chore(deps): update dependency argoproj-labs/gitops-promoter to v0.27.1

[gitops-promoter-renovate-bot]

This PR contains the following updates:

Package	Update	Change
argoproj-labs/gitops-promoter	minor	0.26.3 → 0.27.1

---

Release Notes

argoproj-labs/gitops-promoter (argoproj-labs/gitops-promoter)

v0.27.1

Compare Source

---

If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.

---

Changelog

Bug fixes

• b82b5b7: fix: use SSA to update status to avoid conflicts (#​1345) (@​zachaller)

Documentation

• b054f1e: docs: bump manifest versions to v0.27.1 (#​1347) (@​github-actions[bot])

Dependency updates

• 91cf269: chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#​1340) (@​dependabot[bot])
• 042650a: chore(deps): bump k8s.io/apiextensions-apiserver from 0.35.3 to 0.35.4 (#​1341) (@​dependabot[bot])
• 3e8a6a7: chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.3.2 to 6.4.0 (#​1339) (@​dependabot[bot])

Verifying this release (Sigstore / cosign)

Container image (for tag v0.27.1):

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.27.1' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:v0.27.1

latest images on Quay are signed from release-latest.yaml on main:

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release-latest.yaml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:latest

Checksums file: The checksums file is signed with Sigstore. Download gitops-promoter_0.27.1_checksums.txt and its .sigstore.json bundle, then verify:

cosign verify-blob \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.27.1' \
  --bundle gitops-promoter_0.27.1_checksums.txt.sigstore.json \
  gitops-promoter_0.27.1_checksums.txt

Then verify any downloaded artifact against the checksums file:

sha256sum -c gitops-promoter_0.27.1_checksums.txt --ignore-missing

Full Changelog: argoproj-labs/gitops-promoter@v0.27.0...v0.27.1

v0.27.0

Compare Source

---

If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.

---

Changelog

Features

• 15d6711: feat(ci): enforce best practices in PR checks (#​1309) (@​crenshaw-dev)
• 31cccdd: feat(logs): SCM call logs (#​1318) (@​crenshaw-dev)
• 5b016fa: feat(wrcs)!: wrcs success when output and template cleanup (#​1311) (@​zachaller)
• af6833b: feat: add npm audit fix workflow dispatch and CI contributing guide (#​1332) (@​Copilot)
• 1187c12: feat: always run success.when (#​1302) (@​zachaller)
• f2cb07e: feat: webrequest commit status metrics (#​1333) (@​zachaller)

Bug fixes

• 0fabb30: fix(ci): Update Helm chart artifact version in workflow (#​1322) (@​crenshaw-dev)
• dc94518: fix(ctp): clear CTP finalizer from PRs before CTP is deleted (#​1320) (@​crenshaw-dev)
• 93a4e3c: fix(pr): prevent reconcile runaway on zombie PR (#​1321) (@​crenshaw-dev)
• 3e50c4d: fix: no-op dry SHA bypasses health checks on previous environments (#​1319) (@​zachaller)

Documentation

• 0e2a42d: docs: add Circle to USERS.md (#​1334) (@​seanl-circle)
• fed1ce4: docs: bump manifest versions to v0.27.0 (#​1335) (@​github-actions[bot])
• 2d0d37b: docs: fix broken code block (#​1306) (@​crenshaw-dev)

Dependency updates

• 299ab32: chore(deps): bump actions/cache from 5.0.4 to 5.0.5 (#​1330) (@​dependabot[bot])
• a50a750: chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#​1325) (@​dependabot[bot])
• 716057b: chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#​1326) (@​dependabot[bot])
• de26de6: chore(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (#​1328) (@​dependabot[bot])
• 01358a3: chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#​1324) (@​dependabot[bot])
• 17da85f: chore(deps): bump renovatebot/github-action from 46.1.8 to 46.1.9 (#​1323) (@​dependabot[bot])
• f20064f: chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#​1329) (@​dependabot[bot])
• 2a34f7d: chore(deps): upgrade axios to 1.15.0 (#​1315) (@​zachaller)

Other work

• 56985bf: chore: rename exprEnv to exprData (#​1310) (@​zachaller)
• dd1bf95: chore: small fixes (#​1304) (@​crenshaw-dev)

Verifying this release (Sigstore / cosign)

Container image (for tag v0.27.0):

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.27.0' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:v0.27.0

latest images on Quay are signed from release-latest.yaml on main:

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release-latest.yaml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:latest

Checksums file: The checksums file is signed with Sigstore. Download gitops-promoter_0.27.0_checksums.txt and its .sigstore.json bundle, then verify:

cosign verify-blob \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.27.0' \
  --bundle gitops-promoter_0.27.0_checksums.txt.sigstore.json \
  gitops-promoter_0.27.0_checksums.txt

Then verify any downloaded artifact against the checksums file:

sha256sum -c gitops-promoter_0.27.0_checksums.txt --ignore-missing

Full Changelog: argoproj-labs/gitops-promoter@v0.26.3...v0.27.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.