fix(deps): update patch-grouped

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
camunda-platform (source)		patch	11.1.0 -> 11.1.1
camunda/infraex-common-config	repository	patch	1.2.11 -> 1.2.12
camunda/infraex-common-config	action	patch	1.2.11 -> 1.2.12
github.com/aws/aws-sdk-go-v2/service/eks	require	patch	v1.56.2 -> v1.56.5
github.com/aws/aws-sdk-go-v2/service/iam	require	patch	v1.38.4 -> v1.38.7
github.com/aws/aws-sdk-go-v2/service/kms	require	patch	v1.37.10 -> v1.37.13
github.com/aws/aws-sdk-go-v2/service/opensearch	require	patch	v1.45.3 -> v1.45.6
github.com/aws/aws-sdk-go-v2/service/rds	require	patch	v1.93.4 -> v1.93.7
github.com/aws/aws-sdk-go-v2/service/sts	require	patch	v1.33.6 -> v1.33.9
golang		patch	1.23.4 -> 1.23.5
k8s.io/api	require	patch	v0.32.0 -> v0.32.1
k8s.io/apimachinery	require	patch	v0.32.0 -> v0.32.1
k8s.io/client-go	require	patch	v0.32.0 -> v0.32.1
trivy		patch	0.58.1 -> 0.58.2

Before merging, always check with the release notes if any other changes need to be done.

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

camunda/camunda-platform-helm (camunda-platform)

v11.1.1

Compare Source

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-11.1.0 (2024-12-10)

Features

• Adding TLS support to console (#​2505)
• Add core unified prefix for Elasticsearch/OpenSearch (#​2643)

Fixes

• Add default webModler url when ingress is disabled (#​2566)

Release Info

Supported versions:

• Camunda applications: 8.6
• Helm values: 11.1.0
• Helm CLI: 3.16.3

Camunda images:

• docker.io/camunda/connectors-bundle:8.6.5
• docker.io/camunda/console:8.6.36
• docker.io/camunda/identity:8.6.6
• docker.io/camunda/keycloak:25.0.6
• docker.io/camunda/operate:8.6.6
• docker.io/camunda/optimize:8.6.3
• docker.io/camunda/tasklist:8.6.6
• docker.io/camunda/web-modeler-restapi:8.6.4
• docker.io/camunda/web-modeler-webapp:8.6.4
• docker.io/camunda/web-modeler-websockets:8.6.4
• docker.io/camunda/zeebe:8.6.6

Non-Camunda images:

• docker.io/bitnami/elasticsearch:8.15.4
• docker.io/bitnami/os-shell:12-debian-12-r33
• docker.io/bitnami/postgresql:14.15.0-debian-12-r2
• docker.io/bitnami/postgresql:15.10.0-debian-12-r2

Verification

To verify the integrity of the Helm chart using Cosign:

cosign verify-blob camunda-platform-11.1.0.tgz \
  --bundle camunda-platform-11.1.0.cosign.bundle \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --certificate-identity "https://github.com/camunda/camunda-platform-helm/.github/workflows/chart-release-chores.yml@refs/pull/2560/merge"

camunda/infraex-common-config (camunda/infraex-common-config)

v1.2.12

Compare Source

What's Changed

• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v39.100.1 by @​renovate in https://github.com/camunda/infraex-common-config/pull/165
• chore(deps): update patch-grouped by @​renovate in https://github.com/camunda/infraex-common-config/pull/164
• chore(deps): update camunda/infra-global-github-actions digest to bbc246e by @​renovate in https://github.com/camunda/infraex-common-config/pull/166
• chore(deps): update camunda/infra-global-github-actions digest to cc97124 by @​renovate in https://github.com/camunda/infraex-common-config/pull/167
• chore(deps): update camunda/infra-global-github-actions digest to e5313bb by @​renovate in https://github.com/camunda/infraex-common-config/pull/168

Full Changelog: camunda/infraex-common-config@1.2.11...1.2.12

golang/go (golang)

v1.23.5

Compare Source

kubernetes/api (k8s.io/api)

v0.32.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.32.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.32.1

Compare Source

aquasecurity/trivy (trivy)

v0.58.2

Compare Source

Changelog

• 936f06a release: v0.58.2 [release/v0.58] (#​8216)
• f72d2bc fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#​8238)
• 2896367 fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#​8237)
• b733ecc fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#​8215)

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: test/src/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2	v1.32.8 -> v1.33.0
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.3.27 -> v1.3.28
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.6.27 -> v2.6.28
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.12.8 -> v1.12.9

[infraex-misc]

This PR has been auto-approved as it does not involve major changes. Workflow run: See details