[github-actions]

This PR contains the following updates:

Package	Type	Update	Change
sigs.k8s.io/kustomize/kyaml	require	patch	v0.21.1 → v0.21.2

---

Release Notes

kubernetes-sigs/kustomize (sigs.k8s.io/kustomize/kyaml)

v0.21.2

#​5831: Add labels to volumeClaimTemplates in StatefulSets if includeVolumeClaimTemplates is true
#​6029: Account for delimiters in structured data replacements
#​6056: kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped
#​6075: update go 1.25.7
#​6078: bump go-git and x/crypt
#​6085: update otel lib to v1.40.0
#​6087: Reject ambiguous resource paths with inner ".." to prevent silent misresolution
#​6134: drop 'go-spew' dependencies and update dependencies
#​6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson
#​6167: fix: match image digests with any algorithm, not only sha256
#​6184: fix: do not panic on an invalid image name regexp
#​6186: bump/go v1.26.5
#​6187: update vuln dependencies at 2026/07
#​6236: chore: bump stretch/testify pkg to remove old yaml dependencies
#​6237: fix: preserve Secret stringData during generator merge
#​6239: fix: add CronJob Image Volume support to images transformer
#​6242: fix: reject flag-like helmCharts releaseName and name values
#​6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4
#​6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1
#​6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1
#​6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12
#​6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0
#​6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0
#​6273: bump go-git, kin-openapi and k8s.io
#​6274: build: use the golangci-lint v2 with release binary
#​6296: build: run Go tools with go tool
#​6305: Update kyaml to v0.21.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 6 additional dependencies were updated

Details:

Package	Change
github.com/stretchr/testify	v1.11.1 -> v1.12.1
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
go.yaml.in/yaml/v3	v3.0.4 -> v3.0.5
golang.org/x/sys	v0.46.0 -> v0.48.0
google.golang.org/protobuf	v1.36.12-0.20260120151049-f2248ac996af -> v1.36.12
k8s.io/utils	v0.0.0-20260210185600-b8788abfbbc2 -> v0.0.0-20260626114624-be93311217bd

[github-actions]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.