v0.58.0 // indirect
+ golang.org/x/net v0.59.0 // indirect
golang.org/x/oauth2 v0.36.0 // indirect
golang.org/x/sys v0.48.0 // indirect
- golang.org/x/text v0.41.0 // indirect
- golang.org/x/time v0.15.0 // indirect
+ golang.org/x/text v0.42.0 // indirect
+ golang.org/x/time v0.16.0 // indirect
gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 // indirect
diff --git a/go.sum b/go.sum
index bcc185e8d..8f173a3fa 100644
--- a/go.sum
+++ b/go.sum
@@ -185,8 +185,8 @@ github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7
github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
github.com/sapcc/go-api-declarations v1.25.1 h1:Lrbf8TZY/ARg0J9IrlrObqnXjrzSzmYKQd/L/a71Lsg=
github.com/sapcc/go-api-declarations v1.25.1/go.mod h1:bJkK8wphzlmUmN5lxBv8BbfxUXMOkW+UiC10xBHXsFs=
-github.com/sapcc/go-bits v0.0.0-20260917095256-d8aaf2d73069 h1:LLuqcW09cRLRckI/mQNf6WT5qVFyhewv9d8rrHDJp2k=
-github.com/sapcc/go-bits v0.0.0-20260917095256-d8aaf2d73069/go.mod h1:URuYU3rU0m7lauEnNGqfLxo8Etsub6dXeVNej8xXXk8=
+github.com/sapcc/go-bits v0.0.0-20260924170438-e0aa5c665ed9 h1:kiBHnl3JAkhVLYu8zJmTdAN6jQEDoJAIn6N2wfpQxEs=
+github.com/sapcc/go-bits v0.0.0-20260924170438-e0aa5c665ed9/go.mod h1:N5yzjZM9RPw2WEr/8MfvhdUKWp1N9iB+fz4SkzBqFpQ=
github.com/sirupsen/logrus v1.9.4 h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w=
github.com/sirupsen/logrus v1.9.4/go.mod h1:ftWc9WdOfJ0a92nsE2jF5u5ZwH8Bv2zdeOC42RjbV2g=
github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=
@@ -241,10 +241,10 @@ go4.org/netipx v0.0.0-20231129151722-fdeea329fbba h1:0b9z3AuHCjxk0x/opv64kcgZLBs
go4.org/netipx v0.0.0-20231129151722-fdeea329fbba/go.mod h1:PLyyIXexvUFg3Owu6p/WfdlivPbZJsZdgWZlrGope/Y=
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f h1:W3F4c+6OLc6H2lb//N1q4WpJkhzJCK5J6kUi1NTVXfM=
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f/go.mod h1:J1xhfL/vlindoeF/aINzNzt2Bket5bjo9sdOYzOsU80=
-golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=
-golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40=
-golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
+golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
+golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
+golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
+golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
@@ -254,12 +254,12 @@ golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
golang.org/x/term v0.46.0 h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE=
golang.org/x/term v0.46.0/go.mod h1:+K02xbkittuwc0Am4abfA3Fc+XRGXkvBXNO88NCXPoc=
-golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
-golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
-golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
-golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
-golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE=
-golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk=
+golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
+golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
+golang.org/x/time v0.16.0 h1:vMb6ptszcQMkcwiRTAuNNU50gom6++Q/6gY2hDM6VDE=
+golang.org/x/time v0.16.0/go.mod h1:rVKOqvZeKvrDKTQiAHJ7wmwP0RzleSphoEA9RcdLA0s=
+golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
+golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=