Update all non-major dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
changesets/action	action	minor	v1.4.10 → v1.5.3
helm/chart-testing-action	action	minor	v2.6.1 → v2.8.0
helm/kind-action	action	minor	v1.10.0 → v1.13.0
python	uses-with	minor	3.12 → 3.14
sigstore/cosign-installer	action	minor	v3.7.0 → v3.10.1

---

Release Notes

changesets/action (changesets/action)

v1.5.3

Compare Source

Patch Changes

• #​477 9d933dc Thanks @​Andarist! - Updated @actions/* and @octokit/* dependencies.

• #​479 cf373e4 Thanks @​Andarist! - Switched to esbuild for bundling the dist file. This led to 45% file size reduction.

• #​488 022692b Thanks @​s0! - Fix PRs sometimes not getting reopened with commitMode: github-api

  There was a race-condition that means sometimes existing PRs would not be found,
  and new PRs would be opened. This has now been fixed by fetching existing PRs
  before making any changes.

• #​486 7ed1955 Thanks @​s0! - Fixed situations in which cwd was specified as a relative path and used with (default) commitMode: git-cli

• #​461 e9c36b6 Thanks @​nayounsang! - Avoid hitting a deprecation warning when encountering errors from @octokit/request-error

v1.5.2

Compare Source

Patch Changes

• #​473 3c24abe Thanks @​s0! - Make git add work consistently with subdirectories

  Ensure that when running the action from a subdirectory of a repository,
  only the files from that directory are added, regardless of commitMode.

v1.5.1

Compare Source

Patch Changes

• #​471 15ab130 Thanks @​h3rmanj! - Bump @changesets/ghcommit to v1.4.0, which fixes an issue running this action in monorepos with commitMode: github-api

• #​467 6e57550 Thanks @​Vx-V! - Avoid searching for an existing pull request early.

v1.5.0

Compare Source

Minor Changes

• #​391 207dc3d Thanks @​s0! - Introduce a new input commitMode that allows using the GitHub API for pushing tags and commits instead of the Git CLI.

  When used with "github-api" value all tags and commits will be attributed to the user whose GITHUB_TOKEN is used, and also signed using GitHub's internal GPG key.

helm/chart-testing-action (helm/chart-testing-action)

v2.8.0

Compare Source

What's Changed

• Bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​171
• Fix the broken link for GitHub Help Documentation by @​subramani95 in #​174
• bump ct and yamale version by @​cpanato in #​178
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​181
• Bump actions/setup-python from 5.4.0 to 6.0.0 by @​dependabot[bot] in #​179
• Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​183
• Use uv instead of python venv by @​nikolaik in #​172
• Bump sigstore/cosign-installer from 3.8.1 to 4.0.0 by @​dependabot[bot] in #​184

New Contributors

• @​subramani95 made their first contribution in #​174
• @​nikolaik made their first contribution in #​172

Full Changelog: helm/chart-testing-action@v2...v2.8.0

v2.7.0

Compare Source

For ct change see https://github.com/helm/chart-testing/releases/tag/v3.12.0

What's Changed

• docs: update all version references to latest versions by @​froblesmartin in #​141
• update ct to v3.11.0 / yamlint to 1.33.0 / yamale to 4.0.4 / add e2e test by @​cpanato in #​144
• use ct 3.12.0 as default by @​cpanato in #​165
• clean up and fix cr action next release by @​cpanato in #​166

New Contributors

• @​froblesmartin made their first contribution in #​141

Full Changelog: helm/chart-testing-action@v2.6.1...v2.7.0

helm/kind-action (helm/kind-action)

v1.13.0

Compare Source

What's Changed

• chore: verify sha256sum of kubectl by @​felix-kaestner in #​134
• Load GITHUB_PATH in PATH to use correct binaries when creating registry by @​gotha in #​133
• feat: Add cloud provider by @​waltermity in #​135
• chore: bump kind to v0.29.0 by @​pmalek in #​144
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​145
• bug: respect 'install_only' action input value by @​mszostok in #​147
• bump kind and kubectl and also nodejs by @​cpanato in #​150

New Contributors

• @​felix-kaestner made their first contribution in #​134
• @​gotha made their first contribution in #​133
• @​waltermity made their first contribution in #​135
• @​pmalek made their first contribution in #​144
• @​mszostok made their first contribution in #​147

Full Changelog: helm/kind-action@v1...v1.13.0

v1.12.0

Compare Source

What's Changed

• update kind to use release v0.26.0 by @​cpanato in #​129
• feat: options to configure local registry by @​tthvo in #​113
• Bump actions/checkout from 4.1.4 to 4.2.2 in the actions group by @​dependabot in #​130

New Contributors

• @​tthvo made their first contribution in #​113

Full Changelog: helm/kind-action@v1.11.0...v1.12.0

v1.11.0

Compare Source

What's Changed

• add wait test by @​cpanato in #​111
• revert wget to use curl again by @​cpanato in #​110
• feat: add custom kubeconfig option as action input by @​jbattiato in #​119
• fix: Use new mirror for downloading kubectl by @​jriedel-ionos in #​127
• update kind to default to release v0.24.0 by @​cpanato in #​122

New Contributors

• @​jbattiato made their first contribution in #​119
• @​jriedel-ionos made their first contribution in #​127

Full Changelog: helm/kind-action@v1.10.0...v1.11.0

actions/python-versions (python)

v3.14.2: 3.14.2

Compare Source

Python 3.14.2

v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.11: 3.13.11

Compare Source

Python 3.13.11

v3.13.10: 3.13.10

Compare Source

Python 3.13.10

v3.13.9: 3.13.9

Compare Source

Python 3.13.9

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

sigstore/cosign-installer (sigstore/cosign-installer)

v3.10.1

Compare Source

What's Changed?

Note: cosign-installer v3.x cannot be used to install Cosign v3.x. You must upgrade to cosign-installer v4 in order to use Cosign v3.

Note: This is planned to be the final release of Cosign v2, though we will cut new releases for any critical security or bug fixes. We recommend transitioning to Cosign v3.

• Bump default Cosign to v2.6.1 (#​203)

v3.10.0

Compare Source

What's Changed

• Bump default Cosign to v2.6.0 in #​200

Full Changelog: sigstore/cosign-installer@v3.9.2...v3.10.0

v3.9.2

Compare Source

What's Changed

• not fail fast and setup permissions in #​195
• drop old unsupported versions <v2.0.0 in #​192
• Update default to v2.5.3 in #​196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

v3.9.1

Compare Source

What's Changed

• default action install to use release v2.5.1 by @​cpanato in #​193
• default cosign to v2.5.2 by @​cpanato in #​194

Full Changelog: sigstore/cosign-installer@v3.9.0...v3.9.1

v3.9.0

Compare Source

What's Changed

• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in #​189
• bump cosign install to use release v2.5.0 as default by @​cpanato in #​191

Full Changelog: sigstore/cosign-installer@v3...v3.9.0

v3.8.2

Compare Source

What's Changed

• install cosign v2 from main in #​186

Full Changelog: sigstore/cosign-installer@v3...v3.8.2

v3.8.1

Compare Source

What's Changed

• use cosign 2.4.3 and other updates by @​cpanato in #​182

Full Changelog: sigstore/cosign-installer@v3...v3.8.1

v3.8.0

Compare Source

What's Changed

• test action against all non-rc releases, verify entry in rekor log by @​bobcallaway in #​179
• bump for cosign v2.4.2 release by @​bobcallaway in #​181

Full Changelog: sigstore/cosign-installer@v3...v3.8.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 05:59 AM, only on Monday ( * 0-5 * * 1 ) in timezone Europe/Berlin, Automerge - Monday through Friday ( * * * * 1-5 ) in timezone Europe/Berlin.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2da0a9a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR