fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
alpine	final	digest	4bcff63 -> 4b7ce07
alpine	stage	digest	4bcff63 -> 4b7ce07
github.com/cert-manager/cert-manager	require	minor	v1.18.2 -> v1.19.0
github.com/docker/cli	require	patch	v28.5.0+incompatible -> v28.5.1+incompatible
github.com/docker/compose/v2	require	minor	v2.39.4 -> v2.40.0
github.com/prometheus/common	require	minor	v0.66.1 -> v0.67.1
golang	final	digest	ab1f5c4 -> 1c91b4f
golang	stage	digest	ab1f5c4 -> 1c91b4f
google.golang.org/genproto/googleapis/api	require	digest	7c0ddcb -> 49b9836
sigs.k8s.io/controller-runtime	require	patch	v0.22.1 -> v0.22.2

---

Release Notes

cert-manager/cert-manager (github.com/cert-manager/cert-manager)

v1.19.0

Compare Source

docker/cli (github.com/docker/cli)

v28.5.1+incompatible

Compare Source

docker/compose (github.com/docker/compose/v2)

v2.40.0

Compare Source

What's Changed

✨ Improvements

• publish Compose application as compose.yaml + images by @​ndeloof in #​13257

🐛 Fixes

• resolve secrets based on env var before executing bake by @​ndeloof in #​13237
• pass bake secrets by env by @​ndeloof in #​13249
• escape $ in bake.json as interpolation already has been managed by cpmpose by @​ndeloof in #​13259

🔧 Internal

• pkg/compose: remove uses of deprecated mitchellh/mapstructure module by @​thaJeztah in #​13239
• pkg/watch: remove unused IsWindowsShortReadError by @​thaJeztah in #​13052
• pkg/compose: build: remove permissions warning on Windows by @​thaJeztah in #​13236
• pluginMain: remove uses of DockerCLI.Apply by @​thaJeztah in #​13240
• use containerd registry client by @​ndeloof in #​13245
• provider services: use '--project-name=' notation by @​glours in #​13250
• gha: update test-matrix: remove docker 26.x by @​thaJeztah in #​13254
• pkg/compose: explicitly map AuthConfig fields instead of a direct cast by @​thaJeztah in #​13253
• cmd/compose: fix minor linting issues by @​thaJeztah in #​13252
• use containerd client for OCI operations by @​ndeloof in #​13251

⚙️ Dependencies

• build(deps): bump github.com/docker/docker, docker/cli v28.5.0-rc.1 by @​thaJeztah in #​13241
• build(deps): bump github.com/docker/docker from 28.5.0-rc.1+incompatible to 28.5.0+incompatible by @​dependabot[bot] in #​13260
• build(deps): bump github.com/docker/cli from 28.5.0-rc.1+incompatible to 28.5.0+incompatible by @​dependabot[bot] in #​13261

Full Changelog: docker/compose@v2.39.4...v2.40.0

prometheus/common (github.com/prometheus/common)

v0.67.1

Compare Source

v0.67.0

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.22.2

Compare Source

What's Changed

• 🐛 Panic when trying to build more than one instance of fake.ClientBuilder by @​k8s-infra-cherrypick-robot in #​3315
• 🌱 Bump to k8s.io/* v0.34.1 by @​k8s-infra-cherrypick-robot in #​3317
• 🐛 Don't block on Get when queue is shutdown (2nd try) by @​k8s-infra-cherrypick-robot in #​3338
• 🐛 Fix a bug where the priorityqueue would sometimes not return high-priority items first by @​k8s-infra-cherrypick-robot in #​3340

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: api/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.25.0

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.25.0
sigs.k8s.io/gateway-api	v1.3.0 -> v1.4.0

File name: third_party/github.com/banzaicloud/go-cruise-control/integration_test/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/docker/docker	v28.4.0+incompatible -> v28.5.0+incompatible

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.