chore(deps): update all non-major dependencies

Author: renovate[bot]

.github/workflows/e2e-test.yaml

@@ -34,7 +34,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@v5
         with:
-          version: '4.3.0' # renovate: datasource=github-releases depName=helm/helm
+          version: '4.3.1' # renovate: datasource=github-releases depName=helm/helm
 
       - name: Clean Go module cache
         run: |

Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.27@sha256:007a316059246276cb214df93950be77837545dc78007a73e0291a4963d5d3bf AS builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.27@sha256:2920bb124f1a2e12a1d39f0cab756ae0068441ee1da7655dec7f5e374944095b AS builder
 
 ARG BUILDPLATFORM
 ARG TARGETPLATFORM

Makefile

@@ -18,13 +18,13 @@ RELEASE_MSG ?= "koperator release"
 REL_TAG = $(shell ./scripts/increment_version.sh -${RELEASE_TYPE} ${TAG})
 
 # Version constants
-GOLANGCI_VERSION = 2.14.0 # renovate: datasource=github-releases depName=golangci/golangci-lint
+GOLANGCI_VERSION = 2.15.0 # renovate: datasource=github-releases depName=golangci/golangci-lint
 LICENSEI_VERSION = 0.9.0 # renovate: datasource=github-releases depName=goph/licensei
 CONTROLLER_GEN_VERSION = v0.22.0 # kept in sync with kubernetes-sigs/controller-tools by `make update-go-deps`
 ENVTEST_K8S_VERSION = 1.37.0 # renovate: datasource=github-releases depName=kubernetes-sigs/controller-tools extractVersion=^envtest-v(?<version>.+)$
 SETUP_ENVTEST_VERSION := latest
 ADDLICENSE_VERSION = 1.2.0 # renovate: datasource=github-releases depName=google/addlicense
-GOTEMPLATE_VERSION = 3.12.0 # renovate: datasource=github-releases depName=coveooss/gotemplate
+GOTEMPLATE_VERSION = 3.12.1 # renovate: datasource=github-releases depName=coveooss/gotemplate
 MOCKGEN_VERSION = 0.6.0 # renovate: datasource=github-releases depName=uber-go/mock
 
 GOPROXY=https://proxy.golang.org

api/go.mod

@@ -1,6 +1,6 @@
 module github.com/banzaicloud/koperator/api
 
-go 1.27.2
+go 1.27.3
 
 require (
 	dario.cat/mergo v1.0.2

api/v1beta1/kafkacluster_types.go

@@ -55,7 +55,7 @@ const (
 	IsControllerNodeKey = "isControllerNode"
 
 	// DefaultCruiseControlImage is the default CC image used when users don't specify it in CruiseControlConfig.Image
-	DefaultCruiseControlImage = "adobe/cruise-control:3.0.3-adbe-20260722" // renovate: datasource=docker depName=adobe/cruise-control
+	DefaultCruiseControlImage = "adobe/cruise-control:3.1.0-adbe-20261029" // renovate: datasource=docker depName=adobe/cruise-control
 
 	// DefaultKafkaImage is the default Kafka image used when users don't specify it in KafkaClusterSpec.ClusterImage
 	DefaultKafkaImage = "ghcr.io/adobe/koperator/kafka:2.13-3.9.2-jdk21.0.12" // renovate: datasource=docker depName=ghcr.io/adobe/koperator/kafka
@@ -64,7 +64,7 @@ const (
 	DefaultMonitorImage = "ghcr.io/adobe/koperator/jmx-javaagent:1.5.0" // renovate: datasource=docker depName=ghcr.io/adobe/koperator/jmx-javaagent
 
 	// DefaultEnvoyImage is the default Envoy proxy image used when users don't specify it in EnvoyConfig.Image
-	DefaultEnvoyImage = "envoyproxy/envoy:v1.39.4" // renovate: datasource=docker depName=envoyproxy/envoy
+	DefaultEnvoyImage = "envoyproxy/envoy:v1.40.2" // renovate: datasource=docker depName=envoyproxy/envoy
 
 	// ControllerNodeProcessRole represents the node is a controller node
 	ControllerNodeProcessRole = "controller"
@@ -115,7 +115,7 @@ const (
 	/* Cruise Control Config */
 
 	// CruiseControlDeployment.spec.template.spec.container["%s-cruisecontrol"].image
-	defaultCruiseControlImage = "adobe/cruise-control:3.0.3-adbe-20260722" // renovate: datasource=docker depName=adobe/cruise-control
+	defaultCruiseControlImage = "adobe/cruise-control:3.1.0-adbe-20261029" // renovate: datasource=docker depName=adobe/cruise-control
 
 	// CruiseControlDeployment.spec.template.spec.container["%s-cruisecontrol"].resources
 	defaultCruiseControlRequestResourceCpu    = "200m"

charts/kafka-operator/values.yaml

@@ -103,7 +103,7 @@ prometheusMetrics:
       # -- Auth proxy container image repository
       repository: quay.io/brancz/kube-rbac-proxy
       # -- Auth proxy container image tag
-      tag: v0.23.0
+      tag: v0.23.1
       # -- Auth proxy container image pull policy
       pullPolicy: IfNotPresent
     serviceAccount:

config/overlays/auth-proxy-enabled/manager_auth_proxy_patch.yaml

@@ -10,7 +10,7 @@ spec:
     spec:
       containers:
       - name: kube-rbac-proxy
-        image: quay.io/brancz/kube-rbac-proxy:v0.23.0 # renovate: datasource=docker depName=quay.io/brancz/kube-rbac-proxy
+        image: quay.io/brancz/kube-rbac-proxy:v0.23.1 # renovate: datasource=docker depName=quay.io/brancz/kube-rbac-proxy
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"

config/overlays/certmanager-with-auth-proxy/auth-proxy/manager_auth_proxy_patch.yaml

@@ -10,7 +10,7 @@ spec:
     spec:
       containers:
       - name: kube-rbac-proxy
-        image: quay.io/brancz/kube-rbac-proxy:v0.23.0 # renovate: datasource=docker depName=quay.io/brancz/kube-rbac-proxy
+        image: quay.io/brancz/kube-rbac-proxy:v0.23.1 # renovate: datasource=docker depName=quay.io/brancz/kube-rbac-proxy
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"

config/samples/simplekafkacluster.yaml

@@ -85,7 +85,7 @@ spec:
 #      limits:
 #        cpu: 500m
 #        memory: 1Gi
-    image: "adobe/cruise-control:3.0.3-adbe-20260722" # renovate: datasource=docker depName=adobe/cruise-control
+    image: "adobe/cruise-control:3.1.0-adbe-20261029" # renovate: datasource=docker depName=adobe/cruise-control
     config: |
       # Copyright 2017 LinkedIn Corp. Licensed under the BSD 2-Clause License (the "License"). See License in the project root for license information.
       #

config/samples/simplekafkacluster_4disk.yaml

@@ -105,7 +105,7 @@ spec:
 #      limits:
 #        cpu: 500m
 #        memory: 1Gi
-    image: "adobe/cruise-control:3.0.3-adbe-20260722" # renovate: datasource=docker depName=adobe/cruise-control
+    image: "adobe/cruise-control:3.1.0-adbe-20261029" # renovate: datasource=docker depName=adobe/cruise-control
     config: |
       # Copyright 2017 LinkedIn Corp. Licensed under the BSD 2-Clause License (the "License"). See License in the project root for license information.
       #